CVE-2015-2502

Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," as exploited in the wild in August 2015.

Scoring

Severity
HIGH
CVSS base score
8.8
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS probability
22.56%
CISA KEV
Known exploited vulnerability
Published
2015-08-19
Last modified
2026-09-16

Affected products

Markdown version · Browse all CVEs