Internet Explorer

internet_explorer

Vendor: Microsoft • 1,635 CVEs

CVEs (1,635)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2016-7282 1Microsoft 2Edge Internet Explorer May 6, 2026 Dec 20, 2016 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Microsoft Browser Infor...Show more Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Microsoft Browser Information Disclosure Vulnerability."Show less
CVE-2016-7281 1Microsoft 2Edge Internet Explorer May 6, 2026 Dec 20, 2016 N/A· v4 5.3 MEDIUM· v3 2.6 LOW· v2 The Web Workers implementation in Microsoft Internet Explorer 10 and 11 and Microsoft Edge allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Microsoft Browser Security Feature Bypass...Show more The Web Workers implementation in Microsoft Internet Explorer 10 and 11 and Microsoft Edge allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Microsoft Browser Security Feature Bypass Vulnerability."Show less
CVE-2016-7279 1Microsoft 2Edge Internet Explorer May 6, 2026 Dec 20, 2016 N/A· v4 7.5 HIGH· v3 7.6 HIGH· v2 Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corrupti...Show more Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."Show less
CVE-2016-7278 1Microsoft 1Internet Explorer May 6, 2026 Dec 20, 2016 N/A· v4 5.3 MEDIUM· v3 2.6 LOW· v2 Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Windows Hyperlink Object Library Information Disclosure Vulnerability."
CVE-2016-7241 1Microsoft 2Edge Internet Explorer May 6, 2026 Nov 10, 2016 N/A· v4 7.5 HIGH· v3 7.6 HIGH· v2 Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnera...Show more Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."Show less
CVE-2016-7239 1Microsoft 2Edge Internet Explorer May 6, 2026 Nov 10, 2016 N/A· v4 3.1 LOW· v3 2.6 LOW· v2 The RegEx class in the XSS filter in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allows remote attackers to conduct cross-site scripting (XSS) attacks and obtain sensitive information via unspecified vect...Show more The RegEx class in the XSS filter in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allows remote attackers to conduct cross-site scripting (XSS) attacks and obtain sensitive information via unspecified vectors, aka "Microsoft Browser Information Disclosure Vulnerability."Show less
CVE-2016-7227 1Microsoft 2Edge Internet Explorer May 6, 2026 Nov 10, 2016 N/A· v4 3.1 LOW· v3 2.6 LOW· v2 The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to determine the existence of local files via unspecified vectors, aka "Microsoft Browser Information Disclosure...Show more The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to determine the existence of local files via unspecified vectors, aka "Microsoft Browser Information Disclosure Vulnerability."Show less
CVE-2016-7199 1Microsoft 2Edge Internet Explorer May 6, 2026 Nov 10, 2016 N/A· v4 3.1 LOW· v3 2.6 LOW· v2 Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to bypass the Same Origin Policy and obtain sensitive window-state information via a crafted web site, aka "Microsoft Browser Information...Show more Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to bypass the Same Origin Policy and obtain sensitive window-state information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."Show less
CVE-2016-7198 1Microsoft 2Edge Internet Explorer May 6, 2026 Nov 10, 2016 N/A· v4 7.5 HIGH· v3 7.6 HIGH· v2 Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corrupti...Show more Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7195.Show less
CVE-2016-7196 1Microsoft 2Edge Internet Explorer May 6, 2026 Nov 10, 2016 N/A· v4 7.5 HIGH· v3 7.6 HIGH· v2 Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption...Show more Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."Show less
CVE-2016-7195 1Microsoft 2Edge Internet Explorer May 6, 2026 Nov 10, 2016 N/A· v4 7.5 HIGH· v3 7.6 HIGH· v2 Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corrupti...Show more Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7198.Show less
CVE-2016-3391 1Microsoft 2Edge Internet Explorer May 6, 2026 Oct 14, 2016 N/A· v4 5.3 MEDIUM· v3 2.6 LOW· v2 Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow context-dependent attackers to discover credentials by leveraging access to a memory dump, aka "Microsoft Browser Information Disclosure Vulnerability."
CVE-2016-3390 1Microsoft 2Edge Internet Explorer May 6, 2026 Oct 14, 2016 N/A· v4 7.5 HIGH· v3 7.6 HIGH· v2 The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, as demonstrated by the...Show more The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, as demonstrated by the Chakra JavaScript engine, aka "Scripting Engine Memory Corruption Vulnerability."Show less
CVE-2016-3388 1Microsoft 2Edge Internet Explorer May 6, 2026 Oct 14, 2016 N/A· v4 5.3 MEDIUM· v3 2.6 LOW· v2 Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, which allows remote attackers to gain privileges via unspecified vectors, aka "Microsoft Browser Elevation o...Show more Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, which allows remote attackers to gain privileges via unspecified vectors, aka "Microsoft Browser Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3387.Show less
CVE-2016-3387 1Microsoft 2Edge Internet Explorer May 6, 2026 Oct 14, 2016 N/A· v4 7.5 HIGH· v3 6.8 MEDIUM· v2 Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, which allows remote attackers to gain privileges via unspecified vectors, aka "Microsoft Browser Elevation o...Show more Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, which allows remote attackers to gain privileges via unspecified vectors, aka "Microsoft Browser Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3388.Show less
CVE-2016-3385 1Microsoft 1Internet Explorer May 6, 2026 Oct 14, 2016 N/A· v4 7.5 HIGH· v3 9.3 HIGH· v2 The scripting engine in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Cor...Show more The scripting engine in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."Show less
CVE-2016-3384 1Microsoft 1Internet Explorer May 6, 2026 Oct 14, 2016 N/A· v4 7.5 HIGH· v3 9.3 HIGH· v2 Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
CVE-2016-3383 1Microsoft 1Internet Explorer May 6, 2026 Oct 14, 2016 N/A· v4 7.5 HIGH· v3 9.3 HIGH· v2 Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."
CVE-2016-3382 1Microsoft 2Edge Internet Explorer May 6, 2026 Oct 14, 2016 N/A· v4 7.5 HIGH· v3 9.3 HIGH· v2 The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, as demonstrat...Show more The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, as demonstrated by the Chakra JavaScript engine, aka "Scripting Engine Memory Corruption Vulnerability."Show less
CVE-2016-3331 1Microsoft 2Edge Internet Explorer May 6, 2026 Oct 14, 2016 N/A· v4 7.5 HIGH· v3 9.3 HIGH· v2 Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnera...Show more Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."Show less

Previous 1...131415...82 Next