Skip to content

CVE-2015-2425 Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulne...

HighCVSS 8.8 EPSS 44.7% CISA KEV added 2022-05-25 · due 2022-06-15 Exploited in the wild
Published
Updated
Exploit status
Exploited in the wild (confirmed)
Sign in for asset impact Search another CVE

Description

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2383 and CVE-2015-2384.

CISA Known Exploited Vulnerability

Date added
2022-05-25
Due date (FCEB)
2022-06-15
Ransomware use
Unknown

Required action

Apply updates per vendor instructions.

Affected products

ProductAffected versionsFixed in
Microsoft internet explorer = 11 No fix listed

References

  • 1032894 broken-link third-party-advisory vdb-entry
  • MS15-065 patch vendor-advisory
  • www.cisa.gov government-resource us-government-resource