VulnerabilityModified
CVE-2015-2484
Microsoft Internet Explorer 10 and 11 uses an incorrect flag during certain filesystem accesses, which allows remote attackers to delete arbitrary files via unspecified vectors, aka "Tampering Vulnerability."
MEDIUM 6.4EPSS 13.7%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 13.7%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
Microsoft Internet Explorer 10 and 11 uses an incorrect flag during certain filesystem accesses, which allows remote attackers to delete arbitrary files via unspecified vectors, aka "Tampering Vulnerability."
- CVSS 2.0
- 6.4 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:P
- EPSS
- 13.70% probability · 96th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- microsoft/internet explorer
- Source
- secure@microsoft.com
References
- http://www.securityfocus.com/bid/76586
- http://www.securitytracker.com/id/1033487
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-094
- http://www.securityfocus.com/bid/76586
- http://www.securitytracker.com/id/1033487
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-094
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.