Internet Explorer - 2029 CVEs (Page 6/17)

About “Internet Explorer”

A curated feed of “Internet Explorer”-related CVEs appears below. We currently track 2029 CVEs for this tag (all time). In the last 365 days, 5 were published. Average CVSS is 7.3 (all time; 8.1 over 365d), and 64% are rated High/Critical (all time). Top CWEs (last 365 days): CWE-94 - Improper Control of Generation of Code ('Code Injection'), CWE-787 - Out-of-bounds Write, CWE-319 - Cleartext Transmission of Sensitive Information.

In our taxonomy this topic maps to a LOW impact class. Browsers are high value endpoints. Force auto updates, enforce enterprise policies, limit risky extensions, and enable site isolation or sandboxing. Use the filters below to sort by CVSS, risk and CWE. Each detail page highlights vendor advisories and mitigation tips.

CVEs tagged with this topic. Filters apply to the whole list (loaded from JSON).

CVSS ≥ 0.0

2015-04-14

Critical

CVE-2015-1662

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vuln…

CVSS: 9.3 CWE: CWE-399 View on NVD

Medium

CVE-2015-1661

Microsoft Internet Explorer 6 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulnerability."

CVSS: 4.3 CWE: CWE-264 View on NVD

Critical

CVE-2015-1660

Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulne…

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2015-1659

CVSS: 9.3 CWE: N/A View on NVD

Critical

CVE-2015-1657

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corru…

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2015-1652

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corru…

CVSS: 9.3 CWE: CWE-399 View on NVD

2015-03-11

Critical

CVE-2015-1634

CVSS: 9.3 CWE: CWE-399 View on NVD

Medium

CVE-2015-1627

Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability."

CVSS: 4.3 CWE: CWE-264 View on NVD

Critical

CVE-2015-1626

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2015-1625

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2015-1624

Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corru…

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2015-1623

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2015-1622

Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corrupti…

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2015-0100

Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulne…

CVSS: 9.3 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

Critical

CVE-2015-0099

Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vuln…

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2015-0056

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2015-0032

vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 8 through 11 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (mem…

CVSS: 9.3 CWE: CWE-399 View on NVD

2015-02-11

Medium

CVE-2015-0071

Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulnerability."

CVSS: 6.5 CWE: N/A View on NVD

Medium

CVE-2015-0070

Microsoft Internet Explorer 6 through 11 allows remote attackers to read content from a different (1) domain or (2) zone via a crafted web site, aka "Internet Explorer Cross-domain Information Disclo…

CVSS: 4.3 CWE: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor View on NVD

Medium

CVE-2015-0069

Microsoft Internet Explorer 10 and 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulnerability."

CVSS: 4.3 CWE: CWE-264 View on NVD

Critical

CVE-2015-0068

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2015-0067

Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corrup…

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2015-0066

CVSS: 9.3 CWE: CWE-399 View on NVD

Medium

CVE-2015-0055

Microsoft Internet Explorer 10 and 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability."

CVSS: 4.3 CWE: CWE-264 View on NVD

Medium

CVE-2015-0054

Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability."

CVSS: 4.3 CWE: CWE-264 View on NVD

Critical

CVE-2015-0053

Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corrup…

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2015-0052

CVSS: 9.3 CWE: CWE-399 View on NVD

Medium

CVE-2015-0051

Microsoft Internet Explorer 8 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulnerability."

CVSS: 4.3 CWE: CWE-264 View on NVD

Critical

CVE-2015-0050

Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption…

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2015-0049

Microsoft Internet Explorer 8 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruptio…

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2015-0048

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2015-0046

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2015-0045

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2015-0044

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2015-0043

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2015-0042

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2015-0041

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2015-0040

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2015-0039

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2015-0038

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2015-0037

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2015-0036

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2015-0035

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2015-0031

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2015-0030

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2015-0029

Microsoft Internet Explorer 6 and 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption…

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2015-0028

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2015-0027

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2015-0026

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2015-0025

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2015-0023

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2015-0022

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2015-0021

Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corru…

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2015-0020

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2015-0019

Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruptio…

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2015-0018

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2015-0017

CVSS: 9.3 CWE: CWE-399 View on NVD

2015-02-07

Medium

CVE-2015-0072

Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy and inject arbitrary web script or HTML via vectors invol…

CVSS: 4.3 CWE: CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') View on NVD

2014-12-15

Medium

CVE-2014-8967

Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute arbitrary code via a crafted HTML document in conjunction with a Cascading Style Sheets (CSS) token sequ…

CVSS: 6.8 CWE: N/A View on NVD

2014-12-11

Critical

CVE-2014-8966

CVSS: 9.3 CWE: CWE-20 - Improper Input Validation View on NVD

Critical

CVE-2014-6376

CVSS: 9.3 CWE: CWE-20 - Improper Input Validation View on NVD

Critical

CVE-2014-6375

CVSS: 9.3 CWE: CWE-20 - Improper Input Validation View on NVD

Critical

CVE-2014-6374

CVSS: 9.3 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

Critical

CVE-2014-6373

CVSS: 9.3 CWE: CWE-20 - Improper Input Validation View on NVD

Critical

CVE-2014-6369

CVSS: 9.3 CWE: CWE-20 - Improper Input Validation View on NVD

Medium

CVE-2014-6368

Microsoft Internet Explorer 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulnerability."

CVSS: 4.3 CWE: CWE-20 - Improper Input Validation View on NVD

Critical

CVE-2014-6366

Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption…

CVSS: 9.3 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

Medium

CVE-2014-6365

Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the XSS filter via a crafted attribute of an element in an HTML document, aka "Internet Explorer XSS Filter Bypass Vulnerabi…

CVSS: 4.3 CWE: CWE-20 - Improper Input Validation View on NVD

Critical

CVE-2014-6363

vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 6 through 11 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (mem…

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2014-6330

CVSS: 9.3 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

Critical

CVE-2014-6329

CVSS: 9.3 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

Medium

CVE-2014-6328

CVSS: 5.0 CWE: CWE-20 - Improper Input Validation View on NVD

Critical

CVE-2014-6327

CVSS: 9.3 CWE: CWE-20 - Improper Input Validation View on NVD

2014-12-05

Medium

CVE-2014-7258

Cross-site scripting (XSS) vulnerability in KENT-WEB Clip Board 2.91 and earlier, when running certain versions of Internet Explorer, allows remote attackers to inject arbitrary web script or HTML vi…

CVSS: 4.3 CWE: CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') View on NVD

2014-11-11

Critical

CVE-2014-6353

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2014-6351

CVSS: 9.3 CWE: CWE-399 View on NVD

Medium

CVE-2014-6350

Microsoft Internet Explorer 10 and 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability," a different vulnerability than C…

CVSS: 4.3 CWE: CWE-264 View on NVD

Medium

CVE-2014-6349

CVSS: 4.3 CWE: CWE-264 View on NVD

Critical

CVE-2014-6348

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2014-6347

CVSS: 9.3 CWE: CWE-399 View on NVD

Medium

CVE-2014-6346

Microsoft Internet Explorer 8 through 11 allows remote attackers to read content from a different (1) domain or (2) zone via a crafted web site, aka "Internet Explorer Cross-domain Information Disclo…

CVSS: 4.3 CWE: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor View on NVD

Medium

CVE-2014-6345

Microsoft Internet Explorer 9 and 10 allows remote attackers to read content from a different (1) domain or (2) zone via a crafted web site, aka "Internet Explorer Cross-domain Information Disclosure…

CVSS: 4.3 CWE: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor View on NVD

Critical

CVE-2014-6344

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2014-6343

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2014-6342

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2014-6341

CVSS: 9.3 CWE: CWE-399 View on NVD

Medium

CVE-2014-6340

CVSS: 4.3 CWE: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor View on NVD

Medium

CVE-2014-6339

Microsoft Internet Explorer 8 and 9 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulnerability."

CVSS: 5.0 CWE: CWE-264 View on NVD

Critical

CVE-2014-6337

CVSS: 9.3 CWE: CWE-399 View on NVD

Medium

CVE-2014-6323

Microsoft Internet Explorer 7 through 11 allows remote attackers to obtain sensitive clipboard information via a crafted web site, aka "Internet Explorer Clipboard Information Disclosure Vulnerabilit…

CVSS: 4.3 CWE: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor View on NVD

Medium

CVE-2014-6322

The Windows Audio service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow…

CVSS: 4.3 CWE: CWE-20 - Improper Input Validation View on NVD

Critical

CVE-2014-4143

CVSS: 9.3 CWE: CWE-399 View on NVD

2014-10-15

Medium

CVE-2014-6466

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, when running on Internet Explorer, allows local users to affect confidentiality, integrity, and availability via unknown vectors rela…

CVSS: 6.9 CWE: N/A View on NVD

Critical

CVE-2014-4141

CVSS: 9.3 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

Medium

CVE-2014-4140

Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulnerability."

CVSS: 4.3 CWE: CWE-264 View on NVD

Critical

CVE-2014-4138

CVSS: 9.3 CWE: CWE-20 - Improper Input Validation View on NVD

Critical

CVE-2014-4137

CVSS: 9.3 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

Critical

CVE-2014-4134

CVSS: 9.3 CWE: CWE-20 - Improper Input Validation View on NVD

Critical

CVE-2014-4133

CVSS: 9.3 CWE: CWE-20 - Improper Input Validation View on NVD

Critical

CVE-2014-4132

CVSS: 9.3 CWE: CWE-20 - Improper Input Validation View on NVD

Critical

CVE-2014-4130

CVSS: 9.3 CWE: CWE-20 - Improper Input Validation View on NVD

Critical

CVE-2014-4129

CVSS: 9.3 CWE: CWE-20 - Improper Input Validation View on NVD

Critical

CVE-2014-4128

CVSS: 9.3 CWE: CWE-20 - Improper Input Validation View on NVD

Critical

CVE-2014-4127

CVSS: 9.3 CWE: CWE-399 View on NVD

Critical

CVE-2014-4126

CVSS: 9.3 CWE: CWE-20 - Improper Input Validation View on NVD

Medium

CVE-2014-4124

Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability," a different vulnerability tha…

CVSS: 6.8 CWE: CWE-264 View on NVD

High

CVE-2014-4123

Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability," as exploited in the wild in O…

CVSS: 8.8 CWE: N/A View on NVD

Critical

CVE-2014-4073

Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 processes unverified data during interaction with the ClickOnce installer, which allows remote attackers to gain privileges via…

CVSS: 10.0 CWE: CWE-264 View on NVD

2014-09-10

Critical

CVE-2014-4111

CVSS: 9.3 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

Critical

CVE-2014-4110

CVSS: 9.3 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

Critical

CVE-2014-4109

CVSS: 9.3 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

Critical

CVE-2014-4108

CVSS: 9.3 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

Critical

CVE-2014-4107

CVSS: 9.3 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

Critical

CVE-2014-4106

CVSS: 9.3 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

Critical

CVE-2014-4105

CVSS: 9.3 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

Critical

CVE-2014-4104

CVSS: 9.3 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

Critical

CVE-2014-4103

CVSS: 9.3 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

Critical

CVE-2014-4102

CVSS: 9.3 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

Critical

CVE-2014-4101

CVSS: 9.3 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

Critical

CVE-2014-4100

CVSS: 9.3 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD