Vbscript vulnerabilities | LiveThreat CVE Feed

Product

Vbscript

by Microsoft · last CVE Jun 16, 2016

On CISA KEVExploited in the wildRansomware-linked

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities23 In the news0 Timeline

Severity mix

Critical 0High 8Medium 0Low 0

Severity

All severities23 Critical0 High8 Medium0 Low0

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Vbscript to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2016-0189 RansomwareIn wildKEV	7.5	94%	May 11	Microsoft Internet Explorer Memory Corruption Vulnerability Affected: 5.7; 5.8; 5.7
CVE-2011-0663	8.8	26%	Apr 13	Multiple integer overflows in the Microsoft (1) JScript 5.6 through 5.8 and (2) VBScript 5.6 through 5.8 scripting engines allow remote attackers to execute arbitrary code via a… Affected: 5.6; 5.7; 5.8
CVE-2016-3207	7.5	17%	Jun 16	The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code… Affected: 5.7; 5.8
CVE-2016-3206	7.5	15%	Jun 16	The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code… Affected: 5.7; 5.8
CVE-2016-3205	7.5	15%	Jun 16	The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code… Affected: 5.7; 5.8
CVE-2016-3202	7.5	17%	Jun 16	The Microsoft (1) Chakra JavaScript, (2) JScript, and (3) VBScript engines, as used in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, allow remote attackers to execute… Affected: All versions, or not specified
CVE-2016-0187	7.5	22%	May 11	The Microsoft (1) JScript 5.8 and (2) VBScript 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause… Affected: 5.8
CVE-2016-0002	7.5	23%	Jan 13	The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute… Affected: 5.7; 5.8
CVE-2015-6136	–	25%	Dec 9	The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute… Affected: 5.7; 5.8
CVE-2015-6135	–	23%	Dec 9	The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to obtain… Affected: 5.7; 5.8
CVE-2015-6089	–	13%	Nov 11	The Microsoft (1) VBScript and (2) JScript engines, as used in Internet Explorer 8 through 11, allow remote attackers to execute arbitrary code or cause a denial of service… Affected: All versions, or not specified
CVE-2015-6059	–	16%	Oct 14	The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to obtain… Affected: 5.6; 5.7; 5.8
CVE-2015-6056	–	13%	Oct 14	The (1) JScript and (2) VBScript engines in Microsoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory… Affected: All versions, or not specified
CVE-2015-6055	–	25%	Oct 14	The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute… Affected: 5.6; 5.7; 5.8
CVE-2015-6052	–	15%	Oct 14	The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to bypass the ASLR… Affected: 5.7; 5.8
CVE-2015-2482	–	32%	Oct 14	The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute… Affected: 5.6; 5.7; 5.8
CVE-2015-2372	–	20%	Jul 14	vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 6 through 11 and other products, allows remote attackers to execute arbitrary code or cause a… Affected: 5.6; 5.7; 5.8
CVE-2015-1686	–	16%	May 13	The Microsoft (1) VBScript 5.6 through 5.8 and (2) JScript 5.6 through 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to bypass… Affected: 5.6; 5.7; 5.8
CVE-2015-1684	–	16%	May 13	VBScript.dll in the Microsoft VBScript 5.6 through 5.8 engine, as used in Internet Explorer 8 through 11 and other products, allows remote attackers to bypass the ASLR protection… Affected: 5.6; 5.7; 5.8
CVE-2015-0032	–	22%	Mar 11	vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 8 through 11 and other products, allows remote attackers to execute arbitrary code or cause a… Affected: 5.6; 5.7; 5.8
CVE-2014-6363	–	28%	Dec 11	vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 6 through 11 and other products, allows remote attackers to execute arbitrary code or cause a… Affected: 5.6; 5.7; 5.8
CVE-2014-0271	–	38%	Feb 12	The VBScript engine in Microsoft Internet Explorer 6 through 11, and VBScript 5.6 through 5.8, allows remote attackers to execute arbitrary code or cause a denial of service… Affected: 5.6; 5.7; 5.8
CVE-2012-2523	–	22%	Aug 15	Integer overflow in Microsoft Internet Explorer 8 and 9, JScript 5.8, and VBScript 5.8 on 64-bit platforms allows remote attackers to execute arbitrary code by leveraging an… Affected: 5.8