Lucene search
+L

1628 matches found

BDU FSTEC
BDU FSTEC
added 2019/02/26 12:0 a.m.5 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, caused by an operation that goes beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a...

4.2CVSS7.9AI score0.19439EPSS
SaveExploits0References3
CNVD
CNVD
added 2019/02/14 12:0 a.m.6 views

Microsoft Edge and ChakraCore Buffer Overflow Vulnerability (CNVD-2019-27383)

Microsoft ChakraCore and Microsoft Edge are both products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, and is also available as a standalone JavaScript engine. Microsoft Edge is a web browser that comes with Windows...

7.6CVSS7.5AI score0.11107EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/02/14 12:0 a.m.33 views

Microsoft Edge and ChakraCore Buffer Overflow Vulnerability (CNVD-2019-27384)

Microsoft ChakraCore and Microsoft Edge are both products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, and is also available as a standalone JavaScript engine. Microsoft Edge is a web browser that comes with Windows...

7.6CVSS7.5AI score0.11107EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/02/14 12:0 a.m.5 views

Microsoft Edge Information Disclosure Vulnerability (CNVD-2019-42798)

Microsoft Edge is a web browser from Microsoft USA that is the default browser that comes with the Windows 10 operating system. An information disclosure vulnerability exists in Microsoft Edge. An attacker can exploit this vulnerability with the help of memory addresses of created objects to obta...

4.3CVSS6AI score0.05432EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/02/14 12:0 a.m.4 views

Microsoft Edge and ChakraCore Buffer Overflow Vulnerability (CNVD-2019-27392)

Microsoft ChakraCore and Microsoft Edge are both products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, and is also available as a standalone JavaScript engine. Microsoft Edge is a web browser that comes with Windows...

7.6CVSS7.5AI score0.11107EPSS
SaveExploits0References1
Microsoft KB
Microsoft KB
added 2019/02/12 8:0 a.m.301 views

Description of the security update for SharePoint Server 2019: March 12, 2019

None None...

9.8CVSS6.8AI score0.99825EPSS
SaveExploits30
BDU FSTEC
BDU FSTEC
added 2019/01/22 12:0 a.m.7 views

Microsoft Edge browser’s vulnerability, related to memory object handling errors, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Edge exists due to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

4.2CVSS7.6AI score0.09549EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/01/18 12:0 a.m.10 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the ChakraCore JavaScript script handler in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...

4.2CVSS7.9AI score0.82902EPSS
SaveExploits10References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/15 12:0 a.m.7 views

Microsoft Edge’s browser vulnerability, related to errors in request handling mechanisms, allows for breaches of the confidentiality and integrity of protected information.

The vulnerability of Microsoft Edge is related to errors in the request processing mechanisms. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of protected information through a specially crafted web page...

5.8CVSS6.1AI score0.03467EPSS
SaveExploits0References3
The Hacker News
The Hacker News
added 2019/01/09 7:33 a.m.2 views

Microsoft Patch Tuesday — January 2019 Security Updates Released

Microsoft has issued its first Patch Tuesday for this year to address 49 CVE-listed security vulnerabilities in its Windows operating systems and other products, 7 of which are rated critical, 40 important and 2 moderate in severity. Just one of the security vulnerabilities patched by the tech...

9.3CVSS7.9AI score0.24305EPSS
SaveExploits2
CNVD
CNVD
added 2019/01/09 12:0 a.m.4 views

Microsoft Edge Chakra Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2019-00762)

Microsoft Windows 10 is an operating system released by Microsoft Corporation in the U.S. Edge is one of the browsers that comes with the system.ChakraCore is the core of an open source JavaScript engine used in Edge, and can also be used as a standalone JavaScript engine. Microsoft Edge Chakra...

7.6CVSS7.2AI score0.69455EPSS
SaveExploits4References1
CNVD
CNVD
added 2019/01/09 12:0 a.m.5 views

Microsoft Edge Chakra Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2019-00761)

Microsoft Windows 10 is an operating system released by Microsoft Corporation in the U.S. Edge is one of the browsers that comes with the system.ChakraCore is the core of an open source JavaScript engine used in Edge, and can also be used as a standalone JavaScript engine. Microsoft Edge Chakra...

7.6CVSS7.2AI score0.7999EPSS
SaveExploits4References1
CNVD
CNVD
added 2019/01/09 12:0 a.m.9 views

Microsoft Edge Elevation of Privilege Vulnerability (CNVD-2019-16187)

Microsoft Windows 10 and others are operating systems released by Microsoft Corporation USA.Edge is one of the default browsers that comes with the system. An elevation of privilege vulnerability exists in the Microsoft Edge Browser Proxy COM object, which can be exploited by an attacker to eleva...

8.8CVSS7AI score0.18617EPSS
SaveExploits3References1
ThreatPost
ThreatPost
added 2019/01/08 8:49 p.m.42 views

Microsoft Issues Multiple Critical Patches for Edge Browser

Microsoft patched a bevy of critical bugs impacting its Edge browser that could allow an attacker to hijack a targeted PC simply by steering a victim to a rigged website harboring specially crafted exploit code. In all, Microsoft tackled four critical Edge vulnerabilities, part of the company’s...

9.3CVSS0.8AI score0.82902EPSS
SaveExploits20References12
BDU FSTEC
BDU FSTEC
added 2018/12/28 12:0 a.m.10 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code in the context of the current user.

The vulnerability of the ChakraCore JavaScript script handler in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, through a...

4.2CVSS7.9AI score0.10886EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/12/28 12:0 a.m.12 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code in the context of the current user.

The vulnerability of the ChakraCore JavaScript script handler in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, through a...

4.2CVSS7.9AI score0.22466EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2018/12/12 12:29 a.m.1 views

CVE-2018-8617

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8583, CVE-2018-8618,...

7.5CVSS6.3AI score0.62483EPSS
SaveExploits4References3
OSV
OSV
added 2018/12/12 12:29 a.m.1 views

CVE-2018-8624

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8583, CVE-2018-8617,...

7.5CVSS6.3AI score0.12965EPSS
SaveExploits0References2
OSV
OSV
added 2018/11/14 1:29 a.m.1 views

CVE-2018-8556

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8541, CVE-2018-8542,...

7.5CVSS7.8AI score0.14159EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2018/11/14 1:29 a.m.2 views

CVE-2018-8551

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8541, CVE-2018-8542,...

7.6CVSS6.3AI score0.14345EPSS
SaveExploits0References4
Rows per page
Query Builder