cbcvebase.

Microsoft Internet Explorer vulnerabilities

1,594 known vulnerabilities affecting microsoft/internet_explorer.

Total CVEs
1,594
CISA KEV
42
actively exploited
Public exploits
364
Exploited in wild
91
Severity breakdown
CRITICAL689HIGH451MEDIUM404LOW50

Vulnerabilities

Page 44 of 80
CVE-2015-1662P3CRITICALCVSS 9.3v112015-04-14
CVE-2015-1662 [CRITICAL] CVE-2015-1662: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial o Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1659 and CVE-2015-1665.
nvd
CVE-2007-1750P3CRITICALCVSS 9.3v5.01v6+1 more2007-06-12
CVE-2007-1750 [CRITICAL] CVE-2007-1750: Unspecified vulnerability in Microsoft Internet Explorer 6 allows remote attackers to execute arbitr Unspecified vulnerability in Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code via a crafted Cascading Style Sheets (CSS) tag that triggers memory corruption.
nvd
CVE-2001-0664P4HIGHCVSS 7.5PoCv5.01v5.52001-10-30
CVE-2001-0664 [HIGH] CVE-2001-0664: Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via malformed Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which causes Internet Explorer to process the page in the Intranet Zone, which may have fewer security restrictions, aka the "Zone Spoofing vulnerability."
nvd
CVE-2016-0064P3HIGHCVSS 8.8v102016-02-10
CVE-2016-0064 [HIGH] CWE-119 CVE-2016-0064: Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial o Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
nvd
CVE-2016-3382P3HIGHCVSS 7.5v9v10+1 more2016-10-14
CVE-2016-3382 [HIGH] CWE-119 CVE-2016-3382: The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote at The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, as demonstrated by the Chakra JavaScript engine, aka "Scripting Engine Memory Corruption Vulnerability."
nvd
CVE-2017-0228P3HIGHCVSS 7.5v112017-05-12
CVE-2017-0228 [HIGH] CVE-2017-0228: A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript engines ren A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript engines render when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0224, CVE-2017-0229, CVE-2017-0230, CVE-2017-0234, CVE-2017-0235, CVE-2017-0236, and CVE-2017-0238.
nvd
CVE-2016-0192P3HIGHCVSS 7.5v9v10+1 more2016-05-11
CVE-2016-0192 [HIGH] CWE-119 CVE-2016-0192: Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitr Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."
nvd
CVE-2016-3390P3HIGHCVSS 7.5v112016-10-14
CVE-2016-3390 [HIGH] CWE-119 CVE-2016-3390: The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, as demonstrated by the Chakra JavaScript engine, aka "Scripting Engine Memory Corruption Vulnerability."
nvd
CVE-2014-1765P3HIGHCVSS 7.6v6v7+4 more2014-04-27
CVE-2014-1765 [HIGH] CWE-399 CVE-2014-1765: Multiple use-after-free vulnerabilities in Microsoft Internet Explorer 6 through 11 allow remote att Multiple use-after-free vulnerabilities in Microsoft Internet Explorer 6 through 11 allow remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by Sebastian Apelt and Andreas Schmidt during a Pwn2Own competition at CanSecWest 2014.
nvd
CVE-2018-0889P3HIGHCVSS 7.5v9v10+1 more2018-03-14
CVE-2018-0889 [HIGH] CVE-2018-0889: Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote cod Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0876, CVE-2018-0893, CVE-2018-0925, and CVE-2018-0935.
nvd
CVE-2008-0078P3CRITICALCVSS 9.3v6v72008-02-12
CVE-2008-0078 [CRITICAL] CWE-94 CVE-2008-0078: Unspecified vulnerability in an ActiveX control (dxtmsft.dll) in Microsoft Internet Explorer 5.01, 6 Unspecified vulnerability in an ActiveX control (dxtmsft.dll) in Microsoft Internet Explorer 5.01, 6 SP1 and SP2, and 7 allows remote attackers to execute arbitrary code via a crafted image, aka "Argument Handling Memory Corruption Vulnerability."
nvd
CVE-2008-2258P3CRITICALCVSS 9.3v5.01v6+1 more2008-08-13
CVE-2008-2258 [CRITICAL] CVE-2008-2258: Microsoft Internet Explorer 5.01, 6, and 7 accesses uninitialized memory in certain conditions, whic Microsoft Internet Explorer 5.01, 6, and 7 accesses uninitialized memory in certain conditions, which allows remote attackers to cause a denial of service (crash) and execute arbitrary code via vectors related to a document object "appended in a specific order" with "particular functions ... performed on" document objects, aka "HTML Objects Memory Corruptio
nvd
CVE-2018-8178P3HIGHCVSS 7.5v112018-05-09
CVE-2018-8178 [HIGH] CWE-787 CVE-2018-8178: A remote code execution vulnerability exists in the way that Microsoft browsers access objects in me A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka "Microsoft Browser Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge.
nvd
CVE-2018-1018P3HIGHCVSS 7.5v112018-04-12
CVE-2018-1018 [HIGH] CVE-2018-1018: A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in m A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 11. This CVE ID is unique from CVE-2018-0870, CVE-2018-0991, CVE-2018-0997, CVE-2018-1020.
nvd
CVE-2018-0997P3HIGHCVSS 7.5v112018-04-12
CVE-2018-0997 [HIGH] CVE-2018-0997: A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in m A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 11. This CVE ID is unique from CVE-2018-0870, CVE-2018-0991, CVE-2018-1018, CVE-2018-1020.
nvd
CVE-2018-0991P3HIGHCVSS 7.5v10v112018-04-12
CVE-2018-0991 [HIGH] CVE-2018-0991: A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in m A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-0870, CVE-2018-0997, CVE-2018-1018, CVE-2018-1020.
nvd
CVE-2018-0870P3HIGHCVSS 7.5v112018-04-12
CVE-2018-0870 [HIGH] CWE-787 CVE-2018-0870: A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in m A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 11. This CVE ID is unique from CVE-2018-0991, CVE-2018-0997, CVE-2018-1018, CVE-2018-1020.
nvd
CVE-2018-0988P3HIGHCVSS 7.5v10v11+1 more2018-04-12
CVE-2018-0988 [HIGH] CWE-787 CVE-2018-0988: A remote code execution vulnerability exists in the way that the scripting engine handles objects in A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-0996, CVE-2018-1001.
nvd
CVE-2018-8371P3HIGHCVSS 7.5v11v10+1 more2018-08-15
CVE-2018-8371 [HIGH] CVE-2018-8371: A remote code execution vulnerability exists in the way that the scripting engine handles objects in A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-8353, CVE-2018-8355, CVE-2018-8359, CVE-2018-8372, CVE-2018-837
nvd
CVE-2018-8385P3HIGHCVSS 7.5v11v10+1 more2018-08-15
CVE-2018-8385 [HIGH] CVE-2018-8385: A remote code execution vulnerability exists in the way the scripting engine handles objects in memo A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Explorer 10. This CVE ID is unique from CVE-2018-8353, CVE-2018-8355, CVE-2018-8359, CVE
nvd
Microsoft Internet Explorer vulnerabilities | cvebase