8.8
High
Exploited
· ransomware
CVE-2021-26411 Microsoft Internet Explorer Memory Corruption Vulnerability
Active exploitation observed
· CISA KEV catalogue
Required action
Apply updates per vendor instructions.
Ransomware campaigns
Known to be used
Weakness
CWE-416
Description
Internet Explorer Memory Corruption Vulnerability
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Internet Explorer 9 1.0 | 1.0.0 → < 6.0.6003.21070 | 6.0.6003.21070 |
| Internet Explorer 11 1.0 | 1.0.0 → < 10.0.17134.2087 | 10.0.17134.2087 |
| Microsoft Edge (EdgeHTML-based) 10.0 | earliest → < 10.0.17134.2087 | 10.0.17134.2087 |
References
- Internet Explorer Memory Corruption Vulnerability msrc.microsoft.com
Timeline
- Published
- Added to the KEV catalogue
- Last modified
Other CVEs of Internet Explorer 9
The 86 CVEs of Internet Explorer 9 →
CVE-2021-26419
Scripting Engine Memory Corruption Vulnerability
7.5
High
CVE-2020-0878
Microsoft Edge and Internet Explorer Memory Corruption Vulnerability
4.2
Medium
CVE-2020-1570
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in…
Not rated
CVE-2020-1567
A remote code execution vulnerability exists in the way that the MSHTML engine improperly validates input
4.2
Medium