Microsoft · Internet Explorer
CVE-2015-2425
Microsoft Internet Explorer Memory Corruption Vulnerability
Qué es
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2383 and CVE-2015-2384.
CISA: Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
Qué hacer
Apply updates per vendor instructions.
Plazo para las agencias federales de EE. UU.: 15 de junio de 2022
Más fallos explotados de Microsoft
| Añadido | Vulnerabilidad | Producto | Gravedad | Prob. de ataque |
|---|---|---|---|---|
| 20 may 2026 | Use-After-Free | Internet Explorer | Alto 8,8 | 92% |
| 20 may 2026 | Use-After-Free | Internet Explorer | Alto 8,8 | 82% |
| 6 oct 2025 | Uninitialized Memory Corruption | Internet Explorer | Alto 8,1 | 97% |
| 12 ago 2025 | Resource Management Errors | Internet Explorer | Alto 8,8 | 88% |
| 23 jul 2024 | Use-After-Free | Internet Explorer | Alto 8,8 | 79% |
| 30 mar 2023 | Memory Corruption | Internet Explorer | Alto 8,8 | 71% |
| 8 jun 2022 | Use-After-Free | Internet Explorer | Alto 8,1 | 80% |
| 25 may 2022 | Information Disclosure | Internet Explorer | Media 6,5 | 50% |
Fuentes: Known Exploited Vulnerabilities (CISA, dominio público), CVE records (cve.org) y EPSS (FIRST). La probabilidad de ataque es la estimación EPSS de que alguien intente explotar el fallo en los próximos 30 días.