Security feed

24 October 2026

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

Microsoft Internet Explorer contains a memory corruption vulnerability due to how the Scripting Engine handles objects in memory, leading to remote code execution. CISA required action: Apply updates per vendor instructions.

Internet Explorer CVE-2020-0968

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2020-0968

Internet Explorer

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2020-0968
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #3652 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:38:30 GMT
Publisher date: Wed, 03 Nov 2021 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

Microsoft Internet Explorer contains a memory corruption vulnerability which can allow for remote code execution in the context of the current user. CISA required action: Apply updates per vendor instructions.

Internet Explorer CVE-2019-1429

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2019-1429

Internet Explorer

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2019-1429
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #3650 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:38:29 GMT
Publisher date: Wed, 03 Nov 2021 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

Internet Explorer CVE-2020-1380

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2020-1380

Internet Explorer

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2020-1380
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #3648 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:38:28 GMT
Publisher date: Wed, 03 Nov 2021 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

Microsoft Internet Explorer contains a memory corruption vulnerability in how the scripting engine handles objects in memory. Successful exploitation allows for remote code execution in the context of the current user. CISA required action: Apply updates per vendor instructions.

Internet Explorer CVE-2019-1367

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2019-1367

Internet Explorer

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2019-1367
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #3647 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:38:28 GMT
Publisher date: Wed, 03 Nov 2021 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

Microsoft Internet Explorer contains a memory corruption vulnerability due to the way the Scripting Engine handles objects in memory. Successful exploitation could allow remote code execution in the context of the current user. CISA required action: Apply updates per vendor instructions.

Internet Explorer CVE-2020-0674

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2020-0674

Internet Explorer

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2020-0674
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #3645 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:38:26 GMT
Publisher date: Wed, 03 Nov 2021 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Internet Explorer Remote Code Execution Vulnerability

Microsoft Internet Explorer contains an unspecified vulnerability that allows for remote code execution. CISA required action: Apply updates per vendor instructions.

Internet Explorer CVE-2021-27085

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2021-27085

Internet Explorer

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2021-27085
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #3642 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:38:25 GMT
Publisher date: Wed, 03 Nov 2021 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

Internet Explorer CVE-2018-8653

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2018-8653

Internet Explorer

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2018-8653
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #3633 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:38:19 GMT
Publisher date: Wed, 03 Nov 2021 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Internet Explorer Memory Corruption Vulnerability

Microsoft Internet Explorer contains an unspecified vulnerability that allows for memory corruption. CISA required action: Apply updates per vendor instructions.

Internet Explorer CVE-2021-26411

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2021-26411

Internet Explorer

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2021-26411
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #3630 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:38:17 GMT
Publisher date: Wed, 03 Nov 2021 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Internet Explorer Memory Corruption Vulnerability

Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code in the context of the current user. CISA required action: Apply updates per vendor instructions.

Internet Explorer CVE-2014-1776

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2014-1776

Internet Explorer

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2014-1776
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2910 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:26:21 GMT
Publisher date: Fri, 28 Jan 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Internet Explorer Type Confusion Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer CISA required action: Apply updates per vendor instructions.

Internet Explorer CVE-2019-0752

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2019-0752

Internet Explorer

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2019-0752
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2881 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:26:04 GMT
Publisher date: Tue, 15 Feb 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Internet Explorer Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. CISA required action: Apply updates per vendor instructions.

Internet Explorer CVE-2017-0222

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2017-0222

Internet Explorer

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2017-0222
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2875 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:26:00 GMT
Publisher date: Fri, 25 Feb 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Internet Explorer Remote Code Execution Vulnerability

This vulnerability may corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user within Internet Explorer. CISA required action: Apply updates per vendor instructions.

Internet Explorer CVE-2013-1347

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2013-1347

Internet Explorer

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2013-1347
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2852 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:25:44 GMT
Publisher date: Thu, 03 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Internet Explorer Use-After-Free Vulnerability

A use-after-free vulnerability exists within CDisplayPointer in Microsoft Internet Explorer that allows an attacker to remotely execute arbitrary code. CISA required action: Apply updates per vendor instructions.

Internet Explorer CVE-2013-3897

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2013-3897

Internet Explorer

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2013-3897
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2851 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:25:44 GMT
Publisher date: Thu, 03 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Internet Explorer Use-After-Free Vulnerability

Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute remote code via a crafted web site that triggers access to a deleted object. CISA required action: Apply updates per vendor instructions.

Internet Explorer CVE-2013-2551

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2013-2551

Internet Explorer

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2013-2551
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2679 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:22:25 GMT
Publisher date: Mon, 28 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Internet Explorer Memory Corruption Vulnerability

JScript in Microsoft Internet Explorer allows remote attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site. CISA required action: Apply updates per vendor instructions.

Internet Explorer CVE-2015-2419

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2015-2419

Internet Explorer

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2015-2419
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2676 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:22:24 GMT
Publisher date: Mon, 28 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Internet Explorer Memory Corruption Vulnerability

The Microsoft JScript nd VBScript engines, as used in Internet Explorer and other products, allow attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site. CISA required action: Apply updates per vendor instructions.

Internet Explorer CVE-2016-0189

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2016-0189

Internet Explorer

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2016-0189
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2669 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:22:19 GMT
Publisher date: Mon, 28 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Internet Explorer Information Disclosure Vulnerability

Microsoft Internet Explorer allow remote attackers to obtain sensitive information from process memory via a crafted web site. CISA required action: Apply updates per vendor instructions.

Internet Explorer CVE-2017-0059

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2017-0059

Internet Explorer

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2017-0059
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2664 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:22:16 GMT
Publisher date: Mon, 28 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Internet Explorer Memory Corruption Vulnerability

Microsoft Internet Explorer contains a memory corruption vulnerability that allows an attacker to execute code or cause a denial-of-service (DoS). CISA required action: Apply updates per vendor instructions.

Internet Explorer CVE-2015-2502

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2015-2502

Internet Explorer

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2015-2502
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2627 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:21:54 GMT
Publisher date: Wed, 13 Apr 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Internet Explorer Use-After-Free Vulnerability

Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute code. CISA required action: Apply updates per vendor instructions.

Internet Explorer CVE-2014-0322

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2014-0322

Internet Explorer

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2014-0322
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2600 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:21:36 GMT
Publisher date: Wed, 04 May 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Internet Explorer Information Disclosure Vulnerability

An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory. An attacker who successfully exploited this vulnerability could test for the presence of files on disk. CISA required action: Apply updates per vendor instructions.

Internet Explorer CVE-2019-0676

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2019-0676

Internet Explorer

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2019-0676
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2581 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:21:20 GMT
Publisher date: Mon, 23 May 2022 00:00:00 GMT

Read the original announcement

Older events