Palo Alto Networks Discovers 3 Critical Internet Explorer Vulnerabilities
Summary: Palo Alto Networks researchers discovered three new critical Internet Explorer vulnerabilities affecting IE versions 8, 9, 10 and 11, each allowing full remote code execution through a memory corruption flaw. The vulnerabilities were documented in Microsoft Security Bulletin MS14-051 as part of the August 2014 Security Bulletin, with Palo Alto Networks researcher Bo Qu credited for all three.
What's compelling: These three flaws follow 10 IE vulnerabilities found in July 2014, 22 in June 2014 and four in February 2014 - a volume that shows how much of an attack surface an unpatched browser remains for Advanced Persistent Threats working to compromise enterprise networks.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026