VendorsMicrosoftinternet_explorer9
Vulnerabilities

Microsoft Internet Explorer 9

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

638CVEs
CVE-2017-11894
ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and and Internet Explorer adn Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930.
Published 2017-12-12 · Modified
7.6EPSS 0.085
CVE-2019-1485
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.
Published 2019-12-10 · Modified
7.6EPSS 0.084
CVE-2017-8517
Microsoft browsers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engines fail to render when handling objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8522 and CVE-2017-8524.
Published 2017-06-15 · Modified
7.6EPSS 0.082
CVE-2020-1214
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1213, CVE-2020-1215, CVE-2020-1216, CVE-2020-1230, CVE-2020-1260.
Published 2020-06-09 · Modified
7.6EPSS 0.080
CVE-2020-1215
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1213, CVE-2020-1214, CVE-2020-1216, CVE-2020-1230, CVE-2020-1260.
Published 2020-06-09 · Modified
7.6EPSS 0.080
CVE-2019-0918
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0884, CVE-2019-0911.
Published 2019-05-16 · Modified
7.6EPSS 0.080
CVE-2020-0847
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.
Published 2020-03-12 · Modified
7.6EPSS 0.079
CVE-2020-0895
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability'.
Published 2020-04-15 · Modified
7.6EPSS 0.079
CVE-2019-1059
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1001, CVE-2019-1004, CVE-2019-1056.
Published 2019-07-15 · Modified
7.6EPSS 0.078
CVE-2019-1004
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1001, CVE-2019-1056, CVE-2019-1059.
Published 2019-07-15 · Modified
7.6EPSS 0.078
CVE-2019-1236
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1208.
Published 2019-09-11 · Modified
7.6EPSS 0.075
CVE-2019-0884
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0911, CVE-2019-0918.
Published 2019-05-16 · Modified
7.6EPSS 0.075
CVE-2019-1390
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.
Published 2019-11-12 · Modified
7.6EPSS 0.075
CVE-2019-1371
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'.
Published 2019-10-10 · Modified
7.6EPSS 0.074
CVE-2020-1213
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1214, CVE-2020-1215, CVE-2020-1216, CVE-2020-1230, CVE-2020-1260.
Published 2020-06-09 · Modified
7.6EPSS 0.072
CVE-2020-1216
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1213, CVE-2020-1214, CVE-2020-1215, CVE-2020-1230, CVE-2020-1260.
Published 2020-06-09 · Modified
7.6EPSS 0.072
CVE-2019-1063
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'.
Published 2019-07-15 · Modified
7.6EPSS 0.072
CVE-2020-1230
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1213, CVE-2020-1214, CVE-2020-1215, CVE-2020-1216, CVE-2020-1260.
Published 2020-06-09 · Modified
7.6EPSS 0.071
CVE-2019-1104
A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corruption Vulnerability'.
Published 2019-07-29 · Modified
7.6EPSS 0.071
CVE-2020-1062
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1092.
Published 2020-05-21 · Modified
7.6EPSS 0.062
CVE-2017-8519
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 and R2 allow an attacker to execute arbitrary code in the context of the current user when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8547.
Published 2017-06-15 · Modified
7.6EPSS 0.061
CVE-2017-8651
Internet Explorer in Microsoft Windows Server 2008 SP2 and Windows Server 2012 allows an attacker to execute arbitrary code in the context of the current user due to Internet Explorer improperly accessing objects in memory, aka "Internet Explorer Memory Corruption Vulnerability".
Published 2017-08-08 · Modified
7.6EPSS 0.057
CVE-2019-0920
Scripting Engine Memory Corruption Vulnerability
Published 2019-06-12 · Modified
7.6EPSS 0.055
CVE-2020-1567
MSHTML Engine Remote Code Execution Vulnerability
Published 2020-08-17 · Modified
7.6EPSS 0.037
CVE-2019-1194
Scripting Engine Memory Corruption Vulnerability
Published 2019-08-14 · Modified
7.6EPSS 0.034
CVE-2019-1005
Scripting Engine Memory Corruption Vulnerability
Published 2019-06-12 · Modified
7.6EPSS 0.033
CVE-2019-1055
Scripting Engine Memory Corruption Vulnerability
Published 2019-06-12 · Modified
7.6EPSS 0.033
CVE-2019-1080
Scripting Engine Memory Corruption Vulnerability
Published 2019-06-12 · Modified
7.6EPSS 0.033
CVE-2019-1133
Scripting Engine Memory Corruption Vulnerability
Published 2019-08-14 · Modified
7.6EPSS 0.033
CVE-2020-1035
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1058, CVE-2020-1060, CVE-2020-1093.
Published 2020-05-21 · Modified
7.6EPSS 0.031
CVE-2020-1064
A remote code execution vulnerability exists in the way that the MSHTML engine improperly validates input.An attacker could execute arbitrary code in the context of the current user, aka 'MSHTML Engine Remote Code Execution Vulnerability'.
Published 2020-05-21 · Modified
7.6EPSS 0.031
CVE-2020-1093
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1035, CVE-2020-1058, CVE-2020-1060.
Published 2020-05-21 · Modified
7.6EPSS 0.031
CVE-2020-1092
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1062.
Published 2020-05-21 · Modified
7.6EPSS 0.031
CVE-2020-1060
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1035, CVE-2020-1058, CVE-2020-1093.
Published 2020-05-21 · Modified
7.6EPSS 0.031
CVE-2020-1058
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1035, CVE-2020-1060, CVE-2020-1093.
Published 2020-05-21 · Modified
7.6EPSS 0.031
CVE-2014-1762
Unspecified vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code with medium-integrity privileges and bypass a sandbox protection mechanism via unknown vectors, as demonstrated by ZDI during a Pwn4Fun competition at CanSecWest 2014.
Published 2014-04-27 · Modified
7.51 PoCEPSS 0.707
CVE-2014-2777
Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary web script with increased privileges via unspecified vectors, aka "Internet Explorer Elevation of Privilege Vulnerability," a different vulnerability than CVE-2014-1778.
Published 2014-06-11 · Modified
7.51 PoCEPSS 0.230
CVE-2013-2557
The sandbox protection mechanism in Microsoft Internet Explorer 9 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, as demonstrated against Adobe Flash Player by VUPEN during a Pwn2Own competition at CanSecWest 2013.
Published 2013-03-11 · Modified
7.5EPSS 0.109
CVE-2020-0878
Microsoft Browser Memory Corruption Vulnerability
Published 2020-09-11 · Analyzed
7.5KEVEPSS 0.027
CVE-2019-1238
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1239.
Published 2019-10-10 · Modified
7.1EPSS 0.059
← Prev13 / 16Next →