KaiOS Gecko Component Denial of Service Vulnerability in Nokia 8810 4G Devices

The Nokia 8810 4G is a generation of banana model phones. A security vulnerability exists in the Gecko component of KaiOS version 2.5 10.05 on Nokia 8810 4G devices. The vulnerability can be exploited by an attacker to execute code or cause a denial of service with the help of a specially crafted...

Google Chrome DevTools Injection Vulnerability

Google Chrome is the American Google Google company's a Web browser. Devtools is one of the development and debugging tools. A security vulnerability exists in DevTools in versions of Google Chrome prior to 72.0.3626.81, which arises from the program not adequately validating untrusted input. The...

Microsoft Windows GDI Remote Code Execution Vulnerability (CNVD-2019-16510)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Graphics Device Interface GDI is one of the graphic device interfaces. A remote co...

Google Chrome Site Isolation Information Disclosure Vulnerability

Google Chrome is a web browser developed by Google Inc. and Site Isolation is one of the security threat protection components. A security vulnerability exists in Site Isolation in Google Chrome versions prior to 71.0.3578.80. The vulnerability can be exploited by remote attackers to bypass the...

Unspecified Vulnerability in Google Chrome Shell Integration

Google Chrome is a web browser developed by Google.Shell Integration is one of the Shell Integration components. A security vulnerability exists in Shell Integration in Google Chrome versions prior to 71.0.3578.80, which is caused by the program failing to adequately validate an external protocol...

Google Chrome Unauthorized Access Vulnerability

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in Google Chrome versions prior to 70.0.3538.67. A remote attacker can exploit the vulnerability to gain unauthorized access to the system with the help of specially crafted HTML pages...

Foxit Reader and Foxit PhantomPDF for Windows Memory Misreference Vulnerability (CNVD-2018-25201)

Foxit Reader for Windows is a Windows-based PDF document reader from China's Foxit Foxit Software Corporation.Foxit PhantomPDF for Windows is its commercial version. A memory misreference vulnerability exists in the handling of the display attribute of the button in Foxit Reader 9.2.0.9297 and...

Google Chrome Address Bar Spoofing Vulnerability (CNVD-2018-20745)

Google Chrome is a web browser developed by Google, Inc. and Omnibox is a real-time search engine. A security vulnerability exists in Omnibox in versions of Google Chrome prior to 64.0.3282.119. A remote attacker can exploit this vulnerability to spoof the content of Omnibox URL bar with the help...

The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge and Internet Explorer allows a perpetrator to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge and Internet Explorer is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted web pages, applications, or Microsoft Offi...

Google Chrome Security Bypass Vulnerability (CNVD-2019-03619)

Google Chrome is a web browser developed by Google Inc. Blink is a browser layout engine rendering engine jointly developed by Google Inc. and Opera Software of Norway. A security vulnerability exists in Blink in versions of Google Chrome prior to 69.0.3497.81. The vulnerability can be exploited ...

Google Chrome Chromecast Unauthorized Access Vulnerability

Google Chrome is a web browser developed by Google, Inc.Chromecast is one of the plug-ins for connecting to your TV. A security vulnerability exists in Chromecast in versions prior to Google Chrome 63.0.3239.84, which stems from the program performing insecure navigation. A remote attacker could...

PT-2018-1475 · Microsoft · Chakracore +1

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is caused by a buffer overflow in the ChakraCore scripting engine's memory, allowing a remote attacker to execute arbitrary code using a specially crafted web page. This...

CVE-2018-14285

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

The vulnerability of VBScript script handlers in Windows operating systems allows attackers to execute arbitrary code.

The vulnerability of VBScript script handlers in Windows operating systems arises from the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted web page or document...

Vulnerability of ChakraCore JavaScript script handlers and Microsoft Edge browsers: caused by operations beyond the buffer in memory, allowing attackers to execute arbitrary code.

The vulnerability of the ChakraCore JavaScript script handler and the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted web page content...

The vulnerability of the ChakraCore JavaScript script handler and the Microsoft Edge browser arises from an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the ChakraCore JavaScript script handler and the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted web page content...

Kingsoft WPS Office Denial of Service Vulnerability

Kingsoft WPS Office is an office software suite from the Chinese company Kingsoft, commonly used components include Writer word processing, Spreadsheets spreadsheets and Presentation presentations. A security vulnerability exists in the 'WStr::allociostrdata' function of the kso.dll file in...

The vulnerabilities of Microsoft Edge and Internet Explorer involve improper memory management by JavaScript mechanisms when displaying content, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft Edge and Internet Explorer relates to the improper handling of memory objects by JavaScript mechanisms when displaying content. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially...

DEBIAN-CVE-2017-7041

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote...

Google Chrome Skia Heap Overflow Vulnerability

Google Chrome is a web browser developed by Google Inc. in the United States. Google Chrome Skia suffers from a heap overflow vulnerability that allows remote attackers to exploit this vulnerability by submitting a special WEB page and tricking the user into parsing it, which can crash the...