KLA11209 Multiple vulnerabilities in Microsoft Internet Explorer and Edge

🗓️ 13 Mar 2018 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 387 Views

Multiple vulnerabilities in Microsoft Internet Explorer and Edge. Malicious users can execute arbitrary code, obtain sensitive information, and gain privileges via specially crafted content and websites. Complete list of vulnerabilities includes memory corruption, information disclosure, and elevation of privilege

Reporter	Title	Published	Views	Family All 253
0day.today	Internet Explorer - RegExp.lastMatch Memory Disclosure Exploit	20 Mar 201800:00	–	zdt
0day.today	Microsoft Edge Chakra JIT - Stack-to-Heap Copy (Incomplete Fix) Exploit	3 Apr 201800:00	–	zdt
0day.today	Microsoft Edge Chakra JIT - Stack-to-Heap Copy (Incomplete Fix 2) Exploit	3 Apr 201800:00	–	zdt
0day.today	Microsoft Windows - Multiple Use-After-Free Issues in jscript Array Methods Exploit	5 Apr 201800:00	–	zdt
BDU FSTEC	Vulnerability of ChakraCore JavaScript script handlers and Microsoft Edge browsers: caused by operations beyond the buffer in memory, allowing attackers to execute arbitrary code.	20 Apr 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ChakraCore JavaScript script handler and the Microsoft Edge browser arises from an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.	20 Apr 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of JavaScript script handlers in Internet Explorer arises from operations that go beyond buffer boundaries in memory, allowing attackers to execute arbitrary code.	20 Apr 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ChakraCore JavaScript script handler and the Microsoft Edge browser arises from an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.	20 Apr 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ChakraCore JavaScript script handler and the Microsoft Edge browser arises from an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.	20 Apr 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ChakraCore JavaScript script handler and the Microsoft Edge browser arises from an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.	20 Apr 201800:00	–	bdu_fstec

Source	Link
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2018-0872
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2018-0873
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2018-0874
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2018-0876
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2018-0879
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2018-0889
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2018-0891
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2018-0893
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2018-0927
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2018-0929

22 Jan 2024 00:00Current

8.2High risk

Vulners AI Score8.2

CVSS 37.5

CVSS 27.6

EPSS0.66554