Product · KEV exposure
Microsoft Internet Explorer known exploited vulnerabilities
We track 36 CVEs in Microsoft Internet Explorer. All of them are on CISA's Known Exploited Vulnerabilities catalog, meaning CISA has evidence of exploitation in the wild (listed 2021–2026). CISA flags 6 of them as used in ransomware campaigns. The most recent is CVE-2010-0806, added to KEV on .
- CVEs tracked
- 36
- On CISA KEV
- 36
- Ransomware use
- 6
- Rated critical
- 1
Every Microsoft Internet Explorer CVE we track
| CVE / Vulnerability | Severity | CVSS | EPSS | Added to KEV | Patch by |
|---|---|---|---|---|---|
| CVE-2010-0806 Microsoft Internet Explorer Use-After-Free Vulnerability | [ HIGH ] | 8.8 | 82.2% | ||
| CVE-2010-0249 Microsoft Internet Explorer Use-After-Free Vulnerability | [ HIGH ] | 8.8 | 91.9% | ||
| CVE-2010-3962 Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability | [ HIGH ] | 8.1 | 96.8% | ||
| CVE-2013-3893 Microsoft Internet Explorer Resource Management Errors Vulnerability | [ HIGH ] | 8.8 | 87.5% | ||
| CVE-2012-4792 Microsoft Internet Explorer Use-After-Free Vulnerability | [ HIGH ] | 8.8 | 78.8% | ||
| CVE-2013-3163 Microsoft Internet Explorer Memory Corruption Vulnerability | [ HIGH ] | 8.8 | 70.7% | ||
| CVE-2012-4969 Microsoft Internet Explorer Use-After-Free Vulnerability | [ HIGH ] | 8.1 | 80.3% | ||
| CVE-2015-2425 Microsoft Internet Explorer Memory Corruption Vulnerability | [ HIGH ] | 8.8 | 44.7% | ||
| CVE-2015-0071 Microsoft Internet Explorer ASLR Bypass Vulnerability | [ MEDIUM ] | 6.5 | 33.6% | ||
| CVE-2014-4123 Microsoft Internet Explorer Privilege Escalation Vulnerability | [ HIGH ] | 8.8 | 47.1% | ||
| CVE-2014-2817 Microsoft Internet Explorer Privilege Escalation Vulnerability | [ HIGH ] | 8.8 | 26.3% | ||
| CVE-2013-7331 Microsoft Internet Explorer Information Disclosure Vulnerability | [ MEDIUM ] | 6.5 | 50.2% | ||
| CVE-2017-0210 Microsoft Internet Explorer Privilege Escalation Vulnerability | [ HIGH ] | 8.8 | 22.3% | ||
| CVE-2017-0149 Microsoft Internet Explorer Memory Corruption Vulnerability | [ HIGH ] | 8.8 | 29.2% | ||
| CVE-2016-3298 Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability | [ MEDIUM ] | 6.5 | 33.3% | ||
| CVE-2016-0162 Microsoft Internet Explorer Information Disclosure Vulnerability | [ MEDIUM ] | 4.3 | 22.0% | ||
| CVE-2019-0676 Microsoft Internet Explorer Information Disclosure Vulnerability | [ MEDIUM ] | 6.5 | 8.1% | ||
| CVE-2014-0322 Microsoft Internet Explorer Use-After-Free Vulnerability | [ HIGH ] | 8.8 | 85.1% | ||
| CVE-2015-2502 Microsoft Internet Explorer Memory Corruption Vulnerability | [ HIGH ] | 8.8 | 51.0% | ||
| CVE-2017-0059 Microsoft Internet Explorer Information Disclosure Vulnerability | [ MEDIUM ] | 4.3 | 62.0% | ||
| CVE-2016-0189 Microsoft Internet Explorer Memory Corruption Vulnerabilityransomware use | [ HIGH ] | 7.5 | 94.1% | ||
| CVE-2015-2419 Microsoft Internet Explorer Memory Corruption Vulnerability | [ HIGH ] | 8.8 | 53.1% | ||
| CVE-2013-2551 Microsoft Internet Explorer Use-After-Free Vulnerabilityransomware use | [ HIGH ] | 8.8 | 73.9% | ||
| CVE-2013-3897 Microsoft Internet Explorer Use-After-Free Vulnerability | [ HIGH ] | 8.8 | 77.3% | ||
| CVE-2013-1347 Microsoft Internet Explorer Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 77.7% | ||
| CVE-2017-0222 Microsoft Internet Explorer Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 29.6% | ||
| CVE-2019-0752 Microsoft Internet Explorer Type Confusion Vulnerabilityransomware use | [ HIGH ] | 7.5 | 81.7% | ||
| CVE-2014-1776 Microsoft Internet Explorer Memory Corruption Vulnerability | [ CRITICAL ] | 9.8 | 82.7% | ||
| CVE-2021-27085 Microsoft Internet Explorer Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 5.4% | ||
| CVE-2021-26411 Microsoft Internet Explorer Memory Corruption Vulnerabilityransomware use | [ HIGH ] | 8.8 | 80.8% | ||
| CVE-2020-1380 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | [ HIGH ] | 7.8 | 24.2% | ||
| CVE-2020-0968 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerabilityransomware use | [ HIGH ] | 7.5 | 30.7% | ||
| CVE-2020-0674 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | [ HIGH ] | 7.5 | 86.9% | ||
| CVE-2019-1429 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | [ HIGH ] | 7.5 | 77.3% | ||
| CVE-2019-1367 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerabilityransomware use | [ HIGH ] | 7.5 | 52.4% | ||
| CVE-2018-8653 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | [ HIGH ] | 7.5 | 29.6% |
Sorted by date added to KEV. Severity and CVSS as stated by NVD or the vendor; EPSS from FIRST.org. "Patch by" is CISA's BOD 22-01 deadline for US federal agencies, a useful priority signal for everyone else. Machine-readable: /api/v1/vendors/microsoft.json.
Other Microsoft products
Every row links to its CVE record with the CISA required action, catalog coverage and primary sources. We describe impact and remediation only; no exploit code. See the full KEV tracker or compare KEV catalogs.