Internet Explorer Buffer Overflow

The vulnerability of the Internet Explorer browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code with the privileges of the current user, through a specially created...

ChakraCore Memory Object Handling Code Execution

The vulnerability of the ChakraCore JavaScript script handler is related to errors in memory object handling mechanisms. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with the privileges of the current user...

Microsoft Excel Remote Code Execution Vulnerability (CNVD-2019-02784)

Microsoft Excel is one of the components of Microsoft's office software Microsoft office, a spreadsheet software written and run by Microsoft for computers with Windows and Apple Macintosh operating systems. A remote code execution vulnerability exists in Microsoft Excel. The vulnerability stems...

Microsoft Outlook Remote Code Execution Vulnerability (CNVD-2019-05901)

Microsoft Outlook is an e-mail client software bundled with the Office suite from Microsoft USA. The software manages e-mail, contacts, calendars, and more. A remote code execution vulnerability exists in Microsoft Outlook, which arises from the program failing to properly handle objects in memor...

Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-07224)

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the EditCurrentUser.jsp page in Infovista VistaPortal SE version 5.1 build 51029, which can be exploited by remote attackers to inject arbitrary web script or HTML with the help ...

VulnCheck KEV: CVE-2018-0798

Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Office Memory Corruption Vulnerability"...

Epic Games Launcher Protocol Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Visual Studio with tools for Unreal Engine development installed. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...

Microsoft Project 2010 Remote Code Execution Vulnerability (KB4022147)

This host is missing a critical security update according to Microsoft KB4022147 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Windows Search Remote Code Execution Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft.Search is one of the search components. A remote code execution vulnerability exists in Microsoft Windows Search. An attacker can exploit this vulnerability to execute arbitrary code in the context of the current user. A...

Microsoft Project Remote Code Execution Vulnerability

Microsoft Project is a suite of project management solutions for project portfolio management PPM and day-to-day work from Microsoft USA. The solution supports the allocation of resources to tasks, progress tracking and budget management. A remote code execution vulnerability exists in Microsoft...

Microsoft Excel Remote Code Execution Vulnerability (CNVD-2018-24092)

Microsoft Excel is a spreadsheet processing software in the Office suite of the American Microsoft Microsoft company. A remote code execution vulnerability exists in Microsoft Excel, which arises from the program's failure to properly handle objects in memory. A remote attacker can exploit the...

Microsoft Word Remote Code Execution Vulnerability (CNVD-2018-23753)

Microsoft Word is a word processing software in the Office suite of the American Microsoft Microsoft company. A remote code execution vulnerability exists in Microsoft Word, which arises from the program failing to properly handle objects in memory. A remote attacker can exploit the vulnerability...

Microsoft Outlook Remote Code Execution Vulnerability (CNVD-2018-23151)

Microsoft Outlook is one of the components of the Microsoft Office software suite, which expands on the functionality of Outlook express that comes with Windows.Outlook has many features that can be used to send and receive e-mail, manage contact information, keep a diary, organize schedules, and...

Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CNVD-2018-23217)

Edge is Microsoft's browser for Windows 10. Microsoft Edge suffers from a Chakra Scripting Engine memory corruption vulnerability. The vulnerability stems from a problem in the way the Chakra scripting engine handles objects in Microsoft Edge memory. A remote attacker could exploit the...

Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CNVD-2018-23263)

Edge is Microsoft's browser for Windows 10. Microsoft Edge suffers from a Chakra Scripting Engine memory corruption vulnerability. The vulnerability stems from a problem in the way the Chakra scripting engine handles objects in Microsoft Edge memory. A remote attacker could exploit the...

Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CNVD-2018-23214)

Edge is Microsoft's browser for Windows 10. Microsoft Edge suffers from a Chakra Scripting Engine memory corruption vulnerability. The vulnerability stems from a problem in the way the Chakra scripting engine handles objects in Microsoft Edge memory. A remote attacker could exploit the...

Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CNVD-2018-23216)

Edge is Microsoft's browser for Windows 10. Microsoft Edge suffers from a Chakra Scripting Engine memory corruption vulnerability. The vulnerability stems from a problem in the way the Chakra scripting engine handles objects in Microsoft Edge memory. A remote attacker could exploit the...

Microsoft Outlook Remote Code Execution Vulnerability (CNVD-2018-23153)

Microsoft Outlook is one of the components of the Microsoft Office software suite, which expands on the functionality of Outlook express that comes with Windows.Outlook has many features that can be used to send and receive e-mail, manage contact information, keep a diary, organize schedules, and...

Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CNVD-2018-23262)

Edge is Microsoft's browser for Windows 10. Microsoft Edge suffers from a Chakra Scripting Engine memory corruption vulnerability. The vulnerability stems from a problem in the way the Chakra scripting engine handles objects in Microsoft Edge memory. A remote attacker could exploit the...

Microsoft Outlook Remote Code Execution Vulnerability (CNVD-2018-23152)

Microsoft Outlook is one of the components of the Microsoft Office software suite, which expands on the functionality of Outlook express that comes with Windows.Outlook has many features that can be used to send and receive e-mail, manage contact information, keep a diary, organize schedules, and...