Heap-Based Buffer Overflow in Internet Explorer by Microsoft
CVE-2025-59295
8.8HIGH
Key Information:
- Vendor
Microsoft
- Status
- Vendor
- CVE Published:
- 14 October 2025
What is CVE-2025-59295?
A heap-based buffer overflow has been identified in Internet Explorer that can be exploited by an unauthorized attacker to execute malicious code remotely. This vulnerability poses a significant risk as it allows attackers to gain control over an affected system. Successful exploitation requires that a user visits a specially crafted web page, which, when rendered by Internet Explorer, can trigger the buffer overflow and lead to unauthorized actions.
Affected Version(s)
Windows 10 Version 1507 32-bit Systems 10.0.10240.0 < 10.0.10240.21161
Windows 10 Version 1607 32-bit Systems 10.0.14393.0 < 10.0.14393.8519
Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.7919