# Microsoft Internet Explorer 9.

Every CVE that names Microsoft Internet Explorer 9 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Scripting Engine Memory Corruption Vulnerability](https://agentprime.io/advisories/CVE-2021-26419.md)
  `CVE-2021-26419` · CVE record: Microsoft Internet Explorer 11 and 1 more · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.23 · Not analysed yet · Published 11 May 2021
- [Internet Explorer Memory Corruption Vulnerability](https://agentprime.io/advisories/CVE-2021-26411.md)
  `CVE-2021-26411` · CVE record: Microsoft Internet Explorer 11 and 2 more · CVSS 8.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 0.82 · Not analysed yet · Published 11 Mar 2021 · Tags: Memory corruption
- [Microsoft Browser Memory Corruption Vulnerability](https://agentprime.io/advisories/CVE-2020-0878.md)
  `CVE-2020-0878` · CVE record: Microsoft ChakraCore and 3 more · CVSS 4.2 Medium · Critical (KEV) · In CISA KEV, ransomware · Not analysed yet · Published 11 Sept 2020 · Tags: Memory corruption
- [Scripting Engine Memory Corruption Vulnerability](https://agentprime.io/advisories/CVE-2020-1570.md)
  `CVE-2020-1570` · CVE record: Microsoft Internet Explorer 11 and 1 more · No CVSS score · Not analysed yet · Published 17 Aug 2020
- [MSHTML Engine Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2020-1567.md)
  `CVE-2020-1567` · CVE record: Microsoft Internet Explorer 11 and 1 more · CVSS 4.2 Medium · Not analysed yet · Published 17 Aug 2020
- [A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2020-1403.md)
  `CVE-2020-1403` · CVE record: Microsoft Internet Explorer 11 on Windows 10 Version 2004 for 32-bit Systems and 4 more · No CVSS score · EPSS 0.10 · Not analysed yet · Published 14 Jul 2020
- [An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory, aka 'Internet Explorer Information Disclosure Vulnerability'.](https://agentprime.io/advisories/CVE-2020-1315.md)
  `CVE-2020-1315` · CVE record: Microsoft Internet Explorer 11 on Windows 10 Version 2004 for 32-bit Systems and 4 more · No CVSS score · Not analysed yet · Published 9 Jun 2020
- [A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2020-1260.md)
  `CVE-2020-1260` · CVE record: Microsoft Internet Explorer 9 and 4 more · No CVSS score · Not analysed yet · Published 9 Jun 2020
- [A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2020-1230.md)
  `CVE-2020-1230` · CVE record: Microsoft Internet Explorer 9 and 4 more · No CVSS score · Not analysed yet · Published 9 Jun 2020
- [A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2020-1216.md)
  `CVE-2020-1216` · CVE record: Microsoft Internet Explorer 11 on Windows 10 Version 2004 for 32-bit Systems and 4 more · No CVSS score · Not analysed yet · Published 9 Jun 2020
- [A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2020-1215.md)
  `CVE-2020-1215` · CVE record: Microsoft Internet Explorer 9 and 4 more · No CVSS score · Not analysed yet · Published 9 Jun 2020
- [A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2020-1214.md)
  `CVE-2020-1214` · CVE record: Microsoft Internet Explorer 11 on Windows 10 Version 2004 for x64-based Systems and 4 more · No CVSS score · Not analysed yet · Published 9 Jun 2020
- [A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2020-1213.md)
  `CVE-2020-1213` · CVE record: Microsoft Internet Explorer 11 on Windows 10 Version 2004 for x64-based Systems and 4 more · No CVSS score · Not analysed yet · Published 9 Jun 2020
- [VBScript Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2020-1093.md)
  `CVE-2020-1093` · CVE record: Microsoft Internet Explorer 11 and 1 more · CVSS 7.5 High · Not analysed yet · Published 21 May 2020
- [Internet Explorer Memory Corruption Vulnerability](https://agentprime.io/advisories/CVE-2020-1092.md)
  `CVE-2020-1092` · CVE record: Microsoft Internet Explorer 11 and 1 more · CVSS 7.5 High · Not analysed yet · Published 21 May 2020
- [MSHTML Engine Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2020-1064.md)
  `CVE-2020-1064` · CVE record: Microsoft Internet Explorer 11 and 1 more · CVSS 7.5 High · Not analysed yet · Published 21 May 2020
- [Internet Explorer Memory Corruption Vulnerability](https://agentprime.io/advisories/CVE-2020-1062.md)
  `CVE-2020-1062` · CVE record: Microsoft Internet Explorer 11 and 1 more · CVSS 7.5 High · Not analysed yet · Published 21 May 2020
- [VBScript Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2020-1060.md)
  `CVE-2020-1060` · CVE record: Microsoft Internet Explorer 11 and 1 more · CVSS 7.5 High · Not analysed yet · Published 21 May 2020
- [VBScript Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2020-1058.md)
  `CVE-2020-1058` · CVE record: Microsoft Internet Explorer 11 and 1 more · CVSS 7.5 High · Not analysed yet · Published 21 May 2020
- [VBScript Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2020-1035.md)
  `CVE-2020-1035` · CVE record: Microsoft Internet Explorer 11 and 1 more · CVSS 7.5 High · Not analysed yet · Published 21 May 2020
- [Out-of-bounds write in Microsoft Internet Explorer 9 and others](https://agentprime.io/advisories/CVE-2020-0968.md)
  `CVE-2020-0968` · CVE record: Microsoft Internet Explorer 9 and 4 more · CVSS 7.5 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 0.31 · Not analysed yet · Published 15 Apr 2020 · Tags: Memory corruption
- [A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2020-0967.md)
  `CVE-2020-0967` · CVE record: Microsoft Internet Explorer 9 and 4 more · No CVSS score · EPSS 0.12 · Not analysed yet · Published 15 Apr 2020
- [A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2020-0966.md)
  `CVE-2020-0966` · CVE record: Microsoft Internet Explorer 9 and 4 more · No CVSS score · EPSS 0.12 · Not analysed yet · Published 15 Apr 2020
- [A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2020-0895.md)
  `CVE-2020-0895` · CVE record: Microsoft Internet Explorer 9 and 4 more · No CVSS score · Not analysed yet · Published 15 Apr 2020
- [A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2020-0847.md)
  `CVE-2020-0847` · CVE record: Microsoft Internet Explorer 9 and 4 more · No CVSS score · Not analysed yet · Published 12 Mar 2020
- [Use after free in Microsoft Internet Explorer 10 and others](https://agentprime.io/advisories/CVE-2020-0674.md)
  `CVE-2020-0674` · CVE record: Microsoft Internet Explorer 10 and 4 more · CVSS 7.5 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.87 · Not analysed yet · Published 11 Feb 2020 · Tags: Memory corruption
- [A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'.](https://agentprime.io/advisories/CVE-2020-0673.md)
  `CVE-2020-0673` · CVE record: Microsoft Internet Explorer 10 and 4 more · No CVSS score · Not analysed yet · Published 11 Feb 2020
- [A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'.](https://agentprime.io/advisories/CVE-2020-0640.md)
  `CVE-2020-0640` · CVE record: Microsoft Internet Explorer 10 and 4 more · No CVSS score · Not analysed yet · Published 14 Jan 2020
- [A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1485.md)
  `CVE-2019-1485` · CVE record: Microsoft Internet Explorer 10 and 4 more · No CVSS score · Not analysed yet · Published 10 Dec 2019
- [Use after free in Microsoft Internet Explorer 9 and others](https://agentprime.io/advisories/CVE-2019-1429.md)
  `CVE-2019-1429` · CVE record: Microsoft Internet Explorer 9 and 4 more · CVSS 7.5 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.77 · Not analysed yet · Published 12 Nov 2019 · Tags: Memory corruption
- [A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1390.md)
  `CVE-2019-1390` · CVE record: Microsoft Internet Explorer 9 and 4 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1371.md)
  `CVE-2019-1371` · CVE record: Microsoft Internet Explorer 9 and 4 more · No CVSS score · Not analysed yet · Published 10 Oct 2019
- [A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1238.md)
  `CVE-2019-1238` · CVE record: Microsoft Internet Explorer 9 and 4 more · No CVSS score · Not analysed yet · Published 10 Oct 2019
- [A spoofing vulnerability exists when Microsoft Browsers does not properly parse HTTP content, aka 'Microsoft Browser Spoofing Vulnerability'.](https://agentprime.io/advisories/CVE-2019-0608.md)
  `CVE-2019-0608` · CVE record: Microsoft Internet Explorer 9 and 4 more · No CVSS score · Not analysed yet · Published 10 Oct 2019
- [Out-of-bounds write in Microsoft Internet Explorer 9 and others](https://agentprime.io/advisories/CVE-2019-1367.md)
  `CVE-2019-1367` · CVE record: Microsoft Internet Explorer 9 and 4 more · CVSS 7.5 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 0.52 · Not analysed yet · Published 23 Sept 2019 · Tags: Memory corruption
- [A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1236.md)
  `CVE-2019-1236` · CVE record: Microsoft Internet Explorer 9 and 4 more · No CVSS score · Not analysed yet · Published 11 Sept 2019
- [A security feature bypass vulnerability exists when Microsoft Browsers fail to validate the correct Security Zone of requests for specific URLs, aka 'Microsoft Browser Security Feature Bypass Vulnera…](https://agentprime.io/advisories/CVE-2019-1220.md)
  `CVE-2019-1220` · CVE record: Microsoft Internet Explorer 9 and 4 more · No CVSS score · Not analysed yet · Published 11 Sept 2019
- [A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1208.md)
  `CVE-2019-1208` · CVE record: Microsoft Internet Explorer 9 and 4 more · No CVSS score · EPSS 0.13 · Not analysed yet · Published 11 Sept 2019
- [Scripting Engine Memory Corruption Vulnerability](https://agentprime.io/advisories/CVE-2019-1194.md)
  `CVE-2019-1194` · CVE record: Microsoft Internet Explorer 10 and 2 more · CVSS 7.5 High · Not analysed yet · Published 14 Aug 2019 · Tags: Code injection
- [Scripting Engine Memory Corruption Vulnerability](https://agentprime.io/advisories/CVE-2019-1133.md)
  `CVE-2019-1133` · CVE record: Microsoft Internet Explorer 10 and 2 more · CVSS 7.5 High · Not analysed yet · Published 14 Aug 2019
- [A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corruption Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1104.md)
  `CVE-2019-1104` · CVE record: Microsoft Internet Explorer 9 and 4 more · No CVSS score · Not analysed yet · Published 29 Jul 2019
- [A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1063.md)
  `CVE-2019-1063` · CVE record: Microsoft Internet Explorer 9 and 4 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1059.md)
  `CVE-2019-1059` · CVE record: Microsoft Internet Explorer 9 and 4 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1004.md)
  `CVE-2019-1004` · CVE record: Microsoft Internet Explorer 9 and 4 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [Microsoft Browser Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2019-1081.md)
  `CVE-2019-1081` · CVE record: Microsoft Microsoft Edge (EdgeHTML-based) and 3 more · CVSS 4.2 Medium · Not analysed yet · Published 12 Jun 2019
- [Scripting Engine Memory Corruption Vulnerability](https://agentprime.io/advisories/CVE-2019-1080.md)
  `CVE-2019-1080` · CVE record: Microsoft Internet Explorer 10 and 2 more · CVSS 7.5 High · Not analysed yet · Published 12 Jun 2019
- [Scripting Engine Memory Corruption Vulnerability](https://agentprime.io/advisories/CVE-2019-1055.md)
  `CVE-2019-1055` · CVE record: Microsoft Internet Explorer 10 and 2 more · CVSS 7.5 High · Not analysed yet · Published 12 Jun 2019
- [Scripting Engine Memory Corruption Vulnerability](https://agentprime.io/advisories/CVE-2019-1005.md)
  `CVE-2019-1005` · CVE record: Microsoft Internet Explorer 10 and 2 more · CVSS 7.5 High · Not analysed yet · Published 12 Jun 2019
- [Scripting Engine Memory Corruption Vulnerability](https://agentprime.io/advisories/CVE-2019-0920.md)
  `CVE-2019-0920` · CVE record: Microsoft Internet Explorer 11 and 2 more · CVSS 4.3 Medium · Not analysed yet · Published 12 Jun 2019
- [An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory, aka 'Internet Explorer Information Disclosure Vulnerability'.](https://agentprime.io/advisories/CVE-2019-0930.md)
  `CVE-2019-0930` · CVE record: Microsoft Internet Explorer 9 and 4 more · No CVSS score · Not analysed yet · Published 16 May 2019
- [An spoofing vulnerability exists when Internet Explorer improperly handles URLs, aka 'Internet Explorer Spoofing Vulnerability'.](https://agentprime.io/advisories/CVE-2019-0921.md)
  `CVE-2019-0921` · CVE record: Microsoft Internet Explorer 9 and 4 more · No CVSS score · Not analysed yet · Published 16 May 2019
- [A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'.](https://agentprime.io/advisories/CVE-2019-0918.md)
  `CVE-2019-0918` · CVE record: Microsoft Internet Explorer 9 and 4 more · No CVSS score · Not analysed yet · Published 16 May 2019
- [A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'.](https://agentprime.io/advisories/CVE-2019-0884.md)
  `CVE-2019-0884` · CVE record: Microsoft Internet Explorer 9 and 4 more · No CVSS score · Not analysed yet · Published 16 May 2019
- [A tampering vulnerability exists when Microsoft browsers do not properly validate input under specific conditions, aka 'Microsoft Browsers Tampering Vulnerability'.](https://agentprime.io/advisories/CVE-2019-0764.md)
  `CVE-2019-0764` · CVE record: Microsoft Internet Explorer 9 and 3 more · No CVSS score · Not analysed yet · Published 9 Apr 2019
- [A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2019-0667.md)
  `CVE-2019-0667` · CVE record: Microsoft Internet Explorer 9 and 2 more · No CVSS score · EPSS 0.31 · Not analysed yet · Published 8 Apr 2019
- [A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2019-0666.md)
  `CVE-2019-0666` · CVE record: Microsoft Internet Explorer 9 and 2 more · No CVSS score · EPSS 0.20 · Not analysed yet · Published 8 Apr 2019
- [A spoofing vulnerability exists when Microsoft browsers improperly handles specific redirects, aka 'Microsoft Browser Spoofing Vulnerability'.](https://agentprime.io/advisories/CVE-2019-0654.md)
  `CVE-2019-0654` · CVE record: Microsoft Internet Explorer 9 and 3 more · No CVSS score · Not analysed yet · Published 6 Mar 2019
- [Command injection in Microsoft Office and others](https://agentprime.io/advisories/CVE-2019-0541.md)
  `CVE-2019-0541` · CVE record: Microsoft Microsoft Office and 4 more · CVSS 8.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.53 · Not analysed yet · Published 8 Jan 2019 · Tags: Command injection
- [Out-of-bounds write in Microsoft Internet Explorer 9 and others](https://agentprime.io/advisories/CVE-2018-8653.md)
  `CVE-2018-8653` · CVE record: Microsoft Internet Explorer 9 and 2 more · CVSS 7.5 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.30 · Not analysed yet · Published 20 Dec 2018 · Tags: Memory corruption
- [Microsoft Internet Explorer 9: A remote code execution vulnerability exists in the way that the scripting engine handles…](https://agentprime.io/advisories/CVE-2018-8643.md)
  `CVE-2018-8643` · CVE record: Microsoft Internet Explorer 9 and 2 more · No CVSS score · Not analysed yet · Published 12 Dec 2018

Older: <https://agentprime.io/advisories/technology/microsoft-internet-explorer-9.md?cursor=WyIyMDE4LTEyLTEyVDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAxOC04NjQzIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-internet-explorer-9>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-internet-explorer-9/>. Everything for agents: <https://agentprime.io/llms.txt>.