Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.
| CVE | Vendor | Product | Added | Due | Status |
|---|---|---|---|---|---|
|
CVE-2015-0071 — Microsoft Internet Explorer ASLR Bypass Vulnerability
Microsoft Internet Explorer allows remote attackers to bypass the address space layout randomization (ASLR) protection mechanism via a crafted web site.
|
Microsoft | Internet Explorer | May 25, 2022 | Jun 15, 2022 | |
|
CVE-2015-2425 — Microsoft Internet Explorer Memory Corruption Vulnerability
Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
|
Microsoft | Internet Explorer | May 25, 2022 | Jun 15, 2022 | |
|
CVE-2016-0162 — Microsoft Internet Explorer Information Disclosure Vulnerability
An information disclosure vulnerability exists when Internet Explorer does not properly handle JavaScript. The vulnerability could allow an attacker to detect specific files on the user's computer.
|
Microsoft | Internet Explorer | May 24, 2022 | Jun 14, 2022 | |
|
CVE-2016-3298 — Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability
An information disclosure vulnerability exists when the Microsoft Internet Messaging API improperly handles objects in memory. An attacker who successfully exploited this vulnerability could allow the attacker to test for the presence of files on disk.
|
Microsoft | Internet Explorer | May 24, 2022 | Jun 14, 2022 | |
|
CVE-2017-0149 — Microsoft Internet Explorer Memory Corruption Vulnerability
Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause a denial-of-service (DoS) via a crafted website.
|
Microsoft | Internet Explorer | May 24, 2022 | Jun 14, 2022 | |
|
CVE-2017-0210 — Microsoft Internet Explorer Privilege Escalation Vulnerability
A privilege escalation vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information.
|
Microsoft | Internet Explorer | May 24, 2022 | Jun 14, 2022 | |
|
CVE-2019-0676 — Microsoft Internet Explorer Information Disclosure Vulnerability
An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory. An attacker who successfully exploited this vulnerability could test for the presence of files on disk.
|
Microsoft | Internet Explorer | May 23, 2022 | Jun 13, 2022 | |
|
CVE-2014-0322 — Microsoft Internet Explorer Use-After-Free Vulnerability
Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute code.
|
Microsoft | Internet Explorer | May 4, 2022 | May 25, 2022 | |
|
CVE-2015-2502 — Microsoft Internet Explorer Memory Corruption Vulnerability
Microsoft Internet Explorer contains a memory corruption vulnerability that allows an attacker to execute code or cause a denial-of-service (DoS).
|
Microsoft | Internet Explorer | Apr 13, 2022 | May 4, 2022 | |
|
CVE-2013-2551 — Microsoft Internet Explorer Use-After-Free Vulnerability
Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute remote code via a crafted web site that triggers access to a deleted object.
|
Microsoft | Internet Explorer | Mar 28, 2022 | Apr 18, 2022 | Ransomware |
Microsoft Internet Explorer allows remote attackers to bypass the address space layout randomization (ASLR) protection mechanism via a crafted web site.
Internet Explorer · May 25, 2022
Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
Internet Explorer · May 25, 2022
An information disclosure vulnerability exists when Internet Explorer does not properly handle JavaScript. The vulnerability could allow an attacker to detect specific files on the user's computer.
Internet Explorer · May 24, 2022
An information disclosure vulnerability exists when the Microsoft Internet Messaging API improperly handles objects in memory. An attacker who successfully exploited this vulnerability could allow the attacker to test for the presence of files on disk.
Internet Explorer · May 24, 2022
Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause a denial-of-service (DoS) via a crafted website.
Internet Explorer · May 24, 2022
A privilege escalation vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information.
Internet Explorer · May 24, 2022
An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory. An attacker who successfully exploited this vulnerability could test for the presence of files on disk.
Internet Explorer · May 23, 2022
Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute code.
Internet Explorer · May 4, 2022
Microsoft Internet Explorer contains a memory corruption vulnerability that allows an attacker to execute code or cause a denial-of-service (DoS).
Internet Explorer · Apr 13, 2022
Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute remote code via a crafted web site that triggers access to a deleted object.
Internet Explorer · Mar 28, 2022