CVE-2015-0071
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA.
Apply updates per vendor instructions.
Internet Explorer versions 9 through 11 have a vulnerability that allows attackers to bypass ASLR (a security feature that randomizes memory locations) by tricking users into visiting a malicious website. This makes it easier for attackers to exploit other vulnerabilities in the browser.
The vulnerability enables circumvention of Address Space Layout Randomization (ASLR) through a remote attack vector involving a crafted web site. An attacker must convince a user to visit the malicious site; successful exploitation exposes the randomized memory layout, facilitating downstream code execution attacks against Internet Explorer 9-11.
The full analysis of this CVE is available in Portuguese →