CVE-2015-2419

JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "JScript9 Memory Corruption Vulnerability."

Scoring

Severity
HIGH
CVSS base score
8.8
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS probability
80.25%
CISA KEV
Known exploited vulnerability
Published
2015-07-14
Last modified
2026-09-16

Affected products

Markdown version · Browse all CVEs