Windows-iedriver Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Windows-iedriver Project records in CISA KEV

No Windows-iedriver Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Windows-iedriver 1 record LOW

Records

1 record

TI-2016-08730 CVE-2016-10689 · GHSA-w9mf-24h3-9wxf

Cryptographic flaw in HackerOne windows-iedriver node module

LOW 39

The windows-iedriver module downloads fixed version of iedriverserver.exe windows-iedriver downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.01656 Published 2018-06-04 No fix listed CWE-311

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0