Internet Explorer vulnerabilities: known CVEs & security history
Microsoft · Microsoft · 11 tracked CVEs · 4 actively exploited · updated September 2026 · what is a CVE? →
This is the full list of known vulnerabilities (CVEs) across all Internet Explorer release lines — 11 in total, with 4 actively exploited in the wild. A CVE here doesn't mean your version is affected — check Internet Explorer's current status and the safe version to run.
Known Internet Explorer CVEs
Actively-exploited and most-severe first. Open any CVE for full details.
| CVE | Severity | CVSS | EPSS | Year |
|---|---|---|---|---|
| CVE-2021-27085⚡ exploited | high | 8.8 | 4% | 2021 |
| CVE-2021-26411⚡ exploited | high | 8.8 | 81% | 2021 |
| CVE-2019-0752⚡ exploited | high | 7.5 | 82% | 2019 |
| CVE-2016-3351⚡ exploited | medium | 6.5 | 26% | 2016 |
| CVE-2020-1093 | high | 7.5 | 7% | 2020 |
| CVE-2020-1092 | high | 7.5 | 7% | 2020 |
| CVE-2020-1064 | high | 7.5 | 7% | 2020 |
| CVE-2020-1062 | high | 7.5 | 14% | 2020 |
| CVE-2020-1060 | high | 7.5 | 7% | 2020 |
| CVE-2020-1058 | high | 7.5 | 7% | 2020 |
| CVE-2020-1035 | high | 7.5 | 7% | 2020 |
Is my Internet Explorer version affected?
The list above spans every release. To know whether your version is affected — and the minimum safe version to upgrade to — check it directly.
Check your Internet Explorer version → · Monitor Internet Explorer for new CVEs →
Internet Explorer vulnerabilities — frequently asked
How many known vulnerabilities does Internet Explorer have?
IsItPatched tracks 11 CVEs for Internet Explorer, 4 of which are actively exploited (CISA KEV). 0 are critical-severity and 10 high-severity. These span every release line — what matters is whether the version you run is affected.
Does Internet Explorer have any actively-exploited vulnerabilities?
Yes — 4 Internet Explorer CVEs are in CISA's Known Exploited Vulnerabilities catalog, meaning they are confirmed exploited in the wild (3 linked to ransomware). Patch these as a priority.
What is the most severe Internet Explorer vulnerability?
Among tracked issues, CVE-2021-27085 (HIGH, CVSS 8.8), which is actively exploited, ranks highest.
Is Internet Explorer safe to use?
It depends on the version. The latest supported Internet Explorer release clears the known issues; older versions may still be affected. Check the exact version you run for a verdict.
CVE data aggregated from NVD, CISA KEV and EPSS (FIRST.org). Related: Internet Explorer security status · Internet Explorer end-of-life · actively-exploited CVEs. Always verify against Microsoft's advisories — see our disclaimer.