4.3
CVSSv2

CVE-2015-6086

Published: 11/11/2015 Updated: 12/10/2018
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 436
Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

Vulnerability Summary

Microsoft Internet Explorer 9 through 11 allows remote malicious users to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability."

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft internet explorer 9

microsoft internet explorer 10

microsoft internet explorer 11

Exploits

<!-- CVE-2015-6086 Out Of Bound Read Vulnerability Address Space Layout Randomization (ASLR) Bypass Improper handling of new line and white space character caused Out of Bound Read in CDOMStringDataList::InitFromString This flaw can be used to leak the base address of MSHTMLDLL and effectively bypass A ...

Github Repositories

Awesome Web Security 🐶 Curated list of Web Security materials and resources Needless to say, most websites suffer from various types of bugs which may eventually lead to vulnerabilities Why would this happen so often? There can be many factors involved including misconfiguration, shortage of engineers' security skills, etc To combat this, here is a curated list o

PoC for CVE-2015-6086

From Crash to Exploit: CVE-2015-6086 - Out of Bound Read/ASLR Bypass $$$$$$\ $$\ $$\ $$$$$$$$\ $$$$$$\ $$$$$$\ $$\ $$$$$$$\ $$$$$$\ $$$$$$\ $$$$$$\ $$ __$$\ $$ | $$ |$$ _____| $$ __$$\ $$$ __$$\ $$$$ | $$ ____| $$ __$$\ $$$ __$$\ $$ __$$\ $$ / \__|$$ | $$ |$$ | \__/ $$ |$$$$\ $$ |\_$$ | $$ | $$ / \__|$$

Awesome Web Security 🐶 Curated list of Web Security materials and resources Needless to say, most of websites on-line are suffered from various type of bugs, which might eventually lead to vulnerabilities Why would this happen so often? Many factors can be involved, including misconfiguration, shortage of engineers' security skills, and etc Therefore, here is the