Palo Alto Networks Researcher Identifies Critical Internet Explorer Vulnerability
Summary: Palo Alto Networks researcher Bo Qu discovered a critical Internet Explorer vulnerability affecting IE versions 8, 9, 10 and 11, documented in Microsoft's March 2015 Security Bulletins MS15-018 and MS15-019. The vulnerability was disclosed to Microsoft through the Microsoft Active Protections Program, and Palo Alto Networks notes prior IE discoveries including 22 in June 2014 and 15 in September 2014.
What's compelling: A single IE flaw spanning four browser versions reached disclosure through a vendor research program rather than a patch-first process, and the source's own tally of 22 IE vulnerabilities in one month shows how steady that attack surface was for enterprise and government networks.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026