Msrc Internet Explorer 9 vulnerabilities

147 known vulnerabilities affecting msrc/internet_explorer_9.

Total CVEs
147
CISA KEV
12
actively exploited
Public exploits
22
Exploited in wild
15
Severity breakdown
CRITICAL5HIGH20MEDIUM108LOW14

Vulnerabilities

Page 4 of 8
CVE-2018-8619MEDIUMCVSS 6.4PoC2018-12-11
CVE-2018-8619 [HIGH] Internet Explorer Remote Code Execution Vulnerability Internet Explorer Remote Code Execution Vulnerability Description: A remote code execution vulnerability exists when the Internet Explorer VBScript execution policy does not properly restrict VBScript under specific conditions. An attacker who exploited the vulnerability could run arbitrary code with medium-integrity level privileges (the permissions of the current user). In a web-based attack scenario, an attacker could
msrc
CVE-2018-8625MEDIUMCVSS 6.4PoC2018-12-11
CVE-2018-8625 [HIGH] Windows VBScript Engine Remote Code Execution Vulnerability Windows VBScript Engine Remote Code Execution Vulnerability Description: A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the curren
msrc
CVE-2018-8631MEDIUMCVSS 6.4PoC2018-12-11
CVE-2018-8631 [HIGH] Internet Explorer Memory Corruption Vulnerability Internet Explorer Memory Corruption Vulnerability Description: A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the curren
msrc
CVE-2018-8653MEDIUMCVSS 6.4KEV2018-12-11
CVE-2018-8653 [HIGH] Scripting Engine Memory Corruption Vulnerability Scripting Engine Memory Corruption Vulnerability Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the curren
msrc
CVE-2018-8552MEDIUMCVSS 6.4PoC2018-11-13
CVE-2018-8552 [HIGH] Scripting Engine Memory Corruption Vulnerability Scripting Engine Memory Corruption Vulnerability Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the curren
msrc
CVE-2018-8447MEDIUMCVSS 6.42018-09-11
CVE-2018-8447 [HIGH] Internet Explorer Memory Corruption Vulnerability Internet Explorer Memory Corruption Vulnerability Description: A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the curren
msrc
CVE-2018-8385HIGHCVSS 7.52018-08-14
CVE-2018-8385 [HIGH] Scripting Engine Memory Corruption Vulnerability Scripting Engine Memory Corruption Vulnerability Description: A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current us
msrc
CVE-2018-8389MEDIUMCVSS 6.4Exploited2018-08-14
CVE-2018-8389 [HIGH] Scripting Engine Memory Corruption Vulnerability Scripting Engine Memory Corruption Vulnerability Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the curren
msrc
CVE-2018-8373MEDIUMCVSS 6.4KEV2018-08-14
CVE-2018-8373 [HIGH] Scripting Engine Memory Corruption Vulnerability Scripting Engine Memory Corruption Vulnerability Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the curren
msrc
CVE-2018-8353MEDIUMCVSS 6.4PoC2018-08-14
CVE-2018-8353 [HIGH] Scripting Engine Memory Corruption Vulnerability Scripting Engine Memory Corruption Vulnerability Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the curren
msrc
CVE-2018-8371MEDIUMCVSS 6.42018-08-14
CVE-2018-8371 [HIGH] Scripting Engine Memory Corruption Vulnerability Scripting Engine Memory Corruption Vulnerability Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the curren
msrc
CVE-2018-8242MEDIUMCVSS 6.42018-07-10
CVE-2018-8242 [HIGH] Scripting Engine Memory Corruption Vulnerability Scripting Engine Memory Corruption Vulnerability Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the curren
msrc
CVE-2018-0949LOWCVSS 2.42018-07-10
CVE-2018-0949 [MEDIUM] Internet Explorer Security Feature Bypass Vulnerability Internet Explorer Security Feature Bypass Vulnerability Description: A security feature bypass vulnerability exists when Microsoft Internet Explorer improperly handles requests involving UNC resources. An attacker who successfully exploited the vulnerability could force the browser to load data that would otherwise be restricted. In a web-based attack scenario, an attacker could host a specially crafted website that
msrc
CVE-2018-8267HIGHCVSS 7.5Exploited2018-06-12
CVE-2018-8267 [HIGH] Scripting Engine Memory Corruption Vulnerability Scripting Engine Memory Corruption Vulnerability Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the curren
msrc
CVE-2018-0978LOWCVSS 2.42018-06-12
CVE-2018-0978 [HIGH] Internet Explorer Memory Corruption Vulnerability Internet Explorer Memory Corruption Vulnerability Description: A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the curren
msrc
CVE-2018-0955MEDIUMCVSS 6.4Exploited2018-05-08
CVE-2018-0955 [HIGH] Scripting Engine Memory Corruption Vulnerability Scripting Engine Memory Corruption Vulnerability Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the curren
msrc
CVE-2018-0954MEDIUMCVSS 4.22018-05-08
CVE-2018-0954 [HIGH] Scripting Engine Memory Corruption Vulnerability Scripting Engine Memory Corruption Vulnerability Description: A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current us
msrc
CVE-2018-0988MEDIUMCVSS 6.42018-04-10
CVE-2018-0988 [HIGH] Scripting Engine Memory Corruption Vulnerability Scripting Engine Memory Corruption Vulnerability Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the curren
msrc
CVE-2018-1001MEDIUMCVSS 6.42018-04-10
CVE-2018-1001 [HIGH] Scripting Engine Memory Corruption Vulnerability Scripting Engine Memory Corruption Vulnerability Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the curren
msrc
CVE-2018-1004MEDIUMCVSS 5.02018-04-10
CVE-2018-1004 [HIGH] Windows VBScript Engine Remote Code Execution Vulnerability Windows VBScript Engine Remote Code Execution Vulnerability Description: A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the curren
msrc