Internet Explorer 11 at a glance
5 of the exploited vulnerabilities are known to be used by ransomware (CISA).
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
Most common weaknesses
158 results · Feed
-
High 7.5CVE-2021-26419 EPSS 23%
Scripting Engine Memory Corruption Vulnerability
Scripting Engine Memory Corruption Vulnerability
-
High 8.8CVE-2021-27085 Exploited
Internet Explorer Remote Code Execution Vulnerability
Internet Explorer Remote Code Execution Vulnerability
KEV Nov 3, 2021 -
High 8.8
Internet Explorer Memory Corruption Vulnerability
Internet Explorer Memory Corruption Vulnerability
KEV Nov 3, 2021 -
High 7.5
Microsoft Browser Memory Corruption Vulnerability
Microsoft Browser Memory Corruption Vulnerability
-
High 7.5
Internet Explorer Memory Corruption Vulnerability
Internet Explorer Memory Corruption Vulnerability
-
High 7.5
Scripting Engine Memory Corruption Vulnerability
Scripting Engine Memory Corruption Vulnerability
-
Medium 6.1
Windows Start-Up Application Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in the way that the Wininit.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.</p> <p>There are multiple ways an attacker coul…
-
High 8.8
WinINet API Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in the way that the Wininit.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.</p> <p>There are multiple ways an attacker coul…
-
Medium 4.2CVE-2020-0878 Exploited · Ransomware
Microsoft Browser Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker…
KEV Nov 3, 2021 -
Unscored —
Scripting Engine Memory Corruption Vulnerability
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current …
-
Medium 4.2
MSHTML Engine Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that the MSHTML engine improperly validates input. An attacker could execute arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attack…
-
High 7.8
Scripting Engine Memory Corruption Vulnerability
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current …
KEV Nov 3, 2021 -
Unscored —
An information disclosure vulnerability exists when Skype for Business is accessed via Internet Explorer, aka 'Skype fo…
-
Unscored —CVE-2020-1403 EPSS 10%
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScri…
-
Unscored —
An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory, aka 'Intern…
-
Unscored —
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScri…
-
Unscored —
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScri…
-
Unscored —CVE-2020-1219 EPSS 19%
A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsof…
-
Unscored —
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScri…
-
Unscored —
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScri…
-
Unscored —
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScri…
-
Unscored —
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScri…
-
High 7.5
VBScript Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who …
-
High 7.5
Internet Explorer Memory Corruption Vulnerability
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who s…
-
High 7.5
MSHTML Engine Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that the MSHTML engine improperly validates input. An attacker could execute arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attack…
-
High 7.5
Internet Explorer Memory Corruption Vulnerability
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who s…
-
High 7.5
VBScript Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who …
-
High 7.5
VBScript Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who …
-
High 7.5
VBScript Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who …
-
High 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…
KEV Nov 3, 2021 -
Unscored —CVE-2020-0967 EPSS 12%
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScri…
-
Unscored —CVE-2020-0966 EPSS 12%
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScri…
-
Unscored —
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Window…
-
Unscored —
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScri…
-
High 7.5
Out-of-bounds write in ChakraCore
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, C…
-
High 7.5
Out-of-bounds write in ChakraCore
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, C…
-
High 7.5
Out-of-bounds write in ChakraCore
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2…
-
Unscored —
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Interne…
-
High 7.5
Out-of-bounds write in ChakraCore
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2…
-
Unscored —
An information disclosure vulnerability exists in the way that affected Microsoft browsers handle cross-origin requests…