Live › vulnerability › CVE-2015-0071
Go to dashboardMicrosoft Internet Explorer lets a remote attacker defeat ASLR, a memory randomization defense, by serving a crafted web page. CISA lists it as actively exploited, and it is typically used as a step that makes other memory-corruption exploits reliable.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Microsoft Internet Explorer | vendor | – | – |
| microsoft internet explorer | vendor | = 9 | – |
| microsoft internet explorer | vendor | = 10 | – |
| microsoft internet explorer | vendor | = 11 | – |
Check whether Internet Explorer is installed and which version: run reg query "HKLM\SOFTWARE\Microsoft\Internet Explorer" /v svcVersion or check Help > About Internet Explorer.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Microsoft Internet Explorer allows remote attackers to bypass the address space layout randomization (ASLR) protection mechanism via a crafted web site.
CISA required action: Apply updates per vendor instructions.
This page as .md · .json · in your agent: get_signal("CVE-2015-0071")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.