Microsoft Corporation Internet Explorer

Name: Microsoft Corporation Internet Explorer
Brand: Microsoft Corporation

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

critical

by severity

0critical31high14medium1low

updated 2026-10-28

vulnerabilities (46)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2017-0059US	medium4.3OT critical	62.0% (99th)	KEV	no fix	2017-03-17	≤ Internet Explorer 9 through 11
CVE-2017-0222US	high8.8OT critical	29.6% (98th)	KEV	no fix	2017-05-12	≤ Windows Server 2008 for 32-bit Systems Service Pack 2, Windows Server 2008 for x64-based Systems Service Pack 2, Windows 7 for 32-bit Systems Service Pack 1, Windows 7 for x64-based Systems Service Pack 1, Windows 8.1 for 32-bit systems, Windows 8.1 for x64-based systems, Windows RT 8.1, Windows Server 2012, Windows Server 2012 R2, Windows 10 for 32-bit Systems, Windows 10 for x64-based Systems, Windows 10 Version 1511 for 32-bit Systems, Windows 10 Version 1511 for x64-based Systems, Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1703 for 32-bit Systems, Windows 10 Version 1703 for x64-based Systems, and Windows Server 2016.
CVE-2017-0149US	high8.8OT critical	29.2% (98th)	KEV	no fix	2017-03-17	≤ Internet Explorer 9 through 11
CVE-2017-0210US	high8.8OT critical	22.3% (98th)	KEV	no fix	2017-04-12	≤ Internet Explorer 10 and Internet Explorer 11
CVE-2017-11907US	high7.5	64.7% (99th)	Exploit	no fix	2017-12-12	≤ Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016.
CVE-2018-0935US	high7.5	55.6% (99th)	Exploit	no fix	2018-03-14	≤ Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016.
CVE-2017-11810US	high7.5	54.8% (99th)	Exploit	no fix	2017-10-13	≤ Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016.
CVE-2017-11890US	high7.5	50.1% (99th)	Exploit	no fix	2017-12-12	≤ Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016.
CVE-2017-11793US	high7.5	49.6% (99th)	Exploit	no fix	2017-10-13	≤ Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016.
CVE-2017-11855US	high7.5	48.6% (99th)	Exploit	no fix	2017-11-15	≤ Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709.
CVE-2017-11903US	high7.5	46.8% (99th)	Exploit	no fix	2017-12-12	≤ Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016.
CVE-2017-0202US	high7.5	45.6% (99th)	Exploit	no fix	2017-04-12	≤ Internet Explorer 11
CVE-2018-0866US	high7.5	43.6% (99th)	Exploit	no fix	2018-02-15	≤ Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016.
CVE-2017-11906US	medium5.3	25.1% (98th)	Exploit	no fix	2017-12-12	≤ Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016.
CVE-2017-8625US	high8.8OT high	15.4% (97th)	Exploit	no fix	2017-08-08	≤ Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016.
CVE-2017-8529US	medium6.5	14.2% (97th)	Exploit	no fix	2017-06-15	≤ Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016.
CVE-2017-0049US	medium4.3	38.9% (99th)	—	no fix	2017-03-17	≤ The VBScript engine in Microsoft Internet Explorer 11
CVE-2017-0008US	medium4.3	37.0% (99th)	—	no fix	2017-03-17	≤ Internet Explorer 9 through 11
CVE-2017-0130US	high7.5	23.3% (98th)	—	no fix	2017-03-17	≤ The scripting engine in Microsoft Internet Explorer 9 through 11
CVE-2017-0201US	high7.5	13.9% (97th)	—	no fix	2017-04-12	≤ The Jscript and VBScript engine in Microsoft Internet Explorer 9 and Internet Explorer 10
CVE-2017-0018US	high7.5	13.5% (96th)	—	no fix	2017-03-17	≤ Internet Explorer 10 and 11
CVE-2017-0040US	high7.5	13.5% (96th)	—	no fix	2017-03-17	≤ The scripting engine in Microsoft Internet Explorer 9 through 11
CVE-2017-11834US	medium5.3	12.7% (96th)	—	no fix	2017-11-15	≤ Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709.
CVE-2017-8749US	high7.5	10.8% (96th)	—	no fix	2017-09-13	≤ Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016.
CVE-2017-8747US	high7.5	10.8% (96th)	—	no fix	2017-09-13	≤ Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016.
CVE-2017-0154US	medium4.4	10.6% (96th)	—	no fix	2017-03-17	≤ Internet Explorer 11 in Windows 10, 1511, 1606, and Windows Server 2016
CVE-2017-11869US	high7.5	9.83% (96th)	—	no fix	2017-11-15	≤ Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709.
CVE-2017-0226US	high7.5	9.82% (96th)	—	no fix	2017-05-12	≤ Windows 8.1 for 32-bit systems, Windows 8.1 for x64-based systems, Windows RT 8.1, Windows Server 2012, Windows Server 2012 R2, Windows 10 for 32-bit Systems, Windows 10 for x64-based Systems, Windows 10 Version 1511 for 32-bit Systems, Windows 10 Version 1511 for x64-based Systems, Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1703 for 32-bit Systems, Windows 10 Version 1703 for x64-based Systems, and Windows Server 2016.
CVE-2017-8653US	high7.5	9.18% (95th)	—	no fix	2017-08-08	≤ Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016.
CVE-2017-11913US	high7.5	8.64% (95th)	—	no fix	2017-12-12	≤ Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016.
CVE-2017-11886US	high7.5	8.64% (95th)	—	no fix	2017-12-12	≤ Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016.
CVE-2017-11822US	high7.5	8.48% (95th)	—	no fix	2017-10-13	≤ Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016.
CVE-2017-8669US	high7.5	8.47% (95th)	—	no fix	2017-08-08	≤ Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016.
CVE-2017-11813US	high7.5	8.04% (95th)	—	no fix	2017-10-13	≤ Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 R2.
CVE-2017-11901US	high7.5	7.91% (95th)	—	no fix	2017-12-12	≤ Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016.
CVE-2017-11848US	medium4.3	7.05% (94th)	—	no fix	2017-11-15	≤ Microsoft Windows 7 SP1, Windows Server 2008 SP2, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709.
CVE-2017-11887US	medium5.3	6.42% (94th)	—	no fix	2017-12-12	≤ Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016.
CVE-2017-8519US	high7.5	6.12% (93rd)	—	no fix	2017-06-15	≤ Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 and R2.
CVE-2018-0847US	medium4.3	5.93% (93rd)	—	no fix	2018-02-15	≤ Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016.
CVE-2017-8651US	high7.5	5.71% (93rd)	—	no fix	2017-08-08	≤ Microsoft Windows Server 2008 SP2 and Windows Server 2012.
CVE-2017-11856US	high7.5	5.63% (93rd)	—	no fix	2017-11-15	≤ Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709.
CVE-2017-11790US	medium4.3	5.56% (93rd)	—	no fix	2017-10-13	≤ Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016.
CVE-2018-0929US	medium4.3	5.33% (93rd)	—	no fix	2018-03-14	≤ Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016.
CVE-2017-0064US	medium6.5	5.20% (92nd)	—	no fix	2017-05-12	≤ Windows Server 2008 for 32-bit Systems Service Pack 2, Windows Server 2008 for x64-based Systems Service Pack 2, Windows 7 for 32-bit Systems Service Pack 1, Windows 7 for x64-based Systems Service Pack 1, Windows 8.1 for 32-bit systems, Windows 8.1 for x64-based systems, Windows RT 8.1, Windows Server 2012, Windows Server 2012 R2, Windows 10 for 32-bit Systems, Windows 10 for x64-based Systems, Windows 10 Version 1511 for 32-bit Systems, Windows 10 Version 1511 for x64-based Systems, Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1703 for 32-bit Systems, Windows 10 Version 1703 for x64-based Systems, and Windows Server 2016.
CVE-2017-8733US	medium4.3	5.16% (92nd)	—	no fix	2017-09-13	≤ Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016.
CVE-2018-0942US	low2.6	3.08% (88th)	—	no fix	2018-03-14	≤ Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016.

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer30 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor9 CVEs
CWE-787Out-of-bounds Write5 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-256Plaintext Storage of a Password1 CVEs
CWE-264CWE-2641 CVEs
CWE-269Improper Privilege Management1 CVEs
CWE-276Incorrect Default Permissions1 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)46 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan