Advisories · Technology
Microsoft Internet Explorer 11.
Every CVE that names Microsoft Internet Explorer 11 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'.
- Microsoft Internet Explorer 9
- Microsoft Internet Explorer 11
-
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'.
- Microsoft Internet Explorer 11
- Microsoft Internet Explorer 11 on Windows Server 2012
- CVSS 4.2 Medium
Microsoft Browser Information Disclosure Vulnerability
- Microsoft Edge (EdgeHTML-based)
- Microsoft Internet Explorer 10
- CVSS 7.5 High
Scripting Engine Memory Corruption Vulnerability
- Microsoft Internet Explorer 10
- Microsoft Internet Explorer 9
- CVSS 7.5 High
Scripting Engine Memory Corruption Vulnerability
- Microsoft Internet Explorer 10
- Microsoft Internet Explorer 9
- CVSS 7.5 High
Microsoft Browser Memory Corruption Vulnerability
- Microsoft Internet Explorer 10
- Microsoft Internet Explorer 11
- CVSS 7.5 High
Scripting Engine Memory Corruption Vulnerability
- Microsoft Internet Explorer 10
- Microsoft Internet Explorer 9
- CVSS 7.5 High
Scripting Engine Memory Corruption Vulnerability
- Microsoft Internet Explorer 10
- Microsoft Internet Explorer 11
- CVSS 4.3 Medium
Scripting Engine Memory Corruption Vulnerability
- Microsoft Internet Explorer 11
- Microsoft Internet Explorer 10
-
A security feature bypass vulnerability exists when urlmon.dll improperly handles certain Mark of the Web queries, aka 'Internet Explorer Security Feature Bypass Vulnerability'.
- Microsoft Internet Explorer 11
- Microsoft Internet Explorer 11 on Windows 10 Version 1903 for 32-bit Systems
-
A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corruption Vulnerability'.
- Microsoft Internet Explorer 11
- Microsoft Internet Explorer 11 on Windows Server 2012
-
An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory, aka 'Internet Explorer Information Disclosure Vulnerability'.
- Microsoft Internet Explorer 9
- Microsoft Internet Explorer 11
-
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'.
- Microsoft Internet Explorer 11
- Microsoft Internet Explorer 11 on Windows 10 Version 1903 for 32-bit Systems
-
An spoofing vulnerability exists when Internet Explorer improperly handles URLs, aka 'Internet Explorer Spoofing Vulnerability'.
- Microsoft Internet Explorer 9
- Microsoft Internet Explorer 11
-
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'.
- Microsoft Internet Explorer 9
- Microsoft Internet Explorer 11
-
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'.
- Microsoft Internet Explorer 9
- Microsoft Internet Explorer 11
-
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'.
- Microsoft Internet Explorer 11
- Microsoft Internet Explorer 10
-
An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory, aka 'Microsoft Scripting Engine Information Disclosure Vulnerability'.
- Microsoft Internet Explorer 11
- Microsoft Internet Explorer 10
-
A tampering vulnerability exists when Microsoft browsers do not properly validate input under specific conditions, aka 'Microsoft Browsers Tampering Vulnerability'.
- Microsoft Internet Explorer 9
- Microsoft Internet Explorer 11
-
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'.
- Microsoft Internet Explorer 11
- Microsoft Internet Explorer 10
- CVSS 7.5 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware
Type confusion in Microsoft Internet Explorer 11 and others
- Microsoft Internet Explorer 11
- Microsoft Internet Explorer 10
- Memory corruption
-
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'.
- Microsoft Internet Explorer 11
- Microsoft Internet Explorer 10
-
A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corruption Vulnerability'.
- Microsoft Internet Explorer 11
- Microsoft Internet Explorer 10
-
A security feature bypass vulnerability exists when Internet Explorer fails to validate the correct Security Zone of requests for specific URLs, aka 'Internet Explorer Security Feature Bypass Vulnera…
- Microsoft Internet Explorer 11
- Microsoft Internet Explorer 10
-
A security feature bypass vulnerability exists when Microsoft browsers improperly handle requests of different origins, aka 'Microsoft Browsers Security Feature Bypass Vulnerability'.
- Microsoft Internet Explorer 11
- Microsoft Edge
-
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'.
- Microsoft Internet Explorer 11
- Microsoft Internet Explorer 10
-
A security feature bypass vulnerability exists when Internet Explorer VBScript execution policy does not properly restrict VBScript under specific conditions, and to allow requests that should otherw…
- Microsoft Internet Explorer 11
-
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'.
- Microsoft Internet Explorer 11
-
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability'.
- Microsoft Internet Explorer 9
- Microsoft Internet Explorer 11
-
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability'.
- Microsoft Internet Explorer 9
- Microsoft Internet Explorer 11
-
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability'.
- Microsoft Internet Explorer 11
- Microsoft Internet Explorer 10
- CVSS 6.5 MediumCritical · KEVKEV
An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker who successfully exploited this vulnerability could test for the presence of fil…
- Microsoft Internet Explorer 11
- Microsoft Internet Explorer 10
-
A spoofing vulnerability exists when Microsoft browsers improperly handles specific redirects, aka 'Microsoft Browser Spoofing Vulnerability'.
- Microsoft Internet Explorer 9
- Microsoft Internet Explorer 11
- CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV
Command injection in Microsoft Office and others
- Microsoft Office
- Microsoft Office Word Viewer
- Command injection
- CVSS 7.5 HighCritical · KEV, CVSS 7+ and EPSSKEV
Out-of-bounds write in Microsoft Internet Explorer 9 and others
- Microsoft Internet Explorer 9
- Microsoft Internet Explorer 11
- Memory corruption
-
Microsoft Internet Explorer 9: A remote code execution vulnerability exists in the way that the scripting engine handles…
- Microsoft Internet Explorer 9
- Microsoft Internet Explorer 11
-
Microsoft Internet Explorer 9: A remote code execution vulnerability exists when Internet Explorer improperly accesses…
- Microsoft Internet Explorer 9
- Microsoft Internet Explorer 11
-
Microsoft Internet Explorer 9: A remote code execution vulnerability exists in the way that the VBScript engine handles…
- Microsoft Internet Explorer 9
- Microsoft Internet Explorer 11
-
Microsoft Internet Explorer 9: A remote code execution vulnerability exists when the Internet Explorer VBScript…
- Microsoft Internet Explorer 9
- Microsoft Internet Explorer 11
-
Microsoft Internet Explorer 11: A remote code execution vulnerability exists when Internet Explorer improperly accesses…
- Microsoft Internet Explorer 11
-
Microsoft Internet Explorer 9: An information disclosure vulnerability exists when VBScript improperly discloses the…
- Microsoft Internet Explorer 9
- Microsoft Internet Explorer 11
-
Microsoft Internet Explorer 11: A remote code execution vulnerability exists when Internet Explorer improperly accesses…
- Microsoft Internet Explorer 11
-
Microsoft Internet Explorer 11: A remote code execution vulnerability exists when Internet Explorer improperly accesses…
- Microsoft Internet Explorer 11
-
Microsoft Internet Explorer 11: A security feature bypass vulnerability exists in Internet Explorer due to how scripts…
- Microsoft Internet Explorer 11
-
Microsoft Internet Explorer 11: A remote code execution vulnerability exists when Internet Explorer improperly accesses…
- Microsoft Internet Explorer 11
-
Microsoft Internet Explorer 11: A remote code execution vulnerability exists in the way the scripting engine handles…
- Microsoft Internet Explorer 11
- Microsoft Edge
-
Microsoft Internet Explorer 9: A remote code execution vulnerability exists when Internet Explorer improperly accesses…
- Microsoft Internet Explorer 9
- Microsoft Internet Explorer 11
-
Microsoft Internet Explorer 11: A remote code execution vulnerability exists in the way that Microsoft browsers access…
- Microsoft Internet Explorer 11
- Microsoft Edge
-
Microsoft Internet Explorer 9: A remote code execution vulnerability exists in the way that the scripting engine handles…
- Microsoft Internet Explorer 9
- Microsoft Internet Explorer 11
- CVSS 7.5 HighCritical · KEV, CVSS 7+ and EPSSKEV
Out-of-bounds write in Microsoft Internet Explorer 9 and others
- Microsoft Internet Explorer 9
- Microsoft Internet Explorer 11
- Memory corruption
-
Microsoft Internet Explorer 11: An elevation of privilege vulnerability exists in Microsoft browsers allowing sandbox…
- Microsoft Internet Explorer 11
- Microsoft Edge
-
Microsoft Internet Explorer 11: An information disclosure vulnerability exists when affected Microsoft browsers…
- Microsoft Internet Explorer 11
- Microsoft Edge
-
Microsoft Internet Explorer 11: A remote code execution vulnerability exists when Internet Explorer improperly validates…
- Microsoft Internet Explorer 11
- Microsoft Internet Explorer 10
-
Microsoft Internet Explorer 11: A remote code execution vulnerability exists in the way that the scripting engine handles…
- Microsoft Internet Explorer 11
-
Microsoft Internet Explorer 9: A remote code execution vulnerability exists in the way that the scripting engine handles…
- Microsoft Internet Explorer 9
- Microsoft Internet Explorer 11
-
Microsoft Internet Explorer 9: A security feature bypass vulnerability exists when Microsoft Internet Explorer…
- Microsoft Internet Explorer 9
- Microsoft Internet Explorer 11
-
Microsoft Internet Explorer 9: A remote code execution vulnerability exists in the way that the scripting engine handles…
- Microsoft Internet Explorer 9
- Microsoft Internet Explorer 11
-
Microsoft Internet Explorer 11: A remote code execution vulnerability exists when Internet Explorer improperly accesses…
- Microsoft Internet Explorer 11
-
Microsoft Internet Explorer 11: A security feature bypass vulnerability exists in Internet Explorer that allows for…
- Microsoft Internet Explorer 11
-
Microsoft Internet Explorer 9: A remote code execution vulnerability exists when Internet Explorer improperly accesses…
- Microsoft Internet Explorer 9
- Microsoft Internet Explorer 11