{"schema_version":"1","data":[{"id":3652,"advisory_id":"4860077d-c9da-44ea-ab38-bae6847cf287","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0968","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:38:30.968239+00:00","extraction_method":"structured","technologies":["core-kev","internet-explorer"],"cve_ids":["CVE-2020-0968"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","summary":"Microsoft Internet Explorer contains a memory corruption vulnerability due to how the Scripting Engine handles objects in memory, leading to remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-0968","products":[{"name":{"value":"Internet Explorer","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-0968","aliases":["CVE-2020-0968"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2020-0968","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-0968","dueDate":"2022-05-03","product":"Internet Explorer","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Internet Explorer contains a memory corruption vulnerability due to how the Scripting Engine handles objects in memory, leading to remote code execution.","vulnerabilityName":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2020-0968","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3650,"advisory_id":"378f99cc-89c3-4a42-883f-dc67fb085f8a","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1429","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:38:29.750965+00:00","extraction_method":"structured","technologies":["core-kev","internet-explorer"],"cve_ids":["CVE-2019-1429"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","summary":"Microsoft Internet Explorer contains a memory corruption vulnerability which can allow for remote code execution in the context of the current user. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-1429","products":[{"name":{"value":"Internet Explorer","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-1429","aliases":["CVE-2019-1429"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416","CWE-787"],"cveID":"CVE-2019-1429","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-1429","dueDate":"2022-05-03","product":"Internet Explorer","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Internet Explorer contains a memory corruption vulnerability which can allow for remote code execution in the context of the current user.","vulnerabilityName":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2019-1429","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3648,"advisory_id":"0724f71e-3857-4362-9418-6921725ccb86","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1380","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:38:28.583624+00:00","extraction_method":"structured","technologies":["core-kev","internet-explorer"],"cve_ids":["CVE-2020-1380"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","summary":"Microsoft Internet Explorer contains a memory corruption vulnerability which can allow for remote code execution in the context of the current user. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-1380","products":[{"name":{"value":"Internet Explorer","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-1380","aliases":["CVE-2020-1380"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2020-1380","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-1380","dueDate":"2022-05-03","product":"Internet Explorer","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Internet Explorer contains a memory corruption vulnerability which can allow for remote code execution in the context of the current user.","vulnerabilityName":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2020-1380","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3647,"advisory_id":"23dab750-55f3-401c-bfda-a384142263d6","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1367","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:38:28.00986+00:00","extraction_method":"structured","technologies":["core-kev","internet-explorer"],"cve_ids":["CVE-2019-1367"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","summary":"Microsoft Internet Explorer contains a memory corruption vulnerability in how the scripting engine handles objects in memory. Successful exploitation allows for remote code execution in the context of the current user. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-1367","products":[{"name":{"value":"Internet Explorer","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-1367","aliases":["CVE-2019-1367"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2019-1367","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-1367","dueDate":"2022-05-03","product":"Internet Explorer","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Internet Explorer contains a memory corruption vulnerability in how the scripting engine handles objects in memory. Successful exploitation allows for remote code execution in the context of the current user.","vulnerabilityName":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2019-1367","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3645,"advisory_id":"dd621a0e-fb14-4807-b899-3751fee21d65","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0674","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:38:26.897814+00:00","extraction_method":"structured","technologies":["core-kev","internet-explorer"],"cve_ids":["CVE-2020-0674"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","summary":"Microsoft Internet Explorer contains a memory corruption vulnerability due to the way the Scripting Engine handles objects in memory. Successful exploitation could allow remote code execution in the context of the current user. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-0674","products":[{"name":{"value":"Internet Explorer","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-0674","aliases":["CVE-2020-0674"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2020-0674","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-0674","dueDate":"2022-05-03","product":"Internet Explorer","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Internet Explorer contains a memory corruption vulnerability due to the way the Scripting Engine handles objects in memory. Successful exploitation could allow remote code execution in the context of the current user.","vulnerabilityName":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2020-0674","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3642,"advisory_id":"2b27afac-e5a5-46d8-bce9-a17c01a2b453","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27085","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:38:25.132229+00:00","extraction_method":"structured","technologies":["core-kev","internet-explorer"],"cve_ids":["CVE-2021-27085"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Internet Explorer Remote Code Execution Vulnerability","summary":"Microsoft Internet Explorer contains an unspecified vulnerability that allows for remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-27085","products":[{"name":{"value":"Internet Explorer","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-27085","aliases":["CVE-2021-27085"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2021-27085","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-27085","dueDate":"2021-11-17","product":"Internet Explorer","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Internet Explorer contains an unspecified vulnerability that allows for remote code execution.","vulnerabilityName":"Microsoft Internet Explorer Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-27085","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3633,"advisory_id":"c5480e27-e2bd-4ccc-96fd-850c6e705beb","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8653","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:38:19.799506+00:00","extraction_method":"structured","technologies":["core-kev","internet-explorer"],"cve_ids":["CVE-2018-8653"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","summary":"Microsoft Internet Explorer contains a memory corruption vulnerability due to how the Scripting Engine handles objects in memory, leading to remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2018-8653","products":[{"name":{"value":"Internet Explorer","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-8653","aliases":["CVE-2018-8653"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2018-8653","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-8653","dueDate":"2022-05-03","product":"Internet Explorer","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Internet Explorer contains a memory corruption vulnerability due to how the Scripting Engine handles objects in memory, leading to remote code execution.","vulnerabilityName":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2018-8653","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3630,"advisory_id":"0c11f419-c62d-46db-8e41-32af4c10ccc6","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26411","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:38:17.998419+00:00","extraction_method":"structured","technologies":["core-kev","internet-explorer"],"cve_ids":["CVE-2021-26411"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Internet Explorer Memory Corruption Vulnerability","summary":"Microsoft Internet Explorer contains an unspecified vulnerability that allows for memory corruption. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-26411","products":[{"name":{"value":"Internet Explorer","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-26411","aliases":["CVE-2021-26411"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2021-26411","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-26411","dueDate":"2021-11-17","product":"Internet Explorer","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Internet Explorer contains an unspecified vulnerability that allows for memory corruption.","vulnerabilityName":"Microsoft Internet Explorer Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2021-26411","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2910,"advisory_id":"690479c4-517a-45d8-855d-6fa2c69d7e11","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-1776","source_published_at":"2022-01-28T00:00:00+00:00","published_at":"2026-10-24T21:26:21.585883+00:00","extraction_method":"structured","technologies":["core-kev","internet-explorer"],"cve_ids":["CVE-2014-1776"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Internet Explorer Memory Corruption Vulnerability","summary":"Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code in the context of the current user. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2014-1776","products":[{"name":{"value":"Internet Explorer","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2014-1776","aliases":["CVE-2014-1776"],"affected":[],"modified":"2022-01-28T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2014-1776","notes":"https://learn.microsoft.com/en-us/security-updates/SecurityBulletins/2014/ms14-021?redirectedfrom=MSDN; https://nvd.nist.gov/vuln/detail/CVE-2014-1776","dueDate":"2022-07-28","product":"Internet Explorer","dateAdded":"2022-01-28","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code in the context of the current user.","vulnerabilityName":"Microsoft Internet Explorer Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2014-1776","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2881,"advisory_id":"8e535cef-6f8e-43e2-b8ce-85e9518c1d70","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0752","source_published_at":"2022-02-15T00:00:00+00:00","published_at":"2026-10-24T21:26:04.197505+00:00","extraction_method":"structured","technologies":["core-kev","internet-explorer"],"cve_ids":["CVE-2019-0752"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Internet Explorer Type Confusion Vulnerability","summary":"A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-0752","products":[{"name":{"value":"Internet Explorer","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-0752","aliases":["CVE-2019-0752"],"affected":[],"modified":"2022-02-15T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-843"],"cveID":"CVE-2019-0752","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-0752","dueDate":"2022-08-15","product":"Internet Explorer","dateAdded":"2022-02-15","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Type Confusion Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2019-0752","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2875,"advisory_id":"79fb622c-892f-4ad3-a755-a73e101d978c","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0222","source_published_at":"2022-02-25T00:00:00+00:00","published_at":"2026-10-24T21:26:00.260844+00:00","extraction_method":"structured","technologies":["core-kev","internet-explorer"],"cve_ids":["CVE-2017-0222"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Internet Explorer Remote Code Execution Vulnerability","summary":"A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2017-0222","products":[{"name":{"value":"Internet Explorer","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2017-0222","aliases":["CVE-2017-0222"],"affected":[],"modified":"2022-02-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2017-0222","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-0222","dueDate":"2022-08-25","product":"Internet Explorer","dateAdded":"2022-02-25","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory.","vulnerabilityName":"Microsoft Internet Explorer Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2017-0222","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2852,"advisory_id":"75b59e4d-60d1-46e1-ac91-e1818284a97e","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-1347","source_published_at":"2022-03-03T00:00:00+00:00","published_at":"2026-10-24T21:25:44.998371+00:00","extraction_method":"structured","technologies":["core-kev","internet-explorer"],"cve_ids":["CVE-2013-1347"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Internet Explorer Remote Code Execution Vulnerability","summary":"This vulnerability may corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user within Internet Explorer. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2013-1347","products":[{"name":{"value":"Internet Explorer","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2013-1347","aliases":["CVE-2013-1347"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-94"],"cveID":"CVE-2013-1347","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-1347","dueDate":"2022-03-24","product":"Internet Explorer","dateAdded":"2022-03-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"This vulnerability may corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user within Internet Explorer.","vulnerabilityName":"Microsoft Internet Explorer Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2013-1347","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2851,"advisory_id":"0884a608-61ef-4174-a64f-badcb944935f","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-3897","source_published_at":"2022-03-03T00:00:00+00:00","published_at":"2026-10-24T21:25:44.431799+00:00","extraction_method":"structured","technologies":["core-kev","internet-explorer"],"cve_ids":["CVE-2013-3897"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Internet Explorer Use-After-Free Vulnerability","summary":"A use-after-free vulnerability exists within CDisplayPointer in Microsoft Internet Explorer that allows an attacker to remotely execute arbitrary code. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2013-3897","products":[{"name":{"value":"Internet Explorer","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2013-3897","aliases":["CVE-2013-3897"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-399"],"cveID":"CVE-2013-3897","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-3897","dueDate":"2022-03-24","product":"Internet Explorer","dateAdded":"2022-03-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"A use-after-free vulnerability exists within CDisplayPointer in Microsoft Internet Explorer that allows an attacker to remotely execute arbitrary code.","vulnerabilityName":"Microsoft Internet Explorer Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2013-3897","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2679,"advisory_id":"39042ebf-b554-4815-b77b-2c6f8cd24cad","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-2551","source_published_at":"2022-03-28T00:00:00+00:00","published_at":"2026-10-24T21:22:25.913807+00:00","extraction_method":"structured","technologies":["core-kev","internet-explorer"],"cve_ids":["CVE-2013-2551"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Internet Explorer Use-After-Free Vulnerability","summary":"Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute remote code via a crafted web site that triggers access to a deleted object. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2013-2551","products":[{"name":{"value":"Internet Explorer","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2013-2551","aliases":["CVE-2013-2551"],"affected":[],"modified":"2022-03-28T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2013-2551","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-2551","dueDate":"2022-04-18","product":"Internet Explorer","dateAdded":"2022-03-28","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute remote code via a crafted web site that triggers access to a deleted object.","vulnerabilityName":"Microsoft Internet Explorer Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2013-2551","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2676,"advisory_id":"d020de69-d4cd-4edc-82aa-25e0fa26b4d1","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-2419","source_published_at":"2022-03-28T00:00:00+00:00","published_at":"2026-10-24T21:22:24.203449+00:00","extraction_method":"structured","technologies":["core-kev","internet-explorer"],"cve_ids":["CVE-2015-2419"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Internet Explorer Memory Corruption Vulnerability","summary":"JScript in Microsoft Internet Explorer allows remote attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2015-2419","products":[{"name":{"value":"Internet Explorer","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-2419","aliases":["CVE-2015-2419"],"affected":[],"modified":"2022-03-28T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2015-2419","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-2419","dueDate":"2022-04-18","product":"Internet Explorer","dateAdded":"2022-03-28","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"JScript in Microsoft Internet Explorer allows remote attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.","vulnerabilityName":"Microsoft Internet Explorer Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-2419","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2669,"advisory_id":"e3463a7c-cfd1-4f4d-927e-14d2268831a1","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0189","source_published_at":"2022-03-28T00:00:00+00:00","published_at":"2026-10-24T21:22:19.956529+00:00","extraction_method":"structured","technologies":["core-kev","internet-explorer"],"cve_ids":["CVE-2016-0189"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Internet Explorer Memory Corruption Vulnerability","summary":"The Microsoft JScript nd VBScript engines, as used in Internet Explorer and other products, allow attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2016-0189","products":[{"name":{"value":"Internet Explorer","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-0189","aliases":["CVE-2016-0189"],"affected":[],"modified":"2022-03-28T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2016-0189","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-0189","dueDate":"2022-04-18","product":"Internet Explorer","dateAdded":"2022-03-28","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"The Microsoft JScript nd VBScript engines, as used in Internet Explorer and other products, allow attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.","vulnerabilityName":"Microsoft Internet Explorer Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2016-0189","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2664,"advisory_id":"1d63042a-b05a-4fc8-ac9d-e428912e8657","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0059","source_published_at":"2022-03-28T00:00:00+00:00","published_at":"2026-10-24T21:22:16.258978+00:00","extraction_method":"structured","technologies":["core-kev","internet-explorer"],"cve_ids":["CVE-2017-0059"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Internet Explorer Information Disclosure Vulnerability","summary":"Microsoft Internet Explorer allow remote attackers to obtain sensitive information from process memory via a crafted web site. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2017-0059","products":[{"name":{"value":"Internet Explorer","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2017-0059","aliases":["CVE-2017-0059"],"affected":[],"modified":"2022-03-28T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-200"],"cveID":"CVE-2017-0059","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-0059","dueDate":"2022-04-18","product":"Internet Explorer","dateAdded":"2022-03-28","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Internet Explorer allow remote attackers to obtain sensitive information from process memory via a crafted web site.","vulnerabilityName":"Microsoft Internet Explorer Information Disclosure Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2017-0059","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2627,"advisory_id":"eb82ec0a-647a-403a-9e72-d3db7bd88ef6","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-2502","source_published_at":"2022-04-13T00:00:00+00:00","published_at":"2026-10-24T21:21:54.267544+00:00","extraction_method":"structured","technologies":["core-kev","internet-explorer"],"cve_ids":["CVE-2015-2502"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Internet Explorer Memory Corruption Vulnerability","summary":"Microsoft Internet Explorer contains a memory corruption vulnerability that allows an attacker to execute code or cause a denial-of-service (DoS). CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2015-2502","products":[{"name":{"value":"Internet Explorer","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-2502","aliases":["CVE-2015-2502"],"affected":[],"modified":"2022-04-13T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2015-2502","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-2502","dueDate":"2022-05-04","product":"Internet Explorer","dateAdded":"2022-04-13","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Internet Explorer contains a memory corruption vulnerability that allows an attacker to execute code or cause a denial-of-service (DoS).","vulnerabilityName":"Microsoft Internet Explorer Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-2502","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2600,"advisory_id":"4e6e08d2-e54f-427a-93f6-6c8bed01b089","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-0322","source_published_at":"2022-05-04T00:00:00+00:00","published_at":"2026-10-24T21:21:36.957589+00:00","extraction_method":"structured","technologies":["core-kev","internet-explorer"],"cve_ids":["CVE-2014-0322"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Internet Explorer Use-After-Free Vulnerability","summary":"Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute code. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2014-0322","products":[{"name":{"value":"Internet Explorer","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2014-0322","aliases":["CVE-2014-0322"],"affected":[],"modified":"2022-05-04T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2014-0322","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-0322","dueDate":"2022-05-25","product":"Internet Explorer","dateAdded":"2022-05-04","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute code.","vulnerabilityName":"Microsoft Internet Explorer Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2014-0322","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2581,"advisory_id":"a1283b37-41b7-455f-92c4-b6778c0514bf","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0676","source_published_at":"2022-05-23T00:00:00+00:00","published_at":"2026-10-24T21:21:20.449803+00:00","extraction_method":"structured","technologies":["core-kev","internet-explorer"],"cve_ids":["CVE-2019-0676"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Internet Explorer Information Disclosure Vulnerability","summary":"An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory. An attacker who successfully exploited this vulnerability could test for the presence of files on disk. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-0676","products":[{"name":{"value":"Internet Explorer","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-0676","aliases":["CVE-2019-0676"],"affected":[],"modified":"2022-05-23T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2019-0676","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-0676","dueDate":"2022-06-13","product":"Internet Explorer","dateAdded":"2022-05-23","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory. An attacker who successfully exploited this vulnerability could test for the presence of files on disk.","vulnerabilityName":"Microsoft Internet Explorer Information Disclosure Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2019-0676","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2572,"advisory_id":"f746ea75-46e9-4f11-a4e3-84de21d82cc0","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3298","source_published_at":"2022-05-24T00:00:00+00:00","published_at":"2026-10-24T21:20:29.356959+00:00","extraction_method":"structured","technologies":["core-kev","internet-explorer"],"cve_ids":["CVE-2016-3298"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability","summary":"An information disclosure vulnerability exists when the Microsoft Internet Messaging API improperly handles objects in memory. An attacker who successfully exploited this vulnerability could allow the attacker to test for the presence of files on disk. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2016-3298","products":[{"name":{"value":"Internet Explorer","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-3298","aliases":["CVE-2016-3298"],"affected":[],"modified":"2022-05-24T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-200"],"cveID":"CVE-2016-3298","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-3298","dueDate":"2022-06-14","product":"Internet Explorer","dateAdded":"2022-05-24","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"An information disclosure vulnerability exists when the Microsoft Internet Messaging API improperly handles objects in memory. An attacker who successfully exploited this vulnerability could allow the attacker to test for the presence of files on disk.","vulnerabilityName":"Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2016-3298","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2565,"advisory_id":"8e0ac910-a45e-45f6-bd62-2b49233d0c07","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0162","source_published_at":"2022-05-24T00:00:00+00:00","published_at":"2026-10-24T21:20:25.306694+00:00","extraction_method":"structured","technologies":["core-kev","internet-explorer"],"cve_ids":["CVE-2016-0162"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Internet Explorer Information Disclosure Vulnerability","summary":"An information disclosure vulnerability exists when Internet Explorer does not properly handle JavaScript. The vulnerability could allow an attacker to detect specific files on the user's computer. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2016-0162","products":[{"name":{"value":"Internet Explorer","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-0162","aliases":["CVE-2016-0162"],"affected":[],"modified":"2022-05-24T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-200"],"cveID":"CVE-2016-0162","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-0162","dueDate":"2022-06-14","product":"Internet Explorer","dateAdded":"2022-05-24","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"An information disclosure vulnerability exists when Internet Explorer does not properly handle JavaScript. The vulnerability could allow an attacker to detect specific files on the user's computer.","vulnerabilityName":"Microsoft Internet Explorer Information Disclosure Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2016-0162","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2562,"advisory_id":"0e4ba556-2e4e-4537-91ab-f206172c5e99","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0149","source_published_at":"2022-05-24T00:00:00+00:00","published_at":"2026-10-24T21:20:23.481621+00:00","extraction_method":"structured","technologies":["core-kev","internet-explorer"],"cve_ids":["CVE-2017-0149"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Internet Explorer Memory Corruption Vulnerability","summary":"Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause a denial-of-service (DoS) via a crafted website. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2017-0149","products":[{"name":{"value":"Internet Explorer","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2017-0149","aliases":["CVE-2017-0149"],"affected":[],"modified":"2022-05-24T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2017-0149","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-0149","dueDate":"2022-06-14","product":"Internet Explorer","dateAdded":"2022-05-24","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause a denial-of-service (DoS) via a crafted website.","vulnerabilityName":"Microsoft Internet Explorer Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2017-0149","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2560,"advisory_id":"af3644bf-c5b3-48db-8b83-170794d14fda","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0210","source_published_at":"2022-05-24T00:00:00+00:00","published_at":"2026-10-24T21:20:22.310098+00:00","extraction_method":"structured","technologies":["core-kev","internet-explorer"],"cve_ids":["CVE-2017-0210"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Internet Explorer Privilege Escalation Vulnerability","summary":"A privilege escalation vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2017-0210","products":[{"name":{"value":"Internet Explorer","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2017-0210","aliases":["CVE-2017-0210"],"affected":[],"modified":"2022-05-24T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2017-0210","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-0210","dueDate":"2022-06-14","product":"Internet Explorer","dateAdded":"2022-05-24","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"A privilege escalation vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information.","vulnerabilityName":"Microsoft Internet Explorer Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2017-0210","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2543,"advisory_id":"6f347a2f-7f38-4fb3-a61c-4a26b01a52db","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-7331","source_published_at":"2022-05-25T00:00:00+00:00","published_at":"2026-10-24T21:20:12.271307+00:00","extraction_method":"structured","technologies":["core-kev","internet-explorer"],"cve_ids":["CVE-2013-7331"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Internet Explorer Information Disclosure Vulnerability","summary":"An information disclosure vulnerability exists in Internet Explorer which allows resources loaded into memory to be queried. This vulnerability could allow an attacker to detect anti-malware applications. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2013-7331","products":[{"name":{"value":"Internet Explorer","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2013-7331","aliases":["CVE-2013-7331"],"affected":[],"modified":"2022-05-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-200"],"cveID":"CVE-2013-7331","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-7331","dueDate":"2022-06-15","product":"Internet Explorer","dateAdded":"2022-05-25","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"An information disclosure vulnerability exists in Internet Explorer which allows resources loaded into memory to be queried. This vulnerability could allow an attacker to detect anti-malware applications.","vulnerabilityName":"Microsoft Internet Explorer Information Disclosure Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2013-7331","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2539,"advisory_id":"64f244c3-b307-4414-bd47-3c8930508eeb","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-2817","source_published_at":"2022-05-25T00:00:00+00:00","published_at":"2026-10-24T21:20:09.981964+00:00","extraction_method":"structured","technologies":["core-kev","internet-explorer"],"cve_ids":["CVE-2014-2817"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Internet Explorer Privilege Escalation Vulnerability","summary":"Microsoft Internet Explorer cotains an unspecified vulnerability that allows remote attackers to gain privileges via a crafted web site. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2014-2817","products":[{"name":{"value":"Internet Explorer","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2014-2817","aliases":["CVE-2014-2817"],"affected":[],"modified":"2022-05-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-264"],"cveID":"CVE-2014-2817","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-2817","dueDate":"2022-06-15","product":"Internet Explorer","dateAdded":"2022-05-25","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Internet Explorer cotains an unspecified vulnerability that allows remote attackers to gain privileges via a crafted web site.","vulnerabilityName":"Microsoft Internet Explorer Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2014-2817","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2537,"advisory_id":"e153bbe1-7e7b-4fb2-ab32-950b6d9fbf9f","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-4123","source_published_at":"2022-05-25T00:00:00+00:00","published_at":"2026-10-24T21:20:08.85814+00:00","extraction_method":"structured","technologies":["core-kev","internet-explorer"],"cve_ids":["CVE-2014-4123"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Internet Explorer Privilege Escalation Vulnerability","summary":"Microsoft Internet Explorer contains an unspecified vulnerability that allows remote attackers to gain privileges via a crafted web site. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2014-4123","products":[{"name":{"value":"Internet Explorer","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2014-4123","aliases":["CVE-2014-4123"],"affected":[],"modified":"2022-05-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-264"],"cveID":"CVE-2014-4123","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-4123","dueDate":"2022-06-15","product":"Internet Explorer","dateAdded":"2022-05-25","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Internet Explorer contains an unspecified vulnerability that allows remote attackers to gain privileges via a crafted web site.","vulnerabilityName":"Microsoft Internet Explorer Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2014-4123","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2530,"advisory_id":"2fcc4e91-3ac1-4bd8-a903-bc473631cbc0","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-2425","source_published_at":"2022-05-25T00:00:00+00:00","published_at":"2026-10-24T21:20:04.541534+00:00","extraction_method":"structured","technologies":["core-kev","internet-explorer"],"cve_ids":["CVE-2015-2425"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Internet Explorer Memory Corruption Vulnerability","summary":"Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS). CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2015-2425","products":[{"name":{"value":"Internet Explorer","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-2425","aliases":["CVE-2015-2425"],"affected":[],"modified":"2022-05-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2015-2425","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-2425","dueDate":"2022-06-15","product":"Internet Explorer","dateAdded":"2022-05-25","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).","vulnerabilityName":"Microsoft Internet Explorer Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-2425","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2526,"advisory_id":"24fe9289-8c23-4db7-a37e-acc2925f23d9","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-0071","source_published_at":"2022-05-25T00:00:00+00:00","published_at":"2026-10-24T21:20:01.896563+00:00","extraction_method":"structured","technologies":["core-kev","internet-explorer"],"cve_ids":["CVE-2015-0071"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Internet Explorer ASLR Bypass Vulnerability","summary":"Microsoft Internet Explorer allows remote attackers to bypass the address space layout randomization (ASLR) protection mechanism via a crafted web site. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2015-0071","products":[{"name":{"value":"Internet Explorer","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-0071","aliases":["CVE-2015-0071"],"affected":[],"modified":"2022-05-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-264"],"cveID":"CVE-2015-0071","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-0071","dueDate":"2022-06-15","product":"Internet Explorer","dateAdded":"2022-05-25","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Internet Explorer allows remote attackers to bypass the address space layout randomization (ASLR) protection mechanism via a crafted web site.","vulnerabilityName":"Microsoft Internet Explorer ASLR Bypass Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-0071","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2500,"advisory_id":"bbd6a306-5d7e-41b8-ba89-d5e6975517e9","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-4969","source_published_at":"2022-06-08T00:00:00+00:00","published_at":"2026-10-24T21:19:45.79526+00:00","extraction_method":"structured","technologies":["core-kev","internet-explorer"],"cve_ids":["CVE-2012-4969"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Internet Explorer Use-After-Free Vulnerability","summary":"Microsoft Internet Explorer contains a use-after-free vulnerability that allows remote attackers to execute code via a crafted web site. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2012-4969","products":[{"name":{"value":"Internet Explorer","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2012-4969","aliases":["CVE-2012-4969"],"affected":[],"modified":"2022-06-08T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2012-4969","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-4969","dueDate":"2022-06-22","product":"Internet Explorer","dateAdded":"2022-06-08","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Internet Explorer contains a use-after-free vulnerability that allows remote attackers to execute code via a crafted web site.","vulnerabilityName":"Microsoft Internet Explorer Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2012-4969","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}}],"next_after":3652,"next_before":2500}