CVE-2015-6158

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…

published December 9, 2015

CVSS
—
EPSS
17%
Percentile
97.0
In the wild
Unconfirmed
What it is

⚠️ A sneaky memory corruption flaw in Microsoft Internet Explorer 11 and Edge could let attackers run wild on your system! 🚨 Think of this vulnerability as a restaurant that serves food without checking for allergies—one wrong ingredient can lead to a disastrous dining experience! Just like that, a crafted website can exploit this flaw and execute harmful code or crash your browser. If an attacker successfully exploits this vulnerability, they could execute arbitrary code on your system, potentially leading to full control or causing a denial of service, which might crash your browser. The consequences could range from a temporary inconvenience to a more severe disruption of your browsing experience.

Put simply

Think of this vulnerability as a restaurant that serves food without checking for allergies—one wrong ingredient can lead to a disastrous dining experience! Just like that, a crafted website can exploit this flaw and execute harmful code or crash your browser. This remote code execution vulnerability arises from a memory corruption issue in Internet Explorer 11 and Microsoft Edge, allowing attackers to execute arbitrary commands by delivering specially crafted web content.

What to do

If an attacker successfully exploits this vulnerability, they could execute arbitrary code on your system, potentially leading to full control or causing a denial of service, which might crash your browser. The consequences could range from a temporary inconvenience to a more severe disruption of your browsing experience. To protect yourself, ensure that your browser is up to date with the latest security patches. Regularly check for updates from Microsoft and consider using additional security measures like script blockers or enhanced browser protections. You've got this! Follow these steps, and you'll keep your browsing experience safe and sound! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.16505 · 97.0th percentile
Published
2015-12-09T11:00Z
EPSS history
Timeline
  • 09 DEC 11:00Z
    Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…
    cvelistv5