IE
Product
IE
On CISA KEVExploited in the wild
201
CVEs
1
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 0Low 0
Watch
Add IE to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2006-4777 | – | Sep 14 | Heap-based buffer overflow in the DirectAnimation Path Control (DirectAnimation.PathControl) COM object (daxctle.ocx) for Internet Explorer 6.0 SP1, on Chinese and possibly other… Affected: 6.0 |
| CVE-2006-3873 | – | Sep 12 | Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060912, allows remote attackers… Affected: 6.0 |
| CVE-2006-4560 | – | Sep 6 | Internet Explorer 6 on Windows XP SP2 allows remote attackers to execute arbitrary JavaScript in the context of the browser's session with an arbitrary intranet web server, by… Affected: 6 |
| CVE-2006-4495 | – | Aug 31 | Microsoft Internet Explorer allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code by instantiating certain Windows 2000… Affected: 6.0 |
| CVE-2006-4446 | – | Aug 30 | Heap-based buffer overflow in DirectAnimation.PathControl COM object (daxctle.ocx) in Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service and… Affected: 6.0 |
| CVE-2006-4301 | – | Aug 23 | Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) via a long Color attribute in multiple DirectX Media Image DirectX Transforms… Affected: 6.0 |
| CVE-2006-3869 | – | Aug 23 | Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060824, allows remote attackers… Affected: 6.0 |
| CVE-2006-4219 | – | Aug 18 | The Terminal Services COM object (tsuserex.dll) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by instantiating it as an ActiveX… Affected: 6.0 |
| CVE-2006-4193 | – | Aug 17 | Microsoft Internet Explorer 6.0 SP1 and possibly other versions allows remote attackers to cause a denial of service and possibly execute arbitrary code by instantiating COM… Affected: 6.0; 6.0 |
| CVE-2006-3643 | – | Aug 9 | Cross-site scripting (XSS) vulnerability in Internet Explorer 5.01 and 6 in Microsoft Windows 2000 SP4 permits access to local "HTML-embedded resource files" in the Microsoft… Affected: 6 |
| CVE-2006-3640 | – | Aug 9 | Microsoft Internet Explorer 5.01 and 6 allows certain script to persist across navigations between pages, which allows remote attackers to obtain the window location of visited… Affected: 6 |
| CVE-2006-3639 | – | Aug 9 | Microsoft Internet Explorer 5.01 and 6 does not properly identify the originating domain zone when handling redirects, which allows remote attackers to read cross-domain web pages… Affected: 6 |
| CVE-2006-3451 | – | Aug 8 | Microsoft Internet Explorer 5 SP4 and 6 do not properly garbage collect when "multiple imports are used on a styleSheets collection" to construct a chain of Cascading Style Sheets… Affected: 5.0; 6 |
| CVE-2006-3638 | – | Aug 8 | Microsoft Internet Explorer 5.01 and 6 does not properly handle uninitialized COM objects, which allows remote attackers to cause a denial of service (memory corruption) and… Affected: 6.0; 6.0 |
| CVE-2006-3637 | – | Aug 8 | Microsoft Internet Explorer 5.01 SP4 and 6 does not properly handle various HTML layout component combinations, which allows user-assisted remote attackers to execute arbitrary… Affected: 6 |
| CVE-2006-3450 | – | Aug 8 | Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code by using the document.getElementByID Javascript function to access crafted Cascading Style Sheet… Affected: 6.0 |
| CVE-2006-3943 | – | Jul 31 | Stack-based buffer overflow in NDFXArtEffects in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) via long (1)… Affected: 6 |
| CVE-2006-3944 | – | Jul 31 | Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) via a (1) Forms.ListBox.1 or (2) Forms.ListBox.1 object with the… Affected: 6 |
| CVE-2006-3910 | – | Jul 28 | Internet Explorer 6 on Windows XP SP2, when Outlook is installed, allows remote attackers to cause a denial of service (crash) by calling the NewDefaultItem function of an OVCtl… Affected: 6.0 |
| CVE-2006-3658 | – | Jul 18 | Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by accessing the object references of a FolderItem ActiveX object, which triggers a null… Affected: 6 |
| CVE-2006-3659 | – | Jul 18 | Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the location or URL property of a MHTMLFile ActiveX object Affected: 6 |
| CVE-2006-3657 | – | Jul 18 | Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (stack overflow exception) via a DXImageTransform.Microsoft.Gradient ActiveX object with a long… Affected: 6 |
| CVE-2006-3513 | – | Jul 11 | danim.dll in Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (application crash) by accessing the Data property of a DirectAnimation DAUserData… Affected: 6.0; 6.0; 6.0; 6.0 |
| CVE-2006-3510 | – | Jul 11 | The Remote Data Service Object (RDS.DataControl) in Microsoft Internet Explorer 6 on Windows 2000 allows remote attackers to cause a denial of service (crash) via a series of… Affected: 6.0; 6.0 |
| CVE-2006-3472 | – | Jul 10 | Microsoft Internet Explorer 6.0 and 6.0 SP1 allows remote attackers to cause a denial of service via an HTML page with an A tag containing a long title attribute Affected: 6.0 |
| CVE-2006-3471 | – | Jul 10 | Microsoft Internet Explorer 6 on Windows XP allows remote attackers to cause a denial of service (crash) via a table with a frameset as a child, which triggers a null dereference,… Affected: 6.0; 6.0 |
| CVE-2006-3354 | – | Jul 6 | Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the Filter property of an ADODB.Recordset ActiveX object to certain values… Affected: 6; 6; 6; 6; 6; 6; +8 more |
| CVE-2006-2385 | – | Jun 13 | Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows user-assisted remote attackers to execute arbitrary code via a crafted web page that… Affected: 6.0 |
| CVE-2006-2378 | – | Jun 13 | Buffer overflow in the ART Image Rendering component (jgdw400.dll) in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1 and earlier, and Windows 98 and Me allows remote attackers… Affected: 6.0 |
| CVE-2006-1303 | – | Jun 13 | Multiple unspecified vulnerabilities in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allow remote attackers to execute arbitrary code by instantiating certain COM… Affected: 5.0.1; 5.0.1; 5.0.1; 5.0.1; 6.0 |
| CVE-2006-2900 | – | Jun 7 | Internet Explorer 6 allows user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the target filename in a text box and using the… Affected: 5.01; 6; 6; 6; 6; 6; +4 more |
| CVE-2006-2766 | – | Jun 2 | Buffer overflow in INETCOMM.DLL, as used in Microsoft Internet Explorer 6.0 through 6.0 SP2, Windows Explorer, Outlook Express 6, and possibly other programs, allows remote… Affected: 6.0; 6.0 |
| CVE-2006-2094 | – | Apr 29 | Microsoft Internet Explorer before Windows XP Service Pack 2 and Windows Server 2003 Service Pack 1, when Prompt is configured in Security Settings, uses modal dialogs to verify… Affected: 5; 5.0; 5.0; 5.0; 5.0.1; 5.0.1; +4 more |
| CVE-2006-1719 | – | Apr 11 | Internet Explorer 6 allows remote attackers to cause a denial of service (application crash) via any scrollbar Cascading Style Sheets (CSS) property Affected: 6 |
| CVE-2006-1192 | – | Apr 11 | Microsoft Internet Explorer 5.01 through 6 allows remote attackers to conduct phishing attacks by spoofing the address bar and other parts of the trust UI via unknown methods that… Affected: 5.01; 6; 6; 6; 6; 6; +1 more |
| CVE-2006-1188 | – | Apr 11 | Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via HTML elements with a certain crafted tag, which leads to memory corruption Affected: 5.1; 5.2.3; 6; 6; 6; 6; +5 more |
| CVE-2006-1186 | – | Apr 11 | Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via by instantiating the (1) Mdt2gddr.dll, (2) Mdt2dd.dll, and (3) Mdt2gddo.dll COM… Affected: 5.0.1; 5.0.1; 5.0.1; 5.0.1; 5.01; 6 |
| CVE-2006-1185 | – | Apr 11 | Unspecified vulnerability in Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via certain invalid HTML that causes memory corruption Affected: 5.01; 6; 6; 6; 6; 6; +1 more |
| CVE-2006-1388 | – | Mar 24 | Unspecified vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to execute HTA files via unknown vectors Affected: 6.0; 6.0 |
| CVE-2006-1359 | – | Mar 23 | Microsoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a certain createTextRange call on a… Affected: 6.0; 6.0; 7.0 |
| CVE-2006-1245 | – | Mar 17 | Buffer overflow in mshtml.dll in Microsoft Internet Explorer 6.0.2900.2180, and probably other versions, allows remote attackers to execute arbitrary code via an HTML tag with a… Affected: 6.0 |
| CVE-2006-0753 | – | Feb 18 | Memory leak in Microsoft Internet Explorer 6 for Windows XP Service Pack 2 allows remote attackers to cause a denial of service (memory consumption) via JavaScript that uses… Affected: 6 |
| CVE-2006-0544 | – | Feb 4 | urlmon.dll in Microsoft Internet Explorer 7.0 beta 2 (aka 7.0.5296.0) allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code… Affected: 7.0 |
| CVE-2006-0057 | – | Jan 27 | Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to bypass the Kill bit settings for dangerous ActiveX controls via unknown vectors involving crafted HTML,… Affected: 6 |
| CVE-2005-4827 | – | Dec 31 | Internet Explorer 6.0, and possibly other versions, allows remote attackers to bypass the same origin security policy and make requests outside of the intended domain by calling… Affected: 6; 6; 6; 6; 6; 6; +16 more |
| CVE-2005-4717 | – | Dec 31 | Microsoft Internet Explorer 6.0 on Windows NT 4.0 SP6a, Windows 2000 SP4, Windows XP SP1, Windows XP SP2, and Windows Server 2003 SP1 allows remote attackers to cause a denial of… Affected: 6.0; 6.0 |
| CVE-2005-4679 | – | Dec 31 | Internet Explorer 6 for Windows XP Service Pack 2 allows remote attackers to spoof the URL in the status bar via the title in an image in a link to a trusted site within a form to… Affected: 6 |
| CVE-2005-3240 | – | Dec 31 | Race condition in Microsoft Internet Explorer allows user-assisted attackers to overwrite arbitrary files and possibly execute code by tricking a user into performing a… Affected: 6.0 |
| CVE-2005-4269 | – | Dec 15 | mshtml.dll in Microsoft Windows XP, Server 2003, and Internet Explorer 6.0 SP1 allows attackers to cause a denial of service (access violation) by causing mshtml.dll to process… Affected: 6.0 |
| CVE-2005-2829 | – | Dec 14 | Multiple design errors in Microsoft Internet Explorer 5.01, 5.5, and 6 allow user-assisted attackers to execute arbitrary code by (1) overlaying a malicious new window above a… Affected: 6.0 |