Field Assessment
AI analysis pending.
Cross-Reference — CISA KEV
Status: This CVE is listed in CISA's Known Exploited Vulnerabilities catalog.
Ransomware use: Unknown
Added to KEV: 2022-05-25
Required action: Apply updates per vendor instructions.
CVE
CVE-2015-2425
Severity
HIGH
CVSS
8.8
EPSS
44.85%
Microsoft
Original Filing — NVD Description
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2383 and CVE-2015-2384.