WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product internet explorer✕
Overview 5 matches · 0 in Waratek scope · 0 protected · 3 exploited · 3 CISA KEV · 2 public PoC · 3 EPSS ≥ 0.5
5matches 0in Waratek scope0.0% 0protected0.0% 3exploited60.0% 3CISA KEV60.0% 2public PoC40.0% 3EPSS ≥ 0.560.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 5 100.0% Withdrawn CVE 0 0.0%
Critical 5 100.0% High 0 0.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 5 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 3 60.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 2 40.0%
split by peak 2 / quarter
Not applicable: 5 Critical: 5 not blocked: 5 No public exploit: 2Exploited: 3
Q4 121 Not applicable1 Critical1 not blocked1 No public exploit1 Q1 131 Not applicable1 Critical1 not blocked1 No public exploit1 Q2 130 Q3 130 Q4 130 Q1 140 Q2 141 Not applicable1 Critical1 not blocked1 Exploited1 Q3 140 Q4 140 Q1 152 Not applicable2 Critical2 not blocked2 Exploited2
Q4 12Q1 13Q2 13Q3 13Q4 13Q1 14Q2 14Q3 14Q4 14Q1 15
5 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2015-0313 Critical 2015-02-02 Not applicable Exploited Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2015, a different vulnerability than CVE-2015-0315, CVE-2015-0320, and CVE-2015-0322.
CVE-2015-0311 Critical 2015-01-23 Not applicable Exploited Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in January 2015.
CVE-2014-1776 Critical 2014-04-27 Not applicable Exploited Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to the CMarkup::IsConnectedToPrimaryMarkup function, as exploited in the wild in April 2014. NOTE: this issue originally emphasized VGX.DLL, but Microsoft clarified that "VGX.DLL does not contain the vulnerable code leveraged in this exploit. Disabling VGX.DLL is an exploit-specific workaround that provides an immediate, effective workaround to help block known attacks."
CVE-2013-0022 Critical 2013-02-13 Not applicable No public exploit Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer LsGetTrailInfo Use After Free Vulnerability."
CVE-2012-4787 Critical 2012-12-12 Not applicable No public exploit Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly initialized or (2) is deleted, aka "Improper Ref Counting Use After Free Vulnerability."