Multiple serious vulnerabilities have been found in Microsoft Internet Explorer 9 through 11. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface or possibly to cause a denial of service.

Below is a complete list of vulnerabilities:

1. An improper handling of objects in memory done by affected components can be exploited remotely via specially designed content to obtain sensitive information;
2. An improper access to objects in memory in affected Microsoft browsers can be exploited remotely via specially designed websites or specially designed content to gain privileges;
3. A type confusion issue in the Layout::MultiColumnBoxBuilder::HandleColumnBreakOnColumnSpanningElement function in mshtml.dll can be exploited remotely via vectors involving a specially designed CSS token sequence and specially designed JavaScript code working with a TH element to execute arbitrary code and possibly to cause a denial of service;
4. An improper parsing of HTTP responses in a Microsoft browser via a specially designed URL or website to spoof content or possibly to trigger another attacks;
5. An incorrect handling of objects in memory done by JScript and VBScript while rendering can be exploited remotely via a specially designed website or Microsoft Office document that hosts the IE engine to execute arbitrary code and gain privileges;
6. An improper handling of objects in memory in the JScript scripting engine can be exploited remotely to obtain sensitive information;
7. An improper enforcement of cross-domain policies can be exploited remotely to gain privileges.

Microsoft Internet Explorer versions 9 through 11

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

4025342
4012204
4012217
4012215
4012216
4012606
4013198
4013429
4025339
4025344
4025338