KLA11222 Multiple vulnerabilities in Microsoft Browsers

🗓️ 10 Apr 2018 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 75 Views

Multiple vulnerabilities found in Microsoft Browsers, allowing for remote code execution and sensitive information disclosure

Reporter	Title	Published	Views	Family All 272
0day.today	Microsoft Edge Chakra JIT - Bound Check Elimination Bug Exploit	18 May 201800:00	–	zdt
BDU FSTEC	The vulnerability of Microsoft Edge browser and the ChakraCore JavaScript engine handler, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.	31 May 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Internet Explorer arises from errors in memory object handling, allowing an attacker to execute arbitrary code.	31 May 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Edge browser and the ChakraCore JavaScript engine handler, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.	31 May 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Internet Explorer, related to the execution of operations beyond the buffer in memory, allows an attacker to execute arbitrary code.	31 May 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of JavaScript script handlers in Internet Explorer allows a perpetrator to execute arbitrary code.	31 May 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Internet Explorer browser, related to the execution of operations beyond the buffer in memory, allows an attacker to execute arbitrary code.	31 May 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of JavaScript script handlers in Internet Explorer allows a perpetrator to execute arbitrary code.	31 May 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Edge browser and the ChakraCore JavaScript engine lies in memory object handling errors, allowing attackers to execute arbitrary code.	31 May 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Edge browser and the ChakraCore JavaScript engine lies in memory object handling errors, allowing attackers to execute arbitrary code.	7 Jun 201800:00	–	bdu_fstec

Source	Link
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2018-0981
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2018-0994
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2018-0997
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2018-0990
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2018-1023
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2018-1000
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2018-0892
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2018-1001
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2018-1019
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2018-1018

22 Jan 2024 00:00Current

8.2High risk

Vulners AI Score8.2

CVSS 37.5

CVSS 27.6

EPSS0.66554