Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

23 records in Vbscript · all components

Priority CRITICAL 92KEV

The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corr…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.94062 Published 2016-05-11 No fix listed CWE-787
Priority HIGH 67

The VBScript engine in Microsoft Internet Explorer 6 through 11, and VBScript 5.6 through 5.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, ak…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.38434 Published 2014-02-12 No fix listed CWE-119
Priority MEDIUM 64

The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (mem…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.32285 Published 2015-10-14 No fix listed CWE-119
Priority MEDIUM 62

Multiple integer overflows in the Microsoft (1) JScript 5.6 through 5.8 and (2) VBScript 5.6 through 5.8 scripting engines allow remote attackers to execute arbitrary code via a crafted web page, aka "Scripting Memory Re…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.26221 Published 2011-04-13 No fix listed CWE-190
Priority MEDIUM 61

The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code via a crafted web site, aka "Scri…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.24725 Published 2015-12-09 No fix listed CWE-119
Priority MEDIUM 61

The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (mem…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.25081 Published 2015-10-14 No fix listed CWE-119
Priority MEDIUM 60

Integer overflow in Microsoft Internet Explorer 8 and 9, JScript 5.8, and VBScript 5.8 on 64-bit platforms allows remote attackers to execute arbitrary code by leveraging an incorrect size calculation during object copyi…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.22184 Published 2012-08-15 No fix listed CWE-189
Priority MEDIUM 55

The Microsoft (1) VBScript and (2) JScript engines, as used in Internet Explorer 8 through 11, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.13021 Published 2015-11-11 No fix listed CWE-119
Priority MEDIUM 53

The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code via a crafted web site, aka "Scri…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.23392 Published 2016-01-13 No fix listed CWE-119
Priority MEDIUM 52

The Microsoft (1) JScript 5.8 and (2) VBScript 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption)…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.21591 Published 2016-05-11 No fix listed CWE-119
Priority MEDIUM 50

The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corr…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.17401 Published 2016-06-16 No fix listed CWE-119
Priority MEDIUM 50

The Microsoft (1) Chakra JavaScript, (2) JScript, and (3) VBScript engines, as used in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, allow remote attackers to execute arbitrary code or cause a denial of servi…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.17353 Published 2016-06-16 Fixed in 1.2.0.0 CWE-119
Priority MEDIUM 48

The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corr…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.1466 Published 2016-06-16 No fix listed CWE-119
Priority MEDIUM 48

The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corr…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.1466 Published 2016-06-16 No fix listed CWE-119
Priority MEDIUM 43

The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to obtain sensitive information from process memory via a c…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.23498 Published 2015-12-09 No fix listed CWE-200
Priority LOW 36

VBScript.dll in the Microsoft VBScript 5.6 through 5.8 engine, as used in Internet Explorer 8 through 11 and other products, allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "VB…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.16155 Published 2015-05-13 No fix listed CWE-200
Open these records in search →