CVE-2021-26411

Warning

EPSS 89.69%
Published 11.03.2021 16:15:13
Last modified 13.03.2025 16:40:59
Source secure@microsoft.com
Teams watchlist Login
Open Login

Internet Explorer Memory Corruption Vulnerability

Affected products Warnungen 1 Metrics 4 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Microsoft ≫ Edge Version-

Microsoft ≫ Internet Explorer Version11 Update-

Microsoft ≫ Internet Explorer Version9

Microsoft ≫ Windows Server 2008 Version- Updatesp2

03.11.2021: CISA Known Exploited Vulnerabilities (KEV) Catalog

Microsoft Internet Explorer Memory Corruption Vulnerability

Vulnerability

Microsoft Internet Explorer contains an unspecified vulnerability that allows for memory corruption.

Description

Apply updates per vendor instructions.

Required actions

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	89.69%	0.995

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.1	4.9	6.4	AV:N/AC:H/Au:N/C:P/I:P/A:P
nvd@nist.gov	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
secure@microsoft.com	8.8	2.8	5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L

CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26411

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2021-26411

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-26411

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-26411

EUVD