Microsoft

Internet Explorer

1637 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
10

CVE-2009-1043

  • EPSS 39.92%
  • Published 23.03.2009 14:19:12
  • Last modified 09.04.2025 00:30:58

Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors triggered by clicking on a link, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009.

9.3

CVE-2009-0075

  • EPSS 84.85%
  • Published 10.02.2009 22:30:00
  • Last modified 09.04.2025 00:30:58

Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to CFunctionPointer and the appending of document o...

9.3

CVE-2009-0076

  • EPSS 58.48%
  • Published 10.02.2009 22:30:00
  • Last modified 09.04.2025 00:30:58

Microsoft Internet Explorer 7, when XHTML strict mode is used, allows remote attackers to execute arbitrary code via the zoom style directive in conjunction with unspecified other directives in a malformed Cascading Style Sheets (CSS) stylesheet in a...

4.3

CVE-2009-0369

  • EPSS 19.13%
  • Published 30.01.2009 19:30:00
  • Last modified 09.04.2025 00:30:58

Microsoft Internet Explorer 7 allows remote attackers to trick a user into visiting an arbitrary URL via an onclick action that moves a crafted element to the current mouse position, related to a "Clickjacking" vulnerability.

9.3

CVE-2009-0341

  • EPSS 45.29%
  • Published 29.01.2009 19:30:00
  • Last modified 09.04.2025 00:30:58

The shell32 module in Microsoft Internet Explorer 7.0 on Windows XP SP3 might allow remote attackers to execute arbitrary code via a long VALUE attribute in an INPUT element, possibly related to a stack consumption vulnerability.

2.1

CVE-2008-5912

  • EPSS 17.15%
  • Published 20.01.2009 16:30:00
  • Last modified 09.04.2025 00:30:58

An unspecified function in the JavaScript implementation in Microsoft Internet Explorer creates and exposes a "temporary footprint" when there is a current login to a web site, which makes it easier for remote attackers to trick a user into acting up...

4.3

CVE-2009-0072

Exploit
  • EPSS 9.79%
  • Published 08.01.2009 19:30:11
  • Last modified 09.04.2025 00:30:58

Microsoft Internet Explorer 6.0 through 8.0 beta2 allows remote attackers to cause a denial of service (application crash) via an onload=screen[""] attribute value in a BODY element.

6.8

CVE-2008-5750

Exploit
  • EPSS 14.32%
  • Published 29.12.2008 15:24:23
  • Last modified 09.04.2025 00:30:58

Argument injection vulnerability in Microsoft Internet Explorer 8 beta 2 on Windows XP SP3 allows remote attackers to execute arbitrary commands via the --renderer-path option in a chromehtml: URI.

4.3

CVE-2008-5551

Exploit
  • EPSS 25.86%
  • Published 12.12.2008 18:30:03
  • Last modified 09.04.2025 00:30:58

The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks by injecting data at two different positions within an HTML document, related to STYLE elements and the CS...

4.3

CVE-2008-5552

  • EPSS 8.06%
  • Published 12.12.2008 18:30:03
  • Last modified 09.04.2025 00:30:58

The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks via a CRLF sequence in conjunction with a crafted Content-Type header, as demonstrated by a header with a ...