Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

1635 records in Internet Explorer · all components

Priority CRITICAL 100KEV

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unsp…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.95341 Published 2015-02-02 No fix listed CWE-416
Priority CRITICAL 100KEV

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to the CMarkup::IsConnectedT…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.82682 Published 2014-04-27 No fix listed CWE-416
Priority CRITICAL 97KEV

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.24188 Published 2020-08-17 Fixed in publication CWE-787
TI-2019-00335 CVE-2019-0541 · GHSA-f832-7fhg-m78h

Command injection in Microsoft Office

Priority CRITICAL 97KEV

A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Office Word Vie…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.53202 Published 2019-01-08 No fix listed CWE-77
Priority CRITICAL 97KEV

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0226.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.29645 Published 2017-05-12 No fix listed CWE-787
Priority CRITICAL 97KEV

An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.22334 Published 2017-04-12 No fix listed
Priority CRITICAL 97KEV

Microsoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.28489 Published 2017-03-17 No fix listed CWE-787
Priority CRITICAL 97KEV

Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," as exploited in t…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.51001 Published 2015-08-19 No fix listed CWE-787
Priority CRITICAL 97KEV

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a differe…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.44727 Published 2015-07-14 No fix listed CWE-787
Priority CRITICAL 97KEV

JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "JScript9 Memory Corruption Vulnerability.…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.5298 Published 2015-07-14 No fix listed CWE-787
Priority CRITICAL 97KEV

Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability," as exploited in the wild in October 2014, a differ…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.47133 Published 2014-10-15 No fix listed
Priority CRITICAL 97KEV

Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via vectors involving crafted JavaScript code, CMarkup, and the onpropertychange attribute of a scrip…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.85122 Published 2014-02-14 No fix listed CWE-416
Priority CRITICAL 97KEV

Use-after-free vulnerability in the CDisplayPointer class in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via c…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.7731 Published 2013-10-09 No fix listed CWE-416
Priority CRITICAL 97KEV

Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code via crafted JavaScript strings, as demonstrat…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.87639 Published 2013-09-18 No fix listed CWE-416
Priority CRITICAL 97KEV

Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability,"…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.70676 Published 2013-07-10 No fix listed CWE-787
Priority CRITICAL 97KEV

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, as demonstrated by VUPEN during…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.74096 Published 2013-03-11 No fix listed CWE-416
Priority CRITICAL 97KEV

Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly allocated or (2) is deleted, as exploited…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.7774 Published 2013-05-05 No fix listed CWE-416
Priority CRITICAL 97KEV

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.78823 Published 2012-12-30 No fix listed CWE-416
Priority CRITICAL 97KEV

Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid poi…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.82115 Published 2010-03-10 No fix listed CWE-416
Priority CRITICAL 97KEV

Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2008 Gold, SP2, and R2…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.91939 Published 2010-01-15 No fix listed CWE-416
Priority CRITICAL 95KEV

Internet Explorer Memory Corruption Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.81667 Published 2021-03-11 Fixed in 10.0.17134.2087, 6.0.6003.21070 CWE-416
Priority CRITICAL 94KEV

Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilder::HandleColumnBreakOnColumnSpanningElement function in mshtml.dll, which allows remote attackers to…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.80386 Published 2017-02-26 No fix listed CWE-843
Load more
Open these records in search →