IE
Product
Internet Explorer 9
On CISA KEVExploited in the wildRansomware-linked
1,635
CVEs
43
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 330Medium 95Low 11
Watch
Add Internet Explorer 9 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-6154 | – | Dec 9 | Microsoft Internet Explorer 7 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Affected: 7; 8; 9; 10; 11 |
| CVE-2015-6153 | – | Dec 9 | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Affected: 11 |
| CVE-2015-6152 | – | Dec 9 | Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer… Affected: 10 |
| CVE-2015-6151 | – | Dec 9 | Microsoft Internet Explorer 8 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Affected: 8; 9; 10; 11 |
| CVE-2015-6150 | – | Dec 9 | Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet… Affected: 7; 8; 9; 10; 11 |
| CVE-2015-6149 | – | Dec 9 | Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet… Affected: 8; 9 |
| CVE-2015-6148 | – | Dec 9 | Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Affected: 9; 10; 11 |
| CVE-2015-6147 | – | Dec 9 | Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet… Affected: 8; 9 |
| CVE-2015-6146 | – | Dec 9 | Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet… Affected: 7; 8 |
| CVE-2015-6145 | – | Dec 9 | Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet… Affected: 7; 8 |
| CVE-2015-6144 | – | Dec 9 | Microsoft Internet Explorer 8 through 11 and Microsoft Edge mishandle HTML attributes in HTTP responses, which allows remote attackers to bypass a cross-site scripting (XSS)… Affected: 8; 9; 10; 11 |
| CVE-2015-6143 | – | Dec 9 | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer… Affected: 11 |
| CVE-2015-6142 | – | Dec 9 | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Affected: 11 |
| CVE-2015-6141 | – | Dec 9 | Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer… Affected: 9 |
| CVE-2015-6140 | – | Dec 9 | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Affected: 11 |
| CVE-2015-6139 | – | Dec 9 | Microsoft Internet Explorer 11 and Microsoft Edge mishandle content types, which allows remote attackers to execute arbitrary web script in a privileged context via a crafted web… Affected: 11 |
| CVE-2015-6138 | – | Dec 9 | Microsoft Internet Explorer 8 through 11 mishandles HTML attributes in HTTP responses, which allows remote attackers to bypass a cross-site scripting (XSS) protection mechanism… Affected: 8; 9; 10; 11 |
| CVE-2015-6134 | – | Dec 9 | Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer… Affected: 9 |
| CVE-2015-6083 | – | Dec 9 | Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet… Affected: 8; 9; 10; 11 |
| CVE-2015-6045 | – | Nov 13 | Use-after-free vulnerability in the CElement object implementation in Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service… Affected: 11 |
| CVE-2015-6088 | – | Nov 11 | Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Browser ASLR… Affected: 9; 10; 11 |
| CVE-2015-6087 | – | Nov 11 | Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet… Affected: 7; 8; 9; 10; 11 |
| CVE-2015-6086 | – | Nov 11 | Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information… Affected: 9; 10; 11 |
| CVE-2015-6085 | – | Nov 11 | Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet… Affected: 10; 11 |
| CVE-2015-6084 | – | Nov 11 | Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet… Affected: 10; 11 |
| CVE-2015-6082 | – | Nov 11 | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer… Affected: 11 |
| CVE-2015-6081 | – | Nov 11 | Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet… Affected: 8; 9; 10; 11 |
| CVE-2015-6080 | – | Nov 11 | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer… Affected: 11 |
| CVE-2015-6079 | – | Nov 11 | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer… Affected: 11 |
| CVE-2015-6078 | – | Nov 11 | Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Affected: 9; 10; 11 |
| CVE-2015-6077 | – | Nov 11 | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer… Affected: 11 |
| CVE-2015-6076 | – | Nov 11 | Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet… Affected: 7; 8; 9; 10; 11 |
| CVE-2015-6075 | – | Nov 11 | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer… Affected: 11 |
| CVE-2015-6074 | – | Nov 11 | Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet… Affected: 7; 8; 9; 10; 11 |
| CVE-2015-6073 | – | Nov 11 | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Affected: 11 |
| CVE-2015-6072 | – | Nov 11 | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer… Affected: 11 |
| CVE-2015-6071 | – | Nov 11 | Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet… Affected: 7; 8; 9; 10; 11 |
| CVE-2015-6070 | – | Nov 11 | Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet… Affected: 7; 8; 9; 10; 11 |
| CVE-2015-6069 | – | Nov 11 | Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet… Affected: 8; 9; 10; 11 |
| CVE-2015-6068 | – | Nov 11 | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer… Affected: 11 |
| CVE-2015-6066 | – | Nov 11 | Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet… Affected: 7; 8; 9; 10; 11 |
| CVE-2015-6065 | – | Nov 11 | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet… Affected: 9; 10; 11 |
| CVE-2015-6064 | – | Nov 11 | Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site,… Affected: 10; 11 |
| CVE-2015-2427 | – | Nov 11 | Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer… Affected: 9 |
| CVE-2015-6059 | – | Oct 14 | The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to obtain… Affected: 8; 9; 10; 11 |
| CVE-2015-6053 | – | Oct 14 | Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information from process memory via crafted parameters in an ArrayBuffer.slice call, aka "Internet… Affected: 11 |
| CVE-2015-6052 | – | Oct 14 | The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to bypass the ASLR… Affected: 8; 9; 10; 11 |
| CVE-2015-6051 | – | Oct 14 | Microsoft Internet Explorer 10 and 11 allows remote attackers to gain privileges via a crafted web site, as demonstrated by a transition from Low Integrity to Medium Integrity,… Affected: 10; 11 |
| CVE-2015-6050 | – | Oct 14 | Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer… Affected: 10 |
| CVE-2015-6049 | – | Oct 14 | Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet… Affected: 7; 8; 9; 10; 11 |
The 500 most important CVEs for this product (exploited first, then by severity)