Microsoft Vbscript vulnerabilities

23 CVEs affecting Microsoft Vbscript, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-3207, published 2016-06-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-0189: Microsoft Internet Explorer Memory Corruption Vulnerability, published 2016-05-11. High severity, CVSS 7.5. Actively exploited: in CISA KEV since 2022-03-28. EPSS: 94.1% chance of exploitation in the next 30 days. The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of…
CVE-2014-0271, published 2014-02-12. High severity, CVSS 9.3. EPSS: 38.4% chance of exploitation in the next 30 days. The VBScript engine in Microsoft Internet Explorer 6 through 11, and VBScript 5.6 through 5.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…
CVE-2015-2482, published 2015-10-14. High severity, CVSS 9.3. EPSS: 32.3% chance of exploitation in the next 30 days. The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code or cause a…
CVE-2014-6363, published 2014-12-11. High severity, CVSS 9.3. EPSS: 28.4% chance of exploitation in the next 30 days. vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 6 through 11 and other products, allows remote attackers to execute arbitrary code or cause a denial of service…
CVE-2011-0663, published 2011-04-13. High severity, CVSS 8.8. EPSS: 26.2% chance of exploitation in the next 30 days. Multiple integer overflows in the Microsoft (1) JScript 5.6 through 5.8 and (2) VBScript 5.6 through 5.8 scripting engines allow remote attackers to execute arbitrary code via a crafted web page, aka…
CVE-2015-6055, published 2015-10-14. High severity, CVSS 9.3. EPSS: 25.1% chance of exploitation in the next 30 days. The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code or cause a…
CVE-2015-6136, published 2015-12-09. High severity, CVSS 9.3. EPSS: 24.7% chance of exploitation in the next 30 days. The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code via a…
CVE-2015-6135, published 2015-12-09. Medium severity, CVSS 5.0. EPSS: 23.5% chance of exploitation in the next 30 days. The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to obtain sensitive information from…
CVE-2016-0002, published 2016-01-13. High severity, CVSS 7.5. EPSS: 23.4% chance of exploitation in the next 30 days. The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code via a…
CVE-2015-0032, published 2015-03-11. High severity, CVSS 9.3. EPSS: 22.3% chance of exploitation in the next 30 days. vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 8 through 11 and other products, allows remote attackers to execute arbitrary code or cause a denial of service…

Latest

CVE-2016-3207, published 2016-06-16. High severity, CVSS 7.5. EPSS: 17.4% chance of exploitation in the next 30 days. The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of…
CVE-2016-3206, published 2016-06-16. High severity, CVSS 7.5. EPSS: 14.7% chance of exploitation in the next 30 days. The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of…
CVE-2016-3205, published 2016-06-16. High severity, CVSS 7.5. EPSS: 14.7% chance of exploitation in the next 30 days. The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of…
CVE-2016-3202, published 2016-06-16. High severity, CVSS 7.5. EPSS: 17.4% chance of exploitation in the next 30 days. The Microsoft (1) Chakra JavaScript, (2) JScript, and (3) VBScript engines, as used in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, allow remote attackers to execute arbitrary code or…
CVE-2016-0187, published 2016-05-11. High severity, CVSS 7.5. EPSS: 21.6% chance of exploitation in the next 30 days. The Microsoft (1) JScript 5.8 and (2) VBScript 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service…
CVE-2015-6089, published 2015-11-11. High severity, CVSS 9.3. EPSS: 13% chance of exploitation in the next 30 days. The Microsoft (1) VBScript and (2) JScript engines, as used in Internet Explorer 8 through 11, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…