CVE-2015-0026: Critical severity internet explorer vulnerability

Published Feb 11, 2015

Updated

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0017, CVE-2015-0020, CVE-2015-0022, CVE-2015-0030, CVE-2015-0031, CVE-2015-0036, and CVE-2015-0041.

Affected Software

6 affected components

Microsoft Internet Explorer=6

Microsoft Internet Explorer=7

Microsoft Internet Explorer=8

Microsoft Internet Explorer=9

Microsoft Internet Explorer=10

Microsoft Internet Explorer=11

Event History

Feb 11, 2015

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-0026?

CVE-2015-0026 is rated as critical because it allows attackers to execute arbitrary code remotely.

How do I fix CVE-2015-0026?

To fix CVE-2015-0026, apply the relevant security updates provided by Microsoft for Internet Explorer.

Which versions of Internet Explorer are affected by CVE-2015-0026?

CVE-2015-0026 affects Internet Explorer versions 6 through 11.

What type of attack does CVE-2015-0026 facilitate?

CVE-2015-0026 facilitates remote code execution or denial of service attacks through memory corruption.

Is there a workaround for CVE-2015-0026?

While applying patches is the best solution, temporarily disabling Active Scripting can act as a workaround for CVE-2015-0026.