IE
Product
Internet Explorer 9
On CISA KEVExploited in the wildRansomware-linked
1,635
CVEs
43
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 330Medium 95Low 11
Watch
Add Internet Explorer 9 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-0768 | 4.3 | Apr 9 | A security feature bypass vulnerability exists when Internet Explorer VBScript execution policy does not properly restrict VBScript under specific conditions, and to allow… Affected: 11 |
| CVE-2019-0762 | 4.3 | Apr 9 | A security feature bypass vulnerability exists when Microsoft browsers improperly handle requests of different origins, aka 'Microsoft Browsers Security Feature Bypass… Affected: 11 |
| CVE-2019-0654 | 4.3 | Mar 5 | A spoofing vulnerability exists when Microsoft browsers improperly handles specific redirects, aka 'Microsoft Browser Spoofing Vulnerability' Affected: 10; 11; 9 |
| CVE-2018-8452 | 4.3 | Sep 13 | An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft browsers, aka "Scripting Engine Information… Affected: 11 |
| CVE-2018-1025 | 4.3 | May 9 | An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory, aka "Microsoft Browser Information Disclosure Vulnerability."… Affected: 11 |
| CVE-2018-0989 | 4.3 | Apr 12 | An information disclosure vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Information Disclosure… Affected: 10; 11; 9 |
| CVE-2018-0987 | 4.3 | Apr 12 | An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Internet Explorer, aka "Scripting Engine Information… Affected: 10; 11; 9 |
| CVE-2018-0932 | 4.3 | Mar 14 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and Internet Explorer in… Affected: 11; 11 |
| CVE-2018-0929 | 4.3 | Mar 14 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703,… Affected: 9; 10; 11 |
| CVE-2018-0927 | 4.3 | Mar 14 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and Internet Explorer in… Affected: 10; 11 |
| CVE-2018-0891 | 4.3 | Mar 14 | ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and… Affected: 9; 10; 11; 11 |
| CVE-2018-0847 | 4.3 | Feb 15 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Windows 10 Gold, 1511, 1607, 1703, 1709,… Affected: 11 |
| CVE-2017-11848 | 4.3 | Nov 15 | Internet Explorer in Microsoft Microsoft Windows 7 SP1, Windows Server 2008 SP2, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703,… Affected: 11 |
| CVE-2017-11790 | 4.3 | Oct 13 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703,… Affected: 9; 10; 11 |
| CVE-2017-8736 | 4.3 | Sep 13 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft Edge and Internet Explorer in… Affected: 11; 11 |
| CVE-2017-8733 | 4.3 | Sep 13 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703,… Affected: 9; 10; 11 |
| CVE-2017-0231 | 4.3 | May 12 | A spoofing vulnerability exists when Microsoft browsers render SmartScreen Filter, aka "Microsoft Browser Spoofing Vulnerability." Affected: 11 |
| CVE-2017-0049 | 4.3 | Mar 17 | The VBScript engine in Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Scripting Engine… Affected: 11 |
| CVE-2017-0033 | 4.3 | Mar 17 | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to spoof web content via a crafted web site, aka "Microsoft Browser Spoofing Vulnerability." This… Affected: 11 |
| CVE-2017-0012 | 4.3 | Mar 17 | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to spoof web content via a crafted web site, aka "Microsoft Browser Spoofing Vulnerability." This… Affected: 11 |
| CVE-2017-0009 | 4.3 | Mar 17 | Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Microsoft Browser Memory… Affected: 9; 10; 11 |
| CVE-2017-0008 | 4.3 | Mar 17 | Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information… Affected: 9; 10; 11 |
| CVE-2016-7284 | 4.3 | Dec 20 | Microsoft Internet Explorer 10 and 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information… Affected: 10; 11 |
| CVE-2016-0077 | 4.3 | Feb 10 | Microsoft Internet Explorer 9 through 11 and Microsoft Edge misparse HTTP responses, which allows remote attackers to spoof web sites via a crafted URL, aka "Microsoft Browser… Affected: 9; 10; 11 |
| CVE-2016-0059 | 4.3 | Feb 10 | The Hyperlink Object Library in Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via a crafted URL in a (1)… Affected: 9; 10; 11 |
| CVE-2016-0005 | 4.3 | Jan 13 | Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Internet Explorer Elevation of Privilege… Affected: 9; 10; 11 |
| CVE-2010-3243 | 4.3 | Oct 13 | Cross-site scripting (XSS) vulnerability in the toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microsoft Windows SharePoint Services 3.0 SP2… Affected: 8 |
| CVE-2020-1567 | 4.2 | Aug 17 | A remote code execution vulnerability exists in the way that the MSHTML engine improperly validates input Affected: 11; 9 |
| CVE-2019-1081 | 4.2 | Jun 12 | An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory Affected: 9; 10; 11 |
| CVE-2018-8315 | 4.2 | Sep 13 | An information disclosure vulnerability exists when the browser scripting engine improperly handle object types, aka "Microsoft Scripting Engine Information Disclosure… Affected: 11; 10 |
| CVE-2015-4000 | 3.7 | May 21 | The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows… Affected: All versions, or not specified |
| CVE-2017-11791 | 3.1 | Nov 15 | ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and… Affected: All versions, or not specified |
| CVE-2016-7239 | 3.1 | Nov 10 | The RegEx class in the XSS filter in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allows remote attackers to conduct cross-site scripting (XSS) attacks and obtain… Affected: 9; 10; 11 |
| CVE-2016-7227 | 3.1 | Nov 10 | The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to determine the existence of local files via unspecified vectors, aka… Affected: 9; 10; 11 |
| CVE-2016-7199 | 3.1 | Nov 10 | Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to bypass the Same Origin Policy and obtain sensitive window-state information via a crafted web… Affected: 9; 10; 11 |
| CVE-2016-3325 | 3.1 | Sep 14 | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure… Affected: 11 |
| CVE-2016-3276 | 3.1 | Jul 13 | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to conduct content-spoofing attacks via a crafted URL, aka "Microsoft Browser Spoofing Vulnerability." Affected: 11 |
| CVE-2016-3274 | 3.1 | Jul 13 | Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to conduct content-spoofing attacks via a crafted URL, aka "Microsoft Browser Spoofing… Affected: 9; 10; 11 |
| CVE-2018-0942 | 2.6 | Mar 14 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703,… Affected: 11 |
| CVE-2016-3321 | 2.5 | Aug 9 | Microsoft Internet Explorer 10 and 11 load different files for attempts to open a file:// URL depending on whether the file exists, which allows local users to enumerate files via… Affected: 10; 11 |
| CVE-2016-3291 | 2.4 | Sep 14 | Microsoft Internet Explorer 11 and Microsoft Edge mishandle cross-origin requests, which allows remote attackers to obtain sensitive information via a crafted web site, aka… Affected: 11 |
| CVE-2015-6164 | – | Dec 9 | Microsoft Internet Explorer 9 through 11 improperly implements a cross-site scripting (XSS) protection mechanism, which allows remote attackers to bypass the Same Origin Policy… Affected: 9; 10; 11 |
| CVE-2015-6162 | – | Dec 9 | Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer… Affected: 10 |
| CVE-2015-6161 | – | Dec 9 | Microsoft Internet Explorer 7 through 11 and Microsoft Edge allow remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Browser ASLR… Affected: 7; 8; 9; 10; 11 |
| CVE-2015-6160 | – | Dec 9 | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer… Affected: 11 |
| CVE-2015-6159 | – | Dec 9 | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Affected: 11 |
| CVE-2015-6158 | – | Dec 9 | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Affected: 11 |
| CVE-2015-6157 | – | Dec 9 | Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information Disclosure… Affected: 11 |
| CVE-2015-6156 | – | Dec 9 | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet… Affected: 9; 10; 11 |
| CVE-2015-6155 | – | Dec 9 | Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site,… Affected: 10; 11 |
The 500 most important CVEs for this product (exploited first, then by severity)