Microsoft Internet Explorer vulnerabilities
1,594 known vulnerabilities affecting microsoft/internet_explorer.
Total CVEs
1,594
CISA KEV
40
actively exploited
Public exploits
364
Exploited in wild
48
Severity breakdown
CRITICAL690HIGH450MEDIUM404LOW50
Vulnerabilities
Page 23 of 80
CVE-2015-2498CRITICALCVSS 9.3v7v8+3 more2015-09-09
CVE-2015-2498 [CRITICAL] CVE-2015-2498: Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause
Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2486, CVE-2015-2487, CVE-2015-2490, CVE-2015-2492, CVE-2015-2494, and CVE-2015-2499.
nvd
CVE-2015-2494CRITICALCVSS 9.3v7v8+3 more2015-09-09
CVE-2015-2494 [CRITICAL] CVE-2015-2494: Microsoft Internet Explorer 7 through 11 and Microsoft Edge allow remote attackers to execute arbitr
Microsoft Internet Explorer 7 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2486, CVE-2015-2487, CVE-2015-2490, CVE-2015-2492, CVE-2015-2498, and CVE-2015-2499.
nvd
CVE-2015-2487CRITICALCVSS 9.3v7v8+3 more2015-09-09
CVE-2015-2487 [CRITICAL] CVE-2015-2487: Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause
Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2486, CVE-2015-2490, CVE-2015-2492, CVE-2015-2494, CVE-2015-2498, and CVE-2015-2499.
nvd
CVE-2015-2501CRITICALCVSS 9.3v92015-09-09
CVE-2015-2501 [CRITICAL] CWE-119 CVE-2015-2501: Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of
Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability."
nvd
CVE-2015-2500CRITICALCVSS 9.3v7v82015-09-09
CVE-2015-2500 [CRITICAL] CWE-119 CVE-2015-2500: Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code or cause a den
Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability."
nvd
CVE-2015-2499CRITICALCVSS 9.3v7v8+3 more2015-09-09
CVE-2015-2499 [CRITICAL] CVE-2015-2499: Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause
Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2486, CVE-2015-2487, CVE-2015-2490, CVE-2015-2492, CVE-2015-2494, and CVE-2015-2498.
nvd
CVE-2015-2493CRITICALCVSS 9.3v82015-09-09
CVE-2015-2493 [CRITICAL] CWE-119 CVE-2015-2493: The (1) VBScript and (2) JScript engines in Microsoft Internet Explorer 8 allow remote attackers to
The (1) VBScript and (2) JScript engines in Microsoft Internet Explorer 8 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."
nvd
CVE-2015-2486CRITICALCVSS 9.3v7v8+3 more2015-09-09
CVE-2015-2486 [CRITICAL] CWE-119 CVE-2015-2486: Microsoft Internet Explorer 7 through 11 and Microsoft Edge allow remote attackers to execute arbitr
Microsoft Internet Explorer 7 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2487, CVE-2015-2490, CVE-2015-2492, CVE-2015-2494, CVE-2015-2498, and CVE-2015-2499.
nvd
CVE-2015-2541CRITICALCVSS 9.3v9v10+1 more2015-09-09
CVE-2015-2541 [CRITICAL] CVE-2015-2541: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2485 and CVE-2015-2491.
nvd
CVE-2015-2489MEDIUMCVSS 4.3v112015-09-09
CVE-2015-2489 [MEDIUM] CWE-264 CVE-2015-2489: Microsoft Internet Explorer 11 allows remote attackers to gain privileges via a crafted web site, as
Microsoft Internet Explorer 11 allows remote attackers to gain privileges via a crafted web site, as demonstrated by a transition from Low Integrity to Medium Integrity, aka "Elevation of Privilege Vulnerability."
nvd
CVE-2015-2483MEDIUMCVSS 5.0v10v112015-09-09
CVE-2015-2483 [MEDIUM] CWE-200 CVE-2015-2483: Microsoft Internet Explorer 10 and 11 allows remote attackers to obtain sensitive information from p
Microsoft Internet Explorer 10 and 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Information Disclosure Vulnerability."
nvd
CVE-2015-2484MEDIUMCVSS 6.4v10v112015-09-09
CVE-2015-2484 [MEDIUM] CWE-264 CVE-2015-2484: Microsoft Internet Explorer 10 and 11 uses an incorrect flag during certain filesystem accesses, whi
Microsoft Internet Explorer 10 and 11 uses an incorrect flag during certain filesystem accesses, which allows remote attackers to delete arbitrary files via unspecified vectors, aka "Tampering Vulnerability."
nvd
CVE-2015-2502HIGHCVSS 8.8KEVv7v8+3 more2015-08-19
CVE-2015-2502 [HIGH] CWE-787 CVE-2015-2502: Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause
Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," as exploited in the wild in August 2015.
nvd
CVE-2015-2423MEDIUMCVSS 4.3v7v8+3 more2015-08-15
CVE-2015-2423 [MEDIUM] CWE-200 CVE-2015-2423: Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10, Excel 2007 SP3, PowerPoint 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Visio 2010 SP2, Word 2010 SP2, Excel 2013 SP1, PowerPoint
nvd
CVE-2015-2447CRITICALCVSS 9.3v112015-08-14
CVE-2015-2447 [CRITICAL] CVE-2015-2447: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial o
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2446.
nvd
CVE-2015-2442CRITICALCVSS 9.3v8v9+2 more2015-08-14
CVE-2015-2442 [CRITICAL] CWE-119 CVE-2015-2442: Microsoft Internet Explorer 8 through 11 and Edge allow remote attackers to execute arbitrary code o
Microsoft Internet Explorer 8 through 11 and Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2444.
nvd
CVE-2015-2450CRITICALCVSS 9.3v9v10+1 more2015-08-14
CVE-2015-2450 [CRITICAL] CWE-119 CVE-2015-2450: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2451.
nvd
CVE-2015-2443CRITICALCVSS 9.3v10v112015-08-14
CVE-2015-2443 [CRITICAL] CWE-119 CVE-2015-2443: Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a d
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability."
nvd
CVE-2015-2446CRITICALCVSS 9.3v112015-08-14
CVE-2015-2446 [CRITICAL] CWE-119 CVE-2015-2446: Microsoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code or cause a
Microsoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2447.
nvd
CVE-2015-2451CRITICALCVSS 9.3v9v10+1 more2015-08-14
CVE-2015-2451 [CRITICAL] CVE-2015-2451: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2450.
nvd