CVE-20XX-?
agent?

Browser & mail CVEs.

Published CVEs that affect browser & mail software, ranked by exploit odds.

313 CVEs · updated 2026-11-10 21:18 UTC

Reset all
  1. CVE-2010-0805

    The Tabular Data Control (TDC) ActiveX control in Microsoft Internet Explorer 5.01 SP4, 6 on Windows XP SP2 and SP3, and 6 SP1 allows remote attackers to execute arbitrary code via a long URL (DataURL parameter) that triggers memory corruption in the CTDCCtl::SecurityCHeckDataURL function, aka "Memory Corruption Vulnerability."

    Drop everything Injection Browser & mail Microsoft Internet Explorer

    9.3 HIGH 81% exploit odds Fix listed
  2. CVE-2013-0758

    Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allow remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging improper interaction between plugin objects and SVG elements.

    Drop everything Injection Browser & mail Mozilla Firefox

    9.3 HIGH 73% exploit odds Fix listed
  3. CVE-2009-3672

    Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory that (1) were not properly initialized or (2) are deleted, which allows remote attackers to execute arbitrary code via vectors involving a call to the getElementsByTagName method for the STYLE tag name, selection of the single element in the returned list, and a change to the outerHTML property of this element, related to Cascading Style Sheets (CSS) and mshtml.dll, aka "HTML Object Memory Corruption Vulnerability." NOTE: some of these details are obtained from third party information. NOTE: this issue was originally assigned CVE-2009-4054, but Microsoft assigned a duplicate identifier of CVE-2009-3672. CVE consumers should use this identifier instead of CVE-2009-4054.

    Drop everything Injection Browser & mail Microsoft Internet Explorer

    9.3 HIGH 72% exploit odds Fix listed
  4. CVE-2021-44026

    Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search or search_params.

    Drop everything exploited Injection Browser & mail Roundcube Webmail

    9.8 CRITICAL 70% exploit odds Fix listed
  5. CVE-2006-1359

    Microsoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a certain createTextRange call on a checkbox object, which results in a dereference of an invalid table pointer.

    Drop everything Injection Browser & mail Microsoft Ie

    9.3 HIGH 68% exploit odds Fix listed
  6. CVE-2024-35286

    A vulnerability in NuPoint Messenger (NPM) of Mitel MiCollab through 9.8.0.33 allows an unauthenticated attacker to conduct a SQL injection attack due to insufficient sanitization of user input. A successful exploit could allow an attacker to access sensitive information and execute arbitrary database and management operations.

    Drop everything Injection Browser & mail Mitel Micollab

    9.8 CRITICAL 66% exploit odds Fix listed
  7. CVE-2012-0155

    Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "VML Remote Code Execution Vulnerability."

    Drop everything Injection Browser & mail Microsoft Internet Explorer

    9.3 HIGH 65% exploit odds Fix listed
  8. CVE-2012-1876

    Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by attempting to access a nonexistent object, leading to a heap-based buffer overflow, aka "Col Element Remote Code Execution Vulnerability," as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2012.

    Drop everything Injection Browser & mail Microsoft Internet Explorer

    9.3 HIGH 65% exploit odds No fix listed
  9. CVE-2014-8636

    The XrayWrapper implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly interact with a DOM object that has a named getter, which might allow remote attackers to execute arbitrary JavaScript code with chrome privileges via unspecified vectors.

    Injection Browser & mail Mozilla Firefox

    7.5 HIGH 64% exploit odds Fix listed
  10. CVE-2006-3730

    Integer overflow in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a 0x7fffffff argument to the setSlice method on a WebViewFolderIcon ActiveX object, which leads to an invalid memory copy.

    Injection Browser & mail Microsoft Ie

    8.8 HIGH 64% exploit odds Fix listed
  11. CVE-2009-1136

    The Microsoft Office Web Components Spreadsheet ActiveX control (aka OWC10 or OWC11), as distributed in Office XP SP3 and Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet Security and Acceleration (ISA) Server 2004 SP3 and 2006 Gold and SP1, and Office Small Business Accounting 2006, when used in Internet Explorer, allows remote attackers to execute arbitrary code via a crafted call to the msDataSourceObject method, as exploited in the wild in July and August 2009, aka "Office Web Components HTML Script Vulnerability."

    Drop everything Injection Browser & mail Microsoft Isa Server

    9.3 HIGH 62% exploit odds Fix listed
  12. CVE-2012-1875

    Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Same ID Property Remote Code Execution Vulnerability."

    Drop everything Injection Browser & mail Microsoft Internet Explorer

    9.3 HIGH 62% exploit odds No fix listed
  13. CVE-2025-62593

    Ray is an AI compute engine. Prior to version 2.52.0, developers working with Ray as a development tool can be exploited via a critical RCE vulnerability exploitable via Firefox and Safari. This vulnerability is due to an insufficient guard against browser-based attacks, as the current defense uses the User-Agent header starting with the string "Mozilla" as a defense mechanism. This defense is insufficient as the fetch specification allows the User-Agent header to be modified. Combined with a DNS rebinding attack against the browser, and this vulnerability is exploitable against a developer running Ray who inadvertently visits a malicious website, or is served a malicious advertisement (malvertising). This issue has been patched in version 2.52.0.

    Drop everything exploited Injection Browser & mail Anyscale Ray

    9.4 CRITICAL 60% exploit odds Fix listed
  14. CVE-2012-4177

    The web browser plugin for Ubisoft Uplay PC before 2.0.4 allows remote attackers to execute arbitrary programs via the -orbit_exe_path command line argument.

    Drop everything Injection Browser & mail Ubi Uplay Pc

    10.0 HIGH 58% exploit odds No fix listed
  15. CVE-2019-0541

    A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, Internet Explorer 11, Microsoft Excel Viewer, Internet Explorer 10, Office 365 ProPlus.

    exploited Injection Browser & mail Microsoft Internet Explorer

    8.8 HIGH 53% exploit odds Fix listed
  16. CVE-2010-0248

    Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Object Memory Corruption Vulnerability."

    Injection Browser & mail Microsoft Internet Explorer

    8.1 HIGH 53% exploit odds No fix listed
  17. CVE-2010-0266

    Microsoft Office Outlook 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 does not properly verify e-mail attachments with a PR_ATTACH_METHOD property value of ATTACH_BY_REFERENCE, which allows user-assisted remote attackers to execute arbitrary code via a crafted message, aka "Microsoft Outlook SMB Attachment Vulnerability."

    Drop everything Injection Browser & mail Microsoft Outlook

    9.3 HIGH 51% exploit odds No fix listed
  18. CVE-2016-10074

    The mail transport (aka Swift_Transport_MailTransport) in Swift Mailer before 5.4.5 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted e-mail address in the (1) From, (2) ReturnPath, or (3) Sender header.

    Drop everything Injection Browser & mail Swiftmailer

    9.8 CRITICAL 44% exploit odds Fix listed
  19. CVE-2009-1918

    Microsoft Internet Explorer 5.01 SP4 and 6 SP1; Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2; and Internet Explorer 7 and 8 for Windows XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 do not properly handle table operations, which allows remote attackers to execute arbitrary code via a crafted HTML document that triggers memory corruption by adding malformed elements to an empty DIV element, related to the getElementsByTagName method, aka "HTML Objects Memory Corruption Vulnerability."

    Drop everything Injection Browser & mail Microsoft Internet Explorer

    10.0 HIGH 43% exploit odds No fix listed
  20. CVE-2009-2477

    js/src/jstracer.cpp in the Just-in-time (JIT) JavaScript compiler (aka TraceMonkey) in Mozilla Firefox 3.5 before 3.5.1 allows remote attackers to execute arbitrary code via certain use of the escape function that triggers access to uninitialized memory locations, as originally demonstrated by a document containing P and FONT elements.

    Drop everything Injection Browser & mail Mozilla Firefox

    9.3 HIGH 43% exploit odds Fix listed
  21. CVE-1999-0891

    The "download behavior" in Internet Explorer 5 allows remote attackers to read arbitrary files via a server-side redirect.

    Injection Browser & mail Microsoft Internet Explorer

    5.0 MEDIUM 42% exploit odds No fix listed
  22. CVE-2009-2011

    Worldweaver DX Studio Player 3.0.29.0, 3.0.22.0, 3.0.12.0, and probably other versions before 3.0.29.1, when used as a plug-in for Firefox, does not restrict access to the shell.execute JavaScript API method, which allows remote attackers to execute arbitrary commands via a .dxstudio file that invokes this method.

    Drop everything Injection Browser & mail Dxstudio Dx Studio Player

    9.3 HIGH 40% exploit odds Fix listed
  23. CVE-2004-1166

    CRLF injection vulnerability in Microsoft Internet Explorer 6.0.2800.1106 and earlier allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline ("%0a") before the FTP command, which causes the commands to be inserted into the resulting FTP session, as demonstrated using a PORT command.

    Injection Browser & mail Microsoft Ie

    7.5 HIGH 39% exploit odds Fix listed
  24. CVE-2006-1303

    Multiple unspecified vulnerabilities in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allow remote attackers to execute arbitrary code by instantiating certain COM objects from Wmm2fxa.dll as ActiveX controls including (1) DXImageTransform.Microsoft.MMSpecialEffect1Input, (2) DXImageTransform.Microsoft.MMSpecialEffect1Input.1, (3) DXImageTransform.Microsoft.MMSpecialEffect2Inputs, (4) DXImageTransform.Microsoft.MMSpecialEffect2Inputs.1, (5) DXImageTransform.Microsoft.MMSpecialEffectInplace1Input, and (6) DXImageTransform.Microsoft.MMSpecialEffectInplace1Input.1, which causes memory corruption during garbage collection.

    Injection Browser & mail Microsoft Ie

    9.3 HIGH 38% exploit odds Fix listed
  25. CVE-2009-1547

    Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via a crafted data stream header that triggers memory corruption, aka "Data Stream Header Corruption Vulnerability."

    Injection Browser & mail Microsoft Internet Explorer

    8.8 HIGH 37% exploit odds No fix listed
  26. CVE-2010-0267

    Microsoft Internet Explorer 6, 6 SP1, and 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability."

    Injection Browser & mail Microsoft Internet Explorer

    9.3 HIGH 34% exploit odds Fix listed
  27. CVE-2009-1919

    Microsoft Internet Explorer 5.01 SP4 and 6 SP1; Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2; and Internet Explorer 7 and 8 for Windows XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 do not properly handle attempts to access deleted objects in memory, which allows remote attackers to execute arbitrary code via an HTML document containing embedded style sheets that modify unspecified rule properties that cause the behavior element to be "improperly processed," aka "Uninitialized Memory Corruption Vulnerability."

    Injection Browser & mail Microsoft Internet Explorer

    9.3 HIGH 34% exploit odds No fix listed
  28. CVE-2010-0027

    The URL validation functionality in Microsoft Internet Explorer 5.01, 6, 6 SP1, 7 and 8, and the ShellExecute API function in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, does not properly process input parameters, which allows remote attackers to execute arbitrary local programs via a crafted URL, aka "URL Validation Vulnerability."

    Injection Browser & mail Microsoft Internet Explorer

    9.3 HIGH 34% exploit odds No fix listed
  29. CVE-2010-1262

    Microsoft Internet Explorer 6 SP1 and SP2, 7, and 8 allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, related to the CStyleSheet object and a free of the root container, aka "Memory Corruption Vulnerability."

    Injection Browser & mail Microsoft Internet Explorer

    9.3 HIGH 33% exploit odds No fix listed
  30. CVE-2013-3143

    Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3161.

    Injection Browser & mail Microsoft Internet Explorer

    9.3 HIGH 33% exploit odds No fix listed
  31. CVE-2008-0110

    Unspecified vulnerability in Microsoft Outlook in Office 2000 SP3, XP SP3, 2003 SP2 and Sp3, and Office System allows user-assisted remote attackers to execute arbitrary code via a crafted mailto URI.

    Injection Browser & mail Microsoft Office

    9.3 HIGH 32% exploit odds Fix listed
  32. CVE-2008-1085

    Use-after-free vulnerability in Microsoft Internet Explorer 5.01 SP4, 6 through SP1, and 7 allows remote attackers to execute arbitrary code via a crafted data stream that triggers memory corruption, as demonstrated using an invalid MIME-type that does not have a registered handler.

    Injection Browser & mail Microsoft Ie

    9.3 HIGH 32% exploit odds Fix listed
  33. CVE-2007-0218

    Microsoft Internet Explorer 5.01 and 6 allows remote attackers to execute arbitrary code by instantiating certain COM objects from Urlmon.dll, which triggers memory corruption during a call to the IObjectSafety function.

    Injection Browser & mail Microsoft Windows 2000

    9.3 HIGH 31% exploit odds Fix listed
  34. CVE-2008-1086

    The HxTocCtrl ActiveX control (hxvz.dll), as used in Microsoft Internet Explorer 5.01 SP4 and 6 SP1, in Windows XP SP2, Server 2003 SP1 and SP2, Vista SP1, and Server 2008, allows remote attackers to execute arbitrary code via malformed arguments, which triggers memory corruption.

    Injection Browser & mail Microsoft Windows 2000

    9.3 HIGH 31% exploit odds Fix listed
  35. CVE-2012-0169

    Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "JScript9 Remote Code Execution Vulnerability."

    Injection Browser & mail Microsoft Internet Explorer

    9.3 HIGH 30% exploit odds Fix listed
  36. CVE-2010-0490

    Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability."

    Injection Browser & mail Microsoft Internet Explorer

    9.3 HIGH 29% exploit odds Fix listed
  37. CVE-2010-0807

    Microsoft Internet Explorer 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, leading to memory corruption, aka "HTML Rendering Memory Corruption Vulnerability."

    Injection Browser & mail Microsoft Internet Explorer

    9.3 HIGH 29% exploit odds Fix listed
  38. CVE-2008-0078

    Unspecified vulnerability in an ActiveX control (dxtmsft.dll) in Microsoft Internet Explorer 5.01, 6 SP1 and SP2, and 7 allows remote attackers to execute arbitrary code via a crafted image, aka "Argument Handling Memory Corruption Vulnerability."

    Injection Browser & mail Microsoft Activex

    9.3 HIGH 29% exploit odds No fix listed
  39. CVE-2008-0076

    Unspecified vulnerability in Microsoft Internet Explorer 5.01, 6 SP1 and SP2, and 7 allows remote attackers to execute arbitrary code via crafted HTML layout combinations, aka "HTML Rendering Memory Corruption Vulnerability."

    Injection Browser & mail Microsoft Ie

    9.3 HIGH 29% exploit odds No fix listed
  40. CVE-2009-0552

    Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6 SP1, 6 on Windows XP SP2 and SP3, and 6 on Windows Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a web page that triggers presence of an object in memory that was (1) not properly initialized or (2) deleted, aka "Uninitialized Memory Corruption Vulnerability."

    Injection Browser & mail Microsoft Ie

    9.3 HIGH 29% exploit odds No fix listed
  41. CVE-2010-3329

    mshtmled.dll in Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code via a crafted Microsoft Office document that causes the HtmlDlgHelper class destructor to access uninitialized memory, aka "Uninitialized Memory Corruption Vulnerability."

    Injection Browser & mail Microsoft Internet Explorer

    9.3 HIGH 28% exploit odds No fix listed
  42. CVE-2012-0014

    Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4, and Silverlight 4 before 4.1.10111, does not properly restrict access to memory associated with unmanaged objects, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, (3) a crafted .NET Framework application, or (4) a crafted Silverlight application, aka ".NET Framework Unmanaged Objects Vulnerability."

    Injection Browser & mail Microsoft .net Framework

    7.8 HIGH 28% exploit odds No fix listed
  43. CVE-2010-0492

    Use-after-free vulnerability in mstime.dll in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via vectors related to the TIME2 behavior, the CTimeAction object, and destruction of markup, leading to memory corruption, aka "HTML Object Memory Corruption Vulnerability."

    Injection Browser & mail Microsoft Internet Explorer

    8.1 HIGH 28% exploit odds Fix listed
  44. CVE-2007-3550

    Microsoft Internet Explorer 6.0 and 7.0 allows remote attackers to fill Zones with arbitrary domains using certain metacharacters such as wildcards via JavaScript, which results in a denial of service (website suppression and resource consumption), aka "Internet Explorer Zone Domain Specification Dos and Page Suppressing". NOTE: this issue has been disputed by a third party, who states that the zone settings cannot be manipulated

    Injection Browser & mail Microsoft Ie

    7.8 HIGH 28% exploit odds Fix listed
  45. CVE-2007-5344

    Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via a crafted website using Javascript that creates, modifies, deletes, and accesses document objects using the tags property, which triggers heap corruption, related to uninitialized or deleted objects, a different issue than CVE-2007-3902 and CVE-2007-3903, and a variant of "Uninitialized Memory Corruption Vulnerability."

    Injection Browser & mail Microsoft Ie

    6.8 MEDIUM 27% exploit odds Fix listed
  46. CVE-2012-0011

    Microsoft Internet Explorer 7 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "HTML Layout Remote Code Execution Vulnerability."

    Injection Browser & mail Microsoft Internet Explorer

    9.3 HIGH 27% exploit odds Fix listed
  47. CVE-2012-0171

    Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "SelectAll Remote Code Execution Vulnerability."

    Injection Browser & mail Microsoft Internet Explorer

    9.3 HIGH 27% exploit odds Fix listed
  48. CVE-2013-0108

    An ActiveX control in HscRemoteDeploy.dll in Honeywell Enterprise Buildings Integrator (EBI) R310, R400.2, R410.1, and R410.2; SymmetrE R310, R410.1, and R410.2; ComfortPoint Open Manager (aka CPO-M) Station R100; and HMIWeb Browser client packages allows remote attackers to execute arbitrary code via a crafted HTML document.

    Injection Browser & mail Honeywell Enterprise Buildings Integrator

    6.8 MEDIUM 27% exploit odds No fix listed
  49. CVE-2010-0811

    Multiple unspecified vulnerabilities in the Microsoft Internet Explorer 8 Developer Tools ActiveX control in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allow remote attackers to execute arbitrary code via unknown vectors that "corrupt the system state," aka "Microsoft Internet Explorer 8 Developer Tools Vulnerability."

    Injection Browser & mail Microsoft Windows Xp

    9.3 HIGH 26% exploit odds No fix listed
  50. CVE-2009-0091

    Microsoft .NET Framework 2.0, 2.0 SP1, and 3.5 does not properly enforce a certain type-equality constraint in .NET verifiable code, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka "Microsoft .NET Framework Type Verification Vulnerability."

    Injection Browser & mail Microsoft Windows 2000

    9.3 HIGH 26% exploit odds No fix listed

CVEs that affect browser & mail, sorted by how likely they are to be exploited (EPSS).