IE
Product
IE
On CISA KEVExploited in the wild
201
CVEs
1
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 0Low 0
Watch
Add IE to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2003-0817 | – | Feb 3 | Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions and read arbitrary files via an XML object Affected: 6.0 |
| CVE-2003-0823 | – | Feb 3 | Internet Explorer 6 SP1 and earlier allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by calling the window.moveBy method,… Affected: 6.0 |
| CVE-2003-0816 | – | Feb 3 | Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by (1) using the NavigateAndFind method to load a file: URL containing Javascript, as… Affected: 6.0 |
| CVE-2003-0815 | – | Feb 3 | Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and read arbitrary files by (1) modifying the createTextRange method and using CreateLink,… Affected: 6.0 |
| CVE-2003-0814 | – | Feb 3 | Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and execute Javascript by setting the window's "href" to the malicious Javascript, then… Affected: 6.0 |
| CVE-2003-1028 | – | Jan 20 | The download function of Internet Explorer 6 SP1 allows remote attackers to obtain the cache directory name via an HTTP response with an invalid ContentType and a .htm file, which… Affected: 6.0 |
| CVE-2003-1027 | – | Jan 20 | Internet Explorer 5.01 through 6 SP1 allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by using method caching (SaveRef) to… Affected: 6.0 |
| CVE-2003-1026 | – | Jan 20 | Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame, which is added to the history list and… Affected: 6.0 |
| CVE-2003-1559 | – | Dec 31 | Microsoft Internet Explorer 5.22, and other 5 through 6 SP1 versions, sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to… Affected: 5.22 |
| CVE-2003-1484 | – | Dec 31 | Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) by creating a DHTML link that uses the AnchorClick "A" object with a blank href… Affected: 6.0 |
| CVE-2003-1105 | – | Dec 31 | Unknown vulnerability in Internet Explorer 5.01 SP3 through 6.0 SP1 allows remote attackers to cause a denial of service (browser or Outlook Express crash) via HTML with certain… Affected: 6.0 |
| CVE-2003-0838 | – | Nov 17 | Internet Explorer allows remote attackers to bypass zone restrictions to inject and execute arbitrary programs by creating a popup window and inserting ActiveX object code with a… Affected: 6.0 |
| CVE-2003-0809 | – | Nov 17 | Internet Explorer 5.01 through 6.0 does not properly handle object tags returned from a Web server during XML data binding, which allows remote attackers to execute arbitrary code… Affected: 6.0 |
| CVE-2003-0701 | – | Aug 27 | Buffer overflow in Internet Explorer 6 SP1 for certain languages that support double-byte encodings (e.g., Japanese) allows remote attackers to execute arbitrary code via the Type… Affected: 6.0 |
| CVE-2003-0532 | – | Aug 27 | Internet Explorer 5.01 SP3 through 6.0 SP1 does not properly determine object types that are returned by web servers, which could allow remote attackers to execute arbitrary code… Affected: 6.0 |
| CVE-2003-0531 | – | Aug 27 | Internet Explorer 5.01 SP3 through 6.0 SP1 allows remote attackers to access and execute script in the My Computer domain using the browser cache via crafted Content-Type and… Affected: 6.0 |
| CVE-2003-0530 | – | Aug 27 | Buffer overflow in the BR549.DLL ActiveX control for Internet Explorer 5.01 SP3 through 6.0 SP1 allows remote attackers to execute arbitrary code Affected: 6.0 |
| CVE-2003-0344 | – | Jun 16 | Buffer overflow in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to execute arbitrary code via / (slash) characters in the Type property of an Object tag… Affected: 6.0 |
| CVE-2003-0233 | – | May 12 | Heap-based buffer overflow in plugin.ocx for Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code via the Load() method, a different vulnerability… Affected: 6.0 |
| CVE-2003-0116 | – | May 12 | Microsoft Internet Explorer 5.01, 5.5 and 6.0 does not properly check the Cascading Style Sheet input parameter for Modal dialogs, which allows remote attackers to read files on… Affected: 6.0 |
| CVE-2003-0115 | – | May 12 | Microsoft Internet Explorer 5.01, 5.5 and 6.0 does not properly check parameters that are passed during third party rendering, which could allow remote attackers to execute… Affected: 6.0 |
| CVE-2003-0114 | – | May 12 | The file upload control in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to automatically upload files from the local system via a web page containing a… Affected: 6.0 |
| CVE-2003-0113 | – | May 12 | Buffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code via an HTTP response containing long values in (1)… Affected: 6.0 |
| CVE-2003-1328 | – | Feb 19 | The showHelp() function in Microsoft Internet Explorer 5.01, 5.5, and 6.0 supports certain types of pluggable protocols that allow remote attackers to bypass the cross-domain… Affected: 6.0 |
| CVE-2003-1326 | – | Feb 19 | Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model to run malicious script or arbitrary programs via dialog boxes, aka… Affected: 6.0 |
| CVE-2002-2125 | – | Dec 31 | Internet Explorer 6.0 does not warn users when an expired certificate authority (CA) certificate is submitted to the user and a newer CA certificate is in the user's local… Affected: 6.0 |
| CVE-2002-1824 | – | Dec 31 | Microsoft Internet Explorer 6.0, when handling an expired CA-CERT in a webserver's certificate chain during a SSL/TLS handshake, does not prompt the user before searching for and… Affected: 6.0 |
| CVE-2002-1714 | – | Dec 31 | Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to cause a denial of service (crash) via an object of type "text/html" with the DATA field that identifies the… Affected: 6.0 |
| CVE-2002-1254 | – | Dec 11 | Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model and access information on the local system or in other domains, and possibly… Affected: 6.0 |
| CVE-2002-1186 | – | Dec 11 | Internet Explorer 5.01 through 6.0 does not properly perform security checks on certain encoded characters within a URL, which allows a remote attacker to steal potentially… Affected: 6.0 |
| CVE-2002-1185 | – | Dec 11 | Internet Explorer 5.01 through 6.0 does not properly check certain parameters of a PNG file when opening it, which allows remote attackers to cause a denial of service (crash) by… Affected: 6.0 |
| CVE-2002-1142 | – | Nov 29 | Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows… Affected: 6.0 |
| CVE-2002-0153 | – | Apr 22 | Internet Explorer 5.1 for Macintosh allows remote attackers to bypass security checks and invoke local AppleScripts within a specific HTML element, aka the "Local Applescript… Affected: 3.0; 3.1; 4.0; 4.0; 4.0.1; 4.5; +2 more |
| CVE-2002-0152 | – | Apr 22 | Buffer overflow in various Microsoft applications for Macintosh allows remote attackers to cause a denial of service (crash) or execute arbitrary code by invoking the file://… Affected: 5.1 |
| CVE-2001-1489 | – | Dec 31 | Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page with a large number of images Affected: 6 |
| CVE-2001-1497 | – | Dec 31 | Microsoft Internet Explorer 4.0 through 6.0 could allow local users to differentiate between alphanumeric and non-alphanumeric characters used in a password by pressing certain… Affected: 4.0; 4.0.1; 4.0.1; 4.1; 4.1; 4.1 |
| CVE-2001-1218 | – | Dec 20 | Microsoft Internet Explorer for Unix 5.0SP1 allows local users to possibly cause a denial of service (crash) in CDE or the X server on Solaris 2.6 by rapidly scrolling Chinese… Affected: 5.0 |
| CVE-2001-0665 | – | Oct 30 | Internet Explorer 6 and earlier allows remote attackers to cause certain HTTP requests to be automatically executed and appear to come from the user, which could allow attackers… Affected: through 6 |
| CVE-2000-1061 | – | Dec 11 | Microsoft Virtual Machine (VM) in Internet Explorer 4.x and 5.x allows an unsigned applet to create and use ActiveX controls, which allows a remote attacker to bypass Internet… Affected: 4.x; 5.x |
| CVE-2000-0768 | – | Oct 20 | A function in Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files, aka a… Affected: 4.0; 4.0; 5.0; 5.0; 5.0; 5.0 |
| CVE-2000-0518 | – | Jun 5 | Internet Explorer 4.x and 5.x does not properly verify all contents of an SSL certificate if a connection is made to the server via an image or a frame, aka one of two different… Affected: 4.0; 4.0; 4.0.1; 4.0.1; 4.0.1; 5; +7 more |
| CVE-2000-0519 | – | Jun 5 | Internet Explorer 4.x and 5.x does not properly re-validate an SSL certificate if the user establishes a new SSL session with the same server during the same Internet Explorer… Affected: 4.0; 4.0; 4.0.1; 4.0.1; 4.0.1; 5.0; +7 more |
| CVE-2000-0160 | – | Feb 21 | The Microsoft Active Setup ActiveX component in Internet Explorer 4.x and 5.x allows a remote attacker to install software components without prompting the user by stating that… Affected: 4.x |
| CVE-2000-0162 | – | Feb 18 | The Microsoft virtual machine (VM) in Internet Explorer 4.x and 5.x allows a remote attacker to read files via a malicious Java applet that escapes the Java sandbox, aka the "VM… Affected: 4.0; 4.0; 4.1; 4.1; 5; 5.0; +1 more |
| CVE-1999-0876 | – | Jan 4 | Buffer overflow in Internet Explorer 4.0 via EMBED tag Affected: 3.0; 3.1; 4.0 |
| CVE-2000-0028 | – | Dec 23 | Internet Explorer 5.0 and 5.01 allows remote attackers to bypass the cross frame security policy and read files via the external.NavigateAndFind function Affected: 4.0 |
| CVE-2000-0036 | – | Dec 22 | Outlook Express 5 for Macintosh downloads attachments to HTML mail without prompting the user, aka the "HTML Mail Attachment" vulnerability Affected: 4.5 |
| CVE-1999-0989 | – | Dec 6 | Buffer overflow in Internet Explorer 5 directshow filter (MSDXM.OCX) allows remote attackers to execute commands via the vnd.ms.radio protocol Affected: 5; 5.0; 5.0 |
| CVE-1999-0839 | – | Nov 29 | Windows NT Task Scheduler installed with Internet Explorer 5 allows a user to gain privileges by modifying the job after it has been scheduled Affected: 5; 5.0; 5.0 |
| CVE-2000-0329 | – | Nov 11 | A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML mail, aka the "Active Setup Control"… Affected: 4.0; 4.0; 4.0.1; 4.0.1; 4.0.1; 4.1; +6 more |