Remote code execution

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0884, CVE-2019-0911...

CVE-2019-0940

CVE-2019-0940 is a remote code‑execution vulnerability in Microsoft browsers caused by improper memory handling (memory buffer/ boundary validation) in Edge/Internet Explorer. The issue enables an attacker to execute arbitrary code by sending crafted content over the network, with user interactio...

CVE-2019-0911

CVE-2019-0911 corresponds to a remote code execution issue stemming from how the scripting engine handles memory objects in Microsoft browsers. Connected CNVD data describes a memory object handling buffer/overrun vulnerability in Microsoft Internet Explorer (IE9–11) that could allow memory corru...

CVE-2019-0918

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0884, CVE-2019-0911...

CVE-2019-0918

Technical details (affected product, vulnerable component, impact, fixes) are not publicly available in the provided documents. Monitor for updates from official sources.

CVE-2019-0911

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0884, CVE-2019-0918...

CVE-2019-0884

Technical details for CVE-2019-0884 are not publicly available in the provided documents; no affected product/version or exploit guidance are specified. Monitor for updates from official advisories.

CVE-2019-0884

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0911, CVE-2019-0918...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploit...

KLA11478 Multiple vulnerabilities in Microsoft Browsers

Multiple vulnerabilities were found in Microsoft Browsers. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, bypass security restrictions, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A memory...

Cross-Site Scripting

Overview All versions of wangeditor are vulnerable to Cross-Site Scripting. The package fails to properly encode output, allowing arbitrary JavaScript to be inserted in links and executed by browsers. Recommendation No fix is currently available. Consider using an alternative module until a fix i...

CVE-2019-9793

A mechanism was discovered that removes some bounds checking for string, array, or typed array accesses if Spectre mitigations have been disabled. This vulnerability could allow an attacker to create an arbitrary value in compiled JavaScript, for which the range analysis will infer a fully...

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird, related to deficiencies in domain restriction mechanisms (Same Origin Policy), allows attackers to redirect users to malicious websites.

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird is related to deficiencies in the Domain Same Origin Policy mechanism. Exploiting this vulnerability can allow a malicious actor to redirect users to malicious websites or expose protected information...

Open-Xchange: Another Stored XSS in mail app using Drive app

Vulnerability Details: When replying to a HTML E-Mail with specific payload, that payload could be executed as script code. The user would have to have HTML composing enabled to exploit this vulnerability. This vulnerability could happen as browsers incorrectly "fix" HTML content as demonstrated ...

Open-Xchange: Stored XSS in mail app

Vulnerability Details: When replying to a HTML E-Mail with specific payload, that payload could be executed as script code. The user would have to have HTML composing enabled to exploit this vulnerability. This vulnerability could happen as browsers incorrectly "fix" HTML content as demonstrated ...

Input validation

A tampering vulnerability exists when Microsoft browsers do not properly validate input under specific conditions, aka 'Microsoft Browsers Tampering Vulnerability'...

CVE-2019-0764

A tampering vulnerability exists when Microsoft browsers do not properly validate input under specific conditions, aka 'Microsoft Browsers Tampering Vulnerability'...

CVE-2019-0764

A tampering vulnerability exists when Microsoft browsers do not properly validate input under specific conditions, aka 'Microsoft Browsers Tampering Vulnerability'...

CVE-2019-0764

Technical details for CVE-2019-0764 are not publicly available in the provided documents. The materials reference general browser tampering and unrelated Windows KB updates; monitor for future updates for affected products, components, and remediation.

CVE-2019-0764

A tampering vulnerability exists when Microsoft browsers do not properly validate input under specific conditions, aka 'Microsoft Browsers Tampering Vulnerability'...