Lucene search
+L

1699 matches found

BDU FSTEC
BDU FSTEC
added 2020/09/24 12:00 a.m.12 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to the writing of data beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

9.3CVSS6.5AI score0.02236EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/09/24 12:00 a.m.13 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to the writing of data beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

7.6CVSS6.5AI score0.02236EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/09/24 12:00 a.m.13 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to the writing of data beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

7.6CVSS6.5AI score0.02067EPSS
SaveExploits0References2
OSV
OSV
added 2020/08/17 7:15 p.m.7 views

CVE-2020-1555

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

8.8CVSS8AI score0.0451EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/08/12 12:00 a.m.12 views

Microsoft Edge PDF Reader Remote Code Execution Vulnerability (CNVD-2020-61586)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A remote code execution vulnerability exists in Microsoft Edge PDF Reader, which stems from the program failing to properly handle objects in memory. An attacker can exploit the...

7.6CVSS8.2AI score0.0311EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2020/08/11 2:22 p.m.8 views

Google Chrome Bug Could Let Hackers Bypass CSP Protection; Update Web Browsers

If you haven't recently updated your Chrome, Opera, or Edge web browser to the latest available version, it would be an excellent idea to do so as quickly as possible. Cybersecurity researchers on Monday disclosed details about a zero-day flaw in Chromium-based web browsers for Windows, Mac and...

6.5CVSS7.3AI score0.1132EPSS
SaveExploits5
Positive Technologies
Positive Technologies
added 2020/08/09 12:00 a.m.6 views

PT-2020-3975 · Microsoft · Edge +2

Name of the Vulnerable Software and Affected Versions: Windows Text Service Module affected versions not specified Description: A remote code execution issue exists due to improper memory handling by the Windows Text Service Module, allowing an attacker to gain execution on a victim system. This...

7.6CVSS7.9AI score0.03264EPSS
SaveExploits0References6
CNVD
CNVD
added 2020/08/07 12:00 a.m.10 views

Microsoft Edge Elevation of Privilege Vulnerability (CNVD-2020-61588)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A security vulnerability exists in Microsoft Edge based on Chromium, which stems from the program failing to prompt a warning message to the user when downloading a DLL file. The...

6.5AI score
SaveExploits0References1
CNVD
CNVD
added 2020/07/17 12:00 a.m.10 views

Microsoft Edge PDF Information Disclosure Vulnerability

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. An information disclosure vulnerability exists in Microsoft Edge PDF Reader, which arises from the program's failure to properly handle objects in memory. The vulnerability can be exploit...

6.5CVSS6AI score0.05294EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/07/03 12:00 a.m.14 views

The vulnerability in Microsoft Edge web browser involves redirecting URLs to unreliable websites, allowing attackers to compromise the confidentiality and integrity of protected information.

The vulnerability in Microsoft Edge web browser is related to the redirection of URLs to unreliable websites. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the information being protected...

6.1CVSS6.4AI score0.01811EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2020/06/26 12:00 a.m.9 views

The vulnerability in the Microsoft Edge web browser involves the redirection of URLs to insecure websites, allowing attackers to perform spear-phishing attacks.

The vulnerability in the Microsoft Edge web browser is related to the redirection of URLs to insecure websites. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

4.3CVSS6.3AI score0.02061EPSS
SaveExploits0References2
CNVD
CNVD
added 2020/06/22 12:00 a.m.4 views

Memory Corruption Vulnerability in ChakraCore

ChakraCore is the core part of an open source ChakraJavaScript scripting engine used in the Edge browser or as a separate JavaScript engine . A memory corruption vulnerability exists in ChakraCore, which can be exploited by attackers to cause a denial of service...

6.6AI score
SaveExploits0
OSV
OSV
added 2020/06/12 2:15 p.m.5 views

CVE-2020-9633

Adobe Flash Player Desktop Runtime 32.0.0.371 and earlier, Adobe Flash Player for Google Chrome 32.0.0.371 and earlier, and Adobe Flash Player for Microsoft Edge and Internet Explorer 32.0.0.330 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code...

9.8CVSS7.7AI score0.0756EPSS
SaveExploits0References2
CNVD
CNVD
added 2020/06/10 12:00 a.m.11 views

Microsoft ChakraCore and Edge Remote Code Execution Vulnerability (CNVD-2020-37835)

Microsoft ChakraCore and Microsoft Edge are both products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, and is also available as a standalone JavaScript engine. Microsoft Edge is a web browser that comes with Windows...

9.3CVSS7.8AI score0.08642EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/06/10 12:00 a.m.8 views

Microsoft Edge Information Leakage Vulnerability (CNVD-2020-61592)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. An information disclosure vulnerability exists in the way cross-origin requests are handled in Microsoft Edge. An attacker could exploit the vulnerability to determine the source of all w...

5.3CVSS6.1AI score0.0377EPSS
SaveExploits0References1
OSV
OSV
added 2020/05/21 11:15 p.m.4 views

CVE-2020-1037

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'...

7.5CVSS7.7AI score0.02165EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/05/15 12:00 a.m.8 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, related to errors in memory object handling, allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

7.6CVSS7AI score0.13303EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2020/05/13 12:00 a.m.14 views

Microsoft Edge Elevation of Privilege Vulnerability (CNVD-2020-61595)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. An elevation of privilege vulnerability exists in Microsoft Edge that stems from the program failing to properly enforce cross-domain policies. An attacker could exploit the vulnerability...

8.1CVSS6.6AI score0.02087EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/05/13 12:00 a.m.9 views

Microsoft ChakraCore and Edge Remote Code Execution Vulnerability (CNVD-2020-72698)

Microsoft ChakraCore and Microsoft Edge are both products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, and is also available as a standalone JavaScript engine. Microsoft Edge is a web browser that comes with Windows...

7.6CVSS7.1AI score0.02165EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/03/25 12:00 a.m.18 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code in the context of the current user.

The vulnerability of the ChakraCore JavaScript script handler in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a...

4.2CVSS7.2AI score0.07871EPSS
SaveExploits0References3
Rows per page
Query Builder