Microsoft Internet Explorer 11 vulnerabilities
161 known vulnerabilities affecting microsoft/internet_explorer_11.
Total CVEs
161
CISA KEV
13
actively exploited
Public exploits
15
Exploited in wild
17
Severity breakdown
HIGH128MEDIUM33
Vulnerabilities
Page 6 of 9
CVE-2019-0676MEDIUMCVSS 6.5KEVvWindows 7 for 32-bit Systems Service Pack 1vWindows 7 for x64-based Systems Service Pack 1+22 more2019-03-05
CVE-2019-0676 [MEDIUM] CVE-2019-0676: An information disclosure vulnerability exists when Internet Explorer improperly handles objects in
An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker who successfully exploited this vulnerability could test for the presence of files on disk, aka 'Internet Explorer Information Disclosure Vulnerability'.
cvelistv5nvd
CVE-2019-0654MEDIUMCVSS 4.3vWindows 7 for 32-bit Systems Service Pack 1vWindows 7 for x64-based Systems Service Pack 1+22 more2019-03-05
CVE-2019-0654 [MEDIUM] CVE-2019-0654: A spoofing vulnerability exists when Microsoft browsers improperly handles specific redirects, aka '
A spoofing vulnerability exists when Microsoft browsers improperly handles specific redirects, aka 'Microsoft Browser Spoofing Vulnerability'.
cvelistv5nvd
CVE-2019-0541HIGHCVSS 8.8KEVPoCvWindows 10 for 32-bit SystemsvWindows 10 for x64-based Systems+22 more2019-01-08
CVE-2019-0541 [HIGH] CWE-77 CVE-2019-0541: A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates
A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, Internet Explorer 11, Microsoft Excel Viewer, Internet Explorer 10, Office 365 ProPlus.
cvelistv5nvd
CVE-2018-8653HIGHCVSS 7.5KEVvWindows 10 for 32-bit SystemsvWindows 10 for x64-based Systems+22 more2018-12-20
CVE-2018-8653 [HIGH] CVE-2018-8653: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engin
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-8643.
cvelistv5
CVE-2018-8625HIGHCVSS 7.5PoCvWindows 10 for 32-bit SystemsvWindows 10 for x64-based Systems+22 more2018-12-12
CVE-2018-8625 [HIGH] CWE-416 CVE-2018-8625: A remote code execution vulnerability exists in the way that the VBScript engine handles objects in
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10.
cvelistv5nvd
CVE-2018-8631HIGHCVSS 7.5PoCvWindows 10 for 32-bit SystemsvWindows 10 for x64-based Systems+22 more2018-12-12
CVE-2018-8631 [HIGH] CWE-787 CVE-2018-8631: A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in m
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10.
cvelistv5nvd
CVE-2018-8643HIGHCVSS 7.5vWindows 10 for 32-bit SystemsvWindows 10 for x64-based Systems+22 more2018-12-12
CVE-2018-8643 [HIGH] CWE-787 CVE-2018-8643: A remote code execution vulnerability exists in the way that the scripting engine handles objects in
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10.
cvelistv5nvd
CVE-2018-8619HIGHCVSS 7.5PoCvWindows 10 for 32-bit SystemsvWindows 10 for x64-based Systems+20 more2018-12-12
CVE-2018-8619 [HIGH] CWE-269 CVE-2018-8619: A remote code execution vulnerability exists when the Internet Explorer VBScript execution policy do
A remote code execution vulnerability exists when the Internet Explorer VBScript execution policy does not properly restrict VBScript under specific conditions, aka "Internet Explorer Remote Code Execution Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10.
cvelistv5nvd
CVE-2018-8570HIGHCVSS 7.5vWindows 7 for 32-bit Systems Service Pack 1vWindows 7 for x64-based Systems Service Pack 1+1 more2018-11-14
CVE-2018-8570 [HIGH] CWE-787 CVE-2018-8570: A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in m
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 11.
cvelistv5nvd
CVE-2018-8552HIGHCVSS 7.5PoCvWindows 10 for 32-bit SystemsvWindows 10 for x64-based Systems+22 more2018-11-14
CVE-2018-8552 [HIGH] CWE-119 CVE-2018-8552: An information disclosure vulnerability exists when VBScript improperly discloses the contents of it
An information disclosure vulnerability exists when VBScript improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user's computer or data, aka "Windows Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10.
cvelistv5nvd
CVE-2018-8460HIGHCVSS 7.5vWindows 10 for 32-bit SystemsvWindows 10 for x64-based Systems+20 more2018-10-10
CVE-2018-8460 [HIGH] CWE-787 CVE-2018-8460: A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in m
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 11. This CVE ID is unique from CVE-2018-8491.
cvelistv5nvd
CVE-2018-8491HIGHCVSS 7.5vWindows 10 for 32-bit SystemsvWindows 10 for x64-based Systems+20 more2018-10-10
CVE-2018-8491 [HIGH] CVE-2018-8491: A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vu
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 11. This CVE ID is unique from CVE-2018-8460.
cvelistv5
CVE-2018-8447HIGHCVSS 7.5vWindows 10 Version 1709 for 32-bit SystemsvWindows 10 Version 1709 for x64-based Systems+2 more2018-09-13
CVE-2018-8447 [HIGH] CWE-787 CVE-2018-8447: A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in m
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-8461.
cvelistv5nvd
CVE-2018-8457HIGHCVSS 7.5vWindows 10 for 32-bit SystemsvWindows 10 for x64-based Systems+16 more2018-09-13
CVE-2018-8457 [HIGH] CVE-2018-8457: A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Me
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 11, Microsoft Edge, Internet Explorer 10. This CVE ID is unique from CVE-2018-8354, CVE-2018-8391, C
cvelistv5
CVE-2018-8461HIGHCVSS 7.5vWindows 10 Version 1709 for 32-bit SystemsvWindows 10 Version 1709 for x64-based Systems+2 more2018-09-13
CVE-2018-8461 [HIGH] CVE-2018-8461: A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vu
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 11. This CVE ID is unique from CVE-2018-8447.
cvelistv5
CVE-2018-8470MEDIUMCVSS 6.1vWindows 10 for 32-bit SystemsvWindows 10 for x64-based Systems+16 more2018-09-13
CVE-2018-8470 [MEDIUM] CWE-79 CVE-2018-8470: A security feature bypass vulnerability exists in Internet Explorer due to how scripts are handled t
A security feature bypass vulnerability exists in Internet Explorer due to how scripts are handled that allows a universal cross-site scripting (UXSS) condition, aka "Internet Explorer Security Feature Bypass Vulnerability." This affects Internet Explorer 11.
cvelistv5nvd
CVE-2018-8452MEDIUMCVSS 4.3vWindows 10 for 32-bit SystemsvWindows 10 for x64-based Systems+16 more2018-09-13
CVE-2018-8452 [MEDIUM] CWE-200 CVE-2018-8452: An information disclosure vulnerability exists when the scripting engine does not properly handle ob
An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft browsers, aka "Scripting Engine Information Disclosure Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge.
cvelistv5nvd
CVE-2018-8315MEDIUMCVSS 4.2vWindows 10 for 32-bit SystemsvWindows 10 for x64-based Systems+16 more2018-09-13
CVE-2018-8315 [MEDIUM] CWE-200 CVE-2018-8315: An information disclosure vulnerability exists when the browser scripting engine improperly handle o
An information disclosure vulnerability exists when the browser scripting engine improperly handle object types, aka "Microsoft Scripting Engine Information Disclosure Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Explorer 10.
cvelistv5nvd
CVE-2018-8355HIGHCVSS 7.5PoCvWindows 10 for 32-bit SystemsvWindows 10 for x64-based Systems+16 more2018-08-15
CVE-2018-8355 [HIGH] CVE-2018-8355: A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Me
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-8353, CVE-2018-8359, CVE-2018-83
cvelistv5
CVE-2018-8403HIGHCVSS 7.5vWindows 10 for 32-bit SystemsvWindows 10 for x64-based Systems+16 more2018-08-15
CVE-2018-8403 [HIGH] CWE-787 CVE-2018-8403: A remote code execution vulnerability exists in the way that Microsoft browsers access objects in me
A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka "Microsoft Browser Memory Corruption Vulnerability." This affects Internet Explorer 11, Microsoft Edge, Internet Explorer 10.
cvelistv5nvd