Summary
| Detail | |||
|---|---|---|---|
| Vendor | Microsoft | First view | 2013-12-10 |
| Product | Internet Explorer | Last view | 2020-06-09 |
| Version | 11 | Type | Application |
| Update | - | ||
| Edition | * | ||
| Language | * | ||
| Sofware Edition | * | ||
| Target Software | * | ||
| Target Hardware | * | ||
| Other | * | ||
| CPE Product | cpe:2.3:a:microsoft:internet_explorer | ||
Activity : Overall
Related : CVE
| Date | Alert | Description | |
|---|---|---|---|
| 5.3 | 2020-06-09 | CVE-2020-1315 | An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory, aka 'Internet Explorer Information Disclosure Vulnerability'. |
| 7.5 | 2020-06-09 | CVE-2020-1260 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1213, CVE-2020-1214, CVE-2020-1215, CVE-2020-1216, CVE-2020-1230. |
| 7.5 | 2020-06-09 | CVE-2020-1230 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1213, CVE-2020-1214, CVE-2020-1215, CVE-2020-1216, CVE-2020-1260. |
| 7.5 | 2020-06-09 | CVE-2020-1219 | A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corruption Vulnerability'. |
| 7.5 | 2020-06-09 | CVE-2020-1216 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1213, CVE-2020-1214, CVE-2020-1215, CVE-2020-1230, CVE-2020-1260. |
| 7.5 | 2020-06-09 | CVE-2020-1215 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1213, CVE-2020-1214, CVE-2020-1216, CVE-2020-1230, CVE-2020-1260. |
| 7.5 | 2020-06-09 | CVE-2020-1214 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1213, CVE-2020-1215, CVE-2020-1216, CVE-2020-1230, CVE-2020-1260. |
| 7.5 | 2020-06-09 | CVE-2020-1213 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1214, CVE-2020-1215, CVE-2020-1216, CVE-2020-1230, CVE-2020-1260. |
| 7.5 | 2020-05-21 | CVE-2020-1093 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1035, CVE-2020-1058, CVE-2020-1060. |
| 7.5 | 2020-05-21 | CVE-2020-1092 | A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1062. |
| 7.5 | 2020-05-21 | CVE-2020-1064 | A remote code execution vulnerability exists in the way that the MSHTML engine improperly validates input.An attacker could execute arbitrary code in the context of the current user, aka 'MSHTML Engine Remote Code Execution Vulnerability'. |
| 7.5 | 2020-05-21 | CVE-2020-1062 | A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1092. |
| 7.5 | 2020-05-21 | CVE-2020-1060 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1035, CVE-2020-1058, CVE-2020-1093. |
| 7.5 | 2020-05-21 | CVE-2020-1058 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1035, CVE-2020-1060, CVE-2020-1093. |
| 7.5 | 2020-05-21 | CVE-2020-1035 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1058, CVE-2020-1060, CVE-2020-1093. |
| 7.5 | 2020-04-15 | CVE-2020-0968 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0970. |
| 8.8 | 2020-04-15 | CVE-2020-0967 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0966. |
| 8.8 | 2020-04-15 | CVE-2020-0966 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0967. |
| 7.5 | 2020-04-15 | CVE-2020-0895 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability'. |
| 7.5 | 2020-03-12 | CVE-2020-0847 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. |
| 7.5 | 2020-03-12 | CVE-2020-0833 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828, CVE-2020-0829, CVE-2020-0830, CVE-2020-0831, CVE-2020-0832, CVE-2020-0848. |
| 7.5 | 2020-03-12 | CVE-2020-0832 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828, CVE-2020-0829, CVE-2020-0830, CVE-2020-0831, CVE-2020-0833, CVE-2020-0848. |
| 7.5 | 2020-03-12 | CVE-2020-0830 | A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828, CVE-2020-0829, CVE-2020-0831, CVE-2020-0832, CVE-2020-0833, CVE-2020-0848. |
| 7.5 | 2020-03-12 | CVE-2020-0824 | A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'. |
| 4.3 | 2020-02-11 | CVE-2020-0706 | An information disclosure vulnerability exists in the way that affected Microsoft browsers handle cross-origin requests, aka 'Microsoft Browser Information Disclosure Vulnerability'. |
CWE : Common Weakness Enumeration
| % | id | Name |
|---|---|---|
| 63% (311) | CWE-119 | Failure to Constrain Operations within the Bounds of a Memory Buffer |
| 12% (60) | CWE-399 | Resource Management Errors |
| 9% (47) | CWE-200 | Information Exposure |
| 6% (33) | CWE-264 | Permissions, Privileges, and Access Controls |
| 2% (14) | CWE-20 | Improper Input Validation |
| 1% (7) | CWE-254 | Security Features |
| 1% (6) | CWE-79 | Failure to Preserve Web Page Structure ('Cross-site Scripting') |
| 0% (2) | CWE-290 | Authentication Bypass by Spoofing |
| 0% (2) | CWE-94 | Failure to Control Generation of Code ('Code Injection') |
| 0% (1) | CWE-732 | Incorrect Permission Assignment for Critical Resource |
| 0% (1) | CWE-310 | Cryptographic Issues |
| 0% (1) | CWE-74 | Failure to Sanitize Data into a Different Plane ('Injection') |
| 0% (1) | CWE-19 | Data Handling |
Information Assurance Vulnerability Management (IAVM)
| id | Description |
|---|---|
| 2015-A-0210 | Cumulative Security Update for Microsoft Internet Explorer (MS15-094) Severity: Category II - VMSKEY: V0061381 |
| 2015-A-0211 | Cumulative Security Update for Microsoft Edge (MS15-095) Severity: Category II - VMSKEY: V0061383 |
| 2015-A-0188 | Cumulative Security Update for Microsoft Internet Explorer (MS15-079) Severity: Category I - VMSKEY: V0061297 |
| 2015-A-0194 | Multiple Vulnerabilities in Microsoft Office (MS15-081) Severity: Category II - VMSKEY: V0061307 |
| 2015-A-0197 | Microsoft Command Line Parameter Information Disclosure Vulnerability (MS15-088) Severity: Category II - VMSKEY: V0061313 |
| 2015-A-0189 | Cumulative Security Update for Microsoft Edge (MS15-091) Severity: Category II - VMSKEY: V0061317 |
| 2015-A-0110 | Microsoft VBScript ASLR Security Bypass Vulnerabilities (MS15-053) Severity: Category II - VMSKEY: V0060657 |
| 2014-A-0094 | Cumulative Security Update for Microsoft Internet Explorer Severity: Category I - VMSKEY: V0052947 |
| 2014-A-0079 | Cumulative Security Update for Microsoft Internet Explorer Severity: Category I - VMSKEY: V0052493 |
| 2014-A-0072 | Multiple Vulnerabilities in Microsoft Internet Explorer Severity: Category I - VMSKEY: V0050435 |
| 2014-A-0048 | Cumulative Security Update for Microsoft Internet Explorer Severity: Category I - VMSKEY: V0048677 |
| 2014-A-0037 | Cumulative Security Update for Microsoft Internet Explorer Severity: Category I - VMSKEY: V0046163 |
| 2014-A-0025 | Microsoft VBScript Remote Code Execution Vulnerability Severity: Category II - VMSKEY: V0044034 |
| 2014-A-0023 | Cumulative Security Update for Microsoft Internet Explorer Severity: Category I - VMSKEY: V0044038 |
| 2013-A-0223 | Cumulative Security Update for Microsoft Internet Explorer Severity: Category I - VMSKEY: V0042584 |
Snort® IPS/IDS
| Date | Description |
|---|---|
| 2020-06-11 | Microsoft Internet Explorer memory corruption attempt RuleID : 53931 - Type : BROWSER-IE - Revision : 1 |
| 2020-06-11 | Microsoft Internet Explorer memory corruption attempt RuleID : 53930 - Type : BROWSER-IE - Revision : 1 |
| 2020-06-11 | Microsoft Internet Explorer memory corruption attempt RuleID : 53929 - Type : BROWSER-IE - Revision : 1 |
| 2020-06-11 | Microsoft Internet Explorer memory corruption attempt RuleID : 53928 - Type : BROWSER-IE - Revision : 1 |
| 2020-06-11 | Microsoft Edge memory corruption attempt RuleID : 53927 - Type : BROWSER-IE - Revision : 1 |
| 2020-06-11 | Microsoft Edge memory corruption attempt RuleID : 53926 - Type : BROWSER-IE - Revision : 1 |
| 2020-06-11 | Microsoft Edge memory corruption attempt RuleID : 53925 - Type : BROWSER-IE - Revision : 1 |
| 2020-06-11 | Microsoft Edge memory corruption attempt RuleID : 53924 - Type : BROWSER-IE - Revision : 1 |
| 2020-06-11 | Internet Explorer VBScript engine memory corruption attempt RuleID : 53919 - Type : BROWSER-IE - Revision : 1 |
| 2020-06-11 | Internet Explorer VBScript engine memory corruption attempt RuleID : 53918 - Type : BROWSER-IE - Revision : 1 |
| 2020-05-14 | Microsoft Edge memory corruption attempt RuleID : 53624 - Type : BROWSER-IE - Revision : 1 |
| 2020-05-14 | Microsoft Edge memory corruption attempt RuleID : 53623 - Type : BROWSER-IE - Revision : 1 |
| 2020-04-09 | Microsoft Edge memory corruption attempt RuleID : 53420 - Type : BROWSER-IE - Revision : 1 |
| 2020-04-09 | Microsoft Edge memory corruption attempt RuleID : 53419 - Type : BROWSER-IE - Revision : 1 |
| 2020-04-09 | Microsoft Edge memory corruption attempt RuleID : 53417 - Type : BROWSER-IE - Revision : 1 |
| 2020-04-09 | Microsoft Edge memory corruption attempt RuleID : 53416 - Type : BROWSER-IE - Revision : 1 |
| 2020-04-09 | Internet Explorer Scripting Engine memory corruption attempt RuleID : 53405 - Type : BROWSER-IE - Revision : 1 |
| 2020-04-09 | Internet Explorer Scripting Engine memory corruption attempt RuleID : 53404 - Type : BROWSER-IE - Revision : 1 |
| 2020-04-09 | Microsoft Edge Scripting Engine memory corruption attempt RuleID : 53403 - Type : BROWSER-IE - Revision : 1 |
| 2020-04-09 | Microsoft Edge Scripting Engine memory corruption attempt RuleID : 53402 - Type : BROWSER-IE - Revision : 1 |
| 2020-03-03 | Microsoft Internet Explorer improper copy buffer access information disclosur... RuleID : 52985 - Type : BROWSER-IE - Revision : 1 |
| 2020-03-03 | Microsoft Internet Explorer improper copy buffer access information disclosur... RuleID : 52984 - Type : BROWSER-IE - Revision : 1 |
| 2020-01-09 | Microsoft Edge VBScript SafeArray memory corruption attempt RuleID : 52403 - Type : BROWSER-IE - Revision : 1 |
| 2020-01-09 | Microsoft Edge VBScript SafeArray memory corruption attempt RuleID : 52402 - Type : BROWSER-IE - Revision : 1 |
| 2019-12-17 | Microsoft Internet Explorer scripting engine memory corruption attempt RuleID : 52240 - Type : BROWSER-IE - Revision : 2 |
Nessus® Vulnerability Scanner
| id | Description |
|---|---|
| 2017-11-30 | Name: The Internet Explorer installation on the remote host is affected by multiple... File: smb_nt_ms17_aug_internet_explorer.nasl - Type: ACT_GATHER_INFO |
| 2017-11-30 | Name: The Internet Explorer installation on the remote host is affected by multiple... File: smb_nt_ms17_jul_internet_explorer.nasl - Type: ACT_GATHER_INFO |
| 2017-11-30 | Name: The Internet Explorer installation on the remote host is affected by multiple... File: smb_nt_ms17_jun_internet_explorer.nasl - Type: ACT_GATHER_INFO |
| 2017-11-30 | Name: The Internet Explorer installation on the remote host is affected by multiple... File: smb_nt_ms17_nov_internet_explorer.nasl - Type: ACT_GATHER_INFO |
| 2017-11-30 | Name: The Internet Explorer installation on the remote host is affected by multiple... File: smb_nt_ms17_oct_internet_explorer.nasl - Type: ACT_GATHER_INFO |
| 2017-11-14 | Name: The remote Windows host is affected by multiple vulnerabilities. File: smb_nt_ms17_nov_4048952.nasl - Type: ACT_GATHER_INFO |
| 2017-11-14 | Name: The remote Windows host is affected by multiple vulnerabilities. File: smb_nt_ms17_nov_4048953.nasl - Type: ACT_GATHER_INFO |
| 2017-11-14 | Name: The remote Windows host is affected by multiple vulnerabilities. File: smb_nt_ms17_nov_4048954.nasl - Type: ACT_GATHER_INFO |
| 2017-11-14 | Name: The remote Windows host is affected by multiple vulnerabilities. File: smb_nt_ms17_nov_4048955.nasl - Type: ACT_GATHER_INFO |
| 2017-11-14 | Name: The remote Windows host is affected by multiple vulnerabilities. File: smb_nt_ms17_nov_4048956.nasl - Type: ACT_GATHER_INFO |
| 2017-11-14 | Name: The remote Windows host is affected by multiple vulnerabilities. File: smb_nt_ms17_nov_4048957.nasl - Type: ACT_GATHER_INFO |
| 2017-11-14 | Name: The remote Windows host is affected by multiple vulnerabilities. File: smb_nt_ms17_nov_4048958.nasl - Type: ACT_GATHER_INFO |
| 2017-11-14 | Name: The remote Windows host is affected by multiple vulnerabilities. File: smb_nt_ms17_nov_4048959.nasl - Type: ACT_GATHER_INFO |
| 2017-11-03 | Name: The remote Windows host is affected by multiple vulnerabilities. File: smb_nt_ms17_aug_4034668.nasl - Type: ACT_GATHER_INFO |
| 2017-11-03 | Name: The remote Windows host is affected by multiple vulnerabilities. File: smb_nt_ms17_jul_4025338.nasl - Type: ACT_GATHER_INFO |
| 2017-11-03 | Name: The remote Windows host is affected by multiple vulnerabilities. File: smb_nt_ms17_oct_4042895.nasl - Type: ACT_GATHER_INFO |
| 2017-10-12 | Name: The remote Windows host is affected by multiple vulnerabilities. File: smb_nt_ms17_oct_win2008.nasl - Type: ACT_GATHER_INFO |
| 2017-10-10 | Name: The remote Windows host is affected by multiple vulnerabilities. File: smb_nt_ms17_oct_4041676.nasl - Type: ACT_GATHER_INFO |
| 2017-10-10 | Name: The remote Windows host is affected by multiple vulnerabilities. File: smb_nt_ms17_oct_4041681.nasl - Type: ACT_GATHER_INFO |
| 2017-10-10 | Name: The remote Windows host is affected by multiple vulnerabilities. File: smb_nt_ms17_oct_4041689.nasl - Type: ACT_GATHER_INFO |
| 2017-10-10 | Name: The remote Windows host is affected by multiple vulnerabilities. File: smb_nt_ms17_oct_4041690.nasl - Type: ACT_GATHER_INFO |
| 2017-10-10 | Name: The remote Windows host is affected by multiple vulnerabilities. File: smb_nt_ms17_oct_4041691.nasl - Type: ACT_GATHER_INFO |
| 2017-10-10 | Name: The remote Windows host is affected by multiple vulnerabilities. File: smb_nt_ms17_oct_4041693.nasl - Type: ACT_GATHER_INFO |
| 2017-08-08 | Name: The remote Windows host is affected by multiple vulnerabilities. File: smb_nt_ms17_aug_4034658.nasl - Type: ACT_GATHER_INFO |
| 2017-08-08 | Name: The remote Windows host is affected by multiple vulnerabilities. File: smb_nt_ms17_aug_4034660.nasl - Type: ACT_GATHER_INFO |
