[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fMWTRlnjjCrlvfjKs8RaqmwltKQ_dymwBNLlARmAZ4Nw":3,"g5a-family:microsoft\u002Finternet_explorer":660,"g5a-ex:microsoft\u002Finternet_explorer@*":661},{"success":4,"data":5},true,{"product":6,"versions":218,"topVulnerabilitiesByEpss":302,"kevVulnerabilities":363,"seoMetadata":639,"meta":658},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":217},"microsoft","internet_explorer",83,1742,41,"2021-08-31",[14,18,22,27,30,33,36,39,42,45,48,51,54,56,58,60,62,64,66,68,70,73,75,77,79,82,85,87,89,91,93,95,97,99,101,103,105,107,109,111,113,115,117,120,123,126,128,131,133,135,138,140,142,144,146,149,152,154,156,158,160,162,164,166,168,170,172,175,178,181,183,185,188,191,193,195,197,200,203,206,208,211,213],{"version":15,"cve_count":16,"kev_count":17,"has_kev":4},"10",659,29,{"version":19,"cve_count":20,"kev_count":21,"has_kev":4},"11",763,34,{"version":23,"cve_count":24,"kev_count":25,"has_kev":26},"3.0",20,0,false,{"version":28,"cve_count":29,"kev_count":25,"has_kev":26},"3.0.1",11,{"version":31,"cve_count":32,"kev_count":25,"has_kev":26},"3.0.2",13,{"version":34,"cve_count":35,"kev_count":25,"has_kev":26},"3.1",10,{"version":37,"cve_count":38,"kev_count":25,"has_kev":26},"3.2",12,{"version":40,"cve_count":41,"kev_count":25,"has_kev":26},"4.0",53,{"version":43,"cve_count":44,"kev_count":25,"has_kev":26},"4.0.1",32,{"version":46,"cve_count":47,"kev_count":25,"has_kev":26},"4.01",9,{"version":49,"cve_count":50,"kev_count":25,"has_kev":26},"4.1",14,{"version":52,"cve_count":53,"kev_count":25,"has_kev":26},"4.40.308",8,{"version":55,"cve_count":53,"kev_count":25,"has_kev":26},"4.40.520",{"version":57,"cve_count":29,"kev_count":25,"has_kev":26},"4.5",{"version":59,"cve_count":53,"kev_count":25,"has_kev":26},"4.70.1155",{"version":61,"cve_count":53,"kev_count":25,"has_kev":26},"4.70.1158",{"version":63,"cve_count":53,"kev_count":25,"has_kev":26},"4.70.1215",{"version":65,"cve_count":53,"kev_count":25,"has_kev":26},"4.70.1300",{"version":67,"cve_count":53,"kev_count":25,"has_kev":26},"4.71.1008.3",{"version":69,"cve_count":53,"kev_count":25,"has_kev":26},"4.71.1712.6",{"version":71,"cve_count":72,"kev_count":25,"has_kev":26},"4.71.544",7,{"version":74,"cve_count":53,"kev_count":25,"has_kev":26},"4.72.2106.8",{"version":76,"cve_count":53,"kev_count":25,"has_kev":26},"4.72.3110.8",{"version":78,"cve_count":53,"kev_count":25,"has_kev":26},"4.72.3612.1713",{"version":80,"cve_count":81,"kev_count":25,"has_kev":26},"5",26,{"version":83,"cve_count":84,"kev_count":25,"has_kev":26},"5.0",72,{"version":86,"cve_count":53,"kev_count":25,"has_kev":26},"5.00.0518.10",{"version":88,"cve_count":53,"kev_count":25,"has_kev":26},"5.00.0910.1309",{"version":90,"cve_count":53,"kev_count":25,"has_kev":26},"5.00.2014.0216",{"version":92,"cve_count":72,"kev_count":25,"has_kev":26},"5.00.2314.1003",{"version":94,"cve_count":53,"kev_count":25,"has_kev":26},"5.00.2516.1900",{"version":96,"cve_count":35,"kev_count":25,"has_kev":26},"5.00.2614.3500",{"version":98,"cve_count":47,"kev_count":25,"has_kev":26},"5.00.2919.3800",{"version":100,"cve_count":35,"kev_count":25,"has_kev":26},"5.00.2919.6307",{"version":102,"cve_count":35,"kev_count":25,"has_kev":26},"5.00.2919.800",{"version":104,"cve_count":35,"kev_count":25,"has_kev":26},"5.00.2920.0000",{"version":106,"cve_count":35,"kev_count":25,"has_kev":26},"5.00.3103.1000",{"version":108,"cve_count":35,"kev_count":25,"has_kev":26},"5.00.3105.0106",{"version":110,"cve_count":35,"kev_count":25,"has_kev":26},"5.00.3314.2101",{"version":112,"cve_count":35,"kev_count":25,"has_kev":26},"5.00.3315.1000",{"version":114,"cve_count":35,"kev_count":25,"has_kev":26},"5.00.3502.1000",{"version":116,"cve_count":35,"kev_count":25,"has_kev":26},"5.00.3700.1000",{"version":118,"cve_count":119,"kev_count":25,"has_kev":26},"5.0.1",76,{"version":121,"cve_count":122,"kev_count":25,"has_kev":26},"5.01",137,{"version":124,"cve_count":125,"kev_count":25,"has_kev":26},"5.1",21,{"version":127,"cve_count":38,"kev_count":25,"has_kev":26},"5.2.3",{"version":129,"cve_count":130,"kev_count":25,"has_kev":26},"5.5",155,{"version":132,"cve_count":53,"kev_count":25,"has_kev":26},"5.50.3825.1300",{"version":134,"cve_count":53,"kev_count":25,"has_kev":26},"5.50.4030.2400",{"version":136,"cve_count":137,"kev_count":25,"has_kev":26},"5.50.4134.0100",6,{"version":139,"cve_count":53,"kev_count":25,"has_kev":26},"5.50.4134.0600",{"version":141,"cve_count":53,"kev_count":25,"has_kev":26},"5.50.4308.2900",{"version":143,"cve_count":53,"kev_count":25,"has_kev":26},"5.50.4522.1800",{"version":145,"cve_count":53,"kev_count":25,"has_kev":26},"5.50.4807.2300",{"version":147,"cve_count":148,"kev_count":47,"has_kev":4},"6",409,{"version":150,"cve_count":151,"kev_count":25,"has_kev":26},"6.0",202,{"version":153,"cve_count":32,"kev_count":25,"has_kev":26},"6.00.2462.0000",{"version":155,"cve_count":32,"kev_count":25,"has_kev":26},"6.00.2479.0006",{"version":157,"cve_count":29,"kev_count":25,"has_kev":26},"6.00.2600.0000",{"version":159,"cve_count":38,"kev_count":25,"has_kev":26},"6.00.2800.1106",{"version":161,"cve_count":38,"kev_count":25,"has_kev":26},"6.00.2900.2180",{"version":163,"cve_count":38,"kev_count":25,"has_kev":26},"6.00.3663.0000",{"version":165,"cve_count":35,"kev_count":25,"has_kev":26},"6.00.3718.0000",{"version":167,"cve_count":38,"kev_count":25,"has_kev":26},"6.00.3790.0000",{"version":169,"cve_count":38,"kev_count":25,"has_kev":26},"6.00.3790.1830",{"version":171,"cve_count":38,"kev_count":25,"has_kev":26},"6.00.3790.3959",{"version":173,"cve_count":174,"kev_count":25,"has_kev":26},"6.0.2600",25,{"version":176,"cve_count":177,"kev_count":25,"has_kev":26},"6.0.2800",24,{"version":179,"cve_count":180,"kev_count":25,"has_kev":26},"6.0.2800.1106",27,{"version":182,"cve_count":21,"kev_count":25,"has_kev":26},"6.0.2900",{"version":184,"cve_count":81,"kev_count":25,"has_kev":26},"6.0.2900.2180",{"version":186,"cve_count":187,"kev_count":29,"has_kev":4},"7",428,{"version":189,"cve_count":190,"kev_count":25,"has_kev":26},"7.0",56,{"version":192,"cve_count":32,"kev_count":25,"has_kev":26},"7.00.5730.1100",{"version":194,"cve_count":32,"kev_count":25,"has_kev":26},"7.00.6000.16386",{"version":196,"cve_count":32,"kev_count":25,"has_kev":26},"7.00.6000.16441",{"version":198,"cve_count":199,"kev_count":25,"has_kev":26},"7.0.5730",15,{"version":201,"cve_count":202,"kev_count":25,"has_kev":26},"7.0.5730.11",19,{"version":204,"cve_count":205,"kev_count":32,"has_kev":4},"8",451,{"version":207,"cve_count":50,"kev_count":25,"has_kev":26},"8.0.6001",{"version":209,"cve_count":210,"kev_count":25,"has_kev":26},"8.0.7100.0",1,{"version":212,"cve_count":210,"kev_count":25,"has_kev":26},"8.0b",{"version":214,"cve_count":215,"kev_count":216,"has_kev":4},"9",638,28,"Internet Explorer by Microsoft is a technology product with 83 tracked versions and 1742 known security vulnerabilities including 41 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301],{"version":15,"cve_count":16,"kev_count":17,"has_kev":4},{"version":19,"cve_count":20,"kev_count":21,"has_kev":4},{"version":23,"cve_count":24,"kev_count":25,"has_kev":26},{"version":28,"cve_count":29,"kev_count":25,"has_kev":26},{"version":31,"cve_count":32,"kev_count":25,"has_kev":26},{"version":34,"cve_count":35,"kev_count":25,"has_kev":26},{"version":37,"cve_count":38,"kev_count":25,"has_kev":26},{"version":40,"cve_count":41,"kev_count":25,"has_kev":26},{"version":43,"cve_count":44,"kev_count":25,"has_kev":26},{"version":46,"cve_count":47,"kev_count":25,"has_kev":26},{"version":49,"cve_count":50,"kev_count":25,"has_kev":26},{"version":52,"cve_count":53,"kev_count":25,"has_kev":26},{"version":55,"cve_count":53,"kev_count":25,"has_kev":26},{"version":57,"cve_count":29,"kev_count":25,"has_kev":26},{"version":59,"cve_count":53,"kev_count":25,"has_kev":26},{"version":61,"cve_count":53,"kev_count":25,"has_kev":26},{"version":63,"cve_count":53,"kev_count":25,"has_kev":26},{"version":65,"cve_count":53,"kev_count":25,"has_kev":26},{"version":67,"cve_count":53,"kev_count":25,"has_kev":26},{"version":69,"cve_count":53,"kev_count":25,"has_kev":26},{"version":71,"cve_count":72,"kev_count":25,"has_kev":26},{"version":74,"cve_count":53,"kev_count":25,"has_kev":26},{"version":76,"cve_count":53,"kev_count":25,"has_kev":26},{"version":78,"cve_count":53,"kev_count":25,"has_kev":26},{"version":80,"cve_count":81,"kev_count":25,"has_kev":26},{"version":83,"cve_count":84,"kev_count":25,"has_kev":26},{"version":86,"cve_count":53,"kev_count":25,"has_kev":26},{"version":88,"cve_count":53,"kev_count":25,"has_kev":26},{"version":90,"cve_count":53,"kev_count":25,"has_kev":26},{"version":92,"cve_count":72,"kev_count":25,"has_kev":26},{"version":94,"cve_count":53,"kev_count":25,"has_kev":26},{"version":96,"cve_count":35,"kev_count":25,"has_kev":26},{"version":98,"cve_count":47,"kev_count":25,"has_kev":26},{"version":100,"cve_count":35,"kev_count":25,"has_kev":26},{"version":102,"cve_count":35,"kev_count":25,"has_kev":26},{"version":104,"cve_count":35,"kev_count":25,"has_kev":26},{"version":106,"cve_count":35,"kev_count":25,"has_kev":26},{"version":108,"cve_count":35,"kev_count":25,"has_kev":26},{"version":110,"cve_count":35,"kev_count":25,"has_kev":26},{"version":112,"cve_count":35,"kev_count":25,"has_kev":26},{"version":114,"cve_count":35,"kev_count":25,"has_kev":26},{"version":116,"cve_count":35,"kev_count":25,"has_kev":26},{"version":118,"cve_count":119,"kev_count":25,"has_kev":26},{"version":121,"cve_count":122,"kev_count":25,"has_kev":26},{"version":124,"cve_count":125,"kev_count":25,"has_kev":26},{"version":127,"cve_count":38,"kev_count":25,"has_kev":26},{"version":129,"cve_count":130,"kev_count":25,"has_kev":26},{"version":132,"cve_count":53,"kev_count":25,"has_kev":26},{"version":134,"cve_count":53,"kev_count":25,"has_kev":26},{"version":136,"cve_count":137,"kev_count":25,"has_kev":26},{"version":139,"cve_count":53,"kev_count":25,"has_kev":26},{"version":141,"cve_count":53,"kev_count":25,"has_kev":26},{"version":143,"cve_count":53,"kev_count":25,"has_kev":26},{"version":145,"cve_count":53,"kev_count":25,"has_kev":26},{"version":147,"cve_count":148,"kev_count":47,"has_kev":4},{"version":150,"cve_count":151,"kev_count":25,"has_kev":26},{"version":153,"cve_count":32,"kev_count":25,"has_kev":26},{"version":155,"cve_count":32,"kev_count":25,"has_kev":26},{"version":157,"cve_count":29,"kev_count":25,"has_kev":26},{"version":159,"cve_count":38,"kev_count":25,"has_kev":26},{"version":161,"cve_count":38,"kev_count":25,"has_kev":26},{"version":163,"cve_count":38,"kev_count":25,"has_kev":26},{"version":165,"cve_count":35,"kev_count":25,"has_kev":26},{"version":167,"cve_count":38,"kev_count":25,"has_kev":26},{"version":169,"cve_count":38,"kev_count":25,"has_kev":26},{"version":171,"cve_count":38,"kev_count":25,"has_kev":26},{"version":173,"cve_count":174,"kev_count":25,"has_kev":26},{"version":176,"cve_count":177,"kev_count":25,"has_kev":26},{"version":179,"cve_count":180,"kev_count":25,"has_kev":26},{"version":182,"cve_count":21,"kev_count":25,"has_kev":26},{"version":184,"cve_count":81,"kev_count":25,"has_kev":26},{"version":186,"cve_count":187,"kev_count":29,"has_kev":4},{"version":189,"cve_count":190,"kev_count":25,"has_kev":26},{"version":192,"cve_count":32,"kev_count":25,"has_kev":26},{"version":194,"cve_count":32,"kev_count":25,"has_kev":26},{"version":196,"cve_count":32,"kev_count":25,"has_kev":26},{"version":198,"cve_count":199,"kev_count":25,"has_kev":26},{"version":201,"cve_count":202,"kev_count":25,"has_kev":26},{"version":204,"cve_count":205,"kev_count":32,"has_kev":4},{"version":207,"cve_count":50,"kev_count":25,"has_kev":26},{"version":209,"cve_count":210,"kev_count":25,"has_kev":26},{"version":212,"cve_count":210,"kev_count":25,"has_kev":26},{"version":214,"cve_count":215,"kev_count":216,"has_kev":4},[303,311,319,324,330,335,340,347,353,358],{"cveId":304,"description":305,"publishedDate":306,"cvssScore":307,"cvssVersion":308,"severity":309,"isKev":4,"epssScore":310},"CVE-2010-3962","Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code via vectors related to Cascading Style Sheets (CSS) token sequences and the clip attribute, aka an \"invalid flag reference\" issue or \"Uninitialized Memory Corruption Vulnerability,\" as exploited in the wild in November 2010.","2010-11-05",9.3,"v2","Critical",0.96831,{"cveId":312,"description":313,"publishedDate":314,"cvssScore":315,"cvssVersion":316,"severity":317,"isKev":4,"epssScore":318},"CVE-2010-0249","Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2008 Gold, SP2, and R2; and Windows 7 allows remote attackers to execute arbitrary code by accessing a pointer associated with a deleted object, related to incorrectly initialized memory and improper handling of objects in memory, as exploited in the wild in December 2009 and January 2010 during Operation Aurora, aka \"HTML Object Memory Corruption Vulnerability.\"","2010-01-15",8.8,"v3.1","High",0.91939,{"cveId":320,"description":321,"publishedDate":322,"cvssScore":315,"cvssVersion":316,"severity":317,"isKev":4,"epssScore":323},"CVE-2013-3893","Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code via crafted JavaScript strings, as demonstrated by use of an ms-help: URL that triggers loading of hxds.dll.","2013-09-18",0.87526,{"cveId":325,"description":326,"publishedDate":327,"cvssScore":328,"cvssVersion":308,"severity":317,"isKev":26,"epssScore":329},"CVE-2010-0483","vbscript.dll in VBScript 5.1, 5.6, 5.7, and 5.8 in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, allows user-assisted remote attackers to execute arbitrary code by referencing a (1) local pathname, (2) UNC share pathname, or (3) WebDAV server with a crafted .hlp file in the fourth argument (aka helpfile argument) to the MsgBox function, leading to code execution involving winhlp32.exe when the F1 key is pressed, aka \"VBScript Help Keypress Vulnerability.\"","2010-03-03",7.6,0.86634,{"cveId":331,"description":332,"publishedDate":333,"cvssScore":307,"cvssVersion":308,"severity":309,"isKev":26,"epssScore":334},"CVE-2009-0075","Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to CFunctionPointer and the appending of document objects, aka \"Uninitialized Memory Corruption Vulnerability.\"","2009-02-10",0.85277,{"cveId":336,"description":337,"publishedDate":338,"cvssScore":315,"cvssVersion":316,"severity":317,"isKev":4,"epssScore":339},"CVE-2014-0322","Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via vectors involving crafted JavaScript code, CMarkup, and the onpropertychange attribute of a script element, as exploited in the wild in January and February 2014.","2014-02-14",0.85122,{"cveId":341,"description":342,"publishedDate":343,"cvssScore":344,"cvssVersion":308,"severity":345,"isKev":26,"epssScore":346},"CVE-2005-1790","Microsoft Internet Explorer 6 SP2 6.0.2900.2180 and 6.0.2800.1106, and earlier versions, allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a Javascript BODY onload event that calls the window function, aka \"Mismatched Document Object Model Objects Memory Corruption Vulnerability.\"","2005-06-01",2.6,"Low",0.83472,{"cveId":348,"description":349,"publishedDate":350,"cvssScore":351,"cvssVersion":316,"severity":309,"isKev":4,"epssScore":352},"CVE-2014-1776","Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to the CMarkup::IsConnectedToPrimaryMarkup function, as exploited in the wild in April 2014.  NOTE: this issue originally emphasized VGX.DLL, but Microsoft clarified that \"VGX.DLL does not contain the vulnerable code leveraged in this exploit. Disabling VGX.DLL is an exploit-specific workaround that provides an immediate, effective workaround to help block known attacks.\"","2014-04-27",9.8,0.82682,{"cveId":354,"description":355,"publishedDate":356,"cvssScore":315,"cvssVersion":316,"severity":317,"isKev":4,"epssScore":357},"CVE-2010-0806","Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object, as exploited in the wild in March 2010, aka \"Uninitialized Memory Corruption Vulnerability.\"","2010-03-10",0.82241,{"cveId":359,"description":360,"publishedDate":361,"cvssScore":307,"cvssVersion":308,"severity":309,"isKev":26,"epssScore":362},"CVE-2010-3971","Use-after-free vulnerability in the CSharedStyleSheet::Notify function in the Cascading Style Sheets (CSS) parser in mshtml.dll, as used in Microsoft Internet Explorer 6 through 8 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a self-referential @import rule in a stylesheet, aka \"CSS Memory Corruption Vulnerability.\"","2010-12-22",0.81663,[364,369,371,375,379,387,395,404,414,421,427,433,440,448,455,461,467,474,481,484,492,499,505,511,518,523,530,536,544,552,558,565,573,576,583,590,597,603,609,615,623,628,634],{"cveId":312,"description":313,"publishedDate":314,"cvssScore":315,"severity":317,"isKev":4,"epssScore":318,"cisaVulnName":365,"cisaDateAdded":366,"cisaShortDescription":367,"cisaRequiredAction":368},"Microsoft Internet Explorer Use-After-Free Vulnerability","2026-05-20","Microsoft Internet Explorer contains an use-after-free vulnerability that could allow remote attackers to execute arbitrary code by accessing a pointer associated with a deleted object. The impacted product could be end-of-life (EoL) and\u002For end-of-service (EoS). Users should discontinue product utilization.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":354,"description":355,"publishedDate":356,"cvssScore":315,"severity":317,"isKev":4,"epssScore":357,"cisaVulnName":365,"cisaDateAdded":366,"cisaShortDescription":370,"cisaRequiredAction":368},"Microsoft Internet Explorer contains an use-after-free vulnerability that could allow remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object. The impacted product could be end-of-life (EoL) and\u002For end-of-service (EoS). Users should discontinue product utilization.",{"cveId":304,"description":305,"publishedDate":306,"cvssScore":307,"severity":309,"isKev":4,"epssScore":310,"cisaVulnName":372,"cisaDateAdded":373,"cisaShortDescription":374,"cisaRequiredAction":368},"Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability","2025-10-06","Microsoft Internet Explorer contains an uninitialized memory corruption vulnerability that could allow for remote code execution. The impacted product could be end-of-life (EoL) and\u002For end-of-service (EoS). Users should discontinue product utilization.",{"cveId":320,"description":321,"publishedDate":322,"cvssScore":315,"severity":317,"isKev":4,"epssScore":323,"cisaVulnName":376,"cisaDateAdded":377,"cisaShortDescription":378,"cisaRequiredAction":368},"Microsoft Internet Explorer Resource Management Errors Vulnerability","2025-08-12","Microsoft Internet Explorer contains a memory corruption vulnerability that allows for remote code execution. The impacted products could be end-of-life (EoL) and\u002For end-of-service (EoS). Users should discontinue product utilization.",{"cveId":380,"description":381,"publishedDate":382,"cvssScore":315,"severity":317,"isKev":4,"epssScore":383,"cisaVulnName":365,"cisaDateAdded":384,"cisaShortDescription":385,"cisaRequiredAction":386},"CVE-2012-4792","Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object, and exploited in the wild in December 2012.","2012-12-30",0.78823,"2024-07-23","Microsoft Internet Explorer contains a use-after-free vulnerability that allows a remote attacker to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object.","The impacted product is end-of-life and should be disconnected if still in use.",{"cveId":388,"description":389,"publishedDate":390,"cvssScore":315,"severity":317,"isKev":4,"epssScore":391,"cisaVulnName":392,"cisaDateAdded":393,"cisaShortDescription":394,"cisaRequiredAction":386},"CVE-2013-3163","Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3144 and CVE-2013-3151.","2013-07-10",0.70676,"Microsoft Internet Explorer Memory Corruption Vulnerability","2023-03-30","Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause a denial of service via a crafted website.",{"cveId":396,"description":397,"publishedDate":398,"cvssScore":399,"severity":317,"isKev":4,"epssScore":400,"cisaVulnName":365,"cisaDateAdded":401,"cisaShortDescription":402,"cisaRequiredAction":403},"CVE-2012-4969","Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site, as exploited in the wild in September 2012.","2012-09-18",8.1,0.8025,"2022-06-08","Microsoft Internet Explorer contains a use-after-free vulnerability that allows remote attackers to execute code via a crafted web site.","Apply updates per vendor instructions.",{"cveId":405,"description":406,"publishedDate":407,"cvssScore":408,"severity":409,"isKev":4,"epssScore":410,"cisaVulnName":411,"cisaDateAdded":412,"cisaShortDescription":413,"cisaRequiredAction":403},"CVE-2015-0071","Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka \"Internet Explorer ASLR Bypass Vulnerability.\"","2015-02-11",6.5,"Medium",0.33581,"Microsoft Internet Explorer ASLR Bypass Vulnerability","2022-05-25","Microsoft Internet Explorer allows remote attackers to bypass the address space layout randomization (ASLR) protection mechanism via a crafted web site.",{"cveId":415,"description":416,"publishedDate":417,"cvssScore":315,"severity":317,"isKev":4,"epssScore":418,"cisaVulnName":419,"cisaDateAdded":412,"cisaShortDescription":420,"cisaRequiredAction":403},"CVE-2014-2817","Microsoft Internet Explorer 6 through 11 allows remote attackers to gain privileges via a crafted web site, aka \"Internet Explorer Elevation of Privilege Vulnerability.\"","2014-08-12",0.26349,"Microsoft Internet Explorer Privilege Escalation Vulnerability","Microsoft Internet Explorer cotains an unspecified vulnerability that allows remote attackers to gain privileges via a crafted web site.",{"cveId":422,"description":423,"publishedDate":424,"cvssScore":315,"severity":317,"isKev":4,"epssScore":425,"cisaVulnName":419,"cisaDateAdded":412,"cisaShortDescription":426,"cisaRequiredAction":403},"CVE-2014-4123","Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka \"Internet Explorer Elevation of Privilege Vulnerability,\" as exploited in the wild in October 2014, a different vulnerability than CVE-2014-4124.","2014-10-15",0.47133,"Microsoft Internet Explorer contains an unspecified vulnerability that allows remote attackers to gain privileges via a crafted web site.",{"cveId":428,"description":429,"publishedDate":430,"cvssScore":315,"severity":317,"isKev":4,"epssScore":431,"cisaVulnName":392,"cisaDateAdded":412,"cisaShortDescription":432,"cisaRequiredAction":403},"CVE-2015-2425","Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2015-2383 and CVE-2015-2384.","2015-07-14",0.44727,"Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).",{"cveId":434,"description":435,"publishedDate":436,"cvssScore":408,"severity":409,"isKev":4,"epssScore":437,"cisaVulnName":438,"cisaDateAdded":412,"cisaShortDescription":439,"cisaRequiredAction":403},"CVE-2013-7331","The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the existence of local pathnames, UNC share pathnames, intranet hostnames, and intranet IP addresses by examining error codes, as demonstrated by a res:\u002F\u002F URL, and exploited in the wild in February 2014.","2014-02-26",0.5021,"Microsoft Internet Explorer Information Disclosure Vulnerability","An information disclosure vulnerability exists in Internet Explorer which allows resources loaded into memory to be queried. This vulnerability could allow an attacker to detect anti-malware applications.",{"cveId":441,"description":442,"publishedDate":443,"cvssScore":408,"severity":409,"isKev":4,"epssScore":444,"cisaVulnName":445,"cisaDateAdded":446,"cisaShortDescription":447,"cisaRequiredAction":403},"CVE-2016-3298","Microsoft Internet Explorer 9 through 11 and the Internet Messaging API in Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow remote attackers to determine the existence of arbitrary files via a crafted web site, aka \"Internet Explorer Information Disclosure Vulnerability.\"","2016-10-14",0.33332,"Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability","2022-05-24","An information disclosure vulnerability exists when the Microsoft Internet Messaging API improperly handles objects in memory. An attacker who successfully exploited this vulnerability could allow the attacker to test for the presence of files on disk.",{"cveId":449,"description":450,"publishedDate":451,"cvssScore":452,"severity":409,"isKev":4,"epssScore":453,"cisaVulnName":438,"cisaDateAdded":446,"cisaShortDescription":454,"cisaRequiredAction":403},"CVE-2016-0162","Microsoft Internet Explorer 9 through 11 allows remote attackers to determine the existence of files via crafted JavaScript code, aka \"Internet Explorer Information Disclosure Vulnerability.\"","2016-04-12",4.3,0.22012,"An information disclosure vulnerability exists when Internet Explorer does not properly handle JavaScript. The vulnerability could allow an attacker to detect specific files on the user's computer.",{"cveId":456,"description":457,"publishedDate":458,"cvssScore":315,"severity":317,"isKev":4,"epssScore":459,"cisaVulnName":419,"cisaDateAdded":446,"cisaShortDescription":460,"cisaRequiredAction":403},"CVE-2017-0210","An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain, aka \"Internet Explorer Elevation of Privilege Vulnerability.\"","2017-04-12",0.22334,"A privilege escalation vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information.",{"cveId":462,"description":463,"publishedDate":464,"cvssScore":315,"severity":317,"isKev":4,"epssScore":465,"cisaVulnName":392,"cisaDateAdded":446,"cisaShortDescription":466,"cisaRequiredAction":403},"CVE-2017-0149","Microsoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\" This vulnerability is different from those described in CVE-2017-0018 and CVE-2017-0037.","2017-03-17",0.29178,"Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause a denial-of-service (DoS) via a crafted website.",{"cveId":468,"description":469,"publishedDate":470,"cvssScore":408,"severity":409,"isKev":4,"epssScore":471,"cisaVulnName":472,"cisaDateAdded":446,"cisaShortDescription":473,"cisaRequiredAction":403},"CVE-2016-3351","Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka \"Microsoft Browser Information Disclosure Vulnerability.\"","2016-09-14",0.26483,"Microsoft Internet Explorer and Edge Information Disclosure Vulnerability","An information disclosure vulnerability exists in the way that certain functions in Internet Explorer and Edge handle objects in memory. The vulnerability could allow an attacker to detect specific files on the user's computer.",{"cveId":475,"description":476,"publishedDate":477,"cvssScore":408,"severity":409,"isKev":4,"epssScore":478,"cisaVulnName":438,"cisaDateAdded":479,"cisaShortDescription":480,"cisaRequiredAction":403},"CVE-2019-0676","An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker who successfully exploited this vulnerability could test for the presence of files on disk, aka 'Internet Explorer Information Disclosure Vulnerability'.","2019-03-05",0.0811,"2022-05-23","An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory. An attacker who successfully exploited this vulnerability could test for the presence of files on disk.",{"cveId":336,"description":337,"publishedDate":338,"cvssScore":315,"severity":317,"isKev":4,"epssScore":339,"cisaVulnName":365,"cisaDateAdded":482,"cisaShortDescription":483,"cisaRequiredAction":403},"2022-05-04","Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute code.",{"cveId":485,"description":486,"publishedDate":487,"cvssScore":351,"severity":309,"isKev":4,"epssScore":488,"cisaVulnName":489,"cisaDateAdded":490,"cisaShortDescription":491,"cisaRequiredAction":386},"CVE-2015-0311","Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in January 2015.","2015-01-23",0.85589,"Adobe Flash Player Remote Code Execution Vulnerability","2022-04-13","Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute code.",{"cveId":493,"description":494,"publishedDate":495,"cvssScore":351,"severity":309,"isKev":4,"epssScore":496,"cisaVulnName":497,"cisaDateAdded":490,"cisaShortDescription":498,"cisaRequiredAction":386},"CVE-2015-0313","Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2015, a different vulnerability than CVE-2015-0315, CVE-2015-0320, and CVE-2015-0322.","2015-02-02",0.95266,"Adobe Flash Player Use-After-Free Vulnerability","Use-after-free vulnerability in Adobe Flash Player allows remote attackers to execute code.",{"cveId":500,"description":501,"publishedDate":502,"cvssScore":315,"severity":317,"isKev":4,"epssScore":503,"cisaVulnName":392,"cisaDateAdded":490,"cisaShortDescription":504,"cisaRequiredAction":403},"CVE-2015-2502","Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Memory Corruption Vulnerability,\" as exploited in the wild in August 2015.","2015-08-19",0.51001,"Microsoft Internet Explorer contains a memory corruption vulnerability that allows an attacker to execute code or cause a denial-of-service (DoS).",{"cveId":506,"description":507,"publishedDate":430,"cvssScore":315,"severity":317,"isKev":4,"epssScore":508,"cisaVulnName":392,"cisaDateAdded":509,"cisaShortDescription":510,"cisaRequiredAction":403},"CVE-2015-2419","JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"JScript9 Memory Corruption Vulnerability.\"",0.53127,"2022-03-28","JScript in Microsoft Internet Explorer allows remote attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.",{"cveId":512,"description":513,"publishedDate":514,"cvssScore":399,"severity":317,"isKev":4,"epssScore":515,"cisaVulnName":516,"cisaDateAdded":509,"cisaShortDescription":517,"cisaRequiredAction":403},"CVE-2017-0037","Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilder::HandleColumnBreakOnColumnSpanningElement function in mshtml.dll, which allows remote attackers to execute arbitrary code via vectors involving a crafted Cascading Style Sheets (CSS) token sequence and crafted JavaScript code that operates on a TH element.","2017-02-26",0.80386,"Microsoft Edge and Internet Explorer Type Confusion Vulnerability","Microsoft Edge and Internet Explorer have a type confusion vulnerability in mshtml.dll, which allows remote code execution.",{"cveId":519,"description":520,"publishedDate":464,"cvssScore":452,"severity":409,"isKev":4,"epssScore":521,"cisaVulnName":438,"cisaDateAdded":509,"cisaShortDescription":522,"cisaRequiredAction":403},"CVE-2017-0059","Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka \"Internet Explorer Information Disclosure Vulnerability.\" This vulnerability is different from those described in CVE-2017-0008 and CVE-2017-0009.",0.61968,"Microsoft Internet Explorer allow remote attackers to obtain sensitive information from process memory via a crafted web site.",{"cveId":524,"description":525,"publishedDate":526,"cvssScore":527,"severity":317,"isKev":4,"epssScore":528,"cisaVulnName":392,"cisaDateAdded":509,"cisaShortDescription":529,"cisaRequiredAction":403},"CVE-2016-0189","The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Scripting Engine Memory Corruption Vulnerability,\" a different vulnerability than CVE-2016-0187.","2016-05-11",7.5,0.94062,"The Microsoft JScript nd VBScript engines, as used in Internet Explorer and other products, allow attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.",{"cveId":531,"description":532,"publishedDate":533,"cvssScore":315,"severity":317,"isKev":4,"epssScore":534,"cisaVulnName":365,"cisaDateAdded":509,"cisaShortDescription":535,"cisaRequiredAction":403},"CVE-2013-2551","Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2013, aka \"Internet Explorer Use After Free Vulnerability,\" a different vulnerability than CVE-2013-1308 and CVE-2013-1309.","2013-03-11",0.73918,"Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute remote code via a crafted web site that triggers access to a deleted object.",{"cveId":537,"description":538,"publishedDate":539,"cvssScore":527,"severity":317,"isKev":4,"epssScore":540,"cisaVulnName":541,"cisaDateAdded":542,"cisaShortDescription":543,"cisaRequiredAction":403},"CVE-2018-8373","A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka \"Scripting Engine Memory Corruption Vulnerability.\" This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-8353, CVE-2018-8355, CVE-2018-8359, CVE-2018-8371, CVE-2018-8372, CVE-2018-8385, CVE-2018-8389, CVE-2018-8390.","2018-08-15",0.61912,"Microsoft Scripting Engine Memory Corruption Vulnerability","2022-03-25","A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer.",{"cveId":545,"description":546,"publishedDate":547,"cvssScore":315,"severity":317,"isKev":4,"epssScore":548,"cisaVulnName":549,"cisaDateAdded":550,"cisaShortDescription":551,"cisaRequiredAction":403},"CVE-2013-1347","Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly allocated or (2) is deleted, as exploited in the wild in May 2013.","2013-05-05",0.7774,"Microsoft Internet Explorer Remote Code Execution Vulnerability","2022-03-03","This vulnerability may corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user within Internet Explorer.",{"cveId":553,"description":554,"publishedDate":555,"cvssScore":315,"severity":317,"isKev":4,"epssScore":556,"cisaVulnName":365,"cisaDateAdded":550,"cisaShortDescription":557,"cisaRequiredAction":403},"CVE-2013-3897","Use-after-free vulnerability in the CDisplayPointer class in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted JavaScript code that uses the onpropertychange event handler, as exploited in the wild in September and October 2013, aka \"Internet Explorer Memory Corruption Vulnerability.\"","2013-10-09",0.7731,"A use-after-free vulnerability exists within CDisplayPointer in Microsoft Internet Explorer that allows an attacker to remotely execute arbitrary code.",{"cveId":559,"description":560,"publishedDate":561,"cvssScore":315,"severity":317,"isKev":4,"epssScore":562,"cisaVulnName":549,"cisaDateAdded":563,"cisaShortDescription":564,"cisaRequiredAction":403},"CVE-2017-0222","A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka \"Internet Explorer Memory Corruption Vulnerability.\" This CVE ID is unique from CVE-2017-0226.","2017-05-12",0.29645,"2022-02-25","A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory.",{"cveId":566,"description":567,"publishedDate":568,"cvssScore":527,"severity":317,"isKev":4,"epssScore":569,"cisaVulnName":570,"cisaDateAdded":571,"cisaShortDescription":572,"cisaRequiredAction":403},"CVE-2019-0752","A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0739, CVE-2019-0753, CVE-2019-0862.","2019-04-09",0.81679,"Microsoft Internet Explorer Type Confusion Vulnerability","2022-02-15","A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer",{"cveId":348,"description":349,"publishedDate":350,"cvssScore":351,"severity":309,"isKev":4,"epssScore":352,"cisaVulnName":392,"cisaDateAdded":574,"cisaShortDescription":575,"cisaRequiredAction":403},"2022-01-28","Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code in the context of the current user.",{"cveId":577,"description":578,"publishedDate":579,"cvssScore":315,"severity":317,"isKev":4,"epssScore":580,"cisaVulnName":549,"cisaDateAdded":581,"cisaShortDescription":582,"cisaRequiredAction":403},"CVE-2021-27085","Internet Explorer Remote Code Execution Vulnerability","2021-03-11",0.05448,"2021-11-03","Microsoft Internet Explorer contains an unspecified vulnerability that allows for remote code execution.",{"cveId":584,"description":585,"publishedDate":586,"cvssScore":527,"severity":317,"isKev":4,"epssScore":587,"cisaVulnName":588,"cisaDateAdded":581,"cisaShortDescription":589,"cisaRequiredAction":403},"CVE-2018-8653","A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka \"Scripting Engine Memory Corruption Vulnerability.\" This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-8643.","2018-12-20",0.29606,"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","Microsoft Internet Explorer contains a memory corruption vulnerability due to how the Scripting Engine handles objects in memory, leading to remote code execution.",{"cveId":591,"description":592,"publishedDate":593,"cvssScore":315,"severity":317,"isKev":4,"epssScore":594,"cisaVulnName":595,"cisaDateAdded":581,"cisaShortDescription":596,"cisaRequiredAction":403},"CVE-2019-0541","A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka \"MSHTML Engine Remote Code Execution Vulnerability.\" This affects Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, Internet Explorer 11, Microsoft Excel Viewer, Internet Explorer 10, Office 365 ProPlus.","2019-01-08",0.53202,"Microsoft MSHTML Remote Code Execution Vulnerability","Microsoft MSHTML engine contains an improper input validation vulnerability that allows for remote code execution vulnerability.",{"cveId":598,"description":599,"publishedDate":600,"cvssScore":527,"severity":317,"isKev":4,"epssScore":601,"cisaVulnName":588,"cisaDateAdded":581,"cisaShortDescription":602,"cisaRequiredAction":403},"CVE-2019-1367","A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1221.","2019-09-23",0.52449,"Microsoft Internet Explorer contains a memory corruption vulnerability in how the scripting engine handles objects in memory. Successful exploitation allows for remote code execution in the context of the current user.",{"cveId":604,"description":605,"publishedDate":606,"cvssScore":527,"severity":317,"isKev":4,"epssScore":607,"cisaVulnName":588,"cisaDateAdded":581,"cisaShortDescription":608,"cisaRequiredAction":403},"CVE-2019-1429","A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1426, CVE-2019-1427, CVE-2019-1428.","2019-11-12",0.7729,"Microsoft Internet Explorer contains a memory corruption vulnerability which can allow for remote code execution in the context of the current user.",{"cveId":610,"description":611,"publishedDate":612,"cvssScore":527,"severity":317,"isKev":4,"epssScore":613,"cisaVulnName":588,"cisaDateAdded":581,"cisaShortDescription":614,"cisaRequiredAction":403},"CVE-2020-0674","A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0710, CVE-2020-0711, CVE-2020-0712, CVE-2020-0713, CVE-2020-0767.","2020-02-11",0.86863,"Microsoft Internet Explorer contains a memory corruption vulnerability due to the way the Scripting Engine handles objects in memory. Successful exploitation could allow remote code execution in the context of the current user.",{"cveId":616,"description":617,"publishedDate":618,"cvssScore":619,"severity":409,"isKev":4,"epssScore":620,"cisaVulnName":621,"cisaDateAdded":581,"cisaShortDescription":622,"cisaRequiredAction":403},"CVE-2020-0878","\u003Cp>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.\u003C\u002Fp>\n\u003Cp>An attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft browsers, and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically via an enticement in email or instant message, or by getting them to open an email attachment.\u003C\u002Fp>\n\u003Cp>The security update addresses the vulnerability by modifying how Microsoft browsers handle objects in memory.\u003C\u002Fp>\n","2020-09-11",4.2,0.02696,"Microsoft Edge and Internet Explorer Memory Corruption Vulnerability","Microsoft Edge and Internet Explorer contain a memory corruption vulnerability that allows attackers to execute code in the context of the current user.",{"cveId":624,"description":625,"publishedDate":626,"cvssScore":527,"severity":317,"isKev":4,"epssScore":627,"cisaVulnName":588,"cisaDateAdded":581,"cisaShortDescription":589,"cisaRequiredAction":403},"CVE-2020-0968","A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0970.","2020-04-15",0.30676,{"cveId":629,"description":630,"publishedDate":631,"cvssScore":632,"severity":317,"isKev":4,"epssScore":633,"cisaVulnName":588,"cisaDateAdded":581,"cisaShortDescription":608,"cisaRequiredAction":403},"CVE-2020-1380","A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.\nIn a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked "safe for initialization" in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.\nThe security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.\n","2020-08-17",7.8,0.24188,{"cveId":635,"description":636,"publishedDate":579,"cvssScore":315,"severity":317,"isKev":4,"epssScore":637,"cisaVulnName":392,"cisaDateAdded":581,"cisaShortDescription":638,"cisaRequiredAction":403},"CVE-2021-26411","Internet Explorer Memory Corruption Vulnerability",0.80765,"Microsoft Internet Explorer contains an unspecified vulnerability that allows for memory corruption.",{"title":640,"metaDescription":641,"keywords":642,"structuredData":643},"Internet Explorer by Microsoft - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Internet Explorer by Microsoft covering 83 versions with 1742 tracked vulnerabilities including 4 critical and 31 high-severity issues and 41 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Internet Explorer vulnerabilities, Internet Explorer security, Internet Explorer CVE, Microsoft Internet Explorer, Internet Explorer threat intelligence, Microsoft security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Internet Explorer KEV, Internet Explorer exploited vulnerabilities",{"@context":644,"@type":645,"name":646,"description":641,"url":647,"manufacturer":648,"applicationCategory":652,"softwareVersion":653,"mainEntity":654},"https:\u002F\u002Fschema.org","SoftwareApplication","Internet Explorer","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fmicrosoft\u002Finternet_explorer",{"@type":649,"name":650,"url":651},"Organization","Microsoft","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmicrosoft","Security Software","83 versions tracked",{"@type":655,"name":656,"description":657,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Internet Explorer Security Vulnerabilities","Security vulnerabilities affecting Internet Explorer by Microsoft",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":659,"apiVersion":23},"2026-10-19T15:57:56.576Z",[],{"rows":662,"total":787,"capped":4,"failed":25},[663,669,673,677,683,687,691,695,699,703,707,711,715,719,723,727,731,735,739,743,747,751,755,759,763,767,771,775,779,783],{"cveId":312,"name":365,"severity":317,"cvss":315,"added":366,"epss":318,"published":664,"ranges":665,"checked":4,"hits":668,"covers":26},"2010-01-15T17:30:00.533",[666,147,667,189,204],"5.0.1-sp4","6-sp1",[],{"cveId":354,"name":365,"severity":317,"cvss":315,"added":366,"epss":357,"published":670,"ranges":671,"checked":4,"hits":672,"covers":26},"2010-03-10T22:30:01.323",[121,147,667,186,204],[],{"cveId":304,"name":372,"severity":309,"cvss":307,"added":373,"epss":310,"published":674,"ranges":675,"checked":4,"hits":676,"covers":26},"2010-11-05T17:00:02.89",[147,186,204],[],{"cveId":320,"name":376,"severity":317,"cvss":315,"added":377,"epss":323,"published":678,"ranges":679,"checked":4,"hits":682,"covers":26},"2013-09-18T10:08:24.867",[147,186,204,214,15,680,681],"11-developer-preview","11-release-preview",[],{"cveId":380,"name":365,"severity":317,"cvss":315,"added":384,"epss":383,"published":684,"ranges":685,"checked":4,"hits":686,"covers":26},"2012-12-30T18:55:01.477",[147,186,204],[],{"cveId":388,"name":392,"severity":317,"cvss":315,"added":393,"epss":391,"published":688,"ranges":689,"checked":4,"hits":690,"covers":26},"2013-07-10T03:46:10.527",[204,214,15],[],{"cveId":396,"name":365,"severity":317,"cvss":399,"added":401,"epss":400,"published":692,"ranges":693,"checked":4,"hits":694,"covers":26},"2012-09-18T10:39:14.147",[147,186,204,214],[],{"cveId":405,"name":411,"severity":409,"cvss":408,"added":412,"epss":410,"published":696,"ranges":697,"checked":4,"hits":698,"covers":26},"2015-02-11T03:01:12.497",[214,15,19],[],{"cveId":415,"name":419,"severity":317,"cvss":315,"added":412,"epss":418,"published":700,"ranges":701,"checked":4,"hits":702,"covers":26},"2014-08-12T21:55:07.007",[147,186,204,214,15,19],[],{"cveId":422,"name":419,"severity":317,"cvss":315,"added":412,"epss":425,"published":704,"ranges":705,"checked":4,"hits":706,"covers":26},"2014-10-15T10:55:08.037",[186,204,214,15,19],[],{"cveId":428,"name":392,"severity":317,"cvss":315,"added":412,"epss":431,"published":708,"ranges":709,"checked":4,"hits":710,"covers":26},"2015-07-14T21:59:36.813",[19],[],{"cveId":434,"name":438,"severity":409,"cvss":408,"added":412,"epss":437,"published":712,"ranges":713,"checked":4,"hits":714,"covers":26},"2014-02-26T14:55:08.52",[147,186,204,214,15,19],[],{"cveId":441,"name":445,"severity":409,"cvss":408,"added":446,"epss":444,"published":716,"ranges":717,"checked":4,"hits":718,"covers":26},"2016-10-14T02:59:13.893",[214,15,19],[],{"cveId":449,"name":438,"severity":409,"cvss":452,"added":446,"epss":453,"published":720,"ranges":721,"checked":4,"hits":722,"covers":26},"2016-04-12T23:59:26.41",[214,15,19],[],{"cveId":456,"name":419,"severity":317,"cvss":315,"added":446,"epss":459,"published":724,"ranges":725,"checked":4,"hits":726,"covers":26},"2017-04-12T14:59:01.42",[15,19],[],{"cveId":462,"name":392,"severity":317,"cvss":315,"added":446,"epss":465,"published":728,"ranges":729,"checked":4,"hits":730,"covers":26},"2017-03-17T00:59:04.18",[214,15,19],[],{"cveId":468,"name":472,"severity":409,"cvss":408,"added":446,"epss":471,"published":732,"ranges":733,"checked":4,"hits":734,"covers":26},"2016-09-14T10:59:24.357",[214,15,19],[],{"cveId":475,"name":438,"severity":409,"cvss":408,"added":479,"epss":478,"published":736,"ranges":737,"checked":4,"hits":738,"covers":26},"2019-03-05T23:29:02.613",[15,19],[],{"cveId":336,"name":365,"severity":317,"cvss":315,"added":482,"epss":339,"published":740,"ranges":741,"checked":4,"hits":742,"covers":26},"2014-02-14T16:55:07.5",[214,15],[],{"cveId":485,"name":489,"severity":309,"cvss":351,"added":490,"epss":488,"published":744,"ranges":745,"checked":4,"hits":746,"covers":26},"2015-01-23T21:59:04.897",[15,19],[],{"cveId":493,"name":497,"severity":309,"cvss":351,"added":490,"epss":496,"published":748,"ranges":749,"checked":4,"hits":750,"covers":26},"2015-02-02T19:59:00.053",[15,19],[],{"cveId":500,"name":392,"severity":317,"cvss":315,"added":490,"epss":503,"published":752,"ranges":753,"checked":4,"hits":754,"covers":26},"2015-08-19T10:59:00.09",[186,204,214,15,19],[],{"cveId":506,"name":392,"severity":317,"cvss":315,"added":509,"epss":508,"published":756,"ranges":757,"checked":4,"hits":758,"covers":26},"2015-07-14T21:59:33.283",[15,19],[],{"cveId":512,"name":516,"severity":317,"cvss":399,"added":509,"epss":515,"published":760,"ranges":761,"checked":4,"hits":762,"covers":26},"2017-02-26T23:59:00.15",[19],[],{"cveId":519,"name":438,"severity":409,"cvss":452,"added":509,"epss":521,"published":764,"ranges":765,"checked":4,"hits":766,"covers":26},"2017-03-17T00:59:01.523",[214,15,19],[],{"cveId":524,"name":392,"severity":317,"cvss":527,"added":509,"epss":528,"published":768,"ranges":769,"checked":4,"hits":770,"covers":26},"2016-05-11T01:59:30.537",[214,15,19],[],{"cveId":531,"name":365,"severity":317,"cvss":315,"added":509,"epss":534,"published":772,"ranges":773,"checked":4,"hits":774,"covers":26},"2013-03-11T10:55:01.07",[147,186,204,214,15],[],{"cveId":537,"name":541,"severity":317,"cvss":527,"added":542,"epss":540,"published":776,"ranges":777,"checked":4,"hits":778,"covers":26},"2018-08-15T17:29:06.673",[214,15,19],[],{"cveId":545,"name":549,"severity":317,"cvss":315,"added":550,"epss":548,"published":780,"ranges":781,"checked":4,"hits":782,"covers":26},"2013-05-05T11:07:00.527",[204],[],{"cveId":553,"name":365,"severity":317,"cvss":315,"added":550,"epss":556,"published":784,"ranges":785,"checked":4,"hits":786,"covers":26},"2013-10-09T14:54:25.747",[147,186,204,214,15,19],[],43]