high8.8Known exploited
CVE-2015-2425
Microsoft Internet Explorer Memory Corruption Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-05-25. Federal due date: 2022-06-15.
Apply updates per vendor instructions.
Impact
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2383 and CVE-2015-2384.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Internet Explorer | Version 11 |
Weakness classification
References
- NVD record
- CVE.org record
- CISA KEV catalog
- http://www.securitytracker.com/id/1032894
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065
- http://www.securitytracker.com/id/1032894
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-2425