CVE-2015-2489: Microsoft Internet Explorer

Medium severity, CVSS 4.3. EPSS: 10.7% chance of exploitation in the next 30 days.

Microsoft Internet Explorer 11 allows remote attackers to gain privileges via a crafted web site, as demonstrated by a transition from Low Integrity to Medium Integrity, aka "Elevation of Privilege Vulnerability."

Affected products

• Microsoft Internet Explorer: version 11 only

Published 2015-09-09. Last modified 2026-06-17.