IE
Product
IE
On CISA KEVExploited in the wild
201
CVEs
1
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 0Low 0
Watch
Add IE to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2005-2830 | – | Dec 14 | Microsoft Internet Explorer 5.01, 5.5, and 6, when using an HTTPS proxy server that requires Basic Authentication, sends URLs in cleartext, which allows remote attackers to obtain… Affected: 6.0 |
| CVE-2005-2831 | – | Dec 14 | Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with… Affected: 6.0; 6.0 |
| CVE-2005-4089 | – | Dec 8 | Microsoft Internet Explorer allows remote attackers to bypass cross-domain security restrictions and obtain sensitive information by using the @import directive to download files… Affected: 6.0; 6.0 |
| CVE-2005-2126 | – | Oct 21 | The FTP client in Windows XP SP1 and Server 2003, and Internet Explorer 6 SP1 on Windows 2000 SP4, when "Enable Folder View for FTP Sites" is enabled and the user manually… Affected: 6.0 |
| CVE-2005-1989 | – | Aug 10 | Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to obtain information and possibly execute code when browsing from a web site to a web folder… Affected: 6 |
| CVE-2005-1990 | – | Aug 10 | Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded… Affected: 6 |
| CVE-2005-1988 | – | Aug 10 | Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to execute arbitrary code via a web site or an HTML e-mail containing a crafted JPEG image… Affected: 6 |
| CVE-2005-2308 | – | Jul 19 | The JPEG decoder in Microsoft Internet Explorer allows remote attackers to cause a denial of service (CPU consumption or crash) and possibly execute arbitrary code via certain… Affected: 6.0 |
| CVE-2005-2087 | – | Jul 5 | Internet Explorer 5.01 SP4 up to 6 on various Windows operating systems, including IE 6.0.2900.2180 on Windows XP, allows remote attackers to cause a denial of service… Affected: 5.1; 5.2.3; 6 |
| CVE-2005-1791 | – | May 28 | Microsoft Internet Explorer 6 SP2 (6.0.2900.2180) crashes when the user attempts to add a URI to the restricted zone, in which the full domain name of the URI begins with numeric… Affected: 6.0 |
| CVE-2005-0553 | – | May 2 | Race condition in the memory management routines in the DHTML object processor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code… Affected: 6.0 |
| CVE-2005-0500 | – | May 2 | Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to spoof the domain name of a URL in a titlebar for a script-initiated popup window, which could facilitate… Affected: 6.0; 6.0 |
| CVE-2005-0056 | – | May 2 | Internet Explorer 5.01, 5.5, and 6 does not properly validate certain URLs in Channel Definition Format (CDF) files, which allows remote attackers to obtain sensitive information… Affected: 6 |
| CVE-2005-0055 | – | May 2 | Internet Explorer 5.01, 5.5, and 6 does not properly validate buffers when handling certain DHTML methods including the createControlRange Javascript function, which allows remote… Affected: 6.0; 6.0 |
| CVE-2005-0054 | – | May 2 | Internet Explorer 5.01, 5.5, and 6 allows remote attackers to spoof a less restrictive security zone and execute arbitrary code via an HTML page containing URLs that contain… Affected: 6 |
| CVE-2005-0053 | – | May 2 | Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via drag and drop events, aka the "Drag-and-Drop Vulnerability." Affected: 6.0; 6.0 |
| CVE-2005-0110 | – | Jan 14 | Internet Explorer 6 on Windows XP SP2 allows remote attackers to bypass the file download warning dialog and possibly trick an unknowledgeable user into executing arbitrary code… Affected: 6.0 |
| CVE-2004-2219 | – | Dec 31 | Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar to facilitate phishing attacks via Javascript that uses an invalid URI, modifies the Location field,… Affected: 6.0 |
| CVE-2004-2434 | – | Dec 31 | Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (browser crash) via a link with "::{" (colon colon left brace), which triggers a null… Affected: 6.0 |
| CVE-2004-2383 | – | Dec 31 | Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to bypass cross-frame scripting restrictions and capture keyboard events from other domains via an HTML… Affected: 6.0 |
| CVE-2004-2291 | – | Dec 31 | Microsoft Windows Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code via an embedded script that uses Shell Helper objects and a shortcut (link) to… Affected: 6.0 |
| CVE-2004-2179 | – | Dec 31 | asycpict.dll, as used in Microsoft products such as Front Page 97 and 98, allows remote attackers to cause a denial of service (hang) via a JPEG image with maximum height and… Affected: 3.0.1 |
| CVE-2004-1166 | – | Dec 31 | CRLF injection vulnerability in Microsoft Internet Explorer 6.0.2800.1106 and earlier allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a… Affected: 6.0; 6.0 |
| CVE-2004-1155 | – | Dec 31 | Internet Explorer 5.01 through 6 allows remote attackers to spoof arbitrary web sites by injecting content from one window into another window whose name is known but resides in a… Affected: 5.0.1; 5.0.1; 5.0.1; 5.0.1; 5.2.3; 6.0; +2 more |
| CVE-2004-1104 | – | Dec 31 | Microsoft Internet Explorer 6.0 SP2 allows remote attackers to spoof a legitimate URL in the status bar and conduct a phishing attack via a web page that contains a BASE element… Affected: 6.0 |
| CVE-2004-1050 | – | Dec 31 | Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements,… Affected: 6.0 |
| CVE-2004-0985 | – | Dec 31 | Internet Explorer 6.x on Windows XP SP2 allows remote attackers to execute arbitrary code, as demonstrated using a document with a draggable file type such as .xml, .doc, .py,… Affected: 6.0 |
| CVE-2004-0979 | – | Dec 31 | Internet Explorer on Windows XP does not properly modify the "Drag and Drop or copy and paste files" setting when the user sets it to "Disable" or "Prompt," which may enable… Affected: 6.0; 6.0 |
| CVE-2004-0867 | – | Dec 23 | Mozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform… Affected: 6.0; 6.0 |
| CVE-2004-0842 | – | Dec 23 | Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (application crash from "memory corruption") via certain… Affected: 6.0 |
| CVE-2004-0841 | – | Dec 23 | Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use drag-and-drop actions in a popup window,… Affected: 6.0 |
| CVE-2004-0284 | – | Nov 23 | Microsoft Internet Explorer 6.0, Outlook 2002, and Outlook 2003 allow remote attackers to cause a denial of service (CPU consumption), if "Do not save encrypted pages to disk" is… Affected: 6.0 |
| CVE-2004-1331 | – | Nov 16 | The execCommand method in Microsoft Internet Explorer 6.0 SP2 allows remote attackers to bypass the "File Download - Security Warning" dialog and save arbitrary files with… Affected: 6.0; 6.0 |
| CVE-2004-0845 | – | Nov 3 | Internet Explorer 5.01, 5.5, and 6 does not properly cache SSL content, which allows remote attackers to obtain information or spoof content via a web site with the same host name… Affected: 6 |
| CVE-2004-0844 | – | Nov 3 | Internet Explorer 6 on Double Byte Character Set (DBCS) systems allows remote attackers to alter displayed address bars and spoof web pages via a URL containing special… Affected: 6 |
| CVE-2004-0843 | – | Nov 3 | Internet Explorer 5.5 and 6 does not properly handle plug-in navigation, which allows remote attackers to alter displayed address bars and thereby spoof web pages, facilitating… Affected: 6 |
| CVE-2004-0216 | – | Nov 3 | Integer overflow in the Install Engine (inseng.dll) for Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a malicious website or HTML email… Affected: 6 |
| CVE-2004-0869 | – | Sep 16 | Internet Explorer does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could… Affected: 6 |
| CVE-2004-0866 | – | Sep 16 | Internet Explorer 6.0 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform… Affected: 6.0; 6.0 |
| CVE-2004-1686 | – | Sep 15 | Internet Explorer 6.0 in Windows XP SP2 allows remote attackers to bypass the Information Bar prompt for ActiveX and Javascript via an XHTML page that contains an Internet… Affected: 6.0 |
| CVE-2004-0839 | – | Aug 18 | Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and… Affected: 6.0; 6.0 |
| CVE-2004-0526 | – | Aug 6 | Unknown versions of Internet Explorer and Outlook allow remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the… Affected: 6.0 |
| CVE-2004-0212 | – | Aug 6 | Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, allows local or remote attackers to execute arbitrary code… Affected: 6.0 |
| CVE-2004-0719 | – | Jul 27 | Internet Explorer for Mac 5.2.3, Internet Explorer 6 on Windows XP, and possibly other versions, does not properly prevent a frame in one domain from injecting content into a… Affected: 6.0 |
| CVE-2004-0479 | – | Jul 7 | Internet Explorer 6 allows remote attackers to cause a denial of service (crash) via Javascript that creates a new popup window and disables the imagetoolbar functionality with a… Affected: 6 |
| CVE-2004-0475 | – | Jul 7 | The showHelp function in Internet Explorer 6 on Windows XP Pro allows remote attackers to execute arbitrary local .CHM files via a double backward slash ("\\") before the target… Affected: 6.0 |
| CVE-2004-0420 | – | Jul 7 | The Windows Shell application in Windows 98, Windows ME, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by… Affected: 6.0 |
| CVE-2003-1041 | – | Jun 14 | Internet Explorer 5.x and 6.0 allows remote attackers to execute arbitrary programs via a modified directory traversal attack using a URL containing ".." (dot dot) sequences and a… Affected: 6; 6.0 |
| CVE-2003-0513 | – | Apr 15 | Microsoft Internet Explorer allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences… Affected: 6.0 |
| CVE-2004-2090 | – | Feb 7 | Microsoft Internet Explorer 5.0.1 through 6.0 allows remote attackers to determine the existence of arbitrary files via the VBScript LoadPicture method, which returns an error… Affected: 6.0 |