CVE-2005-0553

The CVE-2005-0553 issue is a race condition in the DHTML object processor of Internet Explorer (IE) versions 5.01, 5.5, and 6 that can enable remote code execution when a user visits a crafted web page or HTML email. The root cause involves race conditions in processing of DHTML objects (e.g., Co...

CVE-2013-1311

CVE-2013-1311 is a use-after-free vulnerability in Microsoft Internet Explorer 8. The flaw is triggered when a crafted page causes a deleted object to be accessed, with the DOM textNode pointer corruption occurring after style computation and being overwritten when innerHTML on the parent is set....

CVE-2016-1098

Technical details for CVE-2016-1098 are not publicly available in the provided documents. Monitor for updates; based on current sources, specifics on affected components, impact, or fixes are not disclosed here.

CVE-2016-7287

CVE-2016-7287 is a memory-corruption vulnerability in the scripting engines of Internet Explorer 11 and Microsoft Edge, exploitable via a crafted web site that can lead to remote code execution or memory corruption-based denial of service. Public references confirm exploitation (Exploit-DB entry ...

CVE-2017-0154

CVE-2017-0154 is an elevation-of-privilege vulnerability in Internet Explorer 11 on Windows 10 (versions 1511, 1606) and Windows Server 2016 caused by improper enforcement of cross-domain policies. A crafted web page could leverage this to access information from one domain and inject it into ano...

CVE-2017-11838

CVE-2017-11838 affects ChakraCore and Microsoft Edge in Windows environments (various versions listed in the initial entry). The vulnerability arises from how the scripting engine handles objects in memory, leading to memory corruption that could allow an attacker to execute code with the same us...

CVE-2017-11869

Technical details for CVE-2017-11869 are not provided in the connected documents. Monitor for updates from authoritative sources for affected products, impact, and fixes.

CVE-2017-11919

CVE-2017-11919 affects ChakraCore and Internet Explorer in multiple Windows versions (Windows 7 SP1, Server 2008 R2 SP1, 8.1/RT 8.1, 2012 R2, 10 (various builds), and Edge). Root cause: vulnerability in the scripting engine due to how it handles objects in memory, leading to information disclosur...

CVE-2017-8625

CVE-2017-8625 affects Internet Explorer on Windows 10 (Gold/1511/1607/1703) and Windows Server 2016. Root cause: Internet Explorer fails to validate Device Guard UMCI policies, enabling a UMCI policy bypass. Public references describe a CHM-based PoC and guidance that Microsoft addressed the issu...

CVE-2017-8641

CVE-2017-8641 affects Microsoft Edge/Internet Explorer scripting engines in Windows (memory corruption when rendering objects in memory), enabling remote code execution in the context of the current user. Affected platforms include Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1/RT 8.1, Wi...

CVE-2004-0727

CVE-2004-0727 is a cross-domain function redirection vulnerability in Internet Explorer (IE) used across IE 5.x/6.x on Windows platforms. The flaw arises from IE not properly validating redirected or cached functions with similar names, enabling a remote attacker to execute arbitrary code in the ...

CVE-2007-2292

CVE-2007-2292 is a CRLF injection vulnerability in the Digest Authentication support of Mozilla Firefox (<2.0.0.8) and SeaMonkey (

CVE-2007-3091

CVE-2007-3091 is the Internet Explorer cross-domain document switching race-condition vulnerability. The issue occurs in Internet Explorer (notably IE6 SP1 and IE7 on multiple Windows versions) where a page transition can inadvertently reveal or execute content across origins due to a race betwee...

CVE-2007-3896

CVE-2007-3896 affects Windows Shell32 (Windows XP/Server 2003 with IE7) where URL handling in the shell misparses invalid % sequences in mailto: or other URI handlers, allowing remote code execution. The issue can be triggered by launching external programs via URI handlers invoked by application...

CVE-2011-1261

CVE-2011-1261 affects Microsoft Internet Explorer (IE) versions 6–9. The flaw is in how IE handles objects in memory, specifically when an object that was not properly initialized or that has been deleted is accessed, causing memory corruption. This Memory Corruption Vulnerability (Selection Obje...

CVE-2013-5045

CVE-2013-5045 affects Microsoft Internet Explorer 10 and 11 via a sandbox bypass vulnerability in the IE sandbox. The root cause is in the IESetProtectedModeRegKeyOnly function of ieframe.dll, allowing local privilege escalation by abusing registry keys when sandboxed code runs. In practice, atta...

CVE-2014-4081

Summary (mode C): Microsoft Internet Explorer (versions 6–11) is affected by multiple externally disclosed vulnerabilities (notably ZDI advisories) that enable remote code execution via use‑after‑free/ dangling-pointer flaws in IE object handling (examples: CAttrArray, CFieldSetLayout, CTableCell...

CVE-2014-4124

CVE-2014-4124 and CVE-2014-4123 affect Microsoft Internet Explorer 7–11 with elevation-of-privilege flaws via a crafted web site. CVE-2014-4123 has public exploitation in the wild (Oct 2014); CVE-2014-4124 is a distinct IE privilege-escalation issue. Affected product: Internet Explorer. Root caus...

CVE-2015-1687

CVE-2015-1687 is a remote memory-corruption vulnerability in Microsoft Internet Explorer (IE) that affects IE 6–11. It can be exploited by convincing a user to view a crafted webpage, potentially allowing remote code execution or denial of service. Public exploit activity is noted for this family...

CVE-2015-2441

CVE-2015-2441 affects Microsoft Internet Explorer (IE) 7–11 and Edge, enabling remote code execution or memory corruption via a crafted web site. The vulnerability is associated with memory corruption in IE/Edge components (root cause described as memory corruption; exploitable via crafted pages)...

CVE-2015-6086

Technical details about CVE-2015-6086 are not publicly provided in the supplied documents. No specific affected versions, root cause, or remediation are described here. Monitor for official updates.

CVE-2017-11834

CVE-2017-11834 affects Internet Explorer in Windows 7/8.x/10 and corresponding Server SKUs. The root cause is how the scripting engine handles objects in memory, leading to information disclosure that could help an attacker further compromise the system. The vulnerability is listed with CVE-2017-...

CVE-2018-8122

Technical details about CVE-2018-8122 are not publicly provided in the connected documents; monitor for updates.

CVE-2019-0763

CVE-2019-0763 is described as a remote code execution vulnerability in Internet Explorer caused by IE improperly accessing/handling objects in memory. Related connected records reference a remote memory corruption issue in IE10/IE11, supporting the root cause. The available documents do not inclu...

CVE-2019-1080

CVE-2019-1080 is a remote code execution vulnerability in the scripting engine used by Microsoft browsers. The issue allows memory corruption that could let an attacker run arbitrary code in the context of the current user, potentially taking control of the system and creating new user rights. At...

CVE-2000-0518

This CVE concerns Internet Explorer 4.x/5.x where SSL certificate validation is incomplete when the connection is initiated via an image or an iframe. The underlying issue is that IE verifies only that the certificate was issued by a trusted root, but does not confirm the server name or the certi...

CVE-2010-3329

CVE-2010-3329 affects Microsoft Internet Explorer 7/8 through the HtmlDlgHelper class in mshtmled.dll. The vulnerability is a memory-corruption flaw caused by missing initialization when instantiating the HtmlDlgHelper Object from a Microsoft Office document opened in Word, leading to uninitializ...

CVE-2014-2824

CVE-2014-2824 affects Microsoft Internet Explorer 8 . It enables a remote attacker to execute arbitrary code or cause a denial of service (memory corruption) by visiting a crafted web site. The root cause is memory corruption resulting from IE’s handling of certain objects, enabling remote code e...

CVE-2014-4141

CVE-2014-4141 affects Microsoft Internet Explorer 8–11. The connected sources confirm a remote code execution/memory-corruption vulnerability triggered by visiting a crafted web page, due to how IE handles object initialization/deletion. Public exploits exist for this vulnerability, and it is add...

CVE-2016-1110

CVE-2016-1110 is a use-after-free vulnerability in Adobe Flash Player 21.0.0.213 and earlier, affecting Flash libraries used by Microsoft Internet Explorer 10/11 and Microsoft Edge. The CVE description notes unknown impact/vectors, but related advisories and vendor bulletins list this family of i...

CVE-2016-3385

CVE-2016-3385 concerns the Microsoft Internet Explorer scripting engine (IE9–IE11) memory corruption vulnerability. A remote attacker can exploit it by tricking a user to visit a crafted website, potentially gaining arbitrary code execution or causing a memory corruption Denial of Service. The CV...

CVE-2017-11855

CVE-2017-11855 is an Internet Explorer memory corruption vulnerability affecting IE on Windows 7 SP1, Windows Server 2008 SP2/R2, Windows 8.1/RT 8.1, Windows 10 (various builds), and Windows Server 2012/2016. The root cause is how IE handles objects in memory, enabling an attacker to gain the sam...

CVE-2017-8747

CVE-2017-8747 : A memory corruption vulnerability in Internet Explorer on Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1/RT 8.1, Windows Server 2012/R2, Windows 10 (various builds) and Windows Server 2016. Root cause: IE accesses objects in memory in a way that can corrupt memory. Impact:...

CVE-2018-8114

Technical details for CVE-2018-8114 are not publicly available in the provided documents. Monitor for updates.

CVE-2018-8552

CVE-2018-8552 is an information disclosure vulnerability in the VBScript engine used by Internet Explorer (IE9/IE10/IE11). It allows memory contents to be disclosed, aiding user data compromise. Public exploit exists (Exploit-DB: 45924). CVSSv3 base 7.5 (HIGH) with network vector; user interactio...

CVE-2019-0780

Technical details about CVE-2019-0780 (affected products, payload, root cause, and remediation) are not publicly available in the provided connected documents. Monitor for updates from NVD/MSRC and OSV/OpenVAS entries for concrete information.

CVE-2015-1748

CVE-2015-1748 affects Microsoft Internet Explorer 7–11 and is described as an Elevation of Privilege vulnerability triggered by visiting a crafted web page (IE). The connected records confirm IE as the affected product and enumerate the vulnerability as a privilege escalation distinct from CVE-20...

CVE-2015-1751

Microsoft Internet Explorer 10 is affected by CVE-2015-1751 (memory corruption via a crafted web page), enabling remote code execution or a denial of service. Affected products include IE versions 6–11; the underlying issue is memory corruption when parsing certain objects. Remediation is the MS1...

CVE-2017-11810

Technical details for CVE-2017-11810 are not provided in the connected documents. The Initial description lacks product/vendor/version/root-cause specifics here; monitor for updates.

CVE-2018-0978

CVE-2018-0978 describes a remote code execution vulnerability in Microsoft Internet Explorer caused by improper handling of memory objects. Affected products include Internet Explorer 9, 10, and 11. The underlying issue is memory corruption that could allow arbitrary code execution if a user open...

CVE-2004-0842

The CVE-2004-0842 issue affects Internet Explorer 6.0 SP1 and earlier (Windows platforms) and is caused by an unchecked buffer in CSS parsing that can trigger heap memory corruption via crafted CSS (for example, the “@;/*”” sequence). Successful exploitation could lead to remote code execution or...

CVE-2008-3012

CVE-2008-3012 corresponds to an in-GDI+ memory allocation flaw in gdiplus.dll that could allow remote code execution when a specially crafted EMF image is viewed. Connected docs confirm this as MS08-052, addressing vulnerabilities in GDI+ across Windows and Office components (IE6, Windows XP, Ser...

CVE-2010-0492

Microsoft Internet Explorer 8 contains a use-after-free in mstime.dll involving the CTimeAction object during TIME2 handling, causing memory corruption and remote code execution when a user visits a crafted page. The issue affects IE 8 and is officially addressed by Microsoft in MS10-018 (Cumulat...

CVE-2010-1261

CVE-2010-1261 : A memory-corruption vulnerability in the Internet Explorer 8 Developer Toolbar (IE8) affects IE8 SP1/SP2/SP3. The connected MS knowledge base MS10-035 documents a remote code execution risk when processing a specially crafted page, due to uninitialized/deleted objects. Microsoft’s...

CVE-2014-4130

Technical details for CVE-2014-4130 are not publicly available in the provided documents. Monitor for updates.

CVE-2014-4133

CVE-2014-4133 and CVE-2014-4137 affect Microsoft Internet Explorer 6 and 7, causing remote code execution or memory corruption via a crafted web site. These are described as a memory corruption family but are noted as different vulnerabilities from one another. The connected evidence references a...

CVE-2014-6327

CVE-2014-6327 pertains to Microsoft Internet Explorer 11 and describes a vulnerability in which a crafted web site can cause memory corruption, allowing a remote attacker to execute arbitrary code or cause a denial of service. The connected documents corroborate that the flaw affects IE11 via mem...

CVE-2014-6363

CVE-2014-6363 affects the Microsoft VBScript engine (versions 5.6–5.8) used with Internet Explorer and other products. The issue is a memory corruption vulnerability in VBScript CRegExp/engine handling that can allow remote code execution when a user visits a crafted web page. Exploitation is evi...

CVE-2015-0072

CVE-2015-0072 describes a Universal XSS (UXSS) in Internet Explorer 9–11, allowing remote injection of script by abusing IFRAME-based redirects and WindowProxy eval to bypass Same Origin Policy. The vulnerability affects Microsoft Internet Explorer versions 6–11 and can lead to arbitrary code exe...

CVE-2015-1743

Microsoft Internet Explorer (IE) 7–11 contains an elevation-of-privilege vulnerability in the ActiveX Broker (CVE-2015-1743). A crafted web page can escape EPM and allow arbitrary code execution in an IE process, potentially compromising the user context. The issue is addressed by Microsoft via M...