Fixed Intel

CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: May 4, 2022

CVE-2015-2502

High
EPSS 22.6%CISA KEV
Microsoft/Internet Explorer

Description

Microsoft Internet Explorer contains a memory corruption vulnerability that allows an attacker to execute code or cause a denial-of-service (DoS).

EPSS — Exploit Probability

22.6%

Higher than 95.8% of all CVEs

Required Action

https://nvd.nist.gov/vuln/detail/CVE-2015-2502

Risk Assessment

ELEVATED
In CISA KEV

Details

Severity
High
EPSS
22.6%
CISA KEV
Yes
Ransomware
Unknown
Articles
0

Timeline

Published

Apr 13, 2022

Added to KEV

Apr 13, 2022

Remediation Due

May 4, 2022

Affected Product

Microsoft

Internet Explorer

View all Microsoft CVEs