# Microsoft Internet Explorer 11.

Every CVE that names Microsoft Internet Explorer 11 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Scripting Engine Memory Corruption Vulnerability](https://agentprime.io/advisories/CVE-2021-26419.md)
  `CVE-2021-26419` · CVE record: Microsoft Internet Explorer 11 and 1 more · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.23 · Not analysed yet · Published 11 May 2021
- [Internet Explorer Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-27085.md)
  `CVE-2021-27085` · CVE record: Microsoft Internet Explorer 11 · CVSS 8.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 11 Mar 2021
- [Internet Explorer Memory Corruption Vulnerability](https://agentprime.io/advisories/CVE-2021-26411.md)
  `CVE-2021-26411` · CVE record: Microsoft Internet Explorer 11 and 2 more · CVSS 8.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 0.82 · Not analysed yet · Published 11 Mar 2021 · Tags: Memory corruption
- [Microsoft Browser Memory Corruption Vulnerability](https://agentprime.io/advisories/CVE-2020-17058.md)
  `CVE-2020-17058` · CVE record: Microsoft Internet Explorer 11 and 1 more · CVSS 7.5 High · Not analysed yet · Published 11 Nov 2020
- [Internet Explorer Memory Corruption Vulnerability](https://agentprime.io/advisories/CVE-2020-17053.md)
  `CVE-2020-17053` · CVE record: Microsoft Internet Explorer 11 · CVSS 7.5 High · Not analysed yet · Published 11 Nov 2020
- [Scripting Engine Memory Corruption Vulnerability](https://agentprime.io/advisories/CVE-2020-17052.md)
  `CVE-2020-17052` · CVE record: Microsoft Internet Explorer 11 and 1 more · CVSS 7.5 High · Not analysed yet · Published 11 Nov 2020
- [Windows Start-Up Application Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2020-1506.md)
  `CVE-2020-1506` · CVE record: Microsoft Internet Explorer 11 · CVSS 6.1 Medium · Not analysed yet · Published 11 Sept 2020
- [WinINet API Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2020-1012.md)
  `CVE-2020-1012` · CVE record: Microsoft Internet Explorer 11 · CVSS 8.8 High · Not analysed yet · Published 11 Sept 2020
- [Microsoft Browser Memory Corruption Vulnerability](https://agentprime.io/advisories/CVE-2020-0878.md)
  `CVE-2020-0878` · CVE record: Microsoft ChakraCore and 3 more · CVSS 4.2 Medium · Critical (KEV) · In CISA KEV, ransomware · Not analysed yet · Published 11 Sept 2020 · Tags: Memory corruption
- [Scripting Engine Memory Corruption Vulnerability](https://agentprime.io/advisories/CVE-2020-1570.md)
  `CVE-2020-1570` · CVE record: Microsoft Internet Explorer 11 and 1 more · No CVSS score · Not analysed yet · Published 17 Aug 2020
- [MSHTML Engine Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2020-1567.md)
  `CVE-2020-1567` · CVE record: Microsoft Internet Explorer 11 and 1 more · CVSS 4.2 Medium · Not analysed yet · Published 17 Aug 2020
- [Scripting Engine Memory Corruption Vulnerability](https://agentprime.io/advisories/CVE-2020-1380.md)
  `CVE-2020-1380` · CVE record: Microsoft Internet Explorer 11 · CVSS 7.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.24 · Not analysed yet · Published 17 Aug 2020 · Tags: Memory corruption
- [An information disclosure vulnerability exists when Skype for Business is accessed via Internet Explorer, aka 'Skype for Business via Internet Explorer Information Disclosure Vulnerability'.](https://agentprime.io/advisories/CVE-2020-1432.md)
  `CVE-2020-1432` · CVE record: Microsoft Internet Explorer 11 on Windows 10 Version 2004 for x64-based Systems and 4 more · No CVSS score · Not analysed yet · Published 14 Jul 2020
- [A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2020-1403.md)
  `CVE-2020-1403` · CVE record: Microsoft Internet Explorer 11 on Windows 10 Version 2004 for 32-bit Systems and 4 more · No CVSS score · EPSS 0.10 · Not analysed yet · Published 14 Jul 2020
- [An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory, aka 'Internet Explorer Information Disclosure Vulnerability'.](https://agentprime.io/advisories/CVE-2020-1315.md)
  `CVE-2020-1315` · CVE record: Microsoft Internet Explorer 11 on Windows 10 Version 2004 for 32-bit Systems and 4 more · No CVSS score · Not analysed yet · Published 9 Jun 2020
- [A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2020-1260.md)
  `CVE-2020-1260` · CVE record: Microsoft Internet Explorer 9 and 4 more · No CVSS score · Not analysed yet · Published 9 Jun 2020
- [A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2020-1230.md)
  `CVE-2020-1230` · CVE record: Microsoft Internet Explorer 9 and 4 more · No CVSS score · Not analysed yet · Published 9 Jun 2020
- [A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corruption Vulnerability'.](https://agentprime.io/advisories/CVE-2020-1219.md)
  `CVE-2020-1219` · CVE record: Microsoft ChakraCore and 4 more · No CVSS score · EPSS 0.19 · Not analysed yet · Published 9 Jun 2020
- [A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2020-1216.md)
  `CVE-2020-1216` · CVE record: Microsoft Internet Explorer 11 on Windows 10 Version 2004 for 32-bit Systems and 4 more · No CVSS score · Not analysed yet · Published 9 Jun 2020
- [A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2020-1215.md)
  `CVE-2020-1215` · CVE record: Microsoft Internet Explorer 9 and 4 more · No CVSS score · Not analysed yet · Published 9 Jun 2020
- [A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2020-1214.md)
  `CVE-2020-1214` · CVE record: Microsoft Internet Explorer 11 on Windows 10 Version 2004 for x64-based Systems and 4 more · No CVSS score · Not analysed yet · Published 9 Jun 2020
- [A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2020-1213.md)
  `CVE-2020-1213` · CVE record: Microsoft Internet Explorer 11 on Windows 10 Version 2004 for x64-based Systems and 4 more · No CVSS score · Not analysed yet · Published 9 Jun 2020
- [VBScript Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2020-1093.md)
  `CVE-2020-1093` · CVE record: Microsoft Internet Explorer 11 and 1 more · CVSS 7.5 High · Not analysed yet · Published 21 May 2020
- [Internet Explorer Memory Corruption Vulnerability](https://agentprime.io/advisories/CVE-2020-1092.md)
  `CVE-2020-1092` · CVE record: Microsoft Internet Explorer 11 and 1 more · CVSS 7.5 High · Not analysed yet · Published 21 May 2020
- [MSHTML Engine Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2020-1064.md)
  `CVE-2020-1064` · CVE record: Microsoft Internet Explorer 11 and 1 more · CVSS 7.5 High · Not analysed yet · Published 21 May 2020
- [Internet Explorer Memory Corruption Vulnerability](https://agentprime.io/advisories/CVE-2020-1062.md)
  `CVE-2020-1062` · CVE record: Microsoft Internet Explorer 11 and 1 more · CVSS 7.5 High · Not analysed yet · Published 21 May 2020
- [VBScript Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2020-1060.md)
  `CVE-2020-1060` · CVE record: Microsoft Internet Explorer 11 and 1 more · CVSS 7.5 High · Not analysed yet · Published 21 May 2020
- [VBScript Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2020-1058.md)
  `CVE-2020-1058` · CVE record: Microsoft Internet Explorer 11 and 1 more · CVSS 7.5 High · Not analysed yet · Published 21 May 2020
- [VBScript Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2020-1035.md)
  `CVE-2020-1035` · CVE record: Microsoft Internet Explorer 11 and 1 more · CVSS 7.5 High · Not analysed yet · Published 21 May 2020
- [Out-of-bounds write in Microsoft Internet Explorer 9 and others](https://agentprime.io/advisories/CVE-2020-0968.md)
  `CVE-2020-0968` · CVE record: Microsoft Internet Explorer 9 and 4 more · CVSS 7.5 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 0.31 · Not analysed yet · Published 15 Apr 2020 · Tags: Memory corruption
- [A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2020-0967.md)
  `CVE-2020-0967` · CVE record: Microsoft Internet Explorer 9 and 4 more · No CVSS score · EPSS 0.12 · Not analysed yet · Published 15 Apr 2020
- [A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2020-0966.md)
  `CVE-2020-0966` · CVE record: Microsoft Internet Explorer 9 and 4 more · No CVSS score · EPSS 0.12 · Not analysed yet · Published 15 Apr 2020
- [A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2020-0895.md)
  `CVE-2020-0895` · CVE record: Microsoft Internet Explorer 9 and 4 more · No CVSS score · Not analysed yet · Published 15 Apr 2020
- [A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2020-0847.md)
  `CVE-2020-0847` · CVE record: Microsoft Internet Explorer 9 and 4 more · No CVSS score · Not analysed yet · Published 12 Mar 2020
- [A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'.](https://agentprime.io/advisories/CVE-2020-0824.md)
  `CVE-2020-0824` · CVE record: Microsoft Internet Explorer 11 and 4 more · No CVSS score · Not analysed yet · Published 12 Mar 2020
- [An information disclosure vulnerability exists in the way that affected Microsoft browsers handle cross-origin requests, aka 'Microsoft Browser Information Disclosure Vulnerability'.](https://agentprime.io/advisories/CVE-2020-0706.md)
  `CVE-2020-0706` · CVE record: Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systems and 4 more · No CVSS score · Not analysed yet · Published 11 Feb 2020
- [Use after free in Microsoft Internet Explorer 10 and others](https://agentprime.io/advisories/CVE-2020-0674.md)
  `CVE-2020-0674` · CVE record: Microsoft Internet Explorer 10 and 4 more · CVSS 7.5 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.87 · Not analysed yet · Published 11 Feb 2020 · Tags: Memory corruption
- [A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'.](https://agentprime.io/advisories/CVE-2020-0673.md)
  `CVE-2020-0673` · CVE record: Microsoft Internet Explorer 10 and 4 more · No CVSS score · Not analysed yet · Published 11 Feb 2020
- [A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'.](https://agentprime.io/advisories/CVE-2020-0640.md)
  `CVE-2020-0640` · CVE record: Microsoft Internet Explorer 10 and 4 more · No CVSS score · Not analysed yet · Published 14 Jan 2020
- [A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1485.md)
  `CVE-2019-1485` · CVE record: Microsoft Internet Explorer 10 and 4 more · No CVSS score · Not analysed yet · Published 10 Dec 2019
- [Use after free in Microsoft Internet Explorer 9 and others](https://agentprime.io/advisories/CVE-2019-1429.md)
  `CVE-2019-1429` · CVE record: Microsoft Internet Explorer 9 and 4 more · CVSS 7.5 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.77 · Not analysed yet · Published 12 Nov 2019 · Tags: Memory corruption
- [A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1390.md)
  `CVE-2019-1390` · CVE record: Microsoft Internet Explorer 9 and 4 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1371.md)
  `CVE-2019-1371` · CVE record: Microsoft Internet Explorer 9 and 4 more · No CVSS score · Not analysed yet · Published 10 Oct 2019
- [A spoofing vulnerability exists when Microsoft Browsers improperly handle browser cookies, aka 'Microsoft Browser Spoofing Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1357.md)
  `CVE-2019-1357` · CVE record: Microsoft Internet Explorer 11 and 4 more · No CVSS score · Not analysed yet · Published 10 Oct 2019
- [A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1239.md)
  `CVE-2019-1239` · CVE record: Microsoft Internet Explorer 11 · No CVSS score · Not analysed yet · Published 10 Oct 2019
- [A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1238.md)
  `CVE-2019-1238` · CVE record: Microsoft Internet Explorer 9 and 4 more · No CVSS score · Not analysed yet · Published 10 Oct 2019
- [A spoofing vulnerability exists when Microsoft Browsers does not properly parse HTTP content, aka 'Microsoft Browser Spoofing Vulnerability'.](https://agentprime.io/advisories/CVE-2019-0608.md)
  `CVE-2019-0608` · CVE record: Microsoft Internet Explorer 9 and 4 more · No CVSS score · Not analysed yet · Published 10 Oct 2019
- [Out-of-bounds write in Microsoft Internet Explorer 9 and others](https://agentprime.io/advisories/CVE-2019-1367.md)
  `CVE-2019-1367` · CVE record: Microsoft Internet Explorer 9 and 4 more · CVSS 7.5 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 0.52 · Not analysed yet · Published 23 Sept 2019 · Tags: Memory corruption
- [A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1236.md)
  `CVE-2019-1236` · CVE record: Microsoft Internet Explorer 9 and 4 more · No CVSS score · Not analysed yet · Published 11 Sept 2019
- [A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1221.md)
  `CVE-2019-1221` · CVE record: Microsoft Internet Explorer 11 and 4 more · No CVSS score · EPSS 0.19 · Not analysed yet · Published 11 Sept 2019
- [A security feature bypass vulnerability exists when Microsoft Browsers fail to validate the correct Security Zone of requests for specific URLs, aka 'Microsoft Browser Security Feature Bypass Vulnera…](https://agentprime.io/advisories/CVE-2019-1220.md)
  `CVE-2019-1220` · CVE record: Microsoft Internet Explorer 9 and 4 more · No CVSS score · Not analysed yet · Published 11 Sept 2019
- [A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1208.md)
  `CVE-2019-1208` · CVE record: Microsoft Internet Explorer 9 and 4 more · No CVSS score · EPSS 0.13 · Not analysed yet · Published 11 Sept 2019
- [Scripting Engine Memory Corruption Vulnerability](https://agentprime.io/advisories/CVE-2019-1194.md)
  `CVE-2019-1194` · CVE record: Microsoft Internet Explorer 10 and 2 more · CVSS 7.5 High · Not analysed yet · Published 14 Aug 2019 · Tags: Code injection
- [Microsoft Browser Memory Corruption Vulnerability](https://agentprime.io/advisories/CVE-2019-1193.md)
  `CVE-2019-1193` · CVE record: Microsoft Internet Explorer 10 and 2 more · CVSS 6.4 Medium · Not analysed yet · Published 14 Aug 2019 · Tags: Memory corruption
- [Microsoft Browsers Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2019-1192.md)
  `CVE-2019-1192` · CVE record: Microsoft Internet Explorer 10 and 2 more · CVSS 4.3 Medium · Not analysed yet · Published 14 Aug 2019
- [Scripting Engine Memory Corruption Vulnerability](https://agentprime.io/advisories/CVE-2019-1133.md)
  `CVE-2019-1133` · CVE record: Microsoft Internet Explorer 10 and 2 more · CVSS 7.5 High · Not analysed yet · Published 14 Aug 2019
- [A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corruption Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1104.md)
  `CVE-2019-1104` · CVE record: Microsoft Internet Explorer 9 and 4 more · No CVSS score · Not analysed yet · Published 29 Jul 2019
- [A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1063.md)
  `CVE-2019-1063` · CVE record: Microsoft Internet Explorer 9 and 4 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1059.md)
  `CVE-2019-1059` · CVE record: Microsoft Internet Explorer 9 and 4 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1056.md)
  `CVE-2019-1056` · CVE record: Microsoft Internet Explorer 11 and 4 more · No CVSS score · Not analysed yet · Published 15 Jul 2019

Older: <https://agentprime.io/advisories/technology/microsoft-internet-explorer-11.md?cursor=WyIyMDE5LTA3LTE1VDE4OjU2OjIwLjAwMDAwMFoiLCJDVkUtMjAxOS0xMDU2Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-internet-explorer-11>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-internet-explorer-11/>. Everything for agents: <https://agentprime.io/llms.txt>.