What’s Vulnerable › Vulnerabilities

CVE-2021-26411: Internet Explorer Memory Corruption Vulnerability

• Severity: medium (CVSS 5.1 v2.0)
• Exploited in the wild: yes — in CISA KEV since 2021-11-03
• EPSS: 81.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-03-11 · updated 2026-10-01
• Weakness: CWE-416

Description

Internet Explorer Memory Corruption Vulnerability

Affected products

• Microsoft Edge: all versions
• Microsoft Internet Explorer 11: 11, 9
• Microsoft Edge: from 1.0..0 before 10.0.17134.2087 — fixed in 10.0.17134.2087
• Microsoft Internet Explorer 11: from 1.0.0 before 10.0.17134.2087 — fixed in 10.0.17134.2087
• Microsoft Internet Explorer 9: from 1.0.0 before 6.0.6003.21070 — fixed in 6.0.6003.21070

How to fix

Upgrade to a fixed version: Microsoft Edge 10.0.17134.2087; Microsoft Internet Explorer 11 10.0.17134.2087; Microsoft Internet Explorer 9 6.0.6003.21070. Check the vendor advisory for mitigations.

References

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26411
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26411
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-26411

Get alerted when CVE-2021-26411 or the next vulnerability affects your stack