SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2015-1729

Microsoft Internet Explorer 9 through 11 allows remote attackers to read content from a different (1) domain or (2) zone via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability."

MEDIUM 4.3EPSS 14.9%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 14.9%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.

Description

Microsoft Internet Explorer 9 through 11 allows remote attackers to read content from a different (1) domain or (2) zone via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability."

CVSS 2.0
4.3 MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
EPSS
14.94% probability · 97th percentile
CISA KEV
Not listed
Weakness
CWE-200
Affected
microsoft/internet explorer
Source
secure@microsoft.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.