Skip to content

CVE-2015-0071 Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulnerability."

MediumCVSS 6.5 EPSS 33.6% CISA KEV added 2022-05-25 · due 2022-06-15 Exploited in the wild
Published
Updated
Exploit status
Exploited in the wild (confirmed)
Sign in for asset impact Search another CVE

Description

Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulnerability."

CISA Known Exploited Vulnerability

Date added
2022-05-25
Due date (FCEB)
2022-06-15
Ransomware use
Unknown

Required action

Apply updates per vendor instructions.

Affected products

ProductAffected versionsFixed in
Microsoft internet explorer = 9 No fix listed
Microsoft internet explorer = 10 No fix listed
Microsoft internet explorer = 11 No fix listed

References

  • 72455 broken-link third-party-advisory vdb-entry
  • 1031723 broken-link third-party-advisory vdb-entry
  • MS15-009 patch vendor-advisory
  • www.cisa.gov government-resource us-government-resource