CVE-2017-11848

CVE-2017-11848 affects Internet Explorer in multiple Windows versions (Windows 7 SP1, Server 2008 SP2, 8.1/RT 8.1, Server 2012/R2, Windows 10 variants, and Windows Server 2016+). The vulnerability is an information-disclosure flaw caused by how IE handles page content, allowing an attacker to det...

CVE-2017-8607

CVE-2017-8607 is a remote code execution memory‑corruption vulnerability in Microsoft browsers (JavaScript engine) on Windows. Root cause: memory corruption when rendering objects in memory; affected components include the browser JS engine. Impact: arbitrary code execution in the current user co...

CVE-2017-8636

CVE-2017-8636 affects Microsoft browsers across Windows 7 SP1, Server 2008 R2 SP1, 8.1, RT 8.1, 2012/2012 R2, 10 (Gold, 1511, 1607, 1703) and Server 2016. The issue is a memory corruption in the browser scripting engines when handling objects in memory, allowing remote code execution in the conte...

CVE-2019-1005

CVE-2019-1005 is a remote code execution vulnerability in the memory handling of the Microsoft browser scripting engine. It could allow an attacker to run arbitrary code in the context of the current user, with full rights if the user is an admin. Exploitation could occur via a malicious website,...

CVE-2019-1194

The CVE-2019-1194 entry concerns a memory corruption vulnerability in the Microsoft Internet Explorer scripting engine. The issue could allow remote code execution with the attacker gaining the same user rights as the current user, potentially taking full control of the affected system if the use...

CVE-2020-1506

Technical details about CVE-2020-1506 are not publicly provided in the connected documents. Monitor for updates.

CVE-2010-1257

CVE-2010-1257 is described as an XSS flaw in the toStaticHTML API affecting InfoPath 2003/2007, SharePoint products, and IE8. Public docs here identify IE vulnerabilities addressed by MS10-035 (Internet Explorer cumulative security update) that resolves remote code execution/related issues. The C...

CVE-2014-4140

CVE-2014-4140 affects Microsoft Internet Explorer 8–11 and is a security-bypass via ASLR circumvention when visiting a crafted web site. The root cause is an ASLR protection bypass in IE, enabling remote attackers to bypass memory protections. Public exploitation exists, and multiple connected so...

CVE-2016-7198

CVE-2016-7198 affects Microsoft Internet Explorer 9–11 and Microsoft Edge. It enables remote attackers to execute arbitrary code or cause memory corruption via a crafted web site (different from CVE-2016-7195). The entry aligns with browser memory corruption vulnerabilities; remediation is via Mi...

CVE-2017-0012

Technical details about CVE-2017-0012 are not publicly provided in the supplied documents. No affected versions, root cause, or remediation are specified here. Monitor for updates from official sources to obtain concrete technical information.

CVE-2017-8635

CVE-2017-8635 is a memory-corruption vulnerability in Microsoft Edge/Internet Explorer JavaScript engines. The issue arises when rendering objects in memory, allowing remote code execution in the context of the current user. Connected Nessus advisories indicate this CVE was addressed in Microsoft...

CVE-2019-0921

CVE-2019-0921 affects Microsoft Internet Explorer (IE) versions 9, 10, and 11. Connected sources describe it as a spoofing/inaccurate URL handling flaw (IE URL spoofing) with an input-validation/URL-handling root cause. Exploitation details are not provided in the supplied documents. Remediation ...

CVE-2019-1239

Technical details for CVE-2019-1239 are not present in the provided connected documents. The CVE entry's VBScript RCE vulnerability lacks explicit affected products/versions in these sources; monitor for updates.

CVE-2019-1390

CVE-2019-1390 describes a remote code execution vulnerability in VBScript where the engine mishandles memory objects. The issue is triggered via memory object handling in VBScript, enabling an attacker to execute arbitrary code on affected systems. CVSSv3 vectors indicate network access with high...

CVE-2020-1064

CVE-2020-1064 : A remote code execution vulnerability in the MSHTML engine (used by Internet Explorer) arises from improper input validation. An attacker could execute arbitrary code in the context of the current user. The connected documents confirm the component (MSHTML engine) and the impact (...

CVE-2003-0344

Microsoft Internet Explorer 5.01, 5.5 and 6.0 are affected by a buffer overflow in the OBJECT element Type attribute, allowing remote code execution via crafted HTML. The issue (CVE-2003-0344) is a known variant related to double-byte language support and has been publicly discussed in MS03-020/M...

CVE-2007-0099

CVE-2007-0099 describes a race-condition in Microsoft XML Core Services 3.0 (MSXML3) used by Internet Explorer 6 and other apps. The flaw can be triggered by many nested XML tags in an IFRAME when synchronous rendering is disrupted by asynchronous events (e.g., JavaScript timers), leading to NULL...

CVE-2014-2787

CVE-2014-2787 relates to a memory corruption vulnerability in Microsoft Internet Explorer 11 (and IE6–IE11 per related entries) that can be exploited via a crafted web site to execute code or cause a denial of service. The connected data corroborates this class of vulnerability as memory corrupti...

CVE-2017-0040

CVE-2017-0040 / CVE-2017-0130 describe memory corruption in the Scripting Engine of Internet Explorer 9–11 that can allow remote code execution or denial of service when a user visits a crafted site. The flaw affects the IE scripting engine, and the two CVEs are stated as distinct from one anothe...

CVE-2017-8748

CVE-2017-8748 is a remote code execution vulnerability in Internet Explorer (and IE components in Edge) caused by how the browser’s JavaScript engines render in-memory objects. The issue affects multiple Windows versions listed in the CVE and is described in the September 2017 IE security updates...

CVE-2018-0935

Technical details about CVE-2018-0935 are not provided in the supplied documents; no affected product/version or remediation is specified here. Monitor for updates in connected sources.

CVE-2018-8452

CVE-2018-8452 is an information disclosure vulnerability reported in the scripting engine used by Microsoft browsers. The affected components cited in connected documents are ChakraCore, Internet Explorer 11, and Microsoft Edge, with the root cause described as improper handling of objects in mem...

CVE-2019-1001

Technical details about CVE-2019-1001 are not provided in the connected documents. No specifics on affected products, versions, or fixes are available here; monitor for updates to reveal concrete technical information.

CVE-2019-1371

Technical details are not provided in the connected documents for CVE-2019-1371. The initial description only notes a remote code execution in Internet Explorer memory handling; no specifics on affected components, versions, or fixes are given here.

CVE-2007-0024

CVE-2007-0024 is the Internet Explorer VML buffer overrun in vgx.dll. The vulnerability affects IE 5.01, 6, and 7 on Windows 2000 SP4, XP SP2, Server 2003, and Server 2003 SP1, where crafted VML in a web page can trigger an integer/memory handling flaw that enables remote code execution. Public w...

CVE-2008-2258

CVE-2008-2258 concerns Microsoft Internet Explorer 5.01, 6, and 7, where memory corruption occurs when HTML objects are appended in a specific order, leading to uninitialized memory access that can cause a remote crash and arbitrary code execution. The vulnerability is tied to how table layout/ht...

CVE-2010-0555

CVE-2010-0555 affects Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8. The root cause is URLMON sniffing that allows rendering of non-HTML local files as HTML documents after a redirect, bypassing access restrictions and enabling read of arbitrary files. The description identifies this a...

CVE-2010-3324

CVE-2010-3324 describes an IE8/SharePoint CSS @import-based XSS bypass. The connected MSKB MS10-035 documents a broader cumulative security update for Internet Explorer to address IE vulnerabilities (including remote code execution via crafted pages) and provides update guidance. However, the pro...

CVE-2013-1311

CVE-2013-1311 is a use-after-free vulnerability in Microsoft Internet Explorer 8. The flaw is triggered when a crafted page causes a deleted object to be accessed, with the DOM textNode pointer corruption occurring after style computation and being overwritten when innerHTML on the parent is set....

CVE-2014-4138

CVE-2014-4138 is a vulnerability in Microsoft Internet Explorer 11 causing memory corruption via a crafted web site, potentially enabling remote code execution or a memory-based DoS. The issue is tied to MSHTML handling (as per the CVE family note referencing a different vulnerability than 4130/4...

CVE-2015-1732

CVE-2015-1732 affects Microsoft Internet Explorer 11. The connected sources describe a memory corruption vulnerability in IE11 exploitable via a crafted web site, enabling remote code execution or a denial of service. The related NVD entries for this family (including CVE-2015-1753 and other adja...

CVE-2016-7239

The CVE-2016-7239 entry describes a vulnerability in the RegEx-based XSS filter in Internet Explorer 9–11 and Microsoft Edge that enables remote attackers to conduct XSS and potentially access sensitive information via unspecified vectors. Connected materials (e.g., Seebug PoC) reference a local-...

CVE-2017-0130

The CVE-2017-0130 entry covers a memory corruption vulnerability in the Scripting Engine of Microsoft Internet Explorer versions 9–11. According to the description, a crafted web site could cause memory corruption, enabling remote attackers to execute arbitrary code or cause a denial of service. ...

CVE-2017-11869

Technical details for CVE-2017-11869 are not provided in the connected documents. Monitor for updates from authoritative sources for affected products, impact, and fixes.

CVE-2017-8592

CVE-2017-8592 is a browser security feature bypass in Microsoft browsers (Internet Explorer/Edge) caused by improper handling of redirect requests. This leads to bypassing CORS redirect restrictions and following redirects that should be ignored, potentially exposing data to an attacker. In the c...

CVE-2017-8641

CVE-2017-8641 affects Microsoft Edge/Internet Explorer scripting engines in Windows (memory corruption when rendering objects in memory), enabling remote code execution in the context of the current user. Affected platforms include Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1/RT 8.1, Wi...

CVE-2018-1022

CVE-2018-1022 is a remote code execution vulnerability in which the scripting engine mishandles objects in memory. Connected sources indicate this affects ChakraCore, Internet Explorer 11, and Microsoft Edge, with the issue described as a memory corruption vulnerability in the scripting engine. T...

CVE-2018-8178

Technical details, affected versions/limitations, and remediation for CVE-2018-8178 are not provided in the supplied documents. Monitor for updates from official advisories.

CVE-2008-1544

CVE-2008-1544 relates to Internet Explorer (IE) 5.01/6/7 where setRequestHeader can bypass header-safety checks, enabling HTTP request splitting/smuggling, host/Referer manipulation, and potential same-origin policy bypass. Microsoft’s connected documentation confirms a fix via MS08-031 (Cumulati...

CVE-2014-2823

CVE-2014-2823 is part of a family of memory-corruption vulnerabilities in Microsoft Internet Explorer (IE), affecting IE versions 6 through 11. The connected data confirms that these issues are memory-corruption based, can allow remote code execution or memory corruption via crafted websites, and...

CVE-2014-6349

No public technical details about CVE-2014-6349 are present in the connected documents; only the generic IE elevation-of-privilege description is provided. Monitor for updates.

CVE-2015-1711

Technical details about this CVE are not publicly available in the provided Connected CNVD entries; they describe a memory corruption vulnerability in Internet Explorer without specifics. Monitor for updates.

CVE-2015-2423

CVE-2015-2423 is an “Unsafe Command Line Parameter Passing” vulnerability affecting a broad set of Windows OS versions (Vista through Windows 10) and Office apps (2007–2013) where a crafted command-line parameter to an Office app or Notepad can elevate from Low to Medium Integrity and disclose se...

CVE-2016-1105

CVE-2016-1105 is a type confusion vulnerability in Adobe Flash Player (affecting 21.0.0.213 and earlier, as used in IE10/11 and Edge). The root cause is a type confusion issue in handling SWF resources, which can lead to arbitrary code execution . Public advisories (APSB16-15) and multiple vendor...

CVE-2016-1107

CVE-2016-1107 is a use-after-free vulnerability in Adobe Flash Player (affected: 21.0.0.213 and earlier, in Flash libraries used by IE10/11 and Edge). Root cause: use-after-free when handling certain SWF content, enabling potential arbitrary code execution. Impact is described as code execution o...

CVE-2016-3213

CVE-2016-3213 covers WPAD Elevation of Privilege in Windows where WPAD proxy discovery falls back to a NetBIOS name response, enabling privilege escalation via spoofed NetBIOS WPAD responses. Exploitation hinges on NetBIOS name queries for WPAD; attacker can respond to NetBIOS requests to influen...

CVE-2018-0987

Technical details about CVE-2018-0987 are not publicly available in the provided connected documents. Monitor for updates and refer to the official CVE entry for any affected products, impact, or mitigations.

CVE-2018-0989

Technical details for CVE-2018-0989 (affected IE versions, root cause, impact, or patch) are not present in the provided connected documents. Please monitor for updates from official sources.

CVE-2019-0606

Technical details for CVE-2019-0606 are not publicly available in the provided documents. Monitor for updates.

CVE-2019-0763

CVE-2019-0763 is described as a remote code execution vulnerability in Internet Explorer caused by IE improperly accessing/handling objects in memory. Related connected records reference a remote memory corruption issue in IE10/IE11, supporting the root cause. The available documents do not inclu...