CVE-2020-0674

Technical details for CVE-2020-0674 are not publicly provided in the supplied documents; no specific affected products/versions or remediation details are present. Monitor for updates from authoritative sources.

CVE-2016-0189

CVE-2016-0189 is a memory-corruption flaw in Microsoft JScript/VBScript engines used by Internet Explorer 9–11 that attackers could trigger via crafted web content to achieve remote code execution or memory corruption. Connected sources show exploitation within exploit kits (notably Neutrino/Nept...

CVE-2013-2551

CVE-2013-2551 is a use-after-free vulnerability in Microsoft Internet Explorer (IE 6–10) that allows remote code execution when a crafted web page triggers access to a deleted object. The issue is documented as an internet-explorer use-after-free vulnerability exploited via drive-by pages (notabl...

CVE-2019-1367

CVE-2019-1367 is a remote code-execution vulnerability in Microsoft Internet Explorer’s scripting engine memory handling. Affects Internet Explorer; described as memory corruption when the scripting engine handles objects in memory. The CVE is linked to ongoing mitigation activity: Microsoft rele...

CVE-2019-0752

CVE-2019-0752 is a remote code execution in Microsoft Internet Explorer caused by how the scripting engine handles memory objects, leading to memory corruption in IE10/IE11. Multiple connected sources confirm exploit presence (ZDI-19-359, Exploit-DB), and CISA lists it as a known exploited vulner...

CVE-2019-1429

CVE-2019-1429 is a Microsoft Internet Explorer JScript memory-corruption vulnerability (use-after-free) in the scripting engine. It fixes a shortcoming/variant of CVE-2019-1367, specifically triggered via toJSON in the arguments array, with exploitation in-the-wild noted and a patch released by M...

CVE-2014-0322

The CVE-2014-0322 issue is a Use-After-Free in Internet Explorer 9–10 triggered by crafted JavaScript/CMarkup and the onpropertychange attribute of a script element, exploited in the wild in early 2014. Affected product: Microsoft Internet Explorer 9 and 10 . Root cause: use-after-free condition ...

CVE-2018-8373

CVE-2018-8373 describes a remote code execution vulnerability in Internet Explorer due to how the scripting engine handles objects in memory. Affected software includes Internet Explorer 9, 10, and 11. The root cause is memory handling flaws in the scripting engine that can be triggered remotely ...

CVE-2019-0541

CVE-2019-0541 – MSHTML Engine Remote Code Execution involves an input validation vulnerability in the MSHTML engine that can let an attacker execute arbitrary code on affected systems. Affected software includes Internet Explorer (IE9/10/11), Microsoft Office components (Office/Word/Excel viewers...

CVE-2013-3897

CVE-2013-3897 is a use-after-free vulnerability in the CDisplayPointer class of mshtml.dll used by Microsoft Internet Explorer (IE6–IE11). The flaw is triggered via crafted JavaScript using the onpropertychange event, leading to remote code execution or memory corruption. Public discussions and r...

CVE-2015-0313

Adobe Flash Player is affected by a use-after-free vulnerability (CVE-2015-0313) that enables remote code execution via crafted SWF handling. Affected products include Flash Player versions prior to 13.0.0.269 and 14.x–16.x prior to 16.0.0.305 on Windows/macOS, and prior to 11.2.202.442 on Linux....

CVE-2014-1776

CVE-2014-1776 is a memory‑safety flaw in Microsoft Internet Explorer (versions 6–11) described as a use‑after‑free in CMarkup::IsConnectedToPrimaryMarkup. Exploitation leads to remote code execution or memory corruption, with evidence of in‑the‑wild activity in April 2014. The vulnerability affec...

CVE-2017-0149

CVE-2017-0149 concerns Microsoft Internet Explorer (IE) 9–11, described as a memory corruption vulnerability that can allow remote code execution or cause a denial of service when a user visits a crafted website. The connected documents reiterate that this IE memory‑corruption issue is distinct f...

CVE-2017-0059

CVE-2017-0059 affects Microsoft Internet Explorer 9–11 and is described as an information-disclosure vulnerability that allows remote attackers to obtain sensitive data from process memory via a crafted web site. The CVE has public exploit references (e.g., Exploit-DB entries) and has been observ...

CVE-2017-0210

CVE-2017-0210 is an Internet Explorer elevation-of-privilege vulnerability caused by IE not properly enforcing cross-domain policies, allowing information disclosure and potential content injection across domains. The CVE is referenced in multiple 2017 security updates for Internet Explorer and i...

CVE-2015-2419

CVE-2015-2419 is a JScript 9 vulnerability in Microsoft Internet Explorer (IE10/IE11) that allows remote code execution and memory corruption when processing crafted JSON with JSON.stringify. The CVE is exploited via malicious web content and has been leveraged by loaders in exploit kits (notably...

CVE-2016-0162

CVE-2016-0162 affects Microsoft Internet Explorer 9–11. The vulnerability is an information disclosure flaw: crafted JavaScript can cause IE to reveal the existence of local files, enabling an attacker to detect specific files on a user’s system. Impact is limited to information disclosure (not c...

CVE-2013-7331

CVE-2013-7331 is an information-disclosure vulnerability in the Microsoft XMLDOM ActiveX control used by Internet Explorer on Windows (XMLDOM object). The flaw allows an attacker to determine the existence of local pathnames, UNC shares, intranet hostnames, and intranet IP addresses by inspecting...

CVE-2018-8653

CVE-2018-8653 is a remote code execution vulnerability in Microsoft Internet Explorer’s scripting engine memory handling (JScript). Affected: IE 9, 10, and 11. Root cause: memory corruption within the scripting engine when handling in-memory objects, enabling an attacker to execute arbitrary code...

CVE-2015-0311

CVE-2015-0311 affects Adobe Flash Player on Windows/macOS up to 16.0.0.287 and Linux 11.2.202.438, described as an unspecified vulnerability that allowed remote code execution via unknown vectors. Exploitation in the wild was reported in January 2015. Connected sources confirm this is a remote-co...

CVE-2019-0676

CVE-2019-0676 is an Internet Explorer information-disclosure vulnerability caused by improper handling of memory objects, enabling an attacker to test for the presence of files on disk. The affected component is IE’s memory handling (JScript/Win32k context noted in analyses), with exploitation ob...

CVE-2015-2502

CVE-2015-2502 affects Internet Explorer 7–11 and is a memory-corruption vulnerability triggered by visiting a crafted web site. The issue allows remote code execution (or DoS) and was exploited in the wild around August 2015. Public documentation identifies the affected software as Internet Explo...

CVE-2014-4123

CVE-2014-4123 affects Microsoft Internet Explorer 7–11. The vulnerability allows remote attackers to gain privileges via a crafted web site (elevation of privilege). Exploitation in the wild was noted in October 2014 (per the CVE description). Mitigation: apply the MS14-056 cumulative update for ...

CVE-2016-3298

CVE-2016-3298 affects Microsoft Internet Explorer 9–11 and the Internet Messaging API on Windows (Vista/7/Server 2008 R2 family). The root cause is improper handling of objects in memory, enabling a crafted web site to disclose whether arbitrary files exist on disk (information disclosure). The v...

CVE-2016-3351

CVE-2016-3351 is a information-disclosure vulnerability affecting Microsoft Internet Explorer (IE) 9–11 and Microsoft Edge. The issue arises from improper handling of objects in memory by affected scripting engines, which could allow a remote attacker to detect or obtain sensitive files on the us...

CVE-2014-2817

CVE-2014-2817 summary (normal mode) : Affects Microsoft Internet Explorer 6–11, where a crafted web site can escalate privileges to the attacker. Root cause is an elevation of privilege vulnerability in IE; exploitation vector is remote and via a crafted page. Public exploits exist for this vulne...

CVE-2015-0071

CVE-2015-0071 affects Internet Explorer 9–11. The vulnerability is an ASLR bypass in IE triggered by visiting a crafted web page, per the IE ASLR Bypass vulnerability description. Impact: bypass of address-space layout randomization (ASLR); the Microsoft KB MS15-009 security update family (KB3021...

CVE-2013-3163

Microsoft Internet Explorer 8–10 contains a memory corruption vulnerability (CVE-2013-3163) that allows remote code execution or a denial of service when a user visits a crafted web site. Affected component: IE’s memory handling in versions 8–10; root cause described as memory corruption via craf...

CVE-2013-3893

CVE-2013-3893 is a use-after-free in mshtml.dll (Internet Explorer) specifically in SetMouseCapture, exploited via crafted JavaScript (notably through ms-help URLs) to achieve remote code execution across IE 6–11. Connected KEV/CISA entries confirm active exploitation in the wild and classify it ...

CVE-2014-4108

Microsoft Internet Explorer 6–11 is the context for CVE-2014-4108 and related advisories. Connected documents describe multiple use-after-free vulnerabilities in IE components (e.g., CAttrArray, CFieldSetLayout, CTableCell, CDataBindTask, CMarkup, CGeneratedTreeNode, etc.) that enable remote code...

CVE-2017-0238

CVE-2017-0238 is linked to memory-corruption in the JavaScript engine used by Microsoft Edge/ChakraCore. The connected advisories describe a remote code execution path when handling in-memory objects, affecting Edge/ChakraCore. Mitigation guidance in the docs points to applying Security Updates t...

CVE-2017-8529

CVE-2017-8529 is an information-disclosure flaw in Internet Explorer caused by improper handling of in-memory objects by Microsoft scripting engines. It affects IE on Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2008 R2 SP1, 2012/2012 R2, and Windows 10/Server 2016 family as documented by th...

CVE-2020-0673

CVE-2020-0673 is a remote code execution vulnerability in Internet Explorer’s scripting engine related to memory handling for objects. The underlying issue is a memory corruption flaw that can be triggered via crafted objects, leading to arbitrary code execution on affected systems. The CVSS 3.1 ...

CVE-2013-1308

Technical details for CVE-2013-1308 are not publicly provided in the supplied documents. Monitor for updates from official advisories and vulnerability catalogs.

CVE-2013-1309

CVE-2013-1309 corresponds to the Internet Explorer Use-After-Free vulnerability (MS13-037) affecting IE 6–10. The issue arises from use-after-free in memory handling (notably related to CDispNode/vgx.dll) when processing certain web content, enabling remote code execution via a crafted site. Publ...

CVE-2017-8522

CVE-2017-8522 affects Microsoft Windows browsers (IE/Edge) and the scripting engine, where memory handling of objects can cause arbitrary code execution. The issue is described as a Scripting Engine Memory Corruption Vulnerability impacting Windows 8.1/RT 8.1, Server 2012/R2, 2016, and Windows 10...

CVE-2013-3144

Microsoft Internet Explorer 8–10 is affected by a memory corruption vulnerability exploitable via a crafted web site (CVE-2013-3144 family). The connected data confirms related exploitation activity (MS13-055) targeting IE8 with a use-after-free in CAnchorElement handling, and publicly available ...

CVE-2013-3151

CVE-2013-3163 corresponds to a memory corruption vulnerability in Microsoft Internet Explorer 8–10 that could be triggered by visiting a crafted website, enabling remote code execution or a denial of service. Public documentation in the connected sources consistently describes it as Internet Expl...

CVE-2019-0862

CVE-2019-0862 is a remote code execution vulnerability in Microsoft Internet Explorer, caused by memory handling issues in the scripting engine. The CVE is linked to IE10/IE11 and was demonstrated by an exploit in IE’s scripting engine memory objects, with public exploit details noting a February...

CVE-2018-8385

CVE-2018-8385 describes a remote code execution vulnerability in how the Microsoft scripting engine handles objects in memory, leading to memory corruption. Affected products listed in the description include Internet Explorer 9, ChakraCore, Internet Explorer 11, Microsoft Edge, and Internet Expl...

CVE-2018-8353

Technical details (affected products, vulnerable components, impact, exploitation) are not publicly provided in the connected documents supplied. Monitor for updates from official advisories and CVE records.

CVE-2019-0753

Technical details for CVE-2019-0753 are not publicly available in the provided documents. Monitor for updates from connected sources.

CVE-2017-0226

Technical details for CVE-2017-0226 are not publicly provided in the initial description or connected documents. Monitor for updates; no concrete specifics (affected product/version, root cause, or fix) are disclosed here.

CVE-2018-8389

CVE-2018-8389 and related entries describe a remote code execution vulnerability in the Microsoft scripting engine’s handling of in-memory objects, affecting ChakraCore , Internet Explorer 11 , and Microsoft Edge . The root cause is memory handling in the scripting engine that can lead to memory ...

CVE-2018-8371

Technical details about CVE-2018-8371 are not publicly provided in the supplied connected documents. Monitor for updates; no product/version/impact specifics are disclosed here.

CVE-2017-0018

Technical details for CVE-2017-0018 are not publicly available in the provided connected documents. Monitor for updates from official advisories and vulnerability catalogs to obtain affected products, impact, and remediation information.

CVE-2018-8242

Technical details specific to CVE-2018-8242 are not provided in the connected documents; information about affected products, root cause, or fixes is lacking here. Monitor for updates.

CVE-2017-0008

Technical details for CVE-2017-0008 are not publicly available in the provided documents. Monitor for updates from official advisories; referenced items cover related CVEs but do not specify this CVE’s specifics.

CVE-2017-0009

Technical details about CVE-2017-0009 are not provided in the connected documents. Public details appear limited to the NVD description; monitor for updates from official advisories.

CVE-2018-8287

CVE-2018-8287 describes a remote code execution vulnerability in the ChakraCore scripting engine and affected Microsoft browsers (Internet Explorer 11, Edge) due to memory handling. The connected advisories (GHSA) mirror the description and identify ChakraCore as the affected component; no specif...