CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Windows Scripting Engine Memory Corruption Vulnerability (CVE-2024-38178) Technical Advisory
[Affected Scope] Windows 10, 11, and Windows Server environments utilizing the legacy JScript9 engine, particularly with Internet Explorer mode enabled
[Impact] Remote Code Execution (RCE) and full system compromise via specially crafted malicious web pages
[Mitigation] Apply the Microsoft August 2024 security updates immediately and disable legacy IE scripting engines where applicable
Microsoft Internet Explorer ActiveX Control (icardie.dll) Out-of-Bounds Write Remote Code Execution Vulnerability (CVE-2013-3918)
[Affected Scope] Internet Explorer and the icardie.dll ActiveX control running on Windows XP, Vista, 7, 8, 8.1, and Windows Server 2003, 2008, 2012
[Impact] Remote attackers can execute arbitrary code or cause a denial of service (system crash) by enticing users to visit a specially crafted malicious web page
[Mitigation] Apply the official Microsoft MS13-090 security patch or configure the ActiveX Kill Bit for the icardie.dll control via the registry
Microsoft Internet Explorer SetMouseCapture Use-After-Free Remote Code Execution Vulnerability (CVE-2013-3893)
[Affected Scope] Microsoft Internet Explorer versions 6 through 11
[Impact] Remote attackers can execute arbitrary code with the privileges of the active user via crafted JavaScript and ms-help: protocol handlers
[Mitigation] Apply the MS13-080 cumulative security update, or implement workarounds such as disabling hxds.dll loading
Microsoft Internet Explorer 6/7/8 CDwnBindInfo Use-After-Free Remote Code Execution Vulnerability (CVE-2012-4792)
[Affected Scope] Microsoft Internet Explorer versions 6, 7, and 8
[Impact] Remote attackers can execute arbitrary code with user privileges via a crafted malicious website
[Mitigation] Apply the official MS13-008 security update, transition to a modern browser, or apply EMET mitigations
Microsoft Internet Explorer CSS Use-After-Free Remote Code Execution Vulnerability (CVE-2010-3962)
[Affected Scope] Microsoft Internet Explorer versions 6, 7, and 8
[Impact] Remote attackers can execute arbitrary code with the privileges of the active user via a specially crafted web page
[Mitigation] Apply official cumulative security updates (MS10-090 or later), transition to modern browsers, or implement temporary workarounds
Microsoft Internet Explorer iepeers.dll Use-After-Free Remote Code Execution Vulnerability (CVE-2010-0806)
[Affected Scope] Microsoft Internet Explorer 6, 6 SP1, and 7.
[Impact] Remote attackers can execute arbitrary code with the privileges of the logged-in user by enticing them to visit a specially crafted webpage.
[Mitigation] Apply the official Microsoft security updates, or implement workarounds such as setting the ActiveX Kill-Bit for the affected CLSID.
Microsoft Internet Explorer Use-After-Free Remote Code Execution Vulnerability (CVE-2010-0249, Operation Aurora)
[Affected Scope] Microsoft Internet Explorer 6, 6 SP1, 7, and 8 running on Windows 2000, XP, Server 2003, Vista, Server 2008, and Windows 7
[Impact] Remote attackers can execute arbitrary code with the privileges of the logged-in user by enticing them to visit a specially crafted malicious webpage
[Mitigation] Apply the official Microsoft security update (KB979352) immediately, or implement temporary mitigations such as enabling DEP and disabling Active Scripting