CVE-2021-26411
Internet Explorer Memory Corruption Vulnerability
KEV RANSOMWAREHIGH 8.8EPSS 80.8%
Internet Explorer Memory Corruption Vulnerability
- Affected
- Microsoft · Internet Explorer 11 · Internet Explorer 9 · Microsoft Edge (EdgeHTML-based)
- CVSS v3.1 NVD
- 8.8 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS v3.1 MICROSOFT
- 8.8 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L - CVSS v2.0 NVD
- 5.1 MEDIUM
AV:N/AC:H/Au:N/C:P/I:P/A:P - EPSS
- 80.77% chance of exploitation in the next 30 days, 100th percentile
- CISA KEV
- added 2021-11-03, used in ransomware campaigns
- Published
- 2021-03-11
- Updated
- 2026-10-01
Proof-of-concept exploits (1)
- CrackerCat/CVE-2021-264112★ · 2021-11-18
Exploit collections (1)
- Internet Explorer内存损坏漏洞（CVE-2021-26411）.mdtzwlhack/Vulnerability
Security advisories
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26411
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26411