IE
Product
IE
On CISA KEVExploited in the wild
201
CVEs
1
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 0Low 0
Watch
Add IE to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2012-4792 In wildKEV | 8.8 | Dec 30 | Microsoft Internet Explorer Use-After-Free Vulnerability Affected: 6.0 through 8.0 |
| CVE-2006-3730 | 8.8 | Jul 21 | Integer overflow in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a 0x7fffffff… Affected: 6.0 |
| CVE-2012-1545 | – | Mar 9 | Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, allows remote attackers to bypass Protected Mode or cause a denial of service (memory corruption) by leveraging… Affected: 10 |
| CVE-2010-5071 | – | Dec 7 | The JavaScript implementation in Microsoft Internet Explorer 8.0 and earlier does not properly restrict the set of values contained in the object returned by the getComputedStyle… Affected: 7.0.6000.16711; 8.0.7600.16385; 8.0b |
| CVE-2002-2435 | – | Dec 7 | The Cascading Style Sheets (CSS) implementation in Microsoft Internet Explorer 8.0 and earlier does not properly handle the :visited pseudo-class, which allows remote attackers to… Affected: 7.0.6000.16711; 8.0.7600.16385; 8.0b |
| CVE-2011-2383 | – | Jun 3 | Microsoft Internet Explorer 9 and earlier does not properly restrict cross-zone drag-and-drop actions, which allows user-assisted remote attackers to read cookie files via vectors… Affected: 9 |
| CVE-2011-2382 | – | Jun 3 | Microsoft Internet Explorer 8 and earlier, and Internet Explorer 9 beta, does not properly restrict cross-zone drag-and-drop actions, which allows user-assisted remote attackers… Affected: 9 |
| CVE-2010-2118 | – | Jun 1 | Microsoft Internet Explorer 6.0.2900.2180 and 8.0.7600.16385 allows remote attackers to cause a denial of service (resource consumption) via JavaScript code containing an infinite… Affected: 8.0.7600.16385 |
| CVE-2010-1991 | – | May 20 | Microsoft Internet Explorer 6.0.2900.2180, 7, and 8.0.7600.16385 executes a mail application in situations where an IFRAME element has a mailto: URL in its SRC attribute, which… Affected: 8.0.7600.16385 |
| CVE-2009-2576 | – | Jul 22 | Microsoft Internet Explorer 6.0.2900.2180 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via a long Unicode string argument to the… Affected: 2.0; 2.0_beta; 3.0; 3.0; 3.0.1; 3.01; +34 more |
| CVE-2009-2433 | – | Jul 10 | Stack-based buffer overflow in the AddFavorite method in Microsoft Internet Explorer allows remote attackers to cause a denial of service (application crash) and possibly have… Affected: 8.0b |
| CVE-2009-2069 | – | Jun 15 | Microsoft Internet Explorer before 8 displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which allows man-in-the-middle… Affected: 5.0; 5.0; 5.22; 6.0; 6.0 |
| CVE-2009-2057 | – | Jun 15 | Microsoft Internet Explorer before 8 uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server, which… Affected: 5.0; 5.0; 5.22; 6.0; 6.0 |
| CVE-2009-0552 | – | Apr 15 | Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6 SP1, 6 on Windows XP SP2 and SP3, and 6 on Windows Server 2003 SP1 and SP2 allows remote attackers to execute… Affected: 6.0 |
| CVE-2009-0550 | – | Apr 15 | Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008; and WinINet in Microsoft Internet… Affected: 6.0 |
| CVE-2008-2281 | – | May 18 | Cross-zone scripting vulnerability in the Print Table of Links feature in Internet Explorer 6.0, 7.0, and 8.0b allows user-assisted remote attackers to inject arbitrary web script… Affected: 8.0b |
| CVE-2008-1085 | – | Apr 8 | Use-after-free vulnerability in Microsoft Internet Explorer 5.01 SP4, 6 through SP1, and 7 allows remote attackers to execute arbitrary code via a crafted data stream that… Affected: 5.01; 6; 6; 6; 7; 7; +1 more |
| CVE-2008-0076 | – | Feb 12 | Unspecified vulnerability in Microsoft Internet Explorer 5.01, 6 SP1 and SP2, and 7 allows remote attackers to execute arbitrary code via crafted HTML layout combinations, aka… Affected: 5.01; 6; 6; 6; 7; 7 |
| CVE-2008-0078 | – | Feb 12 | Unspecified vulnerability in an ActiveX control (dxtmsft.dll) in Microsoft Internet Explorer 5.01, 6 SP1 and SP2, and 7 allows remote attackers to execute arbitrary code via a… Affected: 5.01; 6; 6; 6; 7; 7 |
| CVE-2007-5347 | – | Dec 12 | Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via "unexpected method calls to HTML objects," aka "DHTML Object Memory Corruption… Affected: 5.x; 6.0; 6.0 |
| CVE-2007-3903 | – | Dec 12 | Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code via uninitialized or deleted objects used in repeated calls to the (1) cloneNode or (2)… Affected: 6.0; 6.0 |
| CVE-2007-3902 | – | Dec 12 | Use-after-free vulnerability in the CRecalcProperty function in mshtml.dll in Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code by… Affected: 5.x; 6.0; 6.0 |
| CVE-2007-5344 | – | Dec 12 | Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via a crafted website using Javascript that creates, modifies, deletes, and accesses… Affected: 5.x; 6.0; 6.0 |
| CVE-2007-4848 | – | Sep 12 | Microsoft Internet Explorer 4.0 through 7 allows remote attackers to determine the existence of local files that have associated images via a res:// URI in the src property of a… Affected: 4.x; 5.0; 5.0; 5.0_ta3; 5.x; 6.0; +1 more |
| CVE-2007-0943 | – | Aug 14 | Unspecified vulnerability in Internet Explorer 5.01 and 6 SP1 allows remote attackers to execute arbitrary code via crafted Cascading Style Sheets (CSS) strings that trigger… Affected: 6.0 |
| CVE-2007-3550 | – | Jul 3 | Microsoft Internet Explorer 6.0 and 7.0 allows remote attackers to fill Zones with arbitrary domains using certain metacharacters such as wildcards via JavaScript, which results… Affected: 6.0; 6.0 |
| CVE-2007-0944 | – | May 8 | Unspecified vulnerability in the CTableCol::OnPropertyChange method in Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Windows 2000 SP4; and 6 on Windows XP… Affected: 6.0; 6.0; 6.0; 6.0 |
| CVE-2007-0942 | – | May 8 | Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 or SP2; and possibly 7 on Windows Vista… Affected: 6.0 |
| CVE-2007-1765 | – | Mar 30 | Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a… Affected: 7.0 |
| CVE-2007-1499 | – | Mar 17 | Microsoft Internet Explorer 7.0 on Windows XP and Vista allows remote attackers to conduct phishing attacks and possibly execute arbitrary code via a res: URI to navcancl.htm with… Affected: 7.0; 7.0 |
| CVE-2006-7065 | – | Mar 2 | Microsoft Internet Explorer allows remote attackers to cause a denial of service (crash) via an IFRAME with a certain XML file and XSL stylesheet that triggers a crash in… Affected: 6; 6; 6; 6; 6; 6; +23 more |
| CVE-2007-1114 | – | Feb 26 | The child frames in Microsoft Internet Explorer 7 inherit the default charset from the parent window when a charset is not specified in an HTTP Content-Type header or META tag,… Affected: 7.0 |
| CVE-2007-1091 | – | Feb 26 | Microsoft Internet Explorer 7 allows remote attackers to prevent users from leaving a site, spoof the address bar, and conduct phishing and other attacks via onUnload Javascript… Affected: 6.0; 6.0; 7.0 |
| CVE-2006-7030 | – | Feb 23 | Microsoft Internet Explorer 6 SP2 and earlier allows remote attackers to cause a denial of service (crash) via certain malformed HTML, possibly involving applet and base tags… Affected: 6.0 |
| CVE-2007-0219 | – | Feb 13 | Microsoft Internet Explorer 5.01, 6, and 7 uses certain COM objects from (1) Msb1fren.dll, (2) Htmlmm.ocx, and (3) Blnmgrps.dll as ActiveX controls, which allows remote attackers… Affected: 6.0 |
| CVE-2006-4697 | – | Feb 13 | Microsoft Internet Explorer 5.01, 6, and 7 uses certain COM objects from Imjpcksid.dll as ActiveX controls, which allows remote attackers to execute arbitrary code via unspecified… Affected: 6.0 |
| CVE-2007-0217 | – | Feb 13 | The wininet.dll FTP client code in Microsoft Internet Explorer 5.01 and 6 might allow remote attackers to execute arbitrary code via an FTP server response of a specific length… Affected: 6.0 |
| CVE-2007-0811 | – | Feb 7 | Microsoft Internet Explorer 6.0 SP1 on Windows 2000, and 6.0 SP2 on Windows XP, allows remote attackers to cause a denial of service (NULL pointer dereference and application… Affected: 6; 6.0 |
| CVE-2007-0612 | – | Jan 31 | Multiple ActiveX controls in Microsoft Windows 2000, XP, 2003, and Vista allows remote attackers to cause a denial of service (Internet Explorer crash) by accessing the bgColor,… Affected: 5.0_ta3; 6.0; 7.0 |
| CVE-2007-0356 | – | Jan 19 | The Common Controls Replacement Project (CCRP) FolderTreeview (FTV) ActiveX control (ccrpftv6.ocx) allows remote attackers to cause a denial of service (Internet Explorer 7 crash)… Affected: 7.0 |
| CVE-2007-0024 | – | Jan 9 | Integer overflow in the Vector Markup Language (VML) implementation (vgx.dll) in Microsoft Internet Explorer 5.01, 6, and 7 on Windows 2000 SP4, XP SP2, Server 2003, and Server… Affected: 6.0 |
| CVE-2006-6659 | – | Dec 20 | The Microsoft Office Outlook Recipient ActiveX control (ole32.dll) in Windows XP SP2 allows remote attackers to cause a denial of service (Internet Explorer 7 hang) via crafted… Affected: 7.0 |
| CVE-2006-5577 | – | Dec 12 | Microsoft Internet Explorer 6 and earlier allows remote attackers to obtain sensitive information via unspecified uses of the OBJECT HTML tag, which discloses the absolute path of… Affected: through 6 |
| CVE-2006-5578 | – | Dec 12 | Microsoft Internet Explorer 6 and earlier allows remote attackers to read Temporary Internet Files (TIF) and obtain sensitive information via unspecified vectors involving certain… Affected: through 6 |
| CVE-2006-5913 | – | Nov 15 | Microsoft Internet Explorer 7 allows remote attackers to (1) cause a security certificate from a secure web site to appear invalid via a link to res://ieframe.dll/sslnavcancel.htm… Affected: 7.0 |
| CVE-2006-5884 | – | Nov 14 | Multiple unspecified vulnerabilities in DirectAnimation ActiveX controls for Microsoft Internet Explorer 5.01 through 6 have unknown impact and remote attack vectors, possibly… Affected: 6 |
| CVE-2006-4687 | – | Nov 14 | Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via crafted layout combinations involving DIV tags and HTML CSS float properties that… Affected: 6 |
| CVE-2006-5805 | – | Nov 8 | Microsoft Internet Explorer 7 allows remote attackers to cause a security certificate from a secure web site to appear invalid via a link to res://ieframe.dll/invalidcert.htm with… Affected: 7.0 |
| CVE-2006-5544 | – | Oct 26 | Visual truncation vulnerability in Microsoft Internet Explorer 7 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a malicious URL… Affected: 7.0 |
| CVE-2006-4888 | – | Sep 19 | Microsoft Internet Explorer 6 and earlier allows remote attackers to cause a denial of service (application hang) via a CSS-formatted HTML INPUT element within a DIV element that… Affected: through 6 |