Microsoft Edge and ChakraCore Remote Memory Corruption Vulnerability (CNVD-2018-03514)

Microsoft Windows is a series of operating systems released by Microsoft.Edge is one of the browsers that comes with the system.ChakraCore is the core of an open-source JavaScript engine used in Edge, and can also be used as a stand-alone JavaScript engine. A remote memory corruption vulnerabilit...

Microsoft Edge and ChakraCore Remote Memory Corruption Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation.Edge is one of the browsers that comes with the system.ChakraCore is the core of an open source JavaScript engine used in Edge, and can also be used as a stand-alone JavaScript engine. A remote memory corruption...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

The vulnerability of the Microsoft Office software arises from an operation that goes beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Office suite is related to improper handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

CVE-2017-16608

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within exec.jsp. The issue results from the lack of proper validation of a...

Authentication flaw

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within exec.jsp. The issue results from the lack of proper validation of a...

The vulnerability in Internet Explorer, caused by an operation that goes beyond the buffer boundaries in memory, allows a malicious actor to gain the privileges of the current user.

The vulnerability of the Internet Explorer browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain privileges of the current user...

The vulnerability in Internet Explorer, caused by an operation that goes beyond the buffer boundaries in memory, allows a malicious actor to gain the privileges of the current user.

The vulnerability of the Internet Explorer browser is related to improper handling of objects in memory. Exploiting this vulnerability can allow a remote attacker to gain privileges as the current user...

The vulnerability of JavaScript ChakraCore and Microsoft Edge browsers, related to improper handling of objects in memory, allows attackers to execute arbitrary code.

The vulnerability of JavaScript ChakraCore and Microsoft Edge browsers is related to improper handling of objects in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with the privileges of the current user...

The vulnerability of JavaScript ChakraCore and Microsoft Edge browsers, related to improper handling of objects in memory, allows attackers to execute arbitrary code.

The vulnerability of JavaScript ChakraCore and Microsoft Edge browsers is related to improper handling of objects in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with the privileges of the current user...

Vulnerability of the JavaScript ChakraCore kernel and Microsoft Edge browsers, caused by operations beyond the buffer in memory, allowing attackers to gain control of the current user’s rights

The vulnerability of JavaScript ChakraCore and Microsoft Edge browsers arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain privileges of the current user...

The vulnerability of JavaScript ChakraCore and Microsoft Edge browsers, related to improper handling of objects in memory, allows attackers to execute arbitrary code.

The vulnerability of JavaScript ChakraCore and Microsoft Edge browsers is related to improper handling of objects in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with the privileges of the current user...

The vulnerability of Microsoft Excel’s spreadsheet editor lies in its improper handling of objects in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors is related to incorrect handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

Vulnerability of the JavaScript ChakraCore kernel, Internet Explorer and Microsoft Edge browsers, caused by operations beyond the buffer in memory, allowing attackers to gain control of the current user’s rights

The vulnerability in the JavaScript ChakraCore engine, as well as in browsers Internet Explorer and Microsoft Edge, arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain privileges of the current user...

Windows UAC Protection Bypass (Via Slui File Handler Hijack)

This module will bypass UAC on Windows 8-10 by hijacking a special key in the Registry under the Current User hive, and inserting a custom command that will get invoked when any binary .exe application is launched. But slui.exe is an auto-elevated binary that is vulnerable to file handler...

Microsoft Word Remote Code Execution Vulnerability (CNVD-2018-00901)

Microsoft Office 2007 and so on are the United States Microsoft Microsoft company developed office software suite of products. word is one of the set of word processing software. Word in Microsoft Office suffers from a remote code execution vulnerability that stems from the program's failure to...

Microsoft Office Memory Corruption Vulnerability (CNVD-2018-00736)

Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. There is a memory corruption vulnerability in Microsoft Office, which arises from the program's failure to...

Microsoft Office Remote Code Execution Vulnerability (CNVD-2018-00889)

Microsoft Office is a suite of office software products developed by Microsoft.Equation Editor is one of the formula editors. A remote code execution vulnerability exists in Equation Editor in Microsoft Office, which stems from the program failing to properly handle objects in memory. The...

VulnCheck KEV: CVE-2018-0802

Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for remote code execution in the context of the current user. This vulnerability is known to be chained with CVE-2018-0798...

Microsoft Edge Scripting Engine Memory Corruption (CVE-2018-0774)

A remote code execution vulnerability exists in Microsoft Edge. The vulnerability is due to the way that the scripting engine handles objects in memory in Microsoft Edge. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the curre...