Microsoft Internet Explorer vulnerabilities
1,594 known vulnerabilities affecting microsoft/internet_explorer.
Total CVEs
1,594
CISA KEV
42
actively exploited
Public exploits
364
Exploited in wild
91
Severity breakdown
CRITICAL689HIGH451MEDIUM404LOW50
Vulnerabilities
Page 39 of 80
CVE-2014-2794P3CRITICALCVSS 9.3v6v72014-07-08
CVE-2014-2794 [CRITICAL] CVE-2014-2794: Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a den
Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2788.
nvd
CVE-2014-0325P3CRITICALCVSS 9.3v92014-07-03
CVE-2014-0325 [CRITICAL] CVE-2014-0325: Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arb
Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site that triggers improper processing of CElement objects, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1751 and CVE-2014-1755.
nvd
CVE-2004-0978P3CRITICALCVSS 10.0v5.01v5.5+1 more2005-02-09
CVE-2004-0978 [CRITICAL] CWE-787 CVE-2004-0978: Heap-based buffer overflow in the Hrtbeat.ocx (Heartbeat) ActiveX control for Internet Explorer 5.01
Heap-based buffer overflow in the Hrtbeat.ocx (Heartbeat) ActiveX control for Internet Explorer 5.01 through 6, when users who visit online gaming sites that are associated with MSN, allows remote attackers to execute arbitrary code via the SetupData parameter.
nvd
CVE-2011-0346P3HIGHCVSS 8.1v6v7+1 more2011-01-07
CVE-2011-0346 [HIGH] CWE-399 CVE-2011-0346: Use-after-free vulnerability in the ReleaseInterface function in MSHTML.DLL in Microsoft Internet Ex
Use-after-free vulnerability in the ReleaseInterface function in MSHTML.DLL in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to the DOM implementation and the BreakAASpecial and BreakCircularMemoryReferences functions, as demonstrated by cros
nvd
CVE-2018-8316P3HIGHCVSS 7.5v11v102018-08-15
CVE-2018-8316 [HIGH] CWE-20 CVE-2018-8316: A remote code execution vulnerability exists when Internet Explorer improperly validates hyperlinks
A remote code execution vulnerability exists when Internet Explorer improperly validates hyperlinks before loading executable libraries, aka "Internet Explorer Remote Code Execution Vulnerability." This affects Internet Explorer 11, Internet Explorer 10.
nvd
CVE-2015-1658P3CRITICALCVSS 9.3v112015-05-13
CVE-2015-1658 [CRITICAL] CWE-119 CVE-2015-1658: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial o
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1706, CVE-2015-1711, CVE-2015-1717, and CVE-2015-1718.
nvd
CVE-2015-6085P3CRITICALCVSS 9.3v10v112015-11-11
CVE-2015-6085 [CRITICAL] CVE-2015-6085: Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a d
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6064 and CVE-2015-6084.
nvd
CVE-2015-6084P3CRITICALCVSS 9.3v10v112015-11-11
CVE-2015-6084 [CRITICAL] CVE-2015-6084: Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a d
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6064 and CVE-2015-6085.
nvd
CVE-2002-0723P4HIGHCVSS 7.5PoCv5.5v6.02002-09-24
CVE-2002-0723 [HIGH] CVE-2002-0723: Microsoft Internet Explorer 5.5 and 6.0 does not properly verify the domain of a frame within a brow
Microsoft Internet Explorer 5.5 and 6.0 does not properly verify the domain of a frame within a browser window, which allows remote attackers to read client files or invoke executable objects via the Object tag, aka "Cross Domain Verification in Object Tag."
nvd
CVE-2015-1744P3CRITICALCVSS 9.3v6v7+4 more2015-06-10
CVE-2015-1744 [CRITICAL] CVE-2015-1744: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1735, CVE-2015-1740, CVE-2015-1745, and CVE-2015-1766.
nvd
CVE-2015-1766P3CRITICALCVSS 9.3v6v7+4 more2015-06-10
CVE-2015-1766 [CRITICAL] CVE-2015-1766: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1735, CVE-2015-1740, CVE-2015-1744, and CVE-2015-1745.
nvd
CVE-2015-1740P3CRITICALCVSS 9.3v6v7+4 more2015-06-10
CVE-2015-1740 [CRITICAL] CVE-2015-1740: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1735, CVE-2015-1744, CVE-2015-1745, and CVE-2015-1766.
nvd
CVE-2015-1753P3CRITICALCVSS 9.3v112015-06-10
CVE-2015-1753 [CRITICAL] CVE-2015-1753: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial o
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1732, CVE-2015-1742, CVE-2015-1747, and CVE-2015-1750.
nvd
CVE-2015-1735P3CRITICALCVSS 9.3v6v7+4 more2015-06-10
CVE-2015-1735 [CRITICAL] CWE-399 CVE-2015-1735: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1740, CVE-2015-1744, CVE-2015-1745, and CVE-2015-1766.
nvd
CVE-2015-1742P3CRITICALCVSS 9.3v112015-06-10
CVE-2015-1742 [CRITICAL] CVE-2015-1742: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial o
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1732, CVE-2015-1747, CVE-2015-1750, and CVE-2015-1753.
nvd
CVE-2015-1711P3CRITICALCVSS 9.3v112015-05-13
CVE-2015-1711 [CRITICAL] CVE-2015-1711: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial o
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1658, CVE-2015-1706, CVE-2015-1717, and CVE-2015-1718.
nvd
CVE-2015-1718P3CRITICALCVSS 9.3v112015-05-13
CVE-2015-1718 [CRITICAL] CVE-2015-1718: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial o
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1658, CVE-2015-1706, CVE-2015-1711, and CVE-2015-1717.
nvd
CVE-2015-1691P3CRITICALCVSS 9.3v8v92015-05-13
CVE-2015-1691 [CRITICAL] CWE-119 CVE-2015-1691: Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a den
Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1712.
nvd
CVE-2015-1717P3CRITICALCVSS 9.3v112015-05-13
CVE-2015-1717 [CRITICAL] CVE-2015-1717: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial o
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1658, CVE-2015-1706, CVE-2015-1711, and CVE-2015-1718.
nvd
CVE-2015-1706P3CRITICALCVSS 9.3v112015-05-13
CVE-2015-1706 [CRITICAL] CVE-2015-1706: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial o
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1658, CVE-2015-1711, CVE-2015-1717, and CVE-2015-1718.
nvd