CVE-2016-1102

CVE-2016-1102 is described as an unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Flash libraries in Internet Explorer 10/11 and Microsoft Edge, with unknown impact and attack vectors. It is noted as a different vulnerability than other CVEs listed in MS16-06...

CVE-2017-0130

The CVE-2017-0130 entry covers a memory corruption vulnerability in the Scripting Engine of Microsoft Internet Explorer versions 9–11. According to the description, a crafted web site could cause memory corruption, enabling remote attackers to execute arbitrary code or cause a denial of service. ...

CVE-2017-11906

Technical details about CVE-2017-11906 (affected products, root cause, impact, remediation) are not publicly provided in the supplied documents. Monitor for vendor advisories and updates.

CVE-2019-1390

CVE-2019-1390 describes a remote code execution vulnerability in VBScript where the engine mishandles memory objects. The issue is triggered via memory object handling in VBScript, enabling an attacker to execute arbitrary code on affected systems. CVSSv3 vectors indicate network access with high...

CVE-2004-1050

A heap-based buffer overflow exists in Internet Explorer 6 when parsing certain parameters of an IFRAME tag, specifically the NAME attribute. This vulnerability allows remote attackers to execute arbitrary code or create a denial of service condition in the context of the currently logged-in user...

CVE-2010-1262

CVE-2010-1262 affects Microsoft Internet Explorer 6 SP1/SP2, 7, and 8, allowing remote code execution through memory corruption involving the CStyleSheet object and a free of the root container. The issue was addressed by MS10-035, a cumulative security update for Internet Explorer, which resolve...

CVE-2017-11848

CVE-2017-11848 affects Internet Explorer in multiple Windows versions (Windows 7 SP1, Server 2008 SP2, 8.1/RT 8.1, Server 2012/R2, Windows 10 variants, and Windows Server 2016+). The vulnerability is an information-disclosure flaw caused by how IE handles page content, allowing an attacker to det...

CVE-2017-8517

CVE-2017-8517 affects Microsoft browsers in Windows platforms (Windows 7/8.1/10, Windows Server 2008R2-2016, etc.) where the JavaScript engine memory handling can trigger arbitrary code execution. The root cause is memory handling in the scripting engine failing to render objects in memory, enabl...

CVE-2017-8592

CVE-2017-8592 is a browser security feature bypass in Microsoft browsers (Internet Explorer/Edge) caused by improper handling of redirect requests. This leads to bypassing CORS redirect restrictions and following redirects that should be ignored, potentially exposing data to an attacker. In the c...

CVE-2017-8636

CVE-2017-8636 affects Microsoft browsers across Windows 7 SP1, Server 2008 R2 SP1, 8.1, RT 8.1, 2012/2012 R2, 10 (Gold, 1511, 1607, 1703) and Server 2016. The issue is a memory corruption in the browser scripting engines when handling objects in memory, allowing remote code execution in the conte...

CVE-2019-1038

CVE-2019-1038 is a remote code execution vulnerability in Microsoft browsers where memory can be corrupted while handling objects, allowing arbitrary code execution in the caller’s context. Exploitation could occur when a user visits a malicious website or a compromised site hosting crafted conte...

CVE-2020-0706

Technical details for CVE-2020-0706 are not publicly provided in the connected documents; monitor for updates and rely on the NVD description for a general overview.

CVE-2003-0344

Microsoft Internet Explorer 5.01, 5.5 and 6.0 are affected by a buffer overflow in the OBJECT element Type attribute, allowing remote code execution via crafted HTML. The issue (CVE-2003-0344) is a known variant related to double-byte language support and has been publicly discussed in MS03-020/M...

CVE-2007-0024

Microsoft Internet Explorer versions 5.01, 6, and 7 running on Windows 2000 SP4 , XP SP2 , and Server 2003/2003 SP1 are vulnerable to a buffer overflow in the Vector Markup Language (VML) implementation (vgx.dll ). The root cause is an integer overflow triggered by unspecified integer properties ...

CVE-2007-3896

Microsoft Windows XP and Server 2003 , when equipped with Internet Explorer 7 , are vulnerable to a remote code execution (RCE) flaw in Shell32.dll . The root cause is improper handling of specially crafted URLs or URIs containing invalid "%" sequences within mailto: or other URI handlers. Succes...

CVE-2015-2486

CVE-2015-2486 affects Microsoft Internet Explorer 7–11 and Microsoft Edge. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service through a crafted web site, via memory corruption. Connected documents corroborate a MS15-095-related fix in Edge/IE and refe...

CVE-2016-3211

CVE-2016-3211 and related entries describe memory corruption vulnerabilities in Microsoft Internet Explorer 9–11 that allow remote code execution or denial of service via crafted web sites. Connected sources tie CVE-2016-0199 (IE9–11) and CVE-2016-0200 to an IE11 garbage collector/attribute type ...

CVE-2017-8607

CVE-2017-8607 is a remote code execution memory‑corruption vulnerability in Microsoft browsers (JavaScript engine) on Windows. Root cause: memory corruption when rendering objects in memory; affected components include the browser JS engine. Impact: arbitrary code execution in the current user co...

CVE-2018-1022

CVE-2018-1022 is a remote code execution vulnerability in which the scripting engine mishandles objects in memory. Connected sources indicate this affects ChakraCore, Internet Explorer 11, and Microsoft Edge, with the issue described as a memory corruption vulnerability in the scripting engine. T...

CVE-2019-1055

CVE-2019-1055 is a remote code‑execution vulnerability in the Microsoft scripting engine used by Internet Explorer/related components. The issue arises from memory handling when processing objects in memory, allowing an attacker to execute arbitrary code in the context of the current user (potent...

CVE-2010-0555

CVE-2010-0555 affects Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8. The root cause is URLMON sniffing that allows rendering of non-HTML local files as HTML documents after a redirect, bypassing access restrictions and enabling read of arbitrary files. The description identifies this a...

CVE-2016-1107

CVE-2016-1107 is a use-after-free vulnerability in Adobe Flash Player (affected: 21.0.0.213 and earlier, in Flash libraries used by IE10/11 and Edge). Root cause: use-after-free when handling certain SWF content, enabling potential arbitrary code execution. Impact is described as code execution o...

CVE-2016-3384

CVE-2016-3384 affects Microsoft Internet Explorer 9–11 and corresponds to memory-corruption when rendering a crafted webpage, leading to remote code execution or memory exhaustion as described by the connected records. The vulnerability is tied to IE memory-corruption behavior disclosed in MS16-1...

CVE-2016-7239

The CVE-2016-7239 entry describes a vulnerability in the RegEx-based XSS filter in Internet Explorer 9–11 and Microsoft Edge that enables remote attackers to conduct XSS and potentially access sensitive information via unspecified vectors. Connected materials (e.g., Seebug PoC) reference a local-...

CVE-2017-11869

A Scripting Engine Memory Corruption Vulnerability exists in Internet Explorer across multiple versions of Microsoft Windows , including Windows 7 SP1, Windows 8.1, and Windows 10 (Gold, 1511, 1607, 1703, 1709). The flaw is caused by the browser's improper handling of objects in memory, specifica...

CVE-2018-8122

A remote code execution (RCE) vulnerability exists in Internet Explorer 11 due to the way the scripting engine handles objects in memory. The issue involves memory corruption, specifically out-of-bounds operations and NULL-pointer dereferences , within the microsoft.chakracore component. An attac...

CVE-2019-0780

Technical details about CVE-2019-0780 (affected products, payload, root cause, and remediation) are not publicly available in the provided connected documents. Monitor for updates from NVD/MSRC and OSV/OpenVAS entries for concrete information.

CVE-2007-2292

CVE-2007-2292 is a CRLF injection vulnerability in the Digest Authentication support of Mozilla Firefox (<2.0.0.8) and SeaMonkey (

CVE-2014-4138

CVE-2014-4138 is a vulnerability in Microsoft Internet Explorer 11 causing memory corruption via a crafted web site, potentially enabling remote code execution or a memory-based DoS. The issue is tied to MSHTML handling (as per the CVE family note referencing a different vulnerability than 4130/4...

CVE-2016-0199

CVE-2016-0199 (Memory Corruption in Internet Explorer) affects Microsoft Internet Explorer 9–11 via a garbage collector attribute type confusion in the JavaScript engine, enabling remote code execution or memory corruption when a crafted site is loaded. Connected documents corroborate the vulnera...

CVE-2016-7287

CVE-2016-7287 is a memory-corruption vulnerability in the scripting engines of Internet Explorer 11 and Microsoft Edge, exploitable via a crafted web site that can lead to remote code execution or memory corruption-based denial of service. Public references confirm exploitation (Exploit-DB entry ...

CVE-2017-0040

CVE-2017-0040 / CVE-2017-0130 describe memory corruption in the Scripting Engine of Internet Explorer 9–11 that can allow remote code execution or denial of service when a user visits a crafted site. The flaw affects the IE scripting engine, and the two CVEs are stated as distinct from one anothe...

CVE-2018-0935

Technical details about CVE-2018-0935 are not provided in the supplied documents; no affected product/version or remediation is specified here. Monitor for updates in connected sources.

CVE-2019-0763

CVE-2019-0763 is described as a remote code execution vulnerability in Internet Explorer caused by IE improperly accessing/handling objects in memory. Related connected records reference a remote memory corruption issue in IE10/IE11, supporting the root cause. The available documents do not inclu...

CVE-2019-0921

CVE-2019-0921 affects Microsoft Internet Explorer (IE) versions 9, 10, and 11. Connected sources describe it as a spoofing/inaccurate URL handling flaw (IE URL spoofing) with an input-validation/URL-handling root cause. Exploitation details are not provided in the supplied documents. Remediation ...

CVE-2019-1005

CVE-2019-1005 is a remote code execution vulnerability in the memory handling of the Microsoft browser scripting engine. It could allow an attacker to run arbitrary code in the context of the current user, with full rights if the user is an admin. Exploitation could occur via a malicious website,...

CVE-2010-0492

Microsoft Internet Explorer 8 contains a use-after-free in mstime.dll involving the CTimeAction object during TIME2 handling, causing memory corruption and remote code execution when a user visits a crafted page. The issue affects IE 8 and is officially addressed by Microsoft in MS10-018 (Cumulat...

CVE-2010-3329

CVE-2010-3329 affects Microsoft Internet Explorer 7/8 through the HtmlDlgHelper class in mshtmled.dll. The vulnerability is a memory-corruption flaw caused by missing initialization when instantiating the HtmlDlgHelper Object from a Microsoft Office document opened in Word, leading to uninitializ...

CVE-2014-2823

CVE-2014-2823 is part of a family of memory-corruption vulnerabilities in Microsoft Internet Explorer (IE), affecting IE versions 6 through 11. The connected data confirms that these issues are memory-corruption based, can allow remote code execution or memory corruption via crafted websites, and...

CVE-2015-1732

CVE-2015-1732 affects Microsoft Internet Explorer 11. The connected sources describe a memory corruption vulnerability in IE11 exploitable via a crafted web site, enabling remote code execution or a denial of service. The related NVD entries for this family (including CVE-2015-1753 and other adja...

CVE-2015-1751

Microsoft Internet Explorer 10 is affected by CVE-2015-1751 (memory corruption via a crafted web page), enabling remote code execution or a denial of service. Affected products include IE versions 6–11; the underlying issue is memory corruption when parsing certain objects. Remediation is the MS1...

CVE-2015-6086

Technical details about CVE-2015-6086 are not publicly provided in the supplied documents. No specific affected versions, root cause, or remediation are described here. Monitor for official updates.

CVE-2016-3213

CVE-2016-3213 covers WPAD Elevation of Privilege in Windows where WPAD proxy discovery falls back to a NetBIOS name response, enabling privilege escalation via spoofed NetBIOS WPAD responses. Exploitation hinges on NetBIOS name queries for WPAD; attacker can respond to NetBIOS requests to influen...

CVE-2017-8748

CVE-2017-8748 is a remote code execution vulnerability in Internet Explorer (and IE components in Edge) caused by how the browser’s JavaScript engines render in-memory objects. The issue affects multiple Windows versions listed in the CVE and is described in the September 2017 IE security updates...

CVE-2018-0987

Technical details about CVE-2018-0987 are not publicly available in the provided connected documents. Monitor for updates and refer to the official CVE entry for any affected products, impact, or mitigations.

CVE-2020-1064

CVE-2020-1064 : A remote code execution vulnerability in the MSHTML engine (used by Internet Explorer) arises from improper input validation. An attacker could execute arbitrary code in the context of the current user. The connected documents confirm the component (MSHTML engine) and the impact (...

CVE-2020-1093

The connected documents indicate a VBScript engine memory-handling vulnerability in Microsoft Internet Explorer (IE) versions 9 and 11 that enables remote code execution. The root cause is improper memory object handling in the VBScript engine, allowing an attacker to execute arbitrary code in th...

CVE-2008-1544

CVE-2008-1544 relates to Internet Explorer (IE) 5.01/6/7 where setRequestHeader can bypass header-safety checks, enabling HTTP request splitting/smuggling, host/Referer manipulation, and potential same-origin policy bypass. Microsoft’s connected documentation confirms a fix via MS08-031 (Cumulati...

CVE-2014-2787

CVE-2014-2787 relates to a memory corruption vulnerability in Microsoft Internet Explorer 11 (and IE6–IE11 per related entries) that can be exploited via a crafted web site to execute code or cause a denial of service. The connected data corroborates this class of vulnerability as memory corrupti...

CVE-2015-2441

CVE-2015-2441 affects Microsoft Internet Explorer (IE) 7–11 and Edge, enabling remote code execution or memory corruption via a crafted web site. The vulnerability is associated with memory corruption in IE/Edge components (root cause described as memory corruption; exploitable via crafted pages)...