CVE-2015-6059

Published: Oct 14, 2015Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Scripting Engine Information Disclosure Vulnerability."

Affected (10)

Products: Microsoft: Jscript, Vbscript, Internet Explorer

3 products

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Microsoft Jscript	Version 5.6
Microsoft Jscript	Version 5.7
Microsoft Jscript	Version 5.8
Microsoft Vbscript	Version 5.6
Microsoft Vbscript	Version 5.7
Microsoft Vbscript	Version 5.8
Microsoft Internet Explorer	Version 10
Microsoft Internet Explorer	Version 11
Microsoft Internet Explorer	Version 8
Microsoft Internet Explorer	Version 9