KLA11247 Multiple vulnerabilities in Microsoft Browsers

🗓️ 08 May 2018 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 99 Views

Multiple vulnerabilities in Microsoft Browsers. Malicious users can execute arbitrary code, obtain sensitive information, bypass security restrictions. Vulnerabilities in Chakra Scripting Engine, Scripting Engine, Microsoft Edge, and Internet Explorer

Reporter	Title	Published	Views	Family All 320
0day.today	Microsoft Edge Chakra JIT - Magic Value Type Confusion Exploit	23 May 201800:00	–	zdt
0day.today	Microsoft Edge Chakra EntrySimpleObjectSlotGetter Type Confusion Exploit	31 May 201800:00	–	zdt
0day.today	Microsoft Edge Chakra JIT - Out-of-Bounds Reads/Writes Exploit	12 Jul 201800:00	–	zdt
0day.today	Microsoft Edge Chakra JIT - BoundFunction::NewInstance Out-of-Bounds Read Exploit	12 Jul 201800:00	–	zdt
BDU FSTEC	Microsoft Edge browser vulnerability, caused by memory object processing errors, allows attackers to execute arbitrary code.	22 Jun 201800:00	–	bdu_fstec
BDU FSTEC	Vulnerability of Microsoft Edge, Internet Explorer browsers, and the JavaScript scenario handler ChakraCore, caused by memory object handling errors, allowing attackers to execute arbitrary code.	22 Jun 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.	22 Jun 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the JavaScript script handler ChakraCore in browsers Internet Explorer and Microsoft Edge allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.	29 Jun 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, caused by an operation that goes beyond the buffer in memory, allows attackers to execute arbitrary code.	29 Jun 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, caused by an operation that goes beyond the buffer in memory, allows attackers to execute arbitrary code.	29 Jun 201800:00	–	bdu_fstec

Source	Link
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2018-0943
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2018-0945
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2018-0946
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2018-0951
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2018-0953
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2018-0954
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2018-1021
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2018-8123
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2018-1022
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2018-8130

22 Jan 2024 00:00Current

8.4High risk

Vulners AI Score8.4

CVSS 38.8

CVSS 27.6

EPSS0.67233