Lucene search
+L

1698 matches found

OSV
OSV
added 2017/11/15 3:29 a.m.5 views

CVE-2017-11861

Microsoft Edge in Windows 10 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID i...

7.5CVSS5.8AI score0.64194EPSS
SaveExploits4References4
OSV
OSV
added 2017/11/15 3:29 a.m.5 views

CVE-2017-11862

ChakraCore and Microsoft Edge in Windows 10 1709 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from...

7.5CVSS5.8AI score0.07912EPSS
SaveExploits0References3
OSV
OSV
added 2017/11/15 3:29 a.m.3 views

CVE-2017-11874

Microsoft Edge in Microsoft Windows 10 1703, 1709, Windows Server, version 1709, and ChakraCore allows an attacker to bypass Control Flow Guard CFG to run arbitrary code on a target system, due to how Microsoft Edge handles accessing memory in code compiled by the Edge Just-In-Time JIT compiler,...

3.1CVSS6AI score0.03974EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2017/11/15 3:29 a.m.10 views

CVE-2017-11841

ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption...

7.6CVSS5.5AI score0.69802EPSS
SaveExploits25References5
OSV
OSV
added 2017/11/15 3:29 a.m.5 views

CVE-2017-11846

ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows...

7.5CVSS5.8AI score0.07701EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2017/11/15 3:29 a.m.1 views

CVE-2017-11836

ChakraCore, and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to take control of an affected system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption...

7.6CVSS5.4AI score0.69802EPSS
SaveExploits25References4
ATTACKERKB
ATTACKERKB
added 2017/11/15 3:29 a.m.2 views

CVE-2017-11843

ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an...

7.6CVSS5.5AI score0.69802EPSS
SaveExploits25References5
ATTACKERKB
ATTACKERKB
added 2017/11/15 3:29 a.m.6 views

CVE-2017-11845

Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how Microsoft Edge handles objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability"...

7.6CVSS6AI score0.0793EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2017/11/15 3:29 a.m.7 views

CVE-2017-11872

Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to force the browser to send data that would otherwise be restricted to a destination website of the attacker's choice, due to how Microsoft Edge handles redirect requests, aka "Microsoft Edge Security...

6.5CVSS5.5AI score0.07245EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2017/11/15 3:29 a.m.6 views

CVE-2017-11873

ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption...

7.6CVSS5.5AI score0.69802EPSS
SaveExploits25References5
ATTACKERKB
ATTACKERKB
added 2017/11/15 3:29 a.m.13 views

CVE-2017-11871

ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique fr...

7.6CVSS5.5AI score0.69802EPSS
SaveExploits25References4
ATTACKERKB
ATTACKERKB
added 2017/11/15 3:29 a.m.5 views

CVE-2017-11874

Microsoft Edge in Microsoft Windows 10 1703, 1709, Windows Server, version 1709, and ChakraCore allows an attacker to bypass Control Flow Guard CFG to run arbitrary code on a target system, due to how Microsoft Edge handles accessing memory in code compiled by the Edge Just-In-Time JIT compiler,...

6.5CVSS6AI score0.07245EPSS
SaveExploits1References4
OSV
OSV
added 2017/11/15 3:29 a.m.4 views

CVE-2017-11840

ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption...

7.5CVSS5.8AI score0.59642EPSS
SaveExploits4References4
BDU FSTEC
BDU FSTEC
added 2017/11/10 12:00 a.m.15 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to improper handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted web page...

7.6CVSS7.7AI score0.08761EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/11/10 12:00 a.m.9 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to improper handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted web page...

7.6CVSS7.7AI score0.6546EPSS
SaveExploits5References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/11/10 12:00 a.m.12 views

Microsoft Edge browser’s vulnerability, related to improper processing of JavaScript object instances in memory, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Edge relates to the improper handling of JavaScript objects in memory by the kernel. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted web page...

7.6CVSS7.7AI score0.08761EPSS
SaveExploits0References4
The Hacker News
The Hacker News
added 2017/10/31 9:44 p.m.11 views

Microsoft Engineer Installs Google Chrome Mid-Presentation After Edge Kept Crashing

Ever since the launch of Windows 10, Microsoft has been heavily pushing its Edge browser, claiming it to be the best web browser over its competitors like Mozilla Firefox, Opera and Google Chrome in terms of speed and battery performance. However, Microsoft must admit that most users make use of...

6.6AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2017/10/26 12:00 a.m.10 views

The vulnerability of Microsoft Edge’s JavaScript interpreter allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Edge’s JavaScript interpreter is related to improper handling of objects in memory when displaying content. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, resulting from memory corruption caused b...

9.3CVSS7.8AI score0.10144EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2017/10/25 12:00 a.m.11 views

Microsoft Edge browser’s vulnerability, related to improper handling of objects in memory, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Edge relates to improper handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user through specially crafted content...

7.6CVSS7.7AI score0.72171EPSS
SaveExploits4References6
BDU FSTEC
BDU FSTEC
added 2017/10/25 12:00 a.m.12 views

The vulnerability of the Microsoft Windows PDF Library on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the PDF library in Microsoft Edge browsers for Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user. This vulnerability can be...

7.6CVSS7.8AI score0.21531EPSS
SaveExploits0References4
Rows per page
Query Builder