Description
Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the XSS filter via a crafted attribute of an element in an HTML document, aka "Internet Explorer XSS Filter Bypass Vulnerability," a different vulnerability than CVE-2014-6365.
References (1)
Core 1
Core References
Vendor Advisory vendor-advisory
x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-080
Scores
EPSS
0.2135
EPSS Percentile
97.3%
Details
CWE
CWE-20
Status
published
Products (4)
microsoft/internet_explorer
8
microsoft/internet_explorer
9
microsoft/internet_explorer
10
microsoft/internet_explorer
11
Published
Dec 11, 2014
Tracked Since
Feb 18, 2026