Vulnerabilities > Microsoft > Internet Explorer > Critical

DATE CVE VULNERABILITY TITLE RISK
2012-04-10 CVE-2012-0172 Code Injection vulnerability in Microsoft Internet Explorer 6/7/8
Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "VML Style Remote Code Execution Vulnerability."
network
microsoft CWE-94
critical
9.3
2012-02-14 CVE-2012-0011 Code Injection vulnerability in Microsoft Internet Explorer 7/8/9
Microsoft Internet Explorer 7 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "HTML Layout Remote Code Execution Vulnerability."
network
microsoft CWE-94
critical
9.3
2012-02-14 CVE-2012-0155 Code Injection vulnerability in Microsoft Internet Explorer 9
Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "VML Remote Code Execution Vulnerability."
network
microsoft CWE-94
critical
9.3
2011-12-14 CVE-2011-2019 Untrusted Search Path vulnerability in Microsoft Internet Explorer 9
Untrusted search path vulnerability in Microsoft Internet Explorer 9 on Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains an HTML file, aka "Internet Explorer Insecure Library Loading Vulnerability."
network
microsoft CWE-426
critical
9.3
2011-10-12 CVE-2011-1993 Unspecified vulnerability in Microsoft Internet Explorer
Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Scroll Event Remote Code Execution Vulnerability."
network
microsoft
critical
9.3
2011-10-12 CVE-2011-1995 Use of Uninitialized Resource vulnerability in Microsoft Internet Explorer
Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that was not properly initialized, aka "OLEAuto32.dll Remote Code Execution Vulnerability."
network
microsoft CWE-908
critical
9.3
2011-10-12 CVE-2011-1996 Unspecified vulnerability in Microsoft Internet Explorer 6/7/8
Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Option Element Remote Code Execution Vulnerability."
network
microsoft
critical
9.3
2011-10-12 CVE-2011-1997 Improper Input Validation vulnerability in Microsoft Internet Explorer 6
Microsoft Internet Explorer 6 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "OnLoad Event Remote Code Execution Vulnerability."
network
microsoft CWE-20
critical
9.3
2011-10-12 CVE-2011-1998 Use of Uninitialized Resource vulnerability in Microsoft Internet Explorer 9
Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that was not properly initialized, aka "Jscript9.dll Remote Code Execution Vulnerability."
network
microsoft CWE-908
critical
9.3
2011-10-12 CVE-2011-1999 Unspecified vulnerability in Microsoft Internet Explorer 8
Microsoft Internet Explorer 8 does not properly allocate and access memory, which allows remote attackers to execute arbitrary code via vectors involving a "dereferenced memory address," aka "Select Element Remote Code Execution Vulnerability."
network
microsoft
critical
9.3