IE
Product
Internet Explorer 9
On CISA KEVExploited in the wildRansomware-linked
1,635
CVEs
43
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 330Medium 95Low 11
Watch
Add Internet Explorer 9 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-4000 | 3.7 | May 21 | The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows… Affected: All versions, or not specified |
| CVE-2017-11791 | 3.1 | Nov 15 | ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and… Affected: All versions, or not specified |
| CVE-2016-7239 | 3.1 | Nov 10 | The RegEx class in the XSS filter in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allows remote attackers to conduct cross-site scripting (XSS) attacks and obtain… Affected: 9; 10; 11 |
| CVE-2016-7227 | 3.1 | Nov 10 | The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to determine the existence of local files via unspecified vectors, aka… Affected: 9; 10; 11 |
| CVE-2016-7199 | 3.1 | Nov 10 | Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to bypass the Same Origin Policy and obtain sensitive window-state information via a crafted web… Affected: 9; 10; 11 |
| CVE-2016-3325 | 3.1 | Sep 14 | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure… Affected: 11 |
| CVE-2016-3276 | 3.1 | Jul 13 | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to conduct content-spoofing attacks via a crafted URL, aka "Microsoft Browser Spoofing Vulnerability." Affected: 11 |
| CVE-2016-3274 | 3.1 | Jul 13 | Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to conduct content-spoofing attacks via a crafted URL, aka "Microsoft Browser Spoofing… Affected: 9; 10; 11 |
| CVE-2018-0942 | 2.6 | Mar 14 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703,… Affected: 11 |
| CVE-2016-3321 | 2.5 | Aug 9 | Microsoft Internet Explorer 10 and 11 load different files for attempts to open a file:// URL depending on whether the file exists, which allows local users to enumerate files via… Affected: 10; 11 |
| CVE-2016-3291 | 2.4 | Sep 14 | Microsoft Internet Explorer 11 and Microsoft Edge mishandle cross-origin requests, which allows remote attackers to obtain sensitive information via a crafted web site, aka… Affected: 11 |
Showing 11
The 500 most important CVEs for this product (exploited first, then by severity)