Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA12171
HistoryMay 11, 2021 - 12:00 a.m.

KLA12171 ACE vulnerability in Microsoft Browser

2021-05-1100:00:00
Kaspersky Lab
threats.kaspersky.com
27

7.6 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

8.3 High

AI Score

Confidence

High

0.937 High

EPSS

Percentile

99.1%

JSON

A memory corruption vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to execute arbitrary code.

Original advisories

CVE-2021-26419

Exploitation

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

Microsoft-Internet-Explorer

CVE list

CVE-2021-26419 critical

KB list

5003233

5003165

5003209

5003197

5003174

5003208

5003171

5003172

5003169

5003173

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Impacts

  • ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

  • Internet Explorer 9Internet Explorer 11

Related

nvd 1
mskb 11
zdt 1
mscve 1
checkpoint_advisories 1
cvelist 1
packetstorm 1
cve 1
prion 1
nessus 9
attackerkb 1
googleprojectzero 1
krebs 1
malwarebytes 1
thn 1
openvas 8
kaspersky 1
threatpost 1
avleonov 1
rapid7blog 1
qualysblog 1
nvd
nvd
CVE-2021-26419
2021-05-11 19:15:08
mskb
mskb
KB5003165: Cumulative security update for Internet Explorer: May 11, 2021
2021-05-11 07:00:00
May 11, 2021—KB5003210 (Monthly Rollup)
2021-05-11 07:00:00
May 11, 2021—KB5003209 (Monthly Rollup)
2021-05-11 07:00:00
zdt
zdt
Microsoft Internet Explorer jscript9.dll Memory Corruption Exploit
2021-05-13 00:00:00
mscve
mscve
Scripting Engine Memory Corruption Vulnerability
2021-05-11 07:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2021-26419)
2021-05-11 00:00:00
cvelist
cvelist
CVE-2021-26419 Scripting Engine Memory Corruption Vulnerability
2021-05-11 19:11:11
packetstorm
packetstorm
Internet Explorer jscript9.dll Memory Corruption
2021-05-13 00:00:00
cve
cve
CVE-2021-26419
2021-05-11 19:15:08
prion
prion
Memory corruption
2021-05-11 19:15:00
nessus
nessus
Security Updates for Internet Explorer (May 2021)
2021-05-11 00:00:00
KB5003209: Windows 8.1 and Windows Server 2012 R2 Security Update (May 2021)
2021-05-11 00:00:00
KB5003233: Windows 7 and Windows Server 2008 R2 Security Update (May 2021)
2021-05-11 00:00:00
attackerkb
attackerkb
CVE-2021-26419
2021-05-11 00:00:00
googleprojectzero
googleprojectzero
Fuzzing Closed-Source JavaScript Engines with Coverage Feedback
2021-09-14 00:00:00
krebs
krebs
Microsoft Patch Tuesday, May 2021 Edition
2021-05-11 20:28:19
malwarebytes
malwarebytes
Get patching! Wormable Windows flaw headlines Patch Tuesday
2021-05-12 12:46:09
thn
thn
Latest Microsoft Windows Updates Patch Dozens of Security Flaws
2021-05-12 09:15:00
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB5003233)
2021-05-12 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5003209)
2021-05-12 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5003197)
2021-05-12 00:00:00
kaspersky
kaspersky
KLA12167 Multiple vulnerabilities in Microsoft Products (ESU)
2021-05-11 00:00:00
threatpost
threatpost
Wormable Windows Bug Opens Door to DoS, RCE
2021-05-11 20:05:44
avleonov
avleonov
Vulristics: Microsoft Patch Tuesdays Q2 2021
2021-07-10 00:14:59
rapid7blog
rapid7blog
Patch Tuesday - May 2021
2021-05-11 23:44:00
qualysblog
qualysblog
Microsoft & Adobe Patch Tuesday (May 2021) – Qualys covers 85 Vulnerabilities, 26 Critical
2021-05-11 21:53:37

7.6 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

8.3 High

AI Score

Confidence

High

0.937 High

EPSS

Percentile

99.1%

JSON
Related for KLA12171
nvd1mskb11zdt1mscve1checkpoint_advisories1cvelist1packetstorm1cve1prion1nessus9attackerkb1googleprojectzero1krebs1malwarebytes1thn1openvas8kaspersky1threatpost1avleonov1rapid7blog1qualysblog1