110 matches found
KLA11681 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A memory corruption vulnerability in Scripting Engine can be exploited remotely to...
Microsoft Internet Explorer Windows 10 1809 17763.316 Memory Corruption
Content Dim ar1&h3000000 Dim ar21000 Dim gremlin addressOfGremlin = &h28281000 Class MyClass Private mValue Public Property Let Valuev mValue = v End Property Public Default Property Get P P = mValue ' Where to write End Property End Class Sub TriggerWritewhere, val Dim v1 Set v1 =...
Microsoft Internet Explorer Windows 10 1809 17763.316 - Scripting Engine Memory Corruption
Microsoft Internet Explorer Windows 10 1809 17763.316 - Scripting Engine Memory Corruption Content Dim ar1&h3000000 Dim ar21000 Dim gremlin addressOfGremlin = &h28281000 Class MyClass Private mValue Public Property Let Valuev mValue = v End Property Public Default Property Get P P = mValue ' Wher...
Microsoft Internet Explorer Windows 10 1809 17763.316 - Scripting Engine Memory Corruption Exploit
Content Dim ar1&h3000000 Dim ar21000 Dim gremlin addressOfGremlin = &h28281000 Class MyClass Private mValue Public Property Let Valuev mValue = v End Property Public Default Property Get P P = mValue ' Where to write End Property End Class Sub TriggerWritewhere, val Dim v1 Set v1 =...
Exploit for Out-of-bounds Write in Microsoft
IE11 VBScript Exploit Exploit Generator for CVE-2018-8174 &...
CVE-2019-0768
A security feature bypass vulnerability exists when Internet Explorer VBScript execution policy does not properly restrict VBScript under specific conditions, and to allow requests that should otherwise be ignored, aka 'Internet Explorer Security Feature Bypass Vulnerability'. This CVE ID is uniq...
Security feature bypass
A security feature bypass vulnerability exists when Internet Explorer fails to validate the correct Security Zone of requests for specific URLs, aka 'Internet Explorer Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-0768...
CVE-2019-0768
CVE-2019-0768 is an Internet Explorer security feature bypass affecting VBScript execution policy. The vulnerability description notes VBScript is not properly restricted under certain conditions, enabling bypass of the intended security controls. Connected sources show PoCs/exploits associating ...
CVE-2019-0768
creationtimestamp| type| source ---|---|--- 2019-03-19 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46567...
Microsoft Internet Explorer Security Feature Bypass (CVE-2019-0768)
A security bypass vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability would allow remote attackers to bypass security tests and protocols on the affected system...
Microsoft Internet Explorer CVE-2019-0768 Security Bypass Vulnerability
Description Microsoft Internet Explorer is prone to a security-bypass vulnerability. Successfully exploiting this issue may allow an attacker to bypass certain security restrictions and perform unauthorized actions. This may lead to other attacks. Internet Explorer 11 is vulnerable. Technologies...
Memory corruption
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is...
CVE-2018-0768
Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762,...
CVE-2018-0768
CVE-2018-0768 corresponds to a memory corruption vulnerability in the Microsoft Edge scripting engine on Windows 10 (1709) that allows a remote attacker to execute arbitrary code in the context of the current user by convincing a user to open a crafted page. Connected advisories confirm a remote ...
CVE-2017-0768
CVE-2017-0768 is an Elevation of Privilege (EoP) vulnerability in Android’s media framework (libeffects) affecting Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0. The issue enables a local attacker to gain privileged code execution within a privileged process, with p...
CVE-2016-0768
PostgreSQL PL/Java after 9.0 does not honor access controls on large objects...
CVE-2016-0768
CVE-2016-0768 affects PostgreSQL PL/Java (9.0 and earlier); the issue is that access controls on large objects are not honored, potentially enabling access to arbitrary objects. The connected CNVD/OSV/NVD entries corroborate this vulnerability and describe it as a PostgreSQL PL/Java failure to en...
Fedora 24 : spice (2017-05793780f0)
Add upstream patches fixing CVE-2016-9577 and CVE-2016-9578 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additiona...
Oracle: Security Advisory (ELSA-2010-0768)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...