CVE-2015-1748 — Time-of-check Time-of-use (TOCTOU) Race Condition in Microsoft Internet Explorer
Severity
6.8MEDIUMNVD
NVD5.1CNA5.1
EPSS
9.8%
top 7.01%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJun 10
Latest updateMay 14
Description
Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability," a different vulnerability than CVE-2015-1743.
CVSS vector
AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4
Affected Packages1 packages
🔴Vulnerability Details
4GHSA▶
GHSA-4486-4c28-44r7: Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privil↗2022-05-14
GHSA▶
GHSA-c788-rmfv-wwr2: Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privil↗2022-05-14
CVEList▶
CVE-2015-1748: Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privil↗2015-06-10
CVEList▶
CVE-2015-1743: Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privil↗2015-06-10