Microsoft Internet Explorer vulnerabilities

289 known CVE vulnerabilities in Microsoft Internet Explorer, translated and rated.

CVE-2017-8609High
A vulnerability in the JavaScript engine of Microsoft Internet Explorer allows an attacker to execute arbitrary code in the context of the current user. The issue occurs in Windows 10 and Windows Server 2016 when the engine improperly handles objects in memory.
CVE-2016-7283High
Microsoft Internet Explorer versions 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVE-2016-3384High
Microsoft Internet Explorer versions 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVE-2016-3353High
Microsoft Internet Explorer versions 9 through 11 mishandles .url files from the Internet zone, allowing remote attackers to bypass intended access restrictions via a crafted file.
CVE-2016-3324High
Microsoft Internet Explorer versions 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVE-2016-3290High
Microsoft Internet Explorer 11 contains a vulnerability that allows remote attackers to execute arbitrary code via a crafted web page. This is a memory corruption vulnerability in the browser.
CVE-2016-3288High
Microsoft Internet Explorer 11 contains a vulnerability that allows remote attackers to execute arbitrary code via a crafted web page, known as 'Internet Explorer Memory Corruption Vulnerability.'
CVE-2016-3243High
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVE-2016-3242High
Microsoft Internet Explorer versions 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Internet Explorer Memory Corruption Vulnerability.'
CVE-2016-3241High
Microsoft Internet Explorer versions 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a different vulnerability than CVE-2016-3240 and CVE-2016-3242.
CVE-2016-3240High
Microsoft Internet Explorer versions 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a memory corruption vulnerability in Internet Explorer.
CVE-2016-3211High
Microsoft Internet Explorer versions 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVE-2016-0199High
Microsoft Internet Explorer versions 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a different vulnerability than CVE-2016-0200 and CVE-2016-3211.
CVE-2016-0188High
The User Mode Code Integrity (UMCI) implementation in Device Guard in Microsoft Internet Explorer 11 allows remote attackers to bypass a code-signing protection mechanism via unspecified vectors, known as 'Internet Explorer Security Feature Bypass.'
CVE-2016-0166High
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVE-2016-0160High
Microsoft Internet Explorer 11 mishandles DLL loading, allowing local users to gain privileges via a crafted application.
CVE-2016-0159High
Microsoft Internet Explorer 9 contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted website.
CVE-2015-6184High
The CAttrArray object implementation in Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service via a malformed CSS token sequence in conjunction with modifications to HTML elements.
CVE-2016-0114High
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a different vulnerability than CVE-2016-0102, CVE-2016-0103, CVE-2016-0106, CVE-2016-0108, and CVE-2016-0109.
CVE-2016-0113High
Microsoft Internet Explorer versions 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Internet Explorer Memory Corruption Vulnerability.'
CVE-2016-0108High
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Internet Explorer Memory Corruption Vulnerability.'
CVE-2016-0106High
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVE-2016-0104High
Microsoft Internet Explorer 10 contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website, known as 'Internet Explorer Memory Corruption Vulnerability.'
CVE-2016-0103High
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Internet Explorer Memory Corruption Vulnerability'.
CVE-2016-0069High
Microsoft Internet Explorer versions 9 through 11 allow remote attackers to bypass the Same Origin Policy via unspecified vectors, leading to elevation of privilege.
CVE-2016-0068High
Microsoft Internet Explorer versions 9 through 11 allow remote attackers to bypass the Same Origin Policy via unspecified vectors, leading to elevation of privilege.
CVE-2016-0072High
Microsoft Internet Explorer versions 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a memory corruption vulnerability in Internet Explorer.
CVE-2016-0071High
Microsoft Internet Explorer 9 contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website, known as 'Internet Explorer Memory Corruption Vulnerability.'
CVE-2016-0064High
Microsoft Internet Explorer 10 contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website, known as 'Internet Explorer Memory Corruption Vulnerability.'
CVE-2016-0063High
Microsoft Internet Explorer versions 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a memory corruption vulnerability in Internet Explorer.
CVE-2015-6162High
Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Internet Explorer Memory Corruption Vulnerability'.
CVE-2015-6160High
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a different vulnerability than CVE-2015-6140, CVE-2015-6142, CVE-2015-6143, CVE-2015-6153, CVE-2015-6158, and CVE-2015-6159.
CVE-2015-6152High
Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Internet Explorer Memory Corruption Vulnerability.'
CVE-2015-6150High
Microsoft Internet Explorer versions 7 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a different vulnerability than CVE-2015-6154.
CVE-2015-6143High
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a memory corruption vulnerability.
CVE-2015-6141High
Microsoft Internet Explorer 9 contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service through a crafted website. This is a memory corruption vulnerability.
CVE-2015-6134High
Microsoft Internet Explorer 9 contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website. This is a memory corruption vulnerability.
CVE-2015-6045High
A use-after-free vulnerability in the CElement object implementation in Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted JavaScript that improperly interacts with the Cascading Style Sheets (CSS) empty-cells property for a TABLE element.
CVE-2015-6087High
Microsoft Internet Explorer versions 7 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVE-2015-6082High
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a memory corruption vulnerability.
CVE-2015-6081High
Microsoft Internet Explorer versions 8 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a different vulnerability than CVE-2015-6069.
CVE-2015-6080High
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Internet Explorer Memory Corruption Vulnerability'.
CVE-2015-6079High
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a memory corruption vulnerability.
CVE-2015-6077High
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a memory corruption vulnerability.
CVE-2015-6076High
Microsoft Internet Explorer versions 7 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a memory corruption vulnerability in Internet Explorer.
CVE-2015-6075High
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a memory corruption vulnerability.
CVE-2015-6074High
Microsoft Internet Explorer versions 7 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a memory corruption vulnerability in Internet Explorer.
CVE-2015-6072High
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a memory corruption vulnerability in the browser.
CVE-2015-6071High
Microsoft Internet Explorer versions 7 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a memory corruption vulnerability in Internet Explorer.
CVE-2015-6070High
Microsoft Internet Explorer versions 7 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a different vulnerability than CVE-2015-6066, CVE-2015-6071, CVE-2015-6074, CVE-2015-6076, and CVE-2015-6087.