peter bassill · operator
$ cve CVE-2015-2502 JSON

CVE-2015-2502 KEV

8.8
HIGH · CVSS 3.1 · EPSS 51% (pctl 99)

Patch first

On CISA KEV — known exploited in the wild, due 2022-05-04.

Description

Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," as exploited in the wild in August 2015.

Scoring

CVSS8.8 (HIGH, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS51% — more likely to be exploited than 99% of all CVEs
WeaknessCWE-787
On CISA KEVyes — remediate by 2022-05-04
Public exploitnone known
Published2015-08-19
Last modified2026-06-17

CISA KEV

NameMicrosoft Internet Explorer Memory Corruption Vulnerability
Added2022-04-13
Due2022-05-04
Vendor / productMicrosoft / Internet Explorer
Ransomware usenone reported

Affected (9)

VendorProduct
microsoftinternet explorer
microsoftwindows 10 1507
microsoftwindows 7
microsoftwindows 8
microsoftwindows 8.1
microsoftwindows rt 8.1
microsoftwindows server 2008
microsoftwindows server 2012
microsoftwindows vista

References

→ the Explorer  ·  watch your stack  ·  NVD