IE
Product
Internet Explorer 9
On CISA KEVExploited in the wildRansomware-linked
1,635
CVEs
43
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 330Medium 95Low 11
Watch
Add Internet Explorer 9 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-27085 In wildKEV | 8.8 | Mar 11 | Internet Explorer Remote Code Execution Vulnerability Affected: 11 |
| CVE-2021-26411 RansomwareIn wildKEV | 8.8 | Mar 11 | Internet Explorer Memory Corruption Vulnerability Affected: 11; 9 |
| CVE-2019-0541 In wildKEV | 8.8 | Jan 8 | Microsoft MSHTML Remote Code Execution Vulnerability Affected: 11; 9; 10 |
| CVE-2017-0222 In wildKEV | 8.8 | May 12 | Microsoft Internet Explorer Remote Code Execution Vulnerability Affected: 9; 11 |
| CVE-2017-0210 In wildKEV | 8.8 | Apr 12 | Microsoft Internet Explorer Privilege Escalation Vulnerability Affected: 10; 11 |
| CVE-2017-0149 In wildKEV | 8.8 | Mar 17 | Microsoft Internet Explorer Memory Corruption Vulnerability Affected: 9; 10; 11 |
| CVE-2015-2502 In wildKEV | 8.8 | Aug 19 | Microsoft Internet Explorer Memory Corruption Vulnerability Affected: 7; 8; 9; 10; 11 |
| CVE-2015-2425 In wildKEV | 8.8 | Jul 14 | Microsoft Internet Explorer Memory Corruption Vulnerability Affected: 11 |
| CVE-2015-2419 In wildKEV | 8.8 | Jul 14 | Microsoft Internet Explorer Memory Corruption Vulnerability Affected: 10; 11 |
| CVE-2014-4123 In wildKEV | 8.8 | Oct 15 | Microsoft Internet Explorer Privilege Escalation Vulnerability Affected: 7; 8; 9; 10; 11 |
| CVE-2014-2817 In wildKEV | 8.8 | Aug 12 | Microsoft Internet Explorer Privilege Escalation Vulnerability Affected: 6; 7; 8; 9; 10; 11 |
| CVE-2014-0322 In wildKEV | 8.8 | Feb 14 | Microsoft Internet Explorer Use-After-Free Vulnerability Affected: 9; 10 |
| CVE-2013-3897 In wildKEV | 8.8 | Oct 9 | Microsoft Internet Explorer Use-After-Free Vulnerability Affected: 6; 7; 8; 9; 10; 11 |
| CVE-2013-3893 In wildKEV | 8.8 | Sep 18 | Microsoft Internet Explorer Resource Management Errors Vulnerability Affected: 6; 7; 8; 9; 10; 11; +1 more |
| CVE-2013-3163 In wildKEV | 8.8 | Jul 10 | Microsoft Internet Explorer Memory Corruption Vulnerability Affected: 8; 9; 10 |
| CVE-2013-1347 In wildKEV | 8.8 | May 5 | Microsoft Internet Explorer Remote Code Execution Vulnerability Affected: 8 |
| CVE-2013-2551 RansomwareIn wildKEV | 8.8 | Mar 11 | Microsoft Internet Explorer Use-After-Free Vulnerability Affected: 6; 7; 8; 9; 10 |
| CVE-2012-4792 In wildKEV | 8.8 | Dec 30 | Microsoft Internet Explorer Use-After-Free Vulnerability Affected: 6; 7; 8 |
| CVE-2010-0806 In wildKEV | 8.8 | Mar 10 | Microsoft Internet Explorer Use-After-Free Vulnerability Affected: 5.01; 6; 8; 7; 6 |
| CVE-2010-0249 In wildKEV | 8.8 | Jan 15 | Microsoft Internet Explorer Use-After-Free Vulnerability Affected: 5.0.1; 6; 6; 7.0; 8 |
| CVE-2017-0037 In wildKEV | 8.1 | Feb 26 | Microsoft Edge and Internet Explorer Type Confusion Vulnerability Affected: 11 |
| CVE-2012-4969 In wildKEV | 8.1 | Sep 18 | Microsoft Internet Explorer Use-After-Free Vulnerability Affected: 6; 7; 8; 9 |
| CVE-2010-3962 In wildKEV | 8.1 | Nov 5 | Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability Affected: 6; 7; 8 |
| CVE-2020-1380 In wildKEV | 7.8 | Aug 17 | Scripting Engine Memory Corruption Vulnerability Affected: 1.0.0 before publication |
| CVE-2020-0968 RansomwareIn wildKEV | 7.5 | Apr 15 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Affected: 11; 9 |
| CVE-2020-0674 In wildKEV | 7.5 | Feb 11 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Affected: 9; 10; 11 |
| CVE-2019-1429 In wildKEV | 7.5 | Nov 12 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Affected: 9; 10; 11 |
| CVE-2019-1367 RansomwareIn wildKEV | 7.5 | Sep 23 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Affected: 10; 11; 9 |
| CVE-2019-0752 RansomwareIn wildKEV | 7.5 | Apr 9 | Microsoft Internet Explorer Type Confusion Vulnerability Affected: 11; 10 |
| CVE-2018-8653 In wildKEV | 7.5 | Dec 20 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Affected: 9; 10; 11 |
| CVE-2018-8373 In wildKEV | 7.5 | Aug 15 | Microsoft Scripting Engine Memory Corruption Vulnerability Affected: 11; 10; 9 |
| CVE-2016-0189 RansomwareIn wildKEV | 7.5 | May 11 | Microsoft Internet Explorer Memory Corruption Vulnerability Affected: 9; 10; 11 |
| CVE-2020-1012 | 8.8 | Sep 11 | <p>An elevation of privilege vulnerability exists in the way that the Wininit.dll handles objects in memory Affected: 11 |
| CVE-2020-0967 | 8.8 | Apr 15 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability' Affected: 9; 11 |
| CVE-2020-0966 | 8.8 | Apr 15 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability' Affected: 9; 11 |
| CVE-2019-0995 | 8.8 | May 16 | A security feature bypass vulnerability exists when urlmon.dll improperly handles certain Mark of the Web queries, aka 'Internet Explorer Security Feature Bypass Vulnerability' Affected: 11 |
| CVE-2018-8126 | 8.8 | May 9 | A security feature bypass vulnerability exists when Internet Explorer fails to validate User Mode Code Integrity (UMCI) policies, aka "Internet Explorer Security Feature Bypass… Affected: 11 |
| CVE-2018-1004 | 8.8 | Apr 12 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This… Affected: 9 |
| CVE-2017-8625 | 8.8 | Aug 8 | Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to bypass Device Guard User Mode Code Integrity (UMCI) policies due to Internet… Affected: 11 |
| CVE-2016-7283 | 8.8 | Dec 20 | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet… Affected: 9; 10; 11 |
| CVE-2016-3324 | 8.8 | Sep 14 | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet… Affected: 9; 10; 11 |
| CVE-2016-3297 | 8.8 | Sep 14 | Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Affected: 9; 10; 11 |
| CVE-2016-3260 | 8.8 | Jul 13 | The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 11, Microsoft Edge, and other products, allow remote attackers… Affected: 11 |
| CVE-2016-3259 | 8.8 | Jul 13 | The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 9 through 11, Microsoft Edge, and other products, allow remote… Affected: 9; 10; 11 |
| CVE-2016-3248 | 8.8 | Jul 13 | The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 9 through 11, Microsoft Edge, and other products, allow remote… Affected: 9; 10; 11 |
| CVE-2016-3204 | 8.8 | Jul 13 | The Microsoft (1) JScript 5.8 and 9 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary… Affected: 9; 10; 11 |
| CVE-2016-3213 | 8.8 | Jun 16 | The Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012… Affected: 9; 10; 11 |
| CVE-2016-3211 | 8.8 | Jun 16 | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet… Affected: 9; 10; 11 |
| CVE-2016-3210 | 8.8 | Jun 16 | The Microsoft (1) JScript and (2) VBScript engines, as used in Internet Explorer 11, allow remote attackers to execute arbitrary code or cause a denial of service (memory… Affected: 11 |
| CVE-2016-0200 | 8.8 | Jun 16 | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet… Affected: 9; 10; 11 |
The 500 most important CVEs for this product (exploited first, then by severity)