Microsoft Internet Explorer Out of Band Advisory
Summary: Microsoft released an out-of-band advisory for CVE-2015-2502, addressed by MS15-093, a memory corruption vulnerability in Internet Explorer versions 7 through 11 that affects all currently supported versions of Windows, including Windows 10. An attacker can craft a web page to exploit the flaw and lure a user into visiting it, resulting in remote code execution at the affected user's permission level, and the attack has been reported as exploited in the wild.
What's compelling: The exploit runs at the logged-in user's permission level, so the reach of any compromise is set by how much access that user has been given.
Read the original at Cisco Talos ↗
- Topics
- Zero-Days & Exploits
- Mentions
- CVE-2015-2502
- Related
- CVE-2015-2502: Microsoft Internet Explorer Memory Corruption Vulnerability Known Exploited Vulnerabilities · Apr 13, 2022Microsoft Pushes Emergency Patch for IE Cyber Risks ·New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026