Microsoft Internet Explorer vulnerabilities
1,594 known vulnerabilities affecting microsoft/internet_explorer.
Total CVEs
1,594
CISA KEV
42
actively exploited
Public exploits
364
Exploited in wild
91
Severity breakdown
CRITICAL689HIGH451MEDIUM404LOW50
Vulnerabilities
Page 23 of 80
CVE-2013-1304P3CRITICALCVSS 9.3v6v7+3 more2013-04-09
CVE-2013-1304 [CRITICAL] CVE-2013-1304: Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to
Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability," a different vulnerability than CVE-2013-1303 and CVE-2013-1338.
nvd
CVE-2013-0018P3CRITICALCVSS 9.3v6v7+2 more2013-02-13
CVE-2013-0018 [CRITICAL] CWE-399 CVE-2013-0018: Use-after-free vulnerability in Microsoft Internet Explorer 6 through 9 allows remote attackers to e
Use-after-free vulnerability in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer SetCapture Use After Free Vulnerability."
nvd
CVE-2013-0027P3CRITICALCVSS 9.3v6v7+3 more2013-02-13
CVE-2013-0027 [CRITICAL] CWE-399 CVE-2013-0027: Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to
Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer CPasteCommand Use After Free Vulnerability."
nvd
CVE-2013-0024P3CRITICALCVSS 9.3v9v82013-02-13
CVE-2013-0024 [CRITICAL] CWE-399 CVE-2013-0024: Use-after-free vulnerability in Microsoft Internet Explorer 8 and 9 allows remote attackers to execu
Use-after-free vulnerability in Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer pasteHTML Use After Free Vulnerability."
nvd
CVE-2013-0028P3CRITICALCVSS 9.3v6v7+2 more2013-02-13
CVE-2013-0028 [CRITICAL] CWE-399 CVE-2013-0028: Use-after-free vulnerability in Microsoft Internet Explorer 6 through 9 allows remote attackers to e
Use-after-free vulnerability in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer CObjectElement Use After Free Vulnerability."
nvd
CVE-2013-0026P3CRITICALCVSS 9.3v92013-02-13
CVE-2013-0026 [CRITICAL] CWE-399 CVE-2013-0026: Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arb
Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer InsertElement Use After Free Vulnerability."
nvd
CVE-2013-0088P3CRITICALCVSS 9.3v6v7+3 more2013-03-13
CVE-2013-0088 [CRITICAL] CWE-399 CVE-2013-0088: Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to
Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer saveHistory Use After Free Vulnerability."
nvd
CVE-2013-0091P3CRITICALCVSS 9.3v82013-03-13
CVE-2013-0091 [CRITICAL] CWE-399 CVE-2013-0091: Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arb
Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer CElement Use After Free Vulnerability."
nvd
CVE-2016-0061P3HIGHCVSS 8.8v9v10+1 more2016-02-10
CVE-2016-0061 [HIGH] CVE-2016-0061: Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitr
Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0060, CVE-2016-0063, CVE-2016-0067, and CVE-2016-0072.
nvd
CVE-2016-0062P3HIGHCVSS 8.8v112016-02-10
CVE-2016-0062 [HIGH] CWE-119 CVE-2016-0062: Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code o
Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."
nvd
CVE-2015-6142P3CRITICALCVSS 9.3v112015-12-09
CVE-2015-6142 [CRITICAL] CVE-2015-6142: Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code o
Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6140, CVE-2015-6143, CVE-2015-6153, CVE-2015-6158, CVE-2015-6159, and CVE-2015-6160.
nvd
CVE-2012-4782P3CRITICALCVSS 9.3v9v102012-12-12
CVE-2012-4782 [CRITICAL] CWE-399 CVE-2012-4782: Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to exec
Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "CMarkup Use After Free Vulnerability."
nvd
CVE-2012-2557P3CRITICALCVSS 9.3v6v7+2 more2012-09-21
CVE-2012-2557 [CRITICAL] CWE-399 CVE-2012-2557: Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to e
Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "cloneNode Use After Free Vulnerability."
nvd
CVE-2012-2548P3CRITICALCVSS 9.3v92012-09-21
CVE-2012-2548 [CRITICAL] CWE-399 CVE-2012-2548: Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arb
Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Layout Use After Free Vulnerability."
nvd
CVE-2015-6159P3CRITICALCVSS 9.3v112015-12-09
CVE-2015-6159 [CRITICAL] CVE-2015-6159: Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code o
Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6140, CVE-2015-6142, CVE-2015-6143, CVE-2015-6153, CVE-2015-6158, and CVE-2015-6160.
nvd
CVE-2015-6065P3CRITICALCVSS 9.3v9v10+1 more2015-11-11
CVE-2015-6065 [CRITICAL] CWE-119 CVE-2015-6065: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6078.
nvd
CVE-2015-6081P3CRITICALCVSS 9.3v8v9+2 more2015-11-11
CVE-2015-6081 [CRITICAL] CVE-2015-6081: Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause
Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6069.
nvd
CVE-2015-2541P3CRITICALCVSS 9.3v9v10+1 more2015-09-09
CVE-2015-2541 [CRITICAL] CVE-2015-2541: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2485 and CVE-2015-2491.
nvd
CVE-2014-0283P3CRITICALCVSS 9.3v92014-02-12
CVE-2014-0283 [CRITICAL] CWE-119 CVE-2014-0283: Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of
Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
nvd
CVE-2014-0277P3CRITICALCVSS 9.3v82014-02-12
CVE-2014-0277 [CRITICAL] CWE-119 CVE-2014-0277: Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of
Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0278 and CVE-2014-0279.
nvd