Lucene search

K
MicrosoftInternet Explorer11

748 matches found

CVE
CVE
added 2020/02/11 10:15 p.m.1326 views

CVE-2020-0674

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0710, CVE-2020-0711, CVE-2020-0712, CVE-2020-0713, CVE-2020-07...

7.6CVSS7.9AI score0.93869EPSS
In wild
CVE
CVE
added 2016/05/11 1:59 a.m.1256 views

CVE-2016-0189

The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnera...

7.6CVSS7.8AI score0.92057EPSS
In wild
CVE
CVE
added 2021/03/11 4:15 p.m.1191 views

CVE-2021-26411

Internet Explorer Memory Corruption Vulnerability

8.8CVSS8.2AI score0.88999EPSS
In wild
CVE
CVE
added 2020/08/17 7:15 p.m.1148 views

CVE-2020-1380

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully explo...

8.8CVSS8.2AI score0.86305EPSS
In wild
CVE
CVE
added 2019/09/23 8:15 p.m.1122 views

CVE-2019-1367

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1221.

7.6CVSS7.8AI score0.87865EPSS
In wild
CVE
CVE
added 2019/04/09 9:29 p.m.1121 views

CVE-2019-0752

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0739, CVE-2019-0753, CVE-2019-0862.

7.6CVSS7.7AI score0.91963EPSS
In wildWeb
CVE
CVE
added 2020/04/15 3:15 p.m.1106 views

CVE-2020-0968

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0970.

7.6CVSS8AI score0.43238EPSS
In wild
CVE
CVE
added 2019/11/12 7:15 p.m.1091 views

CVE-2019-1429

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1426, CVE-2019-1427, CVE-2019-1428.

7.6CVSS7.6AI score0.83137EPSS
In wild
CVE
CVE
added 2020/09/11 5:15 p.m.1076 views

CVE-2020-0878

A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabili...

7.5CVSS7AI score0.21619EPSS
In wild
CVE
CVE
added 2018/08/15 5:29 p.m.1075 views

CVE-2018-8373

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018...

7.6CVSS6.8AI score0.78914EPSS
In wild
CVE
CVE
added 2019/01/08 9:29 p.m.1054 views

CVE-2019-0541

A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, Internet Explorer 11, Microsoft Excel Viewer, Interne...

9.3CVSS7.9AI score0.84144EPSS
In wild
CVE
CVE
added 2017/05/12 2:29 p.m.1052 views

CVE-2017-0222

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0226.

8.8CVSS7.9AI score0.55657EPSS
In wild
CVE
CVE
added 2013/10/09 2:54 p.m.1045 views

CVE-2013-3897

Use-after-free vulnerability in the CDisplayPointer class in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted JavaScript code that uses the onpropertychange event handler, as exploit...

9.3CVSS7.5AI score0.90892EPSS
In wild
CVE
CVE
added 2021/03/11 4:15 p.m.1037 views

CVE-2021-27085

Internet Explorer Remote Code Execution Vulnerability

8.8CVSS9.3AI score0.03307EPSS
In wild
CVE
CVE
added 2017/02/26 11:59 p.m.1036 views

CVE-2017-0037

Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilder::HandleColumnBreakOnColumnSpanningElement function in mshtml.dll, which allows remote attackers to execute arbitrary code via vectors involving a crafted Cascading Style Sheets ...

8.1CVSS6.4AI score0.91698EPSS
In wildWeb
CVE
CVE
added 2015/02/02 7:59 p.m.1020 views

CVE-2015-0313

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2015, a different vulnera...

10CVSS7.9AI score0.93166EPSS
In wild
CVE
CVE
added 2017/03/17 12:59 a.m.1017 views

CVE-2017-0149

Microsoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." This vulnerability is different from those described in CVE-2017-0018 and CVE-2...

8.8CVSS6.5AI score0.91698EPSS
In wild
CVE
CVE
added 2014/04/27 10:55 a.m.1014 views

CVE-2014-1776

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to the CMarkup::IsConnectedToPrimaryMarkup function, as exploited in the wild in April 2014. NOTE: this iss...

10CVSS9.4AI score0.78227EPSS
In wild
CVE
CVE
added 2017/03/17 12:59 a.m.1012 views

CVE-2017-0059

Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability." This vulnerability is different from those described in CVE-2017-0008 and CVE-2017-0009.

4.3CVSS4.2AI score0.81278EPSS
In wildWeb
CVE
CVE
added 2017/04/12 2:59 p.m.1008 views

CVE-2017-0210

An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain, aka "Internet Explorer Elevation of Privilege Vulnerability."

8.8CVSS5.8AI score0.20762EPSS
In wild
CVE
CVE
added 2016/04/12 11:59 p.m.1003 views

CVE-2016-0162

Microsoft Internet Explorer 9 through 11 allows remote attackers to determine the existence of files via crafted JavaScript code, aka "Internet Explorer Information Disclosure Vulnerability."

4.3CVSS5AI score0.20719EPSS
In wild
CVE
CVE
added 2015/07/14 9:59 p.m.997 views

CVE-2015-2419

JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "JScript9 Memory Corruption Vulnerability."

9.3CVSS8.7AI score0.88078EPSS
In wild
CVE
CVE
added 2015/07/14 9:59 p.m.995 views

CVE-2015-2425

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2383 and CVE-2015-2384.

9.3CVSS7.6AI score0.40446EPSS
In wild
CVE
CVE
added 2014/02/26 2:55 p.m.957 views

CVE-2013-7331

The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the existence of local pathnames, UNC share pathnames, intranet hostnames, and intranet IP addresses by examining error codes, as demonstrated by a res:// URL, and exploited in the wild in...

6.5CVSS6.3AI score0.85642EPSS
In wildWeb
CVE
CVE
added 2018/12/20 1:29 p.m.932 views

CVE-2018-8653

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018...

7.6CVSS7.7AI score0.35296EPSS
In wild
CVE
CVE
added 2019/03/06 12:0 a.m.908 views

CVE-2019-0676

An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker who successfully exploited this vulnerability could test for the presence of files on disk, aka 'Internet Explorer Information Disclosure Vulnerability'.

6.5CVSS7.2AI score0.29573EPSS
In wild
CVE
CVE
added 2015/01/23 9:59 p.m.889 views

CVE-2015-0311

Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in January 2015.

10CVSS7.7AI score0.92745EPSS
In wildWeb
CVE
CVE
added 2016/09/14 10:59 a.m.878 views

CVE-2016-3351

Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."

6.5CVSS4.8AI score0.45632EPSS
In wild
CVE
CVE
added 2014/10/15 10:55 a.m.877 views

CVE-2014-4123

Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability," as exploited in the wild in October 2014, a different vulnerability than CVE-2014-4124.

8.8CVSS6.7AI score0.28207EPSS
In wild
CVE
CVE
added 2015/08/19 10:59 a.m.877 views

CVE-2015-2502

Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," as exploited in the wild in August 2015.

9.3CVSS7.6AI score0.22563EPSS
In wild
CVE
CVE
added 2016/10/14 2:59 a.m.877 views

CVE-2016-3298

Microsoft Internet Explorer 9 through 11 and the Internet Messaging API in Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow remote attackers to determine the existence of arbitrary files via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerabilit...

6.5CVSS5.4AI score0.27734EPSS
In wild
CVE
CVE
added 2014/08/12 9:55 p.m.854 views

CVE-2014-2817

Microsoft Internet Explorer 6 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability."

8.8CVSS7.5AI score0.23233EPSS
In wild
CVE
CVE
added 2015/02/11 3:1 a.m.850 views

CVE-2015-0071

Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulnerability."

6.5CVSS6.4AI score0.38043EPSS
In wild
CVE
CVE
added 2018/02/08 11:29 p.m.793 views

CVE-2014-8985

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2810, CVE-2014-2811, CVE-2014-2822, CVE-2014-282...

7.6CVSS7.7AI score0.1418EPSS
CVE
CVE
added 2017/06/15 1:29 a.m.478 views

CVE-2017-8524

Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an allow an attacker to execute arbitrary code in the context of the current user when the Java...

7.6CVSS6.2AI score0.13839EPSS
CVE
CVE
added 2013/09/18 10:8 a.m.353 views

CVE-2013-3893

Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code via crafted JavaScript strings, as demonstrated by use of an ms-help: URL that triggers loading of hxds.dll.

9.3CVSS7.5AI score0.8682EPSS
In wild
CVE
CVE
added 2021/05/11 7:15 p.m.342 views

CVE-2021-26419

Scripting Engine Memory Corruption Vulnerability

7.6CVSS8.4AI score0.34467EPSS
In wild
CVE
CVE
added 2017/05/12 2:29 p.m.334 views

CVE-2017-0228

A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript engines render when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0224, CVE-2017-0229, CVE-2017-0230, CVE-2017-0234, CVE-2017-0235, CVE-...

7.6CVSS7.8AI score0.55566EPSS
CVE
CVE
added 2014/09/10 1:55 a.m.318 views

CVE-2014-4108

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2799, CVE-2014-4059, CVE-2014-4065, CV...

9.3CVSS7.6AI score0.18139EPSS
CVE
CVE
added 2017/05/12 2:29 p.m.307 views

CVE-2017-0238

A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript scripting engines handle objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0224, CVE-2017-0228, CVE-2017-0229, CVE-2017-0230, CVE-2017-0234, CVE-2017...

7.6CVSS7.6AI score0.55566EPSS
CVE
CVE
added 2020/02/11 10:15 p.m.284 views

CVE-2020-0673

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0674, CVE-2020-0710, CVE-2020-0711, CVE-2020-0712, CVE-2020-0713, CVE-2020-07...

7.6CVSS7.9AI score0.93869EPSS
In wild
CVE
CVE
added 2014/08/12 9:55 p.m.269 views

CVE-2014-2822

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2810, CVE-2014-2811, CVE-2014-2823, and CVE-2014...

9.3CVSS7.7AI score0.1418EPSS
CVE
CVE
added 2017/06/15 1:29 a.m.257 views

CVE-2017-8522

Microsoft browsers in Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engines fail to render when handling...

7.6CVSS6.2AI score0.13839EPSS
CVE
CVE
added 2018/08/15 5:29 p.m.241 views

CVE-2018-8372

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-8353, CVE-2018-835...

7.6CVSS6.8AI score0.78914EPSS
In wild
CVE
CVE
added 2019/04/09 9:29 p.m.237 views

CVE-2019-0862

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0739, CVE-2019-0752, CVE-2019-0753.

7.6CVSS7.7AI score0.91963EPSS
In wild
CVE
CVE
added 2019/04/09 9:29 p.m.231 views

CVE-2019-0753

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0739, CVE-2019-0752, CVE-2019-0862.

7.6CVSS7.7AI score0.91963EPSS
In wild
CVE
CVE
added 2017/05/12 2:29 p.m.228 views

CVE-2017-0226

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0222.

7.6CVSS8AI score0.55657EPSS
In wild
CVE
CVE
added 2017/06/15 1:29 a.m.228 views

CVE-2017-8529

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 and R2 allow an attacker to detect specific files on the user's computer when affected Microsoft scripting engines do not properly handle objects in memory, aka "Microso...

6.5CVSS6AI score0.22313EPSS
CVE
CVE
added 2018/08/15 5:29 p.m.228 views

CVE-2018-8355

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-8353, CVE-2018-835...

7.6CVSS6.8AI score0.78914EPSS
In wildWeb
CVE
CVE
added 2018/08/15 5:29 p.m.228 views

CVE-2018-8385

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Explorer 10. This CVE ID...

7.6CVSS6.8AI score0.78914EPSS
In wild
Total number of security vulnerabilities748