CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2015-02-11
Microsoft Internet Explorer ASLR Bypass Vulnerability (CVE-2015-0071, MS15-009) Technical Analysis and Mitigation Guide
[Affected Scope] Microsoft Internet Explorer 9, 10, and 11
[Impact] Attackers can bypass Address Space Layout Randomization (ASLR) protections via crafted web content, significantly increasing the success rate of subsequent Remote Code Execution (RCE) attacks
[Mitigation] Apply the MS15-009 cumulative security update, transition to Microsoft Edge, and enforce system-wide exploit mitigations (Force ASLR)