Internet Explorer vulnerabilitiesAnd the versions its exploited flaws hit.
Internet Explorer is made by Microsoft. We track 1,742 published vulnerabilities in it, across 83 versions. 43 of them are on the list of flaws known to be exploited, the newest added on 20 May 2026. If you run Internet Explorer, check your version against the exploited flaws below and patch those first.
The most recent Internet Explorer flaw added to the known-exploited list is CVE-2010-0249, on 20 May 2026. We keep watching the known-exploited list.
Which versions of Internet Explorer do the exploited flaws hit?
Each exploited flaw lists the versions it affects, as published by the vendor. Find your version, then patch.
- CVE-2010-0249Exploited list, 20 May 2026
Microsoft Internet Explorer Use-After-Free Vulnerability
5.0.1-sp466-sp17.08 - CVE-2010-0806Exploited list, 20 May 2026
Microsoft Internet Explorer Use-After-Free Vulnerability
5.0166-sp178 - CVE-2010-3962Exploited list, 6 Oct 2025
Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability
678 - CVE-2013-3893Exploited list, 12 Aug 2025
Microsoft Internet Explorer Resource Management Errors Vulnerability
67891011-developer-preview11-release-preview - CVE-2012-4792Exploited list, 23 Jul 2024
Microsoft Internet Explorer Use-After-Free Vulnerability
678 - CVE-2013-3163Exploited list, 30 Mar 2023
Microsoft Internet Explorer Memory Corruption Vulnerability
8910 - CVE-2012-4969Exploited list, 8 Jun 2022
Microsoft Internet Explorer Use-After-Free Vulnerability
6789 - CVE-2015-0071Exploited list, 25 May 2022
Microsoft Internet Explorer ASLR Bypass Vulnerability
91011 - CVE-2014-2817Exploited list, 25 May 2022
Microsoft Internet Explorer Privilege Escalation Vulnerability
67891011 - CVE-2014-4123Exploited list, 25 May 2022
Microsoft Internet Explorer Privilege Escalation Vulnerability
7891011 - CVE-2015-2425Exploited list, 25 May 2022
Microsoft Internet Explorer Memory Corruption Vulnerability
11 - CVE-2013-7331Exploited list, 25 May 2022
Microsoft Internet Explorer Information Disclosure Vulnerability
67891011 - CVE-2016-3298Exploited list, 24 May 2022
Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability
91011 - CVE-2016-0162Exploited list, 24 May 2022
Microsoft Internet Explorer Information Disclosure Vulnerability
91011 - CVE-2017-0210Exploited list, 24 May 2022
Microsoft Internet Explorer Privilege Escalation Vulnerability
1011 - CVE-2017-0149Exploited list, 24 May 2022
Microsoft Internet Explorer Memory Corruption Vulnerability
91011 - CVE-2016-3351Exploited list, 24 May 2022
Microsoft Internet Explorer and Edge Information Disclosure Vulnerability
91011 - CVE-2019-0676Exploited list, 23 May 2022
Microsoft Internet Explorer Information Disclosure Vulnerability
1011 - CVE-2014-0322Exploited list, 4 May 2022
Microsoft Internet Explorer Use-After-Free Vulnerability
910 - CVE-2015-0311Exploited list, 13 Apr 2022
Adobe Flash Player Remote Code Execution Vulnerability
1011 - CVE-2015-0313Exploited list, 13 Apr 2022
Adobe Flash Player Use-After-Free Vulnerability
1011 - CVE-2015-2502Exploited list, 13 Apr 2022
Microsoft Internet Explorer Memory Corruption Vulnerability
7891011 - CVE-2015-2419Exploited list, 28 Mar 2022
Microsoft Internet Explorer Memory Corruption Vulnerability
1011 - CVE-2017-0037Exploited list, 28 Mar 2022
Microsoft Edge and Internet Explorer Type Confusion Vulnerability
11 - CVE-2017-0059Exploited list, 28 Mar 2022
Microsoft Internet Explorer Information Disclosure Vulnerability
91011 - CVE-2016-0189Exploited list, 28 Mar 2022
Microsoft Internet Explorer Memory Corruption Vulnerability
91011 - CVE-2013-2551Exploited list, 28 Mar 2022
Microsoft Internet Explorer Use-After-Free Vulnerability
678910 - CVE-2018-8373Exploited list, 25 Mar 2022
Microsoft Scripting Engine Memory Corruption Vulnerability
91011 - CVE-2013-1347Exploited list, 3 Mar 2022
Microsoft Internet Explorer Remote Code Execution Vulnerability
8 - CVE-2013-3897Exploited list, 3 Mar 2022
Microsoft Internet Explorer Use-After-Free Vulnerability
67891011
Showing the 30 most recently added of 43 exploited flaws. The full list is below.
Which Internet Explorer vulnerabilities are being exploited?
43 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 8.8Microsoft Internet Explorer Use-After-Free Vulnerability
Microsoft Internet Explorer contains an use-after-free vulnerability that could allow remote attackers to execute arbitrary code by accessing a pointer associated with a deleted object.
- 8.8Microsoft Internet Explorer Use-After-Free Vulnerability
Microsoft Internet Explorer contains an use-after-free vulnerability that could allow remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object.
- 9.3Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability
Microsoft Internet Explorer contains an uninitialized memory corruption vulnerability that could allow for remote code execution.
- 8.8Microsoft Internet Explorer Resource Management Errors Vulnerability
Microsoft Internet Explorer contains a memory corruption vulnerability that allows for remote code execution.
- 8.8Microsoft Internet Explorer Use-After-Free Vulnerability
Microsoft Internet Explorer contains a use-after-free vulnerability that allows a remote attacker to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated...
- 8.8Microsoft Internet Explorer Memory Corruption Vulnerability
Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause a denial of service via a crafted website.
- 8.1Microsoft Internet Explorer Use-After-Free Vulnerability
Microsoft Internet Explorer contains a use-after-free vulnerability that allows remote attackers to execute code via a crafted web site.
- 6.5Microsoft Internet Explorer ASLR Bypass Vulnerability
Microsoft Internet Explorer allows remote attackers to bypass the address space layout randomization (ASLR) protection mechanism via a crafted web site.
Which Internet Explorer flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 97%
Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code via vectors related to Cascading Style Sheets (CSS) token sequences and the clip attribute,...
- 88%
Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code via crafted JavaScript strings, as...
- 85%CVE-2009-0075Critical
Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to...
- 85%
Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via vectors involving crafted JavaScript code, CMarkup, and the onpropertychange attribute of a...
- 83%
Microsoft Internet Explorer 6 SP2 6.0.2900.2180 and 6.0.2800.1106, and earlier versions, allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a Javascript BODY onload event that...
- 83%
Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to the...
- 82%
Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid...
- 82%CVE-2010-3971Critical
Use-after-free vulnerability in the CSharedStyleSheet::Notify function in the Cascading Style Sheets (CSS) parser in mshtml.dll, as used in Microsoft Internet Explorer 6 through 8 and other products, allows remote...
Running Internet Explorer? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Microsoft Internet Explorer contains an use-after-free vulnerability that could allow remote attackers to execute arbitrary code by accessing a pointer associated with a deleted object. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.
- Matched to
- Internet Explorer on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
We track 1,742 published vulnerabilities listed under the name Internet Explorer, across 83 versions. The most recent Internet Explorer flaw added to the known-exploited list is CVE-2010-0249, on 20 May 2026.
43 are on the list of flaws known to be exploited. The most recently added are CVE-2010-0249, CVE-2010-0806 and CVE-2010-3962.
Each flaw names its own versions, usually as ranges. The newest, CVE-2010-0249, affects 5.0.1-sp4, 6, 6-sp1, 7.0 and more. The versions for every exploited flaw are listed on this page.
Create a Precursor Intelligence account and track Internet Explorer. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.