Known vulnerabilities in Microsoft Internet Explorer

Vendor: Microsoft
Software CPE: cpe:2.3:a:microsoft:microsoft_internet_explorer:*:*:*:*:*:*:*:*
Total vulnerabilities: 492
Public exploits: 73
Known exploited (KEV): 66
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Internet Explorer Microsoft Internet Explorer is affected by 492 known vulnerabilities: 52 critical, 305 high, 49 medium, 86 low Critical High Medium Low

Vulnerabilities (492)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU122547 - Protection Mechanism Failure
CVE-2026-21513
CWE-693 Critical
No
Exploited
- 10.02.2026 SB2026021058
#VU110708 - External Control of File Name or Path
CVE-2025-33053
CWE-73 Critical
Available
Exploited
- 10.06.2025 SB2025061068
#VU109049 - Type confusion
CVE-2025-30397
CWE-843 Critical
Available
Exploited
11.0.9600.22574 13.05.2025 SB2025051371
#VU103774 - Exposure of sensitive information to an unauthorized actor
CVE-2025-21377
CWE-200 Medium
No
Exploited
- 11.02.2025 SB2025021188
#VU102649 - Integer underflow
CVE-2025-21276
CWE-191 Low
No
No
- 14.01.2025 SB2025011447
#VU102645 - Improper Resolution of Path Equivalence
CVE-2025-21332
CWE-41 Low
No
No
- 14.01.2025 SB2025011447
#VU102644 - Improper Resolution of Path Equivalence
CVE-2025-21189
CWE-41 Low
No
No
- 14.01.2025 SB2025011447
#VU102636 - Improper Resolution of Path Equivalence
CVE-2025-21268
CWE-41 Low
No
No
- 14.01.2025 SB2025011447
#VU100276 - Exposure of sensitive information to an unauthorized actor
CVE-2024-43451
CWE-200 High
No
Exploited
- 12.11.2024 SB20241112106
#VU98154 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43573
CWE-79 Medium
No
Exploited
- 08.10.2024 SB2024100856
#VU97025 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-43461
CWE-451 Critical
No
Exploited
- 10.09.2024 SB2024091097
#VU93902 - Exposure of resource to wrong sphere
CVE-2024-38112
CWE-668 Critical
Available
Exploited
- 09.07.2024 SB2024070957
#VU89437 - Security Features
CVE-2024-30040
CWE-254 Critical
No
Exploited
- 14.05.2024 SB2024051439
#VU84112 - Improper input validation
CVE-2023-35628
CWE-20 High
No
No
- 12.12.2023 SB2023121270
#VU80652 - Improper input validation
CVE-2023-36805
CWE-20 Medium
No
No
- 12.09.2023 SB2023091247
#VU78070 - Memory corruption
CVE-2023-32046
CWE-119 Critical
No
Exploited
- 11.07.2023 SB2023071158
#VU72184 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-21805
CWE-94 High
No
No
- 14.02.2023 SB2023021429
#VU69070 - Memory corruption
CVE-2022-41128
CWE-119 Critical
No
Exploited
- 08.11.2022 SB2022110809
#VU56377 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-40444
CWE-94 Critical
Available
Exploited
- 07.09.2021 SB2021090712
SB2022111615
#VU55726 - Memory corruption
CVE-2021-34480
CWE-119 Medium
Available
Exploited
- 10.08.2021 SB2021081035
SB2022102043


Showing elements 1 - 20 out of 492