1635 matches found
CVE-2015-2486
CVE-2015-2486 affects Microsoft Internet Explorer 7–11 and Microsoft Edge. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service through a crafted web site, via memory corruption. Connected documents corroborate a MS15-095-related fix in Edge/IE and refe...
CVE-2016-3211
CVE-2016-3211 and related entries describe memory corruption vulnerabilities in Microsoft Internet Explorer 9–11 that allow remote code execution or denial of service via crafted web sites. Connected sources tie CVE-2016-0199 (IE9–11) and CVE-2016-0200 to an IE11 garbage collector/attribute type ...
CVE-2020-0706
Technical details for CVE-2020-0706 are not publicly provided in the connected documents; monitor for updates and rely on the NVD description for a general overview.
CVE-2010-3971
CVE-2010-3971 stems from a use-after-free in the mshtml.dll CSS parser (CSharedStyleSheet::Notify) when encountering a recursive CSS @import. The vulnerability affects Internet Explorer versions that used mshtml (notably IE6–IE8) and can allow remote code execution or a crash via memory corruptio...
CVE-2016-3384
CVE-2016-3384 affects Microsoft Internet Explorer 9–11 and corresponds to memory-corruption when rendering a crafted webpage, leading to remote code execution or memory exhaustion as described by the connected records. The vulnerability is tied to IE memory-corruption behavior disclosed in MS16-1...
CVE-2017-11848
CVE-2017-11848 affects Internet Explorer in multiple Windows versions (Windows 7 SP1, Server 2008 SP2, 8.1/RT 8.1, Server 2012/R2, Windows 10 variants, and Windows Server 2016+). The vulnerability is an information-disclosure flaw caused by how IE handles page content, allowing an attacker to det...
CVE-2017-8636
CVE-2017-8636 affects Microsoft browsers across Windows 7 SP1, Server 2008 R2 SP1, 8.1, RT 8.1, 2012/2012 R2, 10 (Gold, 1511, 1607, 1703) and Server 2016. The issue is a memory corruption in the browser scripting engines when handling objects in memory, allowing remote code execution in the conte...
CVE-2018-1022
CVE-2018-1022 is a remote code execution vulnerability in which the scripting engine mishandles objects in memory. Connected sources indicate this affects ChakraCore, Internet Explorer 11, and Microsoft Edge, with the issue described as a memory corruption vulnerability in the scripting engine. T...
CVE-2019-1390
CVE-2019-1390 describes a remote code execution vulnerability in VBScript where the engine mishandles memory objects. The issue is triggered via memory object handling in VBScript, enabling an attacker to execute arbitrary code on affected systems. CVSSv3 vectors indicate network access with high...
CVE-2020-1506
Technical details about CVE-2020-1506 are not publicly provided in the connected documents. Monitor for updates.
CVE-2003-0344
Microsoft Internet Explorer 5.01, 5.5 and 6.0 are affected by a buffer overflow in the OBJECT element Type attribute, allowing remote code execution via crafted HTML. The issue (CVE-2003-0344) is a known variant related to double-byte language support and has been publicly discussed in MS03-020/M...
CVE-2010-0555
CVE-2010-0555 affects Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8. The root cause is URLMON sniffing that allows rendering of non-HTML local files as HTML documents after a redirect, bypassing access restrictions and enabling read of arbitrary files. The description identifies this a...
CVE-2015-1751
Microsoft Internet Explorer 10 is affected by CVE-2015-1751 (memory corruption via a crafted web page), enabling remote code execution or a denial of service. Affected products include IE versions 6–11; the underlying issue is memory corruption when parsing certain objects. Remediation is the MS1...
CVE-2017-0130
The CVE-2017-0130 entry covers a memory corruption vulnerability in the Scripting Engine of Microsoft Internet Explorer versions 9–11. According to the description, a crafted web site could cause memory corruption, enabling remote attackers to execute arbitrary code or cause a denial of service. ...
CVE-2017-8592
CVE-2017-8592 is a browser security feature bypass in Microsoft browsers (Internet Explorer/Edge) caused by improper handling of redirect requests. This leads to bypassing CORS redirect restrictions and following redirects that should be ignored, potentially exposing data to an attacker. In the c...
CVE-2019-0921
CVE-2019-0921 affects Microsoft Internet Explorer (IE) versions 9, 10, and 11. Connected sources describe it as a spoofing/inaccurate URL handling flaw (IE URL spoofing) with an input-validation/URL-handling root cause. Exploitation details are not provided in the supplied documents. Remediation ...
CVE-2007-0024
CVE-2007-0024 is the Internet Explorer VML buffer overrun in vgx.dll. The vulnerability affects IE 5.01, 6, and 7 on Windows 2000 SP4, XP SP2, Server 2003, and Server 2003 SP1, where crafted VML in a web page can trigger an integer/memory handling flaw that enables remote code execution. Public w...
CVE-2007-0099
CVE-2007-0099 describes a race-condition in Microsoft XML Core Services 3.0 (MSXML3) used by Internet Explorer 6 and other apps. The flaw can be triggered by many nested XML tags in an IFRAME when synchronous rendering is disrupted by asynchronous events (e.g., JavaScript timers), leading to NULL...
CVE-2008-1544
CVE-2008-1544 relates to Internet Explorer (IE) 5.01/6/7 where setRequestHeader can bypass header-safety checks, enabling HTTP request splitting/smuggling, host/Referer manipulation, and potential same-origin policy bypass. Microsoft’s connected documentation confirms a fix via MS08-031 (Cumulati...
CVE-2008-2258
CVE-2008-2258 concerns Microsoft Internet Explorer 5.01, 6, and 7, where memory corruption occurs when HTML objects are appended in a specific order, leading to uninitialized memory access that can cause a remote crash and arbitrary code execution. The vulnerability is tied to how table layout/ht...
CVE-2014-4138
CVE-2014-4138 is a vulnerability in Microsoft Internet Explorer 11 causing memory corruption via a crafted web site, potentially enabling remote code execution or a memory-based DoS. The issue is tied to MSHTML handling (as per the CVE family note referencing a different vulnerability than 4130/4...
CVE-2017-0012
Technical details about CVE-2017-0012 are not publicly provided in the supplied documents. No affected versions, root cause, or remediation are specified here. Monitor for updates from official sources to obtain concrete technical information.
CVE-2017-8517
CVE-2017-8517 affects Microsoft browsers in Windows platforms (Windows 7/8.1/10, Windows Server 2008R2-2016, etc.) where the JavaScript engine memory handling can trigger arbitrary code execution. The root cause is memory handling in the scripting engine failing to render objects in memory, enabl...
CVE-2017-8607
CVE-2017-8607 is a remote code execution memory‑corruption vulnerability in Microsoft browsers (JavaScript engine) on Windows. Root cause: memory corruption when rendering objects in memory; affected components include the browser JS engine. Impact: arbitrary code execution in the current user co...
CVE-2018-0935
Technical details about CVE-2018-0935 are not provided in the supplied documents; no affected product/version or remediation is specified here. Monitor for updates in connected sources.
CVE-2019-0763
CVE-2019-0763 is described as a remote code execution vulnerability in Internet Explorer caused by IE improperly accessing/handling objects in memory. Related connected records reference a remote memory corruption issue in IE10/IE11, supporting the root cause. The available documents do not inclu...
CVE-2019-1005
CVE-2019-1005 is a remote code execution vulnerability in the memory handling of the Microsoft browser scripting engine. It could allow an attacker to run arbitrary code in the context of the current user, with full rights if the user is an admin. Exploitation could occur via a malicious website,...
CVE-2019-1239
Technical details for CVE-2019-1239 are not present in the provided connected documents. The CVE entry's VBScript RCE vulnerability lacks explicit affected products/versions in these sources; monitor for updates.
CVE-2010-1257
CVE-2010-1257 is described as an XSS flaw in the toStaticHTML API affecting InfoPath 2003/2007, SharePoint products, and IE8. Public docs here identify IE vulnerabilities addressed by MS10-035 (Internet Explorer cumulative security update) that resolves remote code execution/related issues. The C...
CVE-2015-2441
CVE-2015-2441 affects Microsoft Internet Explorer (IE) 7–11 and Edge, enabling remote code execution or memory corruption via a crafted web site. The vulnerability is associated with memory corruption in IE/Edge components (root cause described as memory corruption; exploitable via crafted pages)...
CVE-2016-0199
CVE-2016-0199 (Memory Corruption in Internet Explorer) affects Microsoft Internet Explorer 9–11 via a garbage collector attribute type confusion in the JavaScript engine, enabling remote code execution or memory corruption when a crafted site is loaded. Connected documents corroborate the vulnera...
CVE-2016-1105
CVE-2016-1105 is a type confusion vulnerability in Adobe Flash Player (affecting 21.0.0.213 and earlier, as used in IE10/11 and Edge). The root cause is a type confusion issue in handling SWF resources, which can lead to arbitrary code execution . Public advisories (APSB16-15) and multiple vendor...
CVE-2016-7198
CVE-2016-7198 affects Microsoft Internet Explorer 9–11 and Microsoft Edge. It enables remote attackers to execute arbitrary code or cause memory corruption via a crafted web site (different from CVE-2016-7195). The entry aligns with browser memory corruption vulnerabilities; remediation is via Mi...
CVE-2016-7239
The CVE-2016-7239 entry describes a vulnerability in the RegEx-based XSS filter in Internet Explorer 9–11 and Microsoft Edge that enables remote attackers to conduct XSS and potentially access sensitive information via unspecified vectors. Connected materials (e.g., Seebug PoC) reference a local-...
CVE-2017-0040
CVE-2017-0040 / CVE-2017-0130 describe memory corruption in the Scripting Engine of Internet Explorer 9–11 that can allow remote code execution or denial of service when a user visits a crafted site. The flaw affects the IE scripting engine, and the two CVEs are stated as distinct from one anothe...
CVE-2017-11869
Technical details for CVE-2017-11869 are not provided in the connected documents. Monitor for updates from authoritative sources for affected products, impact, and fixes.
CVE-2017-8635
CVE-2017-8635 is a memory-corruption vulnerability in Microsoft Edge/Internet Explorer JavaScript engines. The issue arises when rendering objects in memory, allowing remote code execution in the context of the current user. Connected Nessus advisories indicate this CVE was addressed in Microsoft...
CVE-2017-8748
CVE-2017-8748 is a remote code execution vulnerability in Internet Explorer (and IE components in Edge) caused by how the browser’s JavaScript engines render in-memory objects. The issue affects multiple Windows versions listed in the CVE and is described in the September 2017 IE security updates...
CVE-2019-1055
CVE-2019-1055 is a remote code‑execution vulnerability in the Microsoft scripting engine used by Internet Explorer/related components. The issue arises from memory handling when processing objects in memory, allowing an attacker to execute arbitrary code in the context of the current user (potent...
CVE-2020-1064
CVE-2020-1064 : A remote code execution vulnerability in the MSHTML engine (used by Internet Explorer) arises from improper input validation. An attacker could execute arbitrary code in the context of the current user. The connected documents confirm the component (MSHTML engine) and the impact (...
CVE-2010-3324
CVE-2010-3324 describes an IE8/SharePoint CSS @import-based XSS bypass. The connected MSKB MS10-035 documents a broader cumulative security update for Internet Explorer to address IE vulnerabilities (including remote code execution via crafted pages) and provides update guidance. However, the pro...
CVE-2011-1261
CVE-2011-1261 affects Microsoft Internet Explorer (IE) versions 6–9. The flaw is in how IE handles objects in memory, specifically when an object that was not properly initialized or that has been deleted is accessed, causing memory corruption. This Memory Corruption Vulnerability (Selection Obje...
CVE-2014-2787
CVE-2014-2787 relates to a memory corruption vulnerability in Microsoft Internet Explorer 11 (and IE6–IE11 per related entries) that can be exploited via a crafted web site to execute code or cause a denial of service. The connected data corroborates this class of vulnerability as memory corrupti...
CVE-2014-2823
CVE-2014-2823 is part of a family of memory-corruption vulnerabilities in Microsoft Internet Explorer (IE), affecting IE versions 6 through 11. The connected data confirms that these issues are memory-corruption based, can allow remote code execution or memory corruption via crafted websites, and...
CVE-2014-6349
No public technical details about CVE-2014-6349 are present in the connected documents; only the generic IE elevation-of-privilege description is provided. Monitor for updates.
CVE-2015-1732
CVE-2015-1732 affects Microsoft Internet Explorer 11. The connected sources describe a memory corruption vulnerability in IE11 exploitable via a crafted web site, enabling remote code execution or a denial of service. The related NVD entries for this family (including CVE-2015-1753 and other adja...
CVE-2016-1107
CVE-2016-1107 is a use-after-free vulnerability in Adobe Flash Player (affected: 21.0.0.213 and earlier, in Flash libraries used by IE10/11 and Edge). Root cause: use-after-free when handling certain SWF content, enabling potential arbitrary code execution. Impact is described as code execution o...
CVE-2016-3213
CVE-2016-3213 covers WPAD Elevation of Privilege in Windows where WPAD proxy discovery falls back to a NetBIOS name response, enabling privilege escalation via spoofed NetBIOS WPAD responses. Exploitation hinges on NetBIOS name queries for WPAD; attacker can respond to NetBIOS requests to influen...
CVE-2016-7287
CVE-2016-7287 is a memory-corruption vulnerability in the scripting engines of Internet Explorer 11 and Microsoft Edge, exploitable via a crafted web site that can lead to remote code execution or memory corruption-based denial of service. Public references confirm exploitation (Exploit-DB entry ...