Lucene search
+L

1698 matches found

OSV
OSV
added 2018/10/10 1:29 p.m.4 views

CVE-2018-8511

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8503, CVE-2018-8505,...

7.5CVSS7.8AI score0.14227EPSS
SaveExploits0References3
OSV
OSV
added 2018/10/10 1:29 p.m.4 views

CVE-2018-8510

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8503, CVE-2018-8505,...

7.5CVSS7.8AI score0.14227EPSS
SaveExploits0References3
CNVD
CNVD
added 2018/10/10 12:00 a.m.9 views

Microsoft Edge Security Bypass Vulnerability (CNVD-2019-00961)

Microsoft Windows 10 and Windows Server 2016 are both products of Microsoft Corporation.Microsoft Windows 10 is a set of operating systems for personal computers.Windows Server 2016 is a set of server operating systems.Edge is one of the a default browser that comes with the system. A security...

5.8CVSS5.1AI score0.03451EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/10/10 12:00 a.m.25 views

Microsoft Edge Chakra Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2018-21216)

Edge is the default browser that comes with Microsoft's operating systems. A bad remote memory corruption vulnerability exists in Microsoft Edge Chakra Scripting Engine. An attacker can exploit this vulnerability to execute arbitrary code in the context of the currently logged in user. A failed...

7.6CVSS7.5AI score0.14227EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/10/10 12:00 a.m.8 views

Microsoft Edge Chakra Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2018-21219)

Microsoft Windows is a series of operating systems released by Microsoft Corporation USA.Edge is a browser built by Microsoft for Windows 10. A remote memory corruption vulnerability exists in Microsoft Edge Chakra Scripting Engine. An attacker can exploit this vulnerability to execute arbitrary...

7.6CVSS7.4AI score0.14227EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/10/10 12:00 a.m.11 views

Microsoft Edge Security Bypass Vulnerability (CNVD-2019-00960)

Microsoft Windows 10 and Windows Server 2016 are both products of Microsoft Corporation.Microsoft Windows 10 is a set of operating systems for personal computers.Windows Server 2016 is a set of server operating systems.Edge is one of the a default browser that comes with the system. A security...

4.3CVSS6.2AI score0.05473EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/10/10 12:00 a.m.13 views

Microsoft Edge Chakra Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2018-21213)

Edge is the default browser that comes with Microsoft's operating systems. A remote memory corruption vulnerability exists in Microsoft Edge Chakra Scripting Engine. An attacker can exploit this vulnerability to execute arbitrary code in the context of the currently logged in user. A failed attac...

7.6CVSS7.5AI score0.14227EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/10/10 12:00 a.m.11 views

Microsoft ChakraCore Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2018-21236)

Microsoft ChakraCore is a core part of an open source JavaScript engine used in Edge. A remote memory corruption vulnerability exists in Microsoft ChakraCore Scripting Engine. An attacker could exploit this issue to execute arbitrary code in the context of the currently logged in user. A failed...

7.6CVSS7.6AI score0.14227EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/10/10 12:00 a.m.14 views

Microsoft Edge Chakra Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2018-21218)

Edge is the default browser that comes with Microsoft's operating systems.ChakraCore is the core of an open source JavaScript engine used in Edge, and can also be used as a standalone JavaScript engine. A remote memory corruption vulnerability exists in the Microsoft Edge Chakra Scripting Engine...

7.6CVSS7.4AI score0.14227EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2018/10/09 6:40 p.m.442 views

Microsoft October Patch Tuesday Fixes 12 Critical Vulnerabilities

Microsoft has just released its latest monthly Patch Tuesday updates for October 2018, fixing a total of 49 security vulnerabilities in its products. This month's security updates address security vulnerabilities in Microsoft Windows, Edge Browser, Internet Explorer, MS Office, MS Office Services...

9.3CVSS1.8AI score0.70042EPSS
SaveExploits11
BDU FSTEC
BDU FSTEC
added 2018/09/18 12:00 a.m.12 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, through a specially crafted web page...

10CVSS8.2AI score0.69019EPSS
SaveExploits3References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/09/18 12:00 a.m.17 views

The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge and Internet Explorer allows a perpetrator to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge and Internet Explorer is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted web pages, applications, or Microsoft Offi...

7.6CVSS8.2AI score0.13076EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2018/09/18 12:00 a.m.11 views

The vulnerability of the PDF Reader component of the Microsoft Edge browser, which allows a hacker to execute arbitrary code.

The vulnerability of the PDF Reader component of the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using specially crafted PDF-format content...

4.2CVSS8.2AI score0.42575EPSS
SaveExploits0References2
OSV
OSV
added 2018/09/13 12:29 a.m.5 views

CVE-2018-8465

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8367, CVE-2018-8466,...

7.5CVSS6.3AI score0.14633EPSS
SaveExploits0References3
OSV
OSV
added 2018/09/13 12:29 a.m.4 views

CVE-2018-8467

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8367, CVE-2018-8465,...

7.5CVSS6.3AI score0.69019EPSS
SaveExploits3References4
ATTACKERKB
ATTACKERKB
added 2018/09/13 12:29 a.m.8 views

CVE-2018-8467

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8367, CVE-2018-8465,...

7.6CVSS6.3AI score0.69019EPSS
SaveExploits6References5
ATTACKERKB
ATTACKERKB
added 2018/09/13 12:29 a.m.5 views

CVE-2018-8457

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 11, Microsoft Edge, Internet Explorer 10. This CVE ID is unique from CVE-2018-8354,...

7.6CVSS6.3AI score0.14558EPSS
SaveExploits0References4
CNVD
CNVD
added 2018/09/13 12:00 a.m.7 views

Microsoft Internet Explorer and Edge Memory Corruption Vulnerability (CNVD-2018-18626)

Microsoft Windows Server 2012 and others are a series of operating systems released by Microsoft.Internet Explorer IE and Edge are web browsers developed by Microsoft.IE is the default browser that came with the operating system before Windows 10.Edge is the default browser that came with the...

7.6CVSS7.7AI score0.13076EPSS
SaveExploits0References1
ThreatPost
ThreatPost
added 2018/09/12 4:17 p.m.24 views

Apple Yet to Patch Safari Browser Address Bar Spoofing Flaw

A browser address bar spoofing flaw was found by researchers this week in Safari – and Apple has yet issue a patch for the flaw. Researcher Rafay Baloch on Monday disclosed two proof-of-concepts revealing how vulnerabilities in Edge browser 42.17134.1.0 and Safari iOS 11.3.1 could be abused to...

4.3CVSS6.1AI score0.06846EPSS
SaveExploits0References6
CNVD
CNVD
added 2018/09/12 12:00 a.m.16 views

Microsoft ChakraCore and Edge Remote Code Execution Vulnerability (CNVD-2018-26983)

Microsoft Windows 10 and Windows Server 2019 are both products of the American company Microsoft. The former is a set of operating systems for personal computers, and the latter is a set of server operating systems.Edge is the default browser that comes with one of these systems.ChakraCore is the...

7.6CVSS7.9AI score0.14558EPSS
SaveExploits0References1
Rows per page
Query Builder