Lucene search
+L

1270 matches found

Cvelist
Cvelist
added 2017/12/09 6:0 a.m.25 views

CVE-2017-16362

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of an out of bounds read vulnerability in the MakeAccesible plugi...

9.1AI score0.0672EPSS
Exploits0References3
Cvelist
Cvelist
added 2017/12/09 6:0 a.m.26 views

CVE-2017-11215

An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the Primetime SDK. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to cod...

9.4AI score0.06076EPSS
Exploits0References5
Cvelist
Cvelist
added 2017/12/09 6:0 a.m.27 views

CVE-2017-16406

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a type confusion vulnerability in the EMF processing module. T...

9.1AI score0.0672EPSS
Exploits0References3
CVE
CVE
added 2017/12/09 6:0 a.m.96 views

CVE-2017-16367

Technical details for CVE-2017-16367 are not provided in the supplied documents. Monitor for updates.

9.3CVSS9.1AI score0.0672EPSS
Exploits0References3Affected Software4
RedHat Linux
RedHat Linux
added 2017/11/15 10:35 a.m.4 views

flash-plugin: multiple code execution issues fixed in APSB17-33

An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the Primetime SDK. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to cod...

10CVSS7.6AI score0.06076EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2017/11/15 10:35 a.m.5 views

flash-plugin: multiple code execution issues fixed in APSB17-33

An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the Primetime SDK metadata functionality. The mismatch between an old and a new object can provide an attacker with unintended memory access --...

10CVSS7.6AI score0.06076EPSS
Exploits0References5
OSV
OSV
added 2017/11/15 3:29 a.m.1 views

CVE-2017-11874

Microsoft Edge in Microsoft Windows 10 1703, 1709, Windows Server, version 1709, and ChakraCore allows an attacker to bypass Control Flow Guard CFG to run arbitrary code on a target system, due to how Microsoft Edge handles accessing memory in code compiled by the Edge Just-In-Time JIT compiler,...

3.1CVSS6AI score0.03974EPSS
Exploits1References3
NVD
NVD
added 2017/11/15 3:29 a.m.20 views

CVE-2017-11874

Microsoft Edge in Microsoft Windows 10 1703, 1709, Windows Server, version 1709, and ChakraCore allows an attacker to bypass Control Flow Guard CFG to run arbitrary code on a target system, due to how Microsoft Edge handles accessing memory in code compiled by the Edge Just-In-Time JIT compiler,...

3.1CVSS5.3AI score0.03974EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2017/11/15 3:29 a.m.4 views

CVE-2017-11874

Microsoft Edge in Microsoft Windows 10 1703, 1709, Windows Server, version 1709, and ChakraCore allows an attacker to bypass Control Flow Guard CFG to run arbitrary code on a target system, due to how Microsoft Edge handles accessing memory in code compiled by the Edge Just-In-Time JIT compiler,...

6.5CVSS6AI score0.07245EPSS
Exploits1References4
Prion
Prion
added 2017/11/15 3:29 a.m.17 views

Security feature bypass

Microsoft Edge in Microsoft Windows 10 1703, 1709, Windows Server, version 1709, and ChakraCore allows an attacker to bypass Control Flow Guard CFG to run arbitrary code on a target system, due to how Microsoft Edge handles accessing memory in code compiled by the Edge Just-In-Time JIT compiler,...

2.6CVSS5.3AI score0.07245EPSS
Exploits1References3
CVE
CVE
added 2017/11/15 3:0 a.m.88 views

CVE-2017-11874

Microsoft Edge in Windows 10 (1703, 1709), Windows Server (1709) and ChakraCore is affected by a CFG bypass that allows arbitrary code execution due to how memory is accessed by code produced by the Edge JIT compiler. The vulnerability impacts Edge/CSP handling and CFG enforcement; CVE-2017-11874...

3.1CVSS5.2AI score0.03974EPSS
Exploits1References3Affected Software2
Microsoft CVE
Microsoft CVE
added 2017/11/14 8:0 a.m.29 views

Microsoft Edge Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in Microsoft Edge as a result of how memory is accessed in code compiled by the Edge Just-In-Time JIT compiler that allows Control Flow Guard CFG to be bypassed. By itself, this CFG bypass vulnerability does not allow arbitrary code execution. Howeve...

3.1CVSS2.2AI score0.03974EPSS
Exploits1
Check Point Advisories
Check Point Advisories
added 2017/11/14 12:0 a.m.3 views

Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16409)

A memory corruption vulnerability exists in Adobe Acrobat And Reader. The vulnerability is due to an error in the image conversion engine when processing Enhanced Metafile Format EMF private data. A remote attacker may exploit this vulnerability by using the out of bounds access for unintended...

9.3CVSS2.4AI score0.0672EPSS
Exploits0
NVD
NVD
added 2017/10/22 8:29 p.m.23 views

CVE-2017-15781

XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Read Access Violation on Control Flow starting at CADImage+0x0000000000286a76."...

7.8CVSS8AI score0.01173EPSS
Exploits0References1
Kitploit
Kitploit
added 2017/09/19 9:0 p.m.58 views

Pharos - Static Binary Analysis Framework

The Pharos static binary analysis framework is a project of the Software Engineering Institute at Carnegie Mellon University. The framework is designed to facilitate the automated analysis of binary programs. It uses the ROSE compiler infrastructure developed by Lawrence Livermore National...

7.8AI score
Exploits0References4
Cvelist
Cvelist
added 2017/09/18 5:0 p.m.12 views

CVE-2017-14577

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "Read Access Violation on Control Flow starting at Unknown Symbol @ 0x0000000003aa7cef called from Unknown Symbol @ 0x0000000004aa024d."...

7.9AI score0.00364EPSS
Exploits0References1
NVD
NVD
added 2017/09/13 1:29 a.m.18 views

CVE-2017-8716

Windows Control Flow Guard in Microsoft Windows 10 Version 1703 allows an attacker to run a specially crafted application to bypass Control Flow Guard, due to the way that Control Flow Guard handles objects in memory, aka "Windows Security Feature Bypass Vulnerability"...

5.3CVSS5.3AI score0.01437EPSS
Exploits0References3
OSV
OSV
added 2017/09/13 1:29 a.m.7 views

CVE-2017-8716

Windows Control Flow Guard in Microsoft Windows 10 Version 1703 allows an attacker to run a specially crafted application to bypass Control Flow Guard, due to the way that Control Flow Guard handles objects in memory, aka "Windows Security Feature Bypass Vulnerability"...

5.3CVSS5.8AI score0.01437EPSS
Exploits0References3
Prion
Prion
added 2017/09/13 1:29 a.m.18 views

Security feature bypass

Windows Control Flow Guard in Microsoft Windows 10 Version 1703 allows an attacker to run a specially crafted application to bypass Control Flow Guard, due to the way that Control Flow Guard handles objects in memory, aka "Windows Security Feature Bypass Vulnerability"...

4.6CVSS5.4AI score0.01437EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2017/09/13 1:0 a.m.23 views

CVE-2017-8716

Windows Control Flow Guard in Microsoft Windows 10 Version 1703 allows an attacker to run a specially crafted application to bypass Control Flow Guard, due to the way that Control Flow Guard handles objects in memory, aka "Windows Security Feature Bypass Vulnerability"...

5.9AI score0.01437EPSS
Exploits0References3
Rows per page
Query Builder