high8.8Known exploited
CVE-2015-2502
Microsoft Internet Explorer Memory Corruption Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-04-13. Federal due date: 2022-05-04.
Apply updates per vendor instructions.
Impact
Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," as exploited in the wild in August 2015.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Internet Explorer | Versions 7, 8, 9, 10, 11 |
Weakness classification
References
- NVD record
- CVE.org record
- CISA KEV catalog
- http://twitter.com/Laughing_Mantis/statuses/633839231840841728
- http://twitter.com/Laughing_Mantis/statuses/633839771865886721
- http://www.securityfocus.com/bid/76403
- http://www.securitytracker.com/id/1033317
- http://www.securityweek.com/microsoft-issues-emergency-patch-critical-ie-flaw-exploited-wild
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-093
- http://twitter.com/Laughing_Mantis/statuses/633839231840841728
- http://twitter.com/Laughing_Mantis/statuses/633839771865886721
- http://www.securityfocus.com/bid/76403
- http://www.securitytracker.com/id/1033317
- http://www.securityweek.com/microsoft-issues-emergency-patch-critical-ie-flaw-exploited-wild
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-093
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-2502