GCVE - cpe:2.3:a:microsoft:ie:8:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:ie:8:*:*:*:*:*:*:*

part: a version: 8 update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Ie (`d6c68fe7-98fc-54b4-a290-1745b169773d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-1260`	vulnerable	2026-06-08 04:54:06.888366	Details available The IE8 Developer Toolbar in Microsoft Internet Explorer 8 SP1, SP2, and SP3 allows user-assisted remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Element Memory Corruption Vulnerability." Published: 2010-06-08T22:00:00.000Z Updated: 2024-10-21T16:47:01.657Z Open on db.gcve.eu Reference links https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6686 http://support.avaya.com/css/P8/documents/100089747 http://osvdb.org/65213 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-035 http://www.us-cert.gov/cas/techalerts/TA10-159B.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0492`	vulnerable	2026-06-08 04:52:02.871861	Details available Use-after-free vulnerability in mstime.dll in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via vectors related to the TIME2 behavior, the CTimeAction object, and destruction of markup, leading to memory corruption, aka "HTML Object Memory Corruption Vulnerability." Published: 2010-03-31T19:00:00.000Z Updated: 2024-10-21T16:44:40.304Z Open on db.gcve.eu Reference links https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7722 http://www.us-cert.gov/cas/techalerts/TA10-089A.html http://www.zerodayinitiative.com/advisories/ZDI-10-033 http://www.us-cert.gov/cas/techalerts/TA10-068A.html https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0248`	vulnerable	2026-06-08 04:52:01.233231	Details available Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Object Memory Corruption Vulnerability." Published: 2010-01-22T21:20:00.000Z Updated: 2024-10-21T16:43:33.939Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/55778 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8267 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3671`	vulnerable	2026-06-08 04:51:43.563794	Details available Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2009-3674. Published: 2009-12-09T18:00:00.000Z Updated: 2024-10-21T16:41:27.814Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-072 http://www.us-cert.gov/cas/techalerts/TA09-342A.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6382 http://www.securitytracker.com/id?1023293	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2529`	vulnerable	2026-06-08 04:51:29.066659	Details available Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not properly handle argument validation for unspecified variables, which allows remote attackers to execute arbitrary code via a crafted HTML document, aka "HTML Component Handling Vulnerability." Published: 2009-10-14T10:00:00.000Z Updated: 2024-10-21T16:40:02.227Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-054 http://www.us-cert.gov/cas/techalerts/TA09-286A.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6419	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.