86 matches found
About the security content of watchOS 5.2 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...
About the security content of watchOS 5.2
About the security content of watchOS 5.2 This document describes the security content of watchOS 5.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
About the security content of tvOS 12.2
About the security content of tvOS 12.2 This document describes the security content of tvOS 12.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
Microsoft VBScript rtFilter Out-Of-Bounds Read Exploit
There is an out-of-bounds vulnerability in Microsoft VBScript in rtFilter. The vulnerability has been confirmed in Internet Explorer on Windows 7 with the latest patches applied. vbscript: out-of-bounds read in rtFilter CVE-2018-8552 There is an out-of-bounds vulnerability in Microsoft VBScript...
CVE-2018-8552
creationtimestamp| type| source ---|---|--- 2018-11-14 17:39:01+00:00| seen| MISP/5bec5b59-b2b0-4506-9c63-32a40a021402 2018-11-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45924...
CVE-2018-8552
An information disclosure vulnerability exists when VBScript improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user's computer or data, aka "Windows Scripting Engine Memory Corruption Vulnerability." This affects Internet...
CVE-2018-8552
CVE-2018-8552 is an information disclosure vulnerability in the VBScript engine used by Internet Explorer (IE9/IE10/IE11). It allows memory contents to be disclosed, aiding user data compromise. Public exploit exists (Exploit-DB: 45924). CVSSv3 base 7.5 (HIGH) with network vector; user interactio...
Security Updates for Internet Explorer (November 2018)
The Internet Explorer installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could...
KB4467700: Windows Server 2008 November 2018 Security Update
The remote Windows host is missing security update 4467700 or cumulative update 4467706. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability...
Microsoft Windows Scripting Engine Memory Corruption (CVE-2018-8552)
A memory corruption vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Internet Explorer CVE-2018-8552 Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a memory corruption vulnerability. An attacker can exploit this issue to gain access to sensitive information or cause denial of service conditions. Other attacks are also possible. Technologies Affected Microsoft Internet Explorer 10 Microsoft...
CVE-2017-8552
Technical details for CVE-2017-8552 are not publicly provided in the connected documents. No concrete product/version/impact details are present beyond the high-level description. Monitor for updates.
CVE-2017-8552
A kernel-mode driver in Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows 8 allows an elevation of privilege when it fails to properly handle objects in memory, aka “Win32k Elevation of Privilege...
Microsoft Security Advisory 4025685: Guidance for older platforms (XP / 2003) (EXPLODINGCAN)
The remote Windows host is missing a security update. It is, therefore, affected by one or more of the following vulnerabilities : - A remote code execution vulnerability exists in how the Remote Desktop Protocol RDP handles requests if the RDP server has Smart Card authentication enabled. An...
Microsoft Windows 'Win32k.sys' Multiple Vulnerabilities (KB4019204)
This host is missing an important security update according to Microsoft security update KB4019204. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
CVE-2016-8552
CVE-2016-8552 entry is rejected/not used and does not correspond to an active vulnerability.
SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2016:2105-1)
The SUSE Linux Enterprise 12 SP1 kernel was updated to 3.12.62 to receive various security and bugfixes. The following security bugs were fixed : - CVE-2014-9904: The sndcompresscheckinput function in sound/core/compressoffload.c in the ALSA subsystem in the Linux kernel did not properly check fo...
openSUSE Security Update : the Linux Kernel (openSUSE-2016-1029)
The openSUSE 13.1 kernel was updated to 3.12.62 to receive various security and bugfixes. The following security bugs were fixed : - CVE-2014-9904: The sndcompresscheckinput function in sound/core/compressoffload.c in the ALSA subsystem in the Linux kernel did not properly check for an integer...
openSUSE: Security Advisory for kernel (openSUSE-SU-2016:2184-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...