Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Microsoft Internet ExplorerMicrosoft Internet Explorer Memory Corruption Vulnerability

Risk 94
Severity
8.8
Exploited
Buffer Overflow
AV:N/AC:M/Au:N/C:C/I:C/A:C

Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," as exploited in the wild in August 2015.

1 / 2
First published (updated )
CVE-2015-2502

Microsoft ExcelInfoleak

Risk 22
Severity
4.3
Infoleak
AV:N/AC:M/Au:N/C:P/I:N/A:N

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10, Excel 2007 SP3, PowerPoint 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Visio 2010 SP2, Word 2010 SP2, Excel 2013 SP1, PowerPoint 2013 SP1, Visio 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Visio 2013 RT SP1, Word 2013 RT SP1, and Internet Explorer 7 through 11 allow remote attackers to gain privileges and obtain sensitive information via a crafted command-line parameter to an Office application or Notepad, as demonstrated by a transition from Low Integrity to Medium Integrity, aka "Unsafe Command Line Parameter Passing Vulnerability."

First published (updated )
CVE-2015-2423

Microsoft Internet ExplorerBuffer Overflow

Risk 79
Severity
9.3
Buffer Overflow
AV:N/AC:M/Au:N/C:C/I:C/A:C

Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2388.

First published (updated )
CVE-2015-1738

Microsoft Internet ExplorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause …

Risk 79
Severity
9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1740, CVE-2015-1744, CVE-2015-1745, and CVE-2015-1766.

First published (updated )
CVE-2015-1735

Microsoft Internet ExplorerMicrosoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted we…

Risk 47
Severity
6.8
AV:N/AC:M/Au:N/C:P/I:P/A:P

Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability," a different vulnerability than CVE-2015-1748.

First published (updated )
CVE-2015-1743

Microsoft Internet ExplorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause …

Risk 79
Severity
9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1735, CVE-2015-1740, CVE-2015-1745, and CVE-2015-1766.

First published (updated )
CVE-2015-1744

Microsoft Internet ExplorerMicrosoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of…

Risk 79
Severity
9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C

Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."

First published (updated )
CVE-2015-1754

Microsoft Internet ExplorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause …

Risk 79
Severity
9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1735, CVE-2015-1740, CVE-2015-1744, and CVE-2015-1766.

First published (updated )
CVE-2015-1745

Microsoft Internet ExplorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause …

Risk 79
Severity
9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1735, CVE-2015-1740, CVE-2015-1744, and CVE-2015-1745.

First published (updated )
CVE-2015-1766

Microsoft Internet ExplorerMicrosoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted we…

Risk 47
Severity
6.8
AV:N/AC:M/Au:N/C:P/I:P/A:P

Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability," a different vulnerability than CVE-2015-1743.

First published (updated )
CVE-2015-1748

Microsoft Internet ExplorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause …

Risk 79
Severity
9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1735, CVE-2015-1744, CVE-2015-1745, and CVE-2015-1766.

First published (updated )
CVE-2015-1740

Microsoft Internet ExplorerBuffer Overflow

Risk 79
Severity
9.3
Buffer Overflow
AV:N/AC:M/Au:N/C:C/I:C/A:C

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1694.

First published (updated )
CVE-2015-1710

Microsoft Internet ExplorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to gain privileges via a crafted we…

Risk 47
Severity
6.8
AV:N/AC:M/Au:N/C:P/I:P/A:P

Microsoft Internet Explorer 6 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability," a different vulnerability than CVE-2015-1703.

First published (updated )
CVE-2015-1704

Microsoft Internet ExplorerBuffer Overflow

Risk 79
Severity
9.3
Buffer Overflow
AV:N/AC:M/Au:N/C:C/I:C/A:C

Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1691.

First published (updated )
CVE-2015-1712

Microsoft Internet ExplorerBuffer Overflow

Risk 79
Severity
9.3
Buffer Overflow
AV:N/AC:M/Au:N/C:C/I:C/A:C

Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."

First published (updated )
CVE-2015-1709

Microsoft Internet ExplorerBuffer Overflow

Risk 79
Severity
9.3
Buffer Overflow
AV:N/AC:M/Au:N/C:C/I:C/A:C

Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."

First published (updated )
CVE-2015-1708

Microsoft Internet ExplorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause …

Risk 79
Severity
9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-6341.

First published (updated )
CVE-2014-4143

Microsoft Internet ExplorerMicrosoft Internet Explorer Privilege Escalation Vulnerability

Risk 94
Severity
8.8
Exploited
AV:N/AC:M/Au:N/C:P/I:P/A:P

Microsoft Internet Explorer contains an unspecified vulnerability that allows remote attackers to gain privileges via a crafted web site.

1 / 2
Source: CISA
First published (updated )
CVE-2014-4123

Microsoft Internet ExplorerInput Validation

Risk 79
Severity
9.3
Input Validation
AV:N/AC:M/Au:N/C:C/I:C/A:C

Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."

First published (updated )
CVE-2014-4134

Microsoft Internet ExplorerMicrosoft Internet Explorer 8 through 11 allows remote attackers to bypass the ASLR protection mecha…

Risk 22
Severity
4.3
AV:N/AC:M/Au:N/C:P/I:N/A:N

Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulnerability."

First published (updated )
CVE-2014-4140

Microsoft Internet ExplorerBuffer Overflow

Risk 79
Severity
9.3
Buffer Overflow
AV:N/AC:M/Au:N/C:C/I:C/A:C

Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."

First published (updated )
CVE-2014-4141

Microsoft Internet ExplorerMicrosoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause …

Risk 79
Severity
9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C

Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."

First published (updated )
CVE-2014-4127

Microsoft Internet ExplorerInput Validation

Risk 79
Severity
9.3
Input Validation
AV:N/AC:M/Au:N/C:C/I:C/A:C

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."

First published (updated )
CVE-2014-4128

Microsoft Internet ExplorerMicrosoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted we…

Risk 47
Severity
6.8
AV:N/AC:M/Au:N/C:P/I:P/A:P

Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability," a different vulnerability than CVE-2014-4123.

First published (updated )
CVE-2014-4124

Microsoft Internet ExplorerInput Validation

Risk 79
Severity
9.3
Input Validation
AV:N/AC:M/Au:N/C:C/I:C/A:C

Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."

First published (updated )
CVE-2014-4129

Microsoft Internet ExplorerBuffer Overflow

Risk 79
Severity
9.3
Buffer Overflow
AV:N/AC:M/Au:N/C:C/I:C/A:C

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2799, CVE-2014-4059, CVE-2014-4065, CVE-2014-4079, CVE-2014-4081, CVE-2014-4083, CVE-2014-4085, CVE-2014-4088, CVE-2014-4090, CVE-2014-4094, CVE-2014-4097, CVE-2014-4100, CVE-2014-4103, CVE-2014-4104, CVE-2014-4106, CVE-2014-4107, CVE-2014-4108, CVE-2014-4109, CVE-2014-4110, and CVE-2014-4111.

First published (updated )
CVE-2014-4105

Microsoft Internet ExplorerBuffer Overflow

Risk 79
Severity
9.3
Buffer Overflow
AV:N/AC:M/Au:N/C:C/I:C/A:C

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2799, CVE-2014-4059, CVE-2014-4065, CVE-2014-4079, CVE-2014-4081, CVE-2014-4083, CVE-2014-4085, CVE-2014-4088, CVE-2014-4090, CVE-2014-4094, CVE-2014-4097, CVE-2014-4100, CVE-2014-4103, CVE-2014-4104, CVE-2014-4105, CVE-2014-4107, CVE-2014-4108, CVE-2014-4109, CVE-2014-4110, and CVE-2014-4111.

First published (updated )
CVE-2014-4106

Microsoft Internet ExplorerBuffer Overflow

Risk 79
Severity
9.3
Buffer Overflow
AV:N/AC:M/Au:N/C:C/I:C/A:C

Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-4098.

First published (updated )
CVE-2014-4092

Microsoft Internet ExplorerBuffer Overflow

Risk 79
Severity
9.3
Buffer Overflow
AV:N/AC:M/Au:N/C:C/I:C/A:C

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2799, CVE-2014-4059, CVE-2014-4065, CVE-2014-4079, CVE-2014-4081, CVE-2014-4085, CVE-2014-4088, CVE-2014-4090, CVE-2014-4094, CVE-2014-4097, CVE-2014-4100, CVE-2014-4103, CVE-2014-4104, CVE-2014-4105, CVE-2014-4106, CVE-2014-4107, CVE-2014-4108, CVE-2014-4109, CVE-2014-4110, and CVE-2014-4111.

First published (updated )
CVE-2014-4083

Microsoft Internet ExplorerBuffer Overflow

Risk 79
Severity
9.3
Buffer Overflow
AV:N/AC:M/Au:N/C:C/I:C/A:C

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2799, CVE-2014-4065, CVE-2014-4079, CVE-2014-4081, CVE-2014-4083, CVE-2014-4085, CVE-2014-4088, CVE-2014-4090, CVE-2014-4094, CVE-2014-4097, CVE-2014-4100, CVE-2014-4103, CVE-2014-4104, CVE-2014-4105, CVE-2014-4106, CVE-2014-4107, CVE-2014-4108, CVE-2014-4109, CVE-2014-4110, and CVE-2014-4111.

First published (updated )
CVE-2014-4059

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203