Lucene search
K

7634 matches found

CNVD
CNVD
added 2016/07/14 12:0 a.m.3 views

Microsoft Excel Arbitrary Code Execution Vulnerability (CNVD-2016-04960)

Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. An arbitrary code execution vulnerability exists in Microsoft Office, which stems from the program's failu...

9.3CVSS7.7AI score0.19641EPSS
Exploits0References1
CNVD
CNVD
added 2016/07/14 12:0 a.m.2 views

Microsoft Edge Scripting Engine Memory Corruption Vulnerability

Microsoft Edge is a web browser developed by Microsoft and is the default browser that comes with the Windows 10 operating system.Chakra JavaScript engine is a JavaScript engine component used by Edge web browser. A memory corruption vulnerability exists in the Chakra JavaScript engine in Microso...

9.3CVSS7.6AI score0.21447EPSS
Exploits0References1
CNVD
CNVD
added 2016/07/14 12:0 a.m.3 views

Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2016-04928)

Microsoft Edge is a web browser developed by Microsoft and is the default browser that comes with the Windows 10 operating system.Chakra JavaScript engine is a JavaScript engine component used by Edge web browser. A memory corruption vulnerability exists in the Chakra JavaScript engine in Microso...

9.3CVSS7.6AI score0.20732EPSS
Exploits0References1
CNVD
CNVD
added 2016/07/13 12:0 a.m.3 views

Microsoft Edge Memory Corruption Vulnerability (CNVD-2016-04789)

Microsoft Edge is a web browser developed by Microsoft USA and is the default browser that comes with the Windows 10 operating system. A memory corruption vulnerability exists in Microsoft Edge that stems from a program failing to properly access objects in memory. A remote attacker can exploit t...

7.6CVSS7.6AI score0.14121EPSS
Exploits0References1
CNVD
CNVD
added 2016/07/13 12:0 a.m.3 views

Microsoft Internet Explorer and Edge Memory Corruption Vulnerability

Microsoft Internet Explorer IE and Microsoft Edge are both web browsers developed by the American company Microsoft. The former is the default browser that came with operating systems before Windows 10, and the latter is the default browser that comes with the latest operating system, Windows 10....

7.6CVSS7.5AI score0.14006EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/07/12 12:0 a.m.30 views

Adobe Reader DC if XSLT Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

6.8CVSS2.5AI score0.04547EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/07/12 12:0 a.m.31 views

Microsoft Internet Explorer CTableLayout AddRow Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability relates to how...

6.8CVSS4.5AI score0.13848EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/07/12 12:0 a.m.40 views

Microsoft Chakra ArrayBuffer.transfer Uninitialized Buffer Information Leak Vulnerability

This vulnerability allows remote attackers to leak sensitive information on vulnerable installations of Microsoft Chakra. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlin...

5CVSS1.2AI score0.20869EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/07/12 12:0 a.m.23 views

Adobe Flash AdBreakPlacement Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

6.8CVSS2.5AI score0.07391EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/07/12 12:0 a.m.33 views

Adobe Flash StyleSheet Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the StyleSheet...

6.8CVSS5.5AI score0.0604EPSS
Exploits0References1
CNVD
CNVD
added 2016/07/11 12:0 a.m.2 views

Adobe Acrobat Reader DC Remote Code Execution Vulnerability (CNVD-2016-04910)

Adobe Reader is PDF document reading software. A security vulnerability exists in Adobe Reader DC that allows an attacker to trigger a memory corruption vulnerability in Adobe Reader DC by means of a carefully constructed PDF file, which can be exploited to execute arbitrary code in the context o...

10CVSS7.7AI score0.05038EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2016/07/07 12:0 a.m.5 views

The vulnerability of the Internet Explorer browser allows a malicious actor to execute arbitrary code with privileges of the current user.

The Internet Explorer browser contains a vulnerability related to errors that occur due to incorrect access to objects in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code with privileges of the current user...

9.3CVSS8.2AI score0.15789EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/07 12:0 a.m.2 views

The vulnerability of the Microsoft Office software allows a malicious actor to execute arbitrary code with privileges of the current user.

The Microsoft Office suite contains a vulnerability that causes system memory corruption due to errors occurring during the improper processing of specially crafted files. Exploiting this vulnerability allows an unauthorized attacker to execute arbitrary code with privileges of the current user...

9.3CVSS6AI score0.16593EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2016/07/07 12:0 a.m.3 views

The vulnerability of the Internet Explorer browser allows a malicious actor to execute arbitrary code with privileges of the current user.

The Internet Explorer browser contains a vulnerability related to errors that occur due to incorrect access to objects in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code with privileges of the current user...

9.3CVSS6AI score0.15789EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/07 12:0 a.m.2 views

The vulnerability in the Microsoft Word Viewer software allows a malicious actor to execute arbitrary code with privileges of the current user.

The Microsoft Word Viewer program contains a vulnerability that can cause system memory corruption due to errors occurring during the improper processing of specially crafted files. Exploiting this vulnerability could allow an unauthorized attacker to execute arbitrary code with privileges of the...

9.3CVSS6AI score0.16593EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2016/07/07 12:0 a.m.3 views

The vulnerability of the Microsoft Office Web Apps package allows a malicious actor to execute arbitrary code with privileges of the current user.

The Microsoft Office Web Apps software package contains a vulnerability related to errors that occur due to improper processing of specially crafted files. Exploiting this vulnerability can allow an unauthorized attacker to execute arbitrary code with the privileges of the current user...

9.3CVSS6AI score0.25741EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2016/07/07 12:0 a.m.3 views

The vulnerability of the Internet Explorer browser allows a malicious actor to execute arbitrary code with privileges of the current user.

The Internet Explorer browser contains a vulnerability related to errors that occur due to incorrect access to objects in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code with privileges of the current user...

9.3CVSS6AI score0.13021EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/07 12:0 a.m.5 views

The vulnerability in the Microsoft Word Viewer software allows a malicious actor to execute arbitrary code with privileges of the current user.

The Microsoft Word Viewer program contains a vulnerability that can cause system memory corruption due to errors occurring during the improper processing of specially crafted files. Exploiting this vulnerability could allow an unauthorized attacker to execute arbitrary code with privileges of the...

9.3CVSS6AI score0.29022EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2016/07/07 12:0 a.m.2 views

The vulnerability of the Microsoft Office software allows a malicious actor to execute arbitrary code with privileges of the current user.

Microsoft Office software contains a vulnerability that causes system memory corruption due to errors occurring during the improper processing of specially crafted files. Exploiting this vulnerability allows an unauthorized attacker to execute arbitrary code with privileges of the current user...

9.3CVSS6AI score0.29022EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2016/07/07 12:0 a.m.4 views

The vulnerability of Microsoft Word text editors allows a malicious actor to execute arbitrary code with the privileges of the current user.

Microsoft Word’s text editor contains a vulnerability related to errors that occur due to improper processing of specially crafted files. Exploiting this vulnerability can allow an unauthorized intruder to execute arbitrary code with privileges of the current user...

9.3CVSS6AI score0.25741EPSS
Exploits0References3
Rows per page
Query Builder