CVE-2015-6184

High · 8.1

CVSS

8.1

EPSS

14.0%

Published

Mar 9, 2016

CISA due date

—

The record

The CAttrArray object implementation in Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (type confusion and memory corruption) via a malformed Cascading Style Sheets (CSS) token sequence in conjunction with modifications to HTML elements, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6048 and CVE-2015-6049.

Affected packages

Ecosystem	Package	Introduced	Fixed