Microsoft Word 2016 Remote Code Execution Vulnerability (KB4461504)

This host is missing an important security update according to Microsoft KB4461504 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Security Updates for Microsoft Excel Products (November 2018)

The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the...

VulnCheck KEV: CVE-2017-11869

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current...

zzcms SQL Injection Vulnerability (CNVD-2018-26019)

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the zs/zslist.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to obtain the current user name of mysql with the help of pxzs cookie...

Microsoft Yammer Desktop Application Remote Code Execution Vulnerability

Microsoft Yammer Desktop Application is a social networking service for businesses from Microsoft USA. A remote code execution vulnerability exists in Microsoft Yammer Desktop Application. A remote attacker can exploit this vulnerability to run arbitrary code in the context of the current user...

Microsoft Word Code Execution

The vulnerability of Microsoft Word relates to errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted PDF file...

Microsoft Excel Remote Code Execution Vulnerability (CNVD-2019-00635)

Microsoft Excel is a spreadsheet processing software in the Office suite of the American Microsoft Microsoft company. A remote code execution vulnerability exists in Microsoft Excel due to the software's failure to properly handle objects in Protected View. A remote attacker could exploit the...

Microsoft ChakraCore Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2018-21212)

ChakraCore is used in one of the open source core components of the JavaScript engine , can also be used as a separate JavaScript engine . A remote memory corruption vulnerability exists in Microsoft ChakraCore Scripting Engine. An attacker can exploit this vulnerability to execute arbitrary code...

Microsoft Windows Theme API Remote Code Execution Vulnerability

Microsoft Windows 10 and others are a set of new generation cross-platform operating systems released by Microsoft.Windows Theme API is one of the Windows system theme components. A remote code execution vulnerability exists in Microsoft Windows Theme API, which is caused by the program failing t...

Microsoft Excel Code Execution

The vulnerability of Microsoft Excel in the Microsoft Office 2016 software suite is related to errors in processing objects in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code in the context of the current user...

ChakraCore Microsoft Edge RCE

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

Internet Explorer Memory Object Handling Code Execution

The vulnerability of the Internet Explorer browser is related to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the context of the current user...

Microsoft Word Remote Code Execution Vulnerability (CNVD-2018-18623)

Microsoft Word is a word processing software in the Office suite of the American Microsoft Microsoft company. A remote code execution vulnerability exists in Microsoft Word, which can be exploited by a remote attacker to execute arbitrary code in the context of the current user...

Microsoft ChakraCore and Edge Remote Code Execution Vulnerability (CNVD-2018-26983)

Microsoft Windows 10 and Windows Server 2019 are both products of the American company Microsoft. The former is a set of operating systems for personal computers, and the latter is a set of server operating systems.Edge is the default browser that comes with one of these systems.ChakraCore is the...

Microsoft ChakraCore and Edge Remote Code Execution Vulnerability (CNVD-2018-26971)

Microsoft Windows 10 and Windows Server 2019 are both products of the American company Microsoft. The former is a set of operating systems for personal computers, and the latter is a set of server operating systems.Edge is the default browser that comes with one of these systems.ChakraCore is the...

Microsoft ChakraCore Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2018-21204)

Microsoft ChakraCore is a core part of an open source JavaScript engine used in Edge. A remote memory corruption vulnerability exists in Microsoft ChakraCore Scripting Engine. A remote attacker can exploit this vulnerability to corrupt memory by executing arbitrary code in the context of the...

Internet Explorer Memory Corruption Vulnerability

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabilit...

Adobe Acrobat Reader DC (Continuous Track) Multiple Arbitrary Code Execution Vulnerabilities (APSB18-29) - Mac OS X

Adobe Acrobat Reader DC Continuous Track is prone to multiple arbitrary code execution vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Microsoft Internet Explorer and Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2018-16175)

Internet Explorer is a web browser from Microsoft. Formerly known as Microsoft Internet Explorer prior to version 6 and Windows Internet Explorer versions 7, 8, 9, 10, and 11, or IE for short.Edge is a browser built by Microsoft for Windows 10, characterized by being fast and secure. A scripting...

Microsoft ChakraCore Scripting Engine Remote Memory Corruption Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft , ChakraCore is used in one of the open source core components of the JavaScript engine can also be used as a separate JavaScript engine . A remote memory corruption vulnerability exists in the Microsoft ChakraCore Scripting...