Vulnerabilities

TI-2021-08236 CVE-2021-26419 · GHSA-4qh5-35r2-7932

Scripting Engine Memory Corruption Vulnerability

MEDIUM 53

Scripting Engine Memory Corruption Vulnerability

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.22767 Published 2021-05-11 Fixed in 10.0.14393.4401, 10.0.17134.2207 +12 CWE-787

TI-2021-08655 CVE-2021-27085 · GHSA-vm76-5x29-7jx8

Internet Explorer Remote Code Execution Vulnerability

CRITICAL 95KEV

Internet Explorer Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.05448 Published 2021-03-11 Fixed in 10.0.17134.2087

TI-2021-08228 CVE-2021-26411 · GHSA-c5rh-mmr6-c7ch

Internet Explorer Memory Corruption Vulnerability

CRITICAL 95KEV

Internet Explorer Memory Corruption Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.81667 Published 2021-03-11 Fixed in 10.0.17134.2087, 6.0.6003.21070 CWE-416

TI-2020-13040 CVE-2020-17058 · GHSA-94fc-f2xw-hf3v

Microsoft Browser Memory Corruption Vulnerability

LOW 38

Microsoft Browser Memory Corruption Vulnerability

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.03085 Published 2020-11-11 Fixed in publication CWE-787

TI-2020-13035 CVE-2020-17053 · GHSA-mxxx-932c-fw96

Internet Explorer Memory Corruption Vulnerability

LOW 39

Internet Explorer Memory Corruption Vulnerability

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.03171 Published 2020-11-11 Fixed in publication CWE-787

TI-2020-13034 CVE-2020-17052 · GHSA-9gw5-hvjg-q9wx

Scripting Engine Memory Corruption Vulnerability

MEDIUM 40

Scripting Engine Memory Corruption Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.02651 Published 2020-11-11 Fixed in publication CWE-787

TI-2020-01465 CVE-2020-1506 · GHSA-f387-26c4-6jhr

Windows Start-Up Application Elevation of Privilege Vulnerability

MEDIUM 42

<p>An elevation of privilege vulnerability exists in the way that the Wininit.dll handles objects in memory.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02095 Published 2020-09-11 Fixed in publication

TI-2020-00981 CVE-2020-1012 · GHSA-pqr6-x3hm-vw74

WinINet API Elevation of Privilege Vulnerability

MEDIUM 44

<p>An elevation of privilege vulnerability exists in the way that the Wininit.dll handles objects in memory.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03741 Published 2020-09-11 Fixed in publication

TI-2020-00848 CVE-2020-0878 · GHSA-6j33-6rqj-fh2m

Microsoft Browser Memory Corruption Vulnerability

CRITICAL 92KEV

<p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.02696 Published 2020-09-11 Fixed in publication CWE-787

TI-2020-01529 CVE-2020-1570 · GHSA-p546-hw2g-2622

Scripting Engine Memory Corruption Vulnerability

MEDIUM 50

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.08839 Published 2020-08-17 Fixed in publication CWE-787

TI-2020-01526 CVE-2020-1567 · GHSA-ffgx-6737-mpr2

MSHTML Engine Remote Code Execution Vulnerability

LOW 39

A remote code execution vulnerability exists in the way that the MSHTML engine improperly validates input.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.03666 Published 2020-08-17 Fixed in publication

TI-2020-01340 CVE-2020-1380 · GHSA-vvf5-mpj5-q4jf

Scripting Engine Memory Corruption Vulnerability

CRITICAL 97KEV

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.24188 Published 2020-08-17 Fixed in publication CWE-787

TI-2020-01392 CVE-2020-1432 · GHSA-775r-4pcv-6q97

An information disclosure vulnerability exists when Skype for Business is accessed via…

LOW 27

An information disclosure vulnerability exists when Skype for Business is accessed via Internet Explorer, aka 'Skype for Business via Internet Explorer Information Disclosure Vulnerability'.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.04452 Published 2020-07-14 No fix listed

TI-2020-01363 CVE-2020-1403 · GHSA-qq9w-3xhq-6rxf

A remote code execution vulnerability exists in the way that the VBScript engine handles…

MEDIUM 46

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.10451 Published 2020-07-14 No fix listed

TI-2020-01277 CVE-2020-1315 · GHSA-2cp2-5xqw-7c7p

An information disclosure vulnerability exists when Internet Explorer improperly handles…

LOW 31

An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory, aka 'Internet Explorer Information Disclosure Vulnerability'.

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.03864 Published 2020-06-09 No fix listed

TI-2020-01223 CVE-2020-1260 · GHSA-vh7x-22xr-rxxw

Out-of-bounds write in Microsoft Internet Explorer 9

MEDIUM 43

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.07353 Published 2020-06-09 No fix listed CWE-787

TI-2020-01193 CVE-2020-1230 · GHSA-jwqm-f3mq-8j45

A remote code execution vulnerability exists in the way that the VBScript engine handles…

MEDIUM 43

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.07257 Published 2020-06-09 No fix listed

TI-2020-01183 CVE-2020-1219 · GHSA-j59c-78x8-r8jf

Type confusion in Microsoft ChakraCore

MEDIUM 51

A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corruption Vulnerability'.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.19057 Published 2020-06-09 No fix listed CWE-843

TI-2020-01180 CVE-2020-1216 · GHSA-46m4-99g7-xgg5

A remote code execution vulnerability exists in the way that the VBScript engine handles…

MEDIUM 43

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.07353 Published 2020-06-09 No fix listed

TI-2020-01179 CVE-2020-1215 · GHSA-p744-p99r-fpvq

A remote code execution vulnerability exists in the way that the VBScript engine handles…

MEDIUM 44

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.08219 Published 2020-06-09 No fix listed

TI-2020-01178 CVE-2020-1214 · GHSA-g574-cx8g-fpfc

A remote code execution vulnerability exists in the way that the VBScript engine handles…

MEDIUM 44

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.08219 Published 2020-06-09 No fix listed

TI-2020-01177 CVE-2020-1213 · GHSA-ccmw-gwxp-wxrm

Out-of-bounds write in Microsoft Internet Explorer 11 on Windows 10 Version 2004 for…

MEDIUM 43

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.07353 Published 2020-06-09 No fix listed CWE-787

TI-2020-01061 CVE-2020-1093 · GHSA-753g-8cwc-62h4

VBScript Remote Code Execution Vulnerability

LOW 39

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.03245 Published 2020-05-21 Fixed in publication CWE-787

TI-2020-01060 CVE-2020-1092 · GHSA-mhp3-gwmq-pprx

Internet Explorer Memory Corruption Vulnerability

LOW 39

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.03203 Published 2020-05-21 Fixed in publication CWE-787

TI-2020-01033 CVE-2020-1064 · GHSA-q5p2-r47g-84cm

MSHTML Engine Remote Code Execution Vulnerability

LOW 39

A remote code execution vulnerability exists in the way that the MSHTML engine improperly validates input.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.03245 Published 2020-05-21 Fixed in publication

Vulnerabilities

Filters