CVE-2015-0071Microsoft Internet Explorer ASLR Bypass Vulnerability

Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulnerability."

6.5 MEDIUMEPSS 33.58%⚡ Known Exploited (CISA KEV)NVD: Published

Last updated: 2025-10-22 00:05 UTC

Overview Affected Products References

NVD CVE.org

Overview

Severity

Score	Severity	Version	Vector String
6.5	MEDIUM	3.1CISA-ADP	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Details

CVE ID: CVE-2015-0071
Status: Published
Assigner (CNA): microsoft
Published: Feb 11, 2015
Last modified: 2025-10-22 00:05 UTC
Weaknesses: CWE-264

Sources

NVD (unavailable at last refresh)
CVE.org
CISA KEV
FIRST EPSS

Refreshed hourly from the sources above. Last fetched 2026-11-09 14:00 UTC.