CVE-2015-6155

Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via…

published December 9, 2015

CVSS
—
EPSS
17%
Percentile
97.0
In the wild
Unconfirmed
What it is

⚠️ A single crafted website could unleash chaos! This Microsoft Browser Memory Corruption Vulnerability in Internet Explorer and Edge allows attackers to execute arbitrary code or crash the browser with just a sneaky link. 🔥 Think of it like a restaurant where a chef receives a menu but doesn’t verify the ingredients — one wrong dish (or web page) could make everyone sick! Without proper checks, bad code can lead to disastrous outcomes. An attacker could execute arbitrary commands on the user’s machine, effectively turning their browser into a tool for mischief! Not only could they steal sensitive information, but they could also crash the browser entirely, leaving users frustrated and vulnerable.

Put simply

Think of it like a restaurant where a chef receives a menu but doesn’t verify the ingredients — one wrong dish (or web page) could make everyone sick! Without proper checks, bad code can lead to disastrous outcomes. This vulnerability occurs due to memory corruption within Internet Explorer 10 and 11 and Microsoft Edge. It allows a remote attacker to execute arbitrary code or cause a denial of service by tricking a user into visiting a specially crafted website.

What to do

An attacker could execute arbitrary commands on the user’s machine, effectively turning their browser into a tool for mischief! Not only could they steal sensitive information, but they could also crash the browser entirely, leaving users frustrated and vulnerable. To protect yourself, ensure you're using the latest version of your browser — Microsoft has rolled out updates to fix this issue. Additionally, consider using a different browser until you're confident that you're no longer at risk. Always be cautious of unknown links! You've got this! By staying updated and vigilant, you can outsmart the bad guys! 🦸

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.16505 · 97.0th percentile
Published
2015-12-09T11:00Z
EPSS history
Timeline
  • 09 DEC 11:00Z
    Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via…
    cvelistv5