What is the CVSS score of CVE-2015-6051?

CVE-2015-6051 has a CVSS 2.0 base score of 4.3 (Medium). CVSS vector: AV:N/AC:M/Au:N/C:N/I:P/A:N. EPSS exploitation probability: 9.8%.

Is there a patch available for CVE-2015-6051?

Yes, a patch is available for CVE-2015-6051. Update the affected software to the latest version immediately.

Internet Explorer CVE-2015-6051

MEDIUM

2015-10-14 secure@microsoft.com

Information Disclosure Microsoft Internet Explorer

4.3

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

4.3 MEDIUM

AV:N/AC:M/Au:N/C:N/I:P/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:N/C:N/I:P/A:N

Attack Vector

Network

Attack Complexity

Confidentiality

None

Integrity

Availability

None

Lifecycle Timeline

CVE Published

Oct 14, 2015 - 01:59 cve.org

MEDIUM 4.3

DescriptionCVE.org

Microsoft Internet Explorer 10 and 11 allows remote attackers to gain privileges via a crafted web site, as demonstrated by a transition from Low Integrity to Medium Integrity, aka "Internet Explorer Elevation of Privilege Vulnerability."

AnalysisAI

Technical ContextAI

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Internet Explorer

View all

CVE-2012-1876 CRITICAL Emergency POC

9.3 Jun 12

Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, does not properly handle objects in memory, which allo

CVE-2014-0307 CRITICAL Emergency POC

9.3 Mar 12

Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause

CVE-2013-0025 CRITICAL Emergency POC

9.3 Feb 13

Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a cr

CVE-2012-1875 CRITICAL Emergency POC

9.3 Jun 12

Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbit

CVE-2013-3205 CRITICAL Emergency POC

9.3 Sep 11

Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (

CVE-2013-3184 CRITICAL Emergency POC

9.3 Aug 14

Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service

CVE-2016-3213 HIGH Act Now POC

8.8 Jun 16

The Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and

CVE-2014-1764 CRITICAL Emergency POC

10.0 Apr 27

Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code and bypass a sandbox protecti

CVE-2017-8636 HIGH Act Now POC

7.5 Aug 08

Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Serve

CVE-2014-0282 CRITICAL Emergency POC

9.3 Jun 11

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service

CVE-2016-7287 HIGH Act Now POC

7.5 Dec 20

The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary c

CVE-2016-0199 HIGH Act Now POC

8.8 Jun 16

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

CVE-2015-6051 vulnerability details – vuln.today

Back