IE
Product
Internet Explorer 9
On CISA KEVExploited in the wildRansomware-linked
1,635
CVEs
43
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 330Medium 95Low 11
Watch
Add Internet Explorer 9 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-3327 | 5.3 | Aug 9 | Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to obtain sensitive information via a crafted web page, aka "Microsoft Browser Information Disclosure… Affected: 9; 10; 11 |
| CVE-2016-3326 | 5.3 | Aug 9 | Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to obtain sensitive information via a crafted web page, aka "Microsoft Browser Information Disclosure… Affected: 9; 10; 11 |
| CVE-2016-3277 | 5.3 | Jul 13 | Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information… Affected: 10; 11 |
| CVE-2016-3273 | 5.3 | Jul 13 | The XSS Filter in Microsoft Internet Explorer 9 through 11 and Microsoft Edge does not properly restrict JavaScript code, which allows remote attackers to obtain sensitive… Affected: 9; 10; 11 |
| CVE-2016-3261 | 5.3 | Jul 13 | Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability." Affected: 11 |
| CVE-2016-0194 | 5.3 | May 11 | Microsoft Internet Explorer 10 and 11 allows remote attackers to bypass file permissions and obtain sensitive information via a crafted web site, aka "Internet Explorer… Affected: 10; 11 |
| CVE-2016-3292 | 5.0 | Sep 14 | Microsoft Internet Explorer 10 and 11 mishandles integrity settings and zone settings, which allows remote attackers to bypass a sandbox protection mechanism via a crafted web… Affected: 10; 11 |
| CVE-2017-0154 | 4.4 | Mar 17 | Microsoft Internet Explorer 11 on Windows 10, 1511, and 1606 and Windows Server 2016 does not enforce cross-domain policies, allowing attackers to access information from one… Affected: 11 |
| CVE-2020-1432 | 4.3 | Jul 14 | An information disclosure vulnerability exists when Skype for Business is accessed via Internet Explorer, aka 'Skype for Business via Internet Explorer Information Disclosure… Affected: 11 |
| CVE-2020-0706 | 4.3 | Feb 11 | An information disclosure vulnerability exists in the way that affected Microsoft browsers handle cross-origin requests, aka 'Microsoft Browser Information Disclosure… Affected: 10; 11 |
| CVE-2019-1357 | 4.3 | Oct 10 | A spoofing vulnerability exists when Microsoft Browsers improperly handle browser cookies, aka 'Microsoft Browser Spoofing Vulnerability' Affected: 10; 11 |
| CVE-2019-0608 | 4.3 | Oct 10 | A spoofing vulnerability exists when Microsoft Browsers does not properly parse HTTP content, aka 'Microsoft Browser Spoofing Vulnerability' Affected: 10; 11; 9 |
| CVE-2019-1220 | 4.3 | Sep 11 | A security feature bypass vulnerability exists when Microsoft Browsers fail to validate the correct Security Zone of requests for specific URLs, aka 'Microsoft Browser Security… Affected: 9; 10; 11 |
| CVE-2019-1192 | 4.3 | Aug 14 | A security feature bypass vulnerability exists when Microsoft browsers improperly handle requests of different origins Affected: 10; 11 |
| CVE-2019-0920 | 4.3 | Jun 12 | A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers Affected: 11; 10; 9 |
| CVE-2019-0768 | 4.3 | Apr 9 | A security feature bypass vulnerability exists when Internet Explorer VBScript execution policy does not properly restrict VBScript under specific conditions, and to allow… Affected: 11 |
| CVE-2019-0762 | 4.3 | Apr 9 | A security feature bypass vulnerability exists when Microsoft browsers improperly handle requests of different origins, aka 'Microsoft Browsers Security Feature Bypass… Affected: 11 |
| CVE-2019-0654 | 4.3 | Mar 5 | A spoofing vulnerability exists when Microsoft browsers improperly handles specific redirects, aka 'Microsoft Browser Spoofing Vulnerability' Affected: 10; 11; 9 |
| CVE-2018-8452 | 4.3 | Sep 13 | An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft browsers, aka "Scripting Engine Information… Affected: 11 |
| CVE-2018-1025 | 4.3 | May 9 | An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory, aka "Microsoft Browser Information Disclosure Vulnerability."… Affected: 11 |
| CVE-2018-0989 | 4.3 | Apr 12 | An information disclosure vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Information Disclosure… Affected: 10; 11; 9 |
| CVE-2018-0987 | 4.3 | Apr 12 | An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Internet Explorer, aka "Scripting Engine Information… Affected: 10; 11; 9 |
| CVE-2018-0932 | 4.3 | Mar 14 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and Internet Explorer in… Affected: 11; 11 |
| CVE-2018-0929 | 4.3 | Mar 14 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703,… Affected: 9; 10; 11 |
| CVE-2018-0927 | 4.3 | Mar 14 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and Internet Explorer in… Affected: 10; 11 |
| CVE-2018-0891 | 4.3 | Mar 14 | ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and… Affected: 9; 10; 11; 11 |
| CVE-2018-0847 | 4.3 | Feb 15 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Windows 10 Gold, 1511, 1607, 1703, 1709,… Affected: 11 |
| CVE-2017-11848 | 4.3 | Nov 15 | Internet Explorer in Microsoft Microsoft Windows 7 SP1, Windows Server 2008 SP2, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703,… Affected: 11 |
| CVE-2017-11790 | 4.3 | Oct 13 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703,… Affected: 9; 10; 11 |
| CVE-2017-8736 | 4.3 | Sep 13 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft Edge and Internet Explorer in… Affected: 11; 11 |
| CVE-2017-8733 | 4.3 | Sep 13 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703,… Affected: 9; 10; 11 |
| CVE-2017-0231 | 4.3 | May 12 | A spoofing vulnerability exists when Microsoft browsers render SmartScreen Filter, aka "Microsoft Browser Spoofing Vulnerability." Affected: 11 |
| CVE-2017-0049 | 4.3 | Mar 17 | The VBScript engine in Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Scripting Engine… Affected: 11 |
| CVE-2017-0033 | 4.3 | Mar 17 | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to spoof web content via a crafted web site, aka "Microsoft Browser Spoofing Vulnerability." This… Affected: 11 |
| CVE-2017-0012 | 4.3 | Mar 17 | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to spoof web content via a crafted web site, aka "Microsoft Browser Spoofing Vulnerability." This… Affected: 11 |
| CVE-2017-0009 | 4.3 | Mar 17 | Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Microsoft Browser Memory… Affected: 9; 10; 11 |
| CVE-2017-0008 | 4.3 | Mar 17 | Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information… Affected: 9; 10; 11 |
| CVE-2016-7284 | 4.3 | Dec 20 | Microsoft Internet Explorer 10 and 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information… Affected: 10; 11 |
| CVE-2016-0077 | 4.3 | Feb 10 | Microsoft Internet Explorer 9 through 11 and Microsoft Edge misparse HTTP responses, which allows remote attackers to spoof web sites via a crafted URL, aka "Microsoft Browser… Affected: 9; 10; 11 |
| CVE-2016-0059 | 4.3 | Feb 10 | The Hyperlink Object Library in Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via a crafted URL in a (1)… Affected: 9; 10; 11 |
| CVE-2016-0005 | 4.3 | Jan 13 | Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Internet Explorer Elevation of Privilege… Affected: 9; 10; 11 |
| CVE-2010-3243 | 4.3 | Oct 13 | Cross-site scripting (XSS) vulnerability in the toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microsoft Windows SharePoint Services 3.0 SP2… Affected: 8 |
| CVE-2020-1567 | 4.2 | Aug 17 | A remote code execution vulnerability exists in the way that the MSHTML engine improperly validates input Affected: 11; 9 |
| CVE-2019-1081 | 4.2 | Jun 12 | An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory Affected: 9; 10; 11 |
| CVE-2018-8315 | 4.2 | Sep 13 | An information disclosure vulnerability exists when the browser scripting engine improperly handle object types, aka "Microsoft Scripting Engine Information Disclosure… Affected: 11; 10 |
The 500 most important CVEs for this product (exploited first, then by severity)