Msrc Internet Explorer 9 vulnerabilities

147 known vulnerabilities affecting msrc/internet_explorer_9.

Total CVEs
147
CISA KEV
12
actively exploited
Public exploits
22
Exploited in wild
15
Severity breakdown
CRITICAL5HIGH20MEDIUM108LOW14

Vulnerabilities

Page 2 of 8
CVE-2020-0967HIGHCVSS 7.52020-04-14
CVE-2020-0967 [HIGH] VBScript Remote Code Execution Vulnerability VBScript Remote Code Execution Vulnerability Description: A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is
msrc
CVE-2020-0966HIGHCVSS 7.52020-04-14
CVE-2020-0966 [HIGH] VBScript Remote Code Execution Vulnerability VBScript Remote Code Execution Vulnerability Description: A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is
msrc
CVE-2020-0968MEDIUMCVSS 6.4KEV2020-04-14
CVE-2020-0968 [HIGH] Scripting Engine Memory Corruption Vulnerability Scripting Engine Memory Corruption Vulnerability Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the curren
msrc
CVE-2020-0895MEDIUMCVSS 6.42020-04-14
CVE-2020-0895 [HIGH] Windows VBScript Engine Remote Code Execution Vulnerability Windows VBScript Engine Remote Code Execution Vulnerability Description: A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the curren
msrc
CVE-2020-0847MEDIUMCVSS 6.42020-03-10
CVE-2020-0847 [HIGH] VBScript Remote Code Execution Vulnerability VBScript Remote Code Execution Vulnerability Description: A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is
msrc
CVE-2020-0832MEDIUMCVSS 6.42020-03-10
CVE-2020-0832 [HIGH] Scripting Engine Memory Corruption Vulnerability Scripting Engine Memory Corruption Vulnerability Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the curren
msrc
CVE-2020-0674MEDIUMCVSS 6.4KEVPoC2020-02-11
CVE-2020-0674 [HIGH] Scripting Engine Memory Corruption Vulnerability Scripting Engine Memory Corruption Vulnerability Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the curren
msrc
CVE-2020-0673MEDIUMCVSS 6.42020-02-11
CVE-2020-0673 [HIGH] Scripting Engine Memory Corruption Vulnerability Scripting Engine Memory Corruption Vulnerability Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the curren
msrc
CVE-2020-0640MEDIUMCVSS 6.42020-01-14
CVE-2020-0640 [HIGH] Internet Explorer Memory Corruption Vulnerability Internet Explorer Memory Corruption Vulnerability Description: A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the curren
msrc
CVE-2019-1485MEDIUMCVSS 6.42019-12-10
CVE-2019-1485 [HIGH] VBScript Remote Code Execution Vulnerability VBScript Remote Code Execution Vulnerability Description: A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is
msrc
CVE-2019-1429MEDIUMCVSS 6.4KEVPoC2019-11-12
CVE-2019-1429 [HIGH] Scripting Engine Memory Corruption Vulnerability Scripting Engine Memory Corruption Vulnerability Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the curren
msrc
CVE-2019-1390MEDIUMCVSS 6.42019-11-12
CVE-2019-1390 [HIGH] VBScript Remote Code Execution Vulnerability VBScript Remote Code Execution Vulnerability Description: A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is
msrc
CVE-2019-1371MEDIUMCVSS 6.42019-10-08
CVE-2019-1371 [HIGH] Internet Explorer Memory Corruption Vulnerability Internet Explorer Memory Corruption Vulnerability Description: A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the curren
msrc
CVE-2019-1238MEDIUMCVSS 6.42019-10-08
CVE-2019-1238 [MEDIUM] VBScript Remote Code Execution Vulnerability VBScript Remote Code Execution Vulnerability Description: A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user
msrc
CVE-2019-0608LOWCVSS 2.42019-10-08
CVE-2019-0608 [MEDIUM] Microsoft Browser Spoofing Vulnerability Microsoft Browser Spoofing Vulnerability Description: A spoofing vulnerability exists when Microsoft Browsers does not properly parse HTTP content. An attacker who successfully exploited this vulnerability could impersonate a user request by crafting HTTP queries. The specially crafted website could either spoof content or serve as a pivot to chain an attack with other vulnerabilities in web services. To exploit the vulnerability,
msrc
CVE-2019-1208MEDIUMCVSS 6.42019-09-10
CVE-2019-1208 [HIGH] VBScript Remote Code Execution Vulnerability VBScript Remote Code Execution Vulnerability Description: A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is
msrc
CVE-2019-1367MEDIUMCVSS 6.4KEV2019-09-10
CVE-2019-1367 [HIGH] Scripting Engine Memory Corruption Vulnerability Scripting Engine Memory Corruption Vulnerability Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the curren
msrc
CVE-2019-1236MEDIUMCVSS 6.42019-09-10
CVE-2019-1236 [HIGH] VBScript Remote Code Execution Vulnerability VBScript Remote Code Execution Vulnerability Description: A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is
msrc
CVE-2019-1220LOWCVSS 2.42019-09-10
CVE-2019-1220 [MEDIUM] Microsoft Browser Security Feature Bypass Vulnerability Microsoft Browser Security Feature Bypass Vulnerability Description: A security feature bypass vulnerability exists when Microsoft Browsers fail to validate the correct Security Zone of requests for specific URLs. This could allow an attacker to cause a user to access a URL in a less restricted Internet Security Zone than intended. To exploit this vulnerability, an attacker could email or otherwise provide a speciall
msrc
CVE-2019-1194MEDIUMCVSS 6.42019-08-13
CVE-2019-1194 [HIGH] Scripting Engine Memory Corruption Vulnerability Scripting Engine Memory Corruption Vulnerability Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the curren
msrc