ZeroDay Findings
Sign inSign up

Findings

CVE-2015-2502

Microsoft Internet Explorer Memory Corruption Vulnerability

Published Aug 19, 2015 · updated Jun 16, 2026 · microsoft internet explorer

Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," as exploited in the wild in August 2015.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Aug 19, 2015 · Catalog

    Detected

    Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," as exploited in the wild in August 2015.

  2. Apr 13, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. May 4, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," as exploited in the wild in August 2015.

Required action

Apply updates per vendor instructions.

CISA due date May 4, 2022

Affected

  • cpe microsoft/internet explorer10
  • cpe microsoft/internet explorer11
  • cpe microsoft/internet explorer7
  • cpe microsoft/internet explorer8
  • cpe microsoft/internet explorer9
  • vendor Microsoft Internet Explorerversion unspecified

Sources

  • CISA KEVConfirmed exploitationCVE-2015-2502

    Microsoft Internet Explorer contains a memory corruption vulnerability that allows an attacker to execute code or cause a denial-of-service (DoS).

    cisa.gov
  • CVE.orgVulnerability recordCVE-2015-2502

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2015-2502

    30-day exploitation probability 51.0%

    first.org
  • NIST NVDVulnerability recordCVE-2015-2502

    Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," as exploited in the wild in August 2015.

    nvd.nist.gov

References