GCVE - cpe:2.3:a:microsoft:vbscript:5.6:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:vbscript:5.6:*:*:*:*:*:*:*

part: a version: 5.6 update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Vbscript (`be199190-4415-5ffa-94ca-4106f803c95c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-6059`	vulnerable	2026-06-08 05:06:51.231302	Details available The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Scripting Engine Information Disclosure Vulnerability." Published: 2015-10-14T01:00:00.000Z Updated: 2024-08-06T07:06:35.239Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-108 http://www.securitytracker.com/id/1033800 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-106	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-6055`	vulnerable	2026-06-08 05:06:51.225634	Details available The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Filter arguments, aka "Scripting Engine Memory Corruption Vulnerability." Published: 2015-10-14T01:00:00.000Z Updated: 2024-08-06T07:06:35.224Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-108 http://www.zerodayinitiative.com/advisories/ZDI-15-537 http://www.zerodayinitiative.com/advisories/ZDI-15-521 http://www.securitytracker.com/id/1033800 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-106	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-2482`	vulnerable	2026-06-08 05:06:35.117048	Details available The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted replace operation with a JavaScript regular expression, aka "Scripting Engine Memory Corruption Vulnerability." Published: 2015-10-14T01:00:00.000Z Updated: 2024-08-06T05:17:27.181Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-108 http://www.securitytracker.com/id/1033800 http://seclists.org/fulldisclosure/2015/Oct/54 https://www.exploit-db.com/exploits/40798/ https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-106	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-2372`	vulnerable	2026-06-08 05:06:34.925999	Details available vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 6 through 11 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "VBScript Memory Corruption Vulnerability." Published: 2015-07-14T21:00:00.000Z Updated: 2024-08-06T05:10:16.488Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-066 http://www.securitytracker.com/id/1032894 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065 http://www.securitytracker.com/id/1032895	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-1686`	vulnerable	2026-06-08 05:06:26.075976	Details available The Microsoft (1) VBScript 5.6 through 5.8 and (2) JScript 5.6 through 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "VBScript and JScript ASLR Bypass." Published: 2015-05-13T10:00:00.000Z Updated: 2024-08-06T04:47:17.525Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/74530 http://www.securitytracker.com/id/1032282 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-053 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-043	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-1684`	vulnerable	2026-06-08 05:06:26.073953	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-0032`	vulnerable	2026-06-08 05:06:13.376260	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-6363`	vulnerable	2026-06-08 05:05:57.499499	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-0271`	vulnerable	2026-06-08 05:05:12.523231	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-0663`	vulnerable	2026-06-08 04:56:38.529079	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.