Priority CRITICAL 100KEV
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unsp…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.95341 · Published 2015-02-02 · No fix listed CWE-416
Priority CRITICAL 100KEV
Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via u…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.85589 · Published 2015-01-23 · Fixed
Priority CRITICAL 100KEV
Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to the CMarkup::IsConnectedT…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.82682 · Published 2014-04-27 · No fix listed CWE-416
Priority CRITICAL 97KEV
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.24188 · Published 2020-08-17 · Fixed in publication CWE-787
Priority CRITICAL 97KEV
A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Office Word Vie…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.53202 · Published 2019-01-08 · No fix listed CWE-77
Priority CRITICAL 97KEV
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0226.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.29645 · Published 2017-05-12 · No fix listed CWE-787
Priority CRITICAL 97KEV
An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.22334 · Published 2017-04-12 · No fix listed
Priority CRITICAL 97KEV
Microsoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.28489 · Published 2017-03-17 · No fix listed CWE-787
Priority CRITICAL 97KEV
Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," as exploited in t…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.51001 · Published 2015-08-19 · No fix listed CWE-787
Priority CRITICAL 97KEV
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a differe…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.44727 · Published 2015-07-14 · No fix listed CWE-787
Priority CRITICAL 97KEV
JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "JScript9 Memory Corruption Vulnerability.…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.5298 · Published 2015-07-14 · No fix listed CWE-787
Priority CRITICAL 97KEV
Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability," as exploited in the wild in October 2014, a differ…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.47133 · Published 2014-10-15 · No fix listed
Priority CRITICAL 97KEV
Microsoft Internet Explorer 6 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability."
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.26349 · Published 2014-08-12 · No fix listed
Priority CRITICAL 97KEV
Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via vectors involving crafted JavaScript code, CMarkup, and the onpropertychange attribute of a scrip…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.85122 · Published 2014-02-14 · No fix listed CWE-416
Priority CRITICAL 97KEV
Use-after-free vulnerability in the CDisplayPointer class in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via c…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.7731 · Published 2013-10-09 · No fix listed CWE-416
Priority CRITICAL 97KEV
Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code via crafted JavaScript strings, as demonstrat…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.87639 · Published 2013-09-18 · No fix listed CWE-416
Priority CRITICAL 97KEV
Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability,"…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.70676 · Published 2013-07-10 · No fix listed CWE-787
Priority CRITICAL 97KEV
Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, as demonstrated by VUPEN during…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.74096 · Published 2013-03-11 · No fix listed CWE-416
Priority CRITICAL 97KEV
Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly allocated or (2) is deleted, as exploited…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.7774 · Published 2013-05-05 · No fix listed CWE-416
Priority CRITICAL 97KEV
Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.78823 · Published 2012-12-30 · No fix listed CWE-416
Priority CRITICAL 97KEV
Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid poi…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.82115 · Published 2010-03-10 · No fix listed CWE-416
Priority CRITICAL 97KEV
Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2008 Gold, SP2, and R2…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.91939 · Published 2010-01-15 · No fix listed CWE-416
Priority CRITICAL 95KEV
Internet Explorer Remote Code Execution Vulnerability
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.05448 · Published 2021-03-11 · Fixed in 10.0.17134.2087
Priority CRITICAL 95KEV
Internet Explorer Memory Corruption Vulnerability
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.81667 · Published 2021-03-11 · Fixed in 10.0.17134.2087, 6.0.6003.21070 CWE-416
Priority CRITICAL 94KEV
Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilder::HandleColumnBreakOnColumnSpanningElement function in mshtml.dll, which allows remote attackers to…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.80386 · Published 2017-02-26 · No fix listed CWE-843
Load more