CVE-2021-26411

Warnung

EPSS 80.77%
Veröffentlicht 11.03.2021 16:15:13
Zuletzt bearbeitet 01.10.2026 21:17:16
Erkennungen
Login

Internet Explorer Memory Corruption Vulnerability

Internet Explorer Memory Corruption Vulnerability

Betroffene Produkte Warnungen 1 Metriken 4 CWE 1 Referenzen 6

NVD 3 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Edge Version -

Microsoft ≫ Internet Explorer Version 11 Update -

   Microsoft ≫ Windows 10 1507 Version -
   Microsoft ≫ Windows 10 1607 Version -
   Microsoft ≫ Windows 10 1803 Version -
   Microsoft ≫ Windows 10 1809 Version -
   Microsoft ≫ Windows 10 1903 Version - HwPlatform arm64
   Microsoft ≫ Windows 10 1903 Version - HwPlatform x64
   Microsoft ≫ Windows 10 1909 Version -
   Microsoft ≫ Windows 10 2004 Version -
   Microsoft ≫ Windows 10 20h2 Version -
   Microsoft ≫ Windows 7 Version - Update sp1
   Microsoft ≫ Windows 8.1 Version -
   Microsoft ≫ Windows Rt 8.1 Version -
   Microsoft ≫ Windows Server 2008 Version r2 Update sp1 HwPlatform x64
   Microsoft ≫ Windows Server 2012 Version -
   Microsoft ≫ Windows Server 2012 Version r2
   Microsoft ≫ Windows Server 2016 Version -
   Microsoft ≫ Windows Server 2019 Version -

Microsoft ≫ Internet Explorer Version 9

Microsoft ≫ Windows Server 2008 Version - Update sp2

03.11.2021: CISA Known Exploited Vulnerabilities (KEV) Catalog

Microsoft Internet Explorer Memory Corruption Vulnerability

Schwachstelle

Microsoft Internet Explorer contains an unspecified vulnerability that allows for memory corruption.

Beschreibung

Apply updates per vendor instructions.

Erforderliche Maßnahmen

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	80.77%	0.996

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5.1	4.9	6.4	AV:N/AC:H/Au:N/C:P/I:P/A:P
NIST	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Microsoft	8.8	2.8	5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L

CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26411

Patch

Vendor Advisory

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-26411

US Government Resource

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26411

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2021-26411

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-26411

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-26411

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2021-26411

03.11.2021: CISA Known Exploited Vulnerabilities (KEV) Catalog