Priority MEDIUM 50
The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corr…
CVSS 3.0HIGH 7.5· Network · No auth · User interaction · EPSS 0.17401 · Published 2016-06-16 · No fix listed CWE-119
Priority MEDIUM 48
The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corr…
CVSS 3.0HIGH 7.5· Network · No auth · User interaction · EPSS 0.1466 · Published 2016-06-16 · No fix listed CWE-119
Priority MEDIUM 48
The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corr…
CVSS 3.0HIGH 7.5· Network · No auth · User interaction · EPSS 0.1466 · Published 2016-06-16 · No fix listed CWE-119
Priority MEDIUM 50
The Microsoft (1) Chakra JavaScript, (2) JScript, and (3) VBScript engines, as used in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, allow remote attackers to execute arbitrary code or cause a denial of servi…
CVSS 3.0HIGH 7.5· Network · No auth · User interaction · EPSS 0.17353 · Published 2016-06-16 · Fixed in 1.2.0.0 CWE-119
Priority CRITICAL 92KEV
The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corr…
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.94062 · Published 2016-05-11 · No fix listed CWE-787
Priority MEDIUM 52
The Microsoft (1) JScript 5.8 and (2) VBScript 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption)…
CVSS 3.0HIGH 7.5· Network · No auth · User interaction · EPSS 0.21591 · Published 2016-05-11 · No fix listed CWE-119
Priority MEDIUM 53
The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code via a crafted web site, aka "Scri…
CVSS 3.0HIGH 7.5· Network · No auth · User interaction · EPSS 0.23392 · Published 2016-01-13 · No fix listed CWE-119
Priority MEDIUM 61
The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code via a crafted web site, aka "Scri…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.24725 · Published 2015-12-09 · No fix listed CWE-119
Priority MEDIUM 43
The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to obtain sensitive information from process memory via a c…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.23498 · Published 2015-12-09 · No fix listed CWE-200
Priority MEDIUM 55
The Microsoft (1) VBScript and (2) JScript engines, as used in Internet Explorer 8 through 11, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.13021 · Published 2015-11-11 · No fix listed CWE-119
Priority LOW 37
The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to obtain sensitive information from process memory via a c…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.16331 · Published 2015-10-14 · No fix listed CWE-200
Priority MEDIUM 54
The (1) JScript and (2) VBScript engines in Microsoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scriptin…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.12681 · Published 2015-10-14 · No fix listed CWE-119
Priority MEDIUM 61
The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (mem…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.25081 · Published 2015-10-14 · No fix listed CWE-119
Priority LOW 36
The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to bypass the ASLR protection mechanism via a crafted web s…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.14898 · Published 2015-10-14 · No fix listed CWE-200
Priority MEDIUM 64
The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (mem…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.32285 · Published 2015-10-14 · No fix listed CWE-119
Priority MEDIUM 60
Integer overflow in Microsoft Internet Explorer 8 and 9, JScript 5.8, and VBScript 5.8 on 64-bit platforms allows remote attackers to execute arbitrary code by leveraging an incorrect size calculation during object copyi…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.22184 · Published 2012-08-15 · No fix listed CWE-189
Priority MEDIUM 62
Multiple integer overflows in the Microsoft (1) JScript 5.6 through 5.8 and (2) VBScript 5.6 through 5.8 scripting engines allow remote attackers to execute arbitrary code via a crafted web page, aka "Scripting Memory Re…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.26221 · Published 2011-04-13 · No fix listed CWE-190