CVE-2018-1000

Technical details about CVE-2018-1000 are not present in the provided documents; no specifics on affected IE versions, root cause, or fixes are provided. Monitor for updates.

CVE-2018-8178

Technical details, affected versions/limitations, and remediation for CVE-2018-8178 are not provided in the supplied documents. Monitor for updates from official advisories.

CVE-2019-1371

Technical details are not provided in the connected documents for CVE-2019-1371. The initial description only notes a remote code execution in Internet Explorer memory handling; no specifics on affected components, versions, or fixes are given here.

CVE-2020-1064

CVE-2020-1064 : A remote code execution vulnerability in the MSHTML engine (used by Internet Explorer) arises from improper input validation. An attacker could execute arbitrary code in the context of the current user. The connected documents confirm the component (MSHTML engine) and the impact (...

CVE-2004-0842

The CVE-2004-0842 issue affects Internet Explorer 6.0 SP1 and earlier (Windows platforms) and is caused by an unchecked buffer in CSS parsing that can trigger heap memory corruption via crafted CSS (for example, the “@;/*”” sequence). Successful exploitation could lead to remote code execution or...

CVE-2010-1257

CVE-2010-1257 is described as an XSS flaw in the toStaticHTML API affecting InfoPath 2003/2007, SharePoint products, and IE8. Public docs here identify IE vulnerabilities addressed by MS10-035 (Internet Explorer cumulative security update) that resolves remote code execution/related issues. The C...

CVE-2011-1261

CVE-2011-1261 affects Microsoft Internet Explorer (IE) versions 6–9. The flaw is in how IE handles objects in memory, specifically when an object that was not properly initialized or that has been deleted is accessed, causing memory corruption. This Memory Corruption Vulnerability (Selection Obje...

CVE-2013-5045

CVE-2013-5045 affects Microsoft Internet Explorer 10 and 11 via a sandbox bypass vulnerability in the IE sandbox. The root cause is in the IESetProtectedModeRegKeyOnly function of ieframe.dll, allowing local privilege escalation by abusing registry keys when sandboxed code runs. In practice, atta...

CVE-2014-4124

CVE-2014-4124 and CVE-2014-4123 affect Microsoft Internet Explorer 7–11 with elevation-of-privilege flaws via a crafted web site. CVE-2014-4123 has public exploitation in the wild (Oct 2014); CVE-2014-4124 is a distinct IE privilege-escalation issue. Affected product: Internet Explorer. Root caus...

CVE-2016-3385

CVE-2016-3385 concerns the Microsoft Internet Explorer scripting engine (IE9–IE11) memory corruption vulnerability. A remote attacker can exploit it by tricking a user to visit a crafted website, potentially gaining arbitrary code execution or causing a memory corruption Denial of Service. The CV...

CVE-2017-0012

Technical details about CVE-2017-0012 are not publicly provided in the supplied documents. No affected versions, root cause, or remediation are specified here. Monitor for updates from official sources to obtain concrete technical information.

CVE-2017-11838

CVE-2017-11838 affects ChakraCore and Microsoft Edge in Windows environments (various versions listed in the initial entry). The vulnerability arises from how the scripting engine handles objects in memory, leading to memory corruption that could allow an attacker to execute code with the same us...

CVE-2018-0989

Technical details for CVE-2018-0989 (affected IE versions, root cause, impact, or patch) are not present in the provided connected documents. Please monitor for updates from official sources.

CVE-2019-0606

A remote code execution vulnerability exists in the Internet Explorer browser due to errors in memory object handling mechanisms. A malicious actor can exploit this by visiting a specially crafted web page to execute arbitrary code with the privileges of the current user. This vulnerability is al...

CVE-2019-1239

Technical details for CVE-2019-1239 are not present in the provided connected documents. The CVE entry's VBScript RCE vulnerability lacks explicit affected products/versions in these sources; monitor for updates.

CVE-2001-0154

CVE-2001-0154 affects Microsoft Internet Explorer 5.5 and earlier when rendering HTML and processing MIME parts. The vulnerability arises from a MIME handling table that can cause the browser to execute an embedded attachment if a malicious MIME type is set, without user confirmation. This can al...

CVE-2007-0099

CVE-2007-0099 describes a race-condition in Microsoft XML Core Services 3.0 (MSXML3) used by Internet Explorer 6 and other apps. The flaw can be triggered by many nested XML tags in an IFRAME when synchronous rendering is disrupted by asynchronous events (e.g., JavaScript timers), leading to NULL...

CVE-2008-3012

CVE-2008-3012 corresponds to an in-GDI+ memory allocation flaw in gdiplus.dll that could allow remote code execution when a specially crafted EMF image is viewed. Connected docs confirm this as MS08-052, addressing vulnerabilities in GDI+ across Windows and Office components (IE6, Windows XP, Ser...

CVE-2008-4029

CVE-2008-4029 relates to a cross-domain scripting vulnerability in Microsoft XML Core Services 3.0/4.0 (MSXML) used by Internet Explorer. The issue stems from improper error checking for external DTDs in XML documents, enabling a crafted XML to leak information to another domain. Microsoft MS08-0...

CVE-2010-3324

CVE-2010-3324 describes an IE8/SharePoint CSS @import-based XSS bypass. The connected MSKB MS10-035 documents a broader cumulative security update for Internet Explorer to address IE vulnerabilities (including remote code execution via crafted pages) and provides update guidance. However, the pro...

CVE-2013-1311

CVE-2013-1311 is a use-after-free vulnerability in Microsoft Internet Explorer 8. The flaw is triggered when a crafted page causes a deleted object to be accessed, with the DOM textNode pointer corruption occurring after style computation and being overwritten when innerHTML on the parent is set....

CVE-2014-2824

CVE-2014-2824 affects Microsoft Internet Explorer 8 . It enables a remote attacker to execute arbitrary code or cause a denial of service (memory corruption) by visiting a crafted web site. The root cause is memory corruption resulting from IE’s handling of certain objects, enabling remote code e...

CVE-2014-6349

No public technical details about CVE-2014-6349 are present in the connected documents; only the generic IE elevation-of-privilege description is provided. Monitor for updates.

CVE-2017-0154

CVE-2017-0154 is an elevation-of-privilege vulnerability in Internet Explorer 11 on Windows 10 (versions 1511, 1606) and Windows Server 2016 caused by improper enforcement of cross-domain policies. A crafted web page could leverage this to access information from one domain and inject it into ano...

CVE-2017-8635

CVE-2017-8635 is a memory-corruption vulnerability in Microsoft Edge/Internet Explorer JavaScript engines. The issue arises when rendering objects in memory, allowing remote code execution in the context of the current user. Connected Nessus advisories indicate this CVE was addressed in Microsoft...

CVE-2018-1004

Technical details for CVE-2018-1004 (VBScript engine remote code execution) are not provided in the connected documents. Public details (affected versions, root cause, exploitability, fixes) are not available here. Monitor for updates and consult primary sources for specifics.

CVE-2005-0553

The CVE-2005-0553 issue is a race condition in the DHTML object processor of Internet Explorer (IE) versions 5.01, 5.5, and 6 that can enable remote code execution when a user visits a crafted web page or HTML email. The root cause involves race conditions in processing of DHTML objects (e.g., Co...

CVE-2009-3671

CVE-2009-3671 concerns Microsoft Internet Explorer 8. The issue is a memory handling vulnerability where an object that is either not properly initialized or has been deleted is accessed, causing memory corruption and enabling remote code execution. The vulnerability is described as Uninitialized...

CVE-2014-4141

CVE-2014-4141 affects Microsoft Internet Explorer 8–11. The connected sources confirm a remote code execution/memory-corruption vulnerability triggered by visiting a crafted web page, due to how IE handles object initialization/deletion. Public exploits exist for this vulnerability, and it is add...

CVE-2015-0072

A Universal Cross-Site Scripting (UXSS) vulnerability in Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy . The root cause involves an IFRAME element triggering a redirect, a second IFRAME not triggering a redirect, and an eval of a WindowProxy obj...

CVE-2015-1711

Technical details about this CVE are not publicly available in the provided Connected CNVD entries; they describe a memory corruption vulnerability in Internet Explorer without specifics. Monitor for updates.

CVE-2015-1748

CVE-2015-1748 affects Microsoft Internet Explorer 7–11 and is described as an Elevation of Privilege vulnerability triggered by visiting a crafted web page (IE). The connected records confirm IE as the affected product and enumerate the vulnerability as a privilege escalation distinct from CVE-20...

CVE-2016-1105

CVE-2016-1105 is a type confusion vulnerability in Adobe Flash Player (affecting 21.0.0.213 and earlier, as used in IE10/11 and Edge). The root cause is a type confusion issue in handling SWF resources, which can lead to arbitrary code execution . Public advisories (APSB16-15) and multiple vendor...

CVE-2017-8625

CVE-2017-8625 affects Internet Explorer on Windows 10 (Gold/1511/1607/1703) and Windows Server 2016. Root cause: Internet Explorer fails to validate Device Guard UMCI policies, enabling a UMCI policy bypass. Public references describe a CHM-based PoC and guidance that Microsoft addressed the issu...

CVE-2018-0978

A remote code execution vulnerability, known as the "Internet Explorer Memory Corruption Vulnerability," exists when Internet Explorer improperly accesses objects in memory. This vulnerability affects Internet Explorer 9, 10, and 11 . The root cause is identified as an out-of-bounds write (CWE-78...

CVE-2018-8552

CVE-2018-8552 is an information disclosure vulnerability in the VBScript engine used by Internet Explorer (IE9/IE10/IE11). It allows memory contents to be disclosed, aiding user data compromise. Public exploit exists (Exploit-DB: 45924). CVSSv3 base 7.5 (HIGH) with network vector; user interactio...

CVE-2019-1080

CVE-2019-1080 is a remote code execution vulnerability in the scripting engine used by Microsoft browsers. The issue allows memory corruption that could let an attacker run arbitrary code in the context of the current user, potentially taking control of the system and creating new user rights. At...

CVE-2004-0727

Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions including 5.01 and 5.5, allows remote web servers to bypass zone restrictions and execute arbitrary code in the local computer zone by redirecting a function to another function with the same name, as demons...

CVE-2007-3091

CVE-2007-3091 is the Internet Explorer cross-domain document switching race-condition vulnerability. The issue occurs in Internet Explorer (notably IE6 SP1 and IE7 on multiple Windows versions) where a page transition can inadvertently reveal or execute content across origins due to a race betwee...

CVE-2014-6363

CVE-2014-6363 affects the Microsoft VBScript engine (versions 5.6–5.8) used with Internet Explorer and other products. The issue is a memory corruption vulnerability in VBScript CRegExp/engine handling that can allow remote code execution when a user visits a crafted web page. Exploitation is evi...

CVE-2015-2423

CVE-2015-2423 is an “Unsafe Command Line Parameter Passing” vulnerability affecting a broad set of Windows OS versions (Vista through Windows 10) and Office apps (2007–2013) where a crafted command-line parameter to an Office app or Notepad can elevate from Low to Medium Integrity and disclose se...

CVE-2015-6155

CVE-2015-6155 affects Microsoft Internet Explorer 10/11 and Microsoft Edge. A remote attacker could execute arbitrary code or cause a denial of service via a crafted web site due to memory corruption in browser handling, leading to potential remote code execution. Public advisories MS15-124 (IE) ...

CVE-2016-1098

Technical details for CVE-2016-1098 are not publicly available in the provided documents. Monitor for updates; based on current sources, specifics on affected components, impact, or fixes are not disclosed here.

CVE-2017-11793

CVE-2017-11793 affects Internet Explorer on multiple Windows editions where the scripting engine’s memory handling of objects can be abused to execute arbitrary code in the user context. Root cause: memory corruption in the scripting engine. Impact: remote code execution with high severity (per C...

CVE-2017-8641

CVE-2017-8641 affects Microsoft Edge/Internet Explorer scripting engines in Windows (memory corruption when rendering objects in memory), enabling remote code execution in the context of the current user. Affected platforms include Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1/RT 8.1, Wi...

CVE-2019-0835

CVE-2019-0835 concerns an information-disclosure vulnerability in the Microsoft Scripting Engine where in-memory object handling is improper, enabling potential disclosure. The CVE description and connected Red Hat/OpenVAS entries confirm the issue title and root cause (improper handling of objec...

CVE-2009-2576

CVE-2009-2576 refers to a Denial of Service in Microsoft Internet Explorer (IE) where a long Unicode string passed to the write method can consume CPU/memory. The OpenVAS entry OpenVAS:900400 explicitly links CVE-2009-2576 to IE Unicode String DoS and lists a base CVSS v2 score of 5.0 (AV:N/AC:L/...

CVE-2014-1805

Technical details for CVE-2014-1805 are not publicly provided in the supplied documents. Monitoring for updates is advised.

CVE-2015-1737

CVE-2015-1737 corresponds to a memory corruption vulnerability in Microsoft Internet Explorer 10 and 11. The flaw allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site. It is described as a distinct vulnerability from CVE-2015-1731, CVE-2015-1736, a...

CVE-2016-7199

CVE-2016-7199 affects Microsoft Internet Explorer (IE) versions 9–11 and Microsoft Edge, where a crafted web site can bypass the Same Origin Policy to disclose sensitive window-state information (information-disclosure vulnerability). Root cause is tied to how IE/Edge handle window/state data acr...