Palo Alto Networks Identifies Critical Internet Explorer Vulnerability
Summary: Palo Alto Networks researcher Bo Qu discovered a critical Internet Explorer vulnerability affecting IE versions 6, 7, 8, 9 and 10 that allows full remote code execution through a memory corruption flaw. The flaw is documented in Microsoft Security Bulletin MS14-056 as part of the October 2014 Security Bulletin, and Palo Alto Networks reports discovering 15 IE vulnerabilities in September 2014, 3 in August, 10 in July, and 22 in June.
Key Takeaway: A memory corruption bug that yields full remote code execution across five versions of IE is the kind of weapon Palo Alto Networks says Advanced Persistent Threats use to compromise enterprise networks, and the monthly counts - 22 in June alone - show how quickly that attack surface regenerates.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026