Lucene search
+L

1628 matches found

ThreatPost
ThreatPost
added 2018/07/10 7:50 p.m.90 views

Microsoft Fixes 17 Critical Bugs in July Patch Tuesday Release

UDPATE Browser vulnerabilities took center stage in Microsoft’s July Patch Tuesday security bulletin. In all, Microsoft patched 17 bugs rated critical, with ten tied to scripting engine flaws impacting Internet Explorer. In total, Microsoft is reporting 53 bugs: 17 critical, 34 rated important, o...

9.3CVSS1.1AI score0.37951EPSS
SaveExploits8References14
The Hacker News
The Hacker News
added 2018/07/10 6:47 p.m.3 views

Microsoft Releases Patch Updates for 53 Vulnerabilities In Its Software

It's time to gear up your systems and software for the latest July 2018 Microsoft security patch updates. Microsoft today released security patch updates for 53 vulnerabilities, affecting Windows, Internet Explorer IE, Edge, ChakraCore, .NET Framework, ASP.NET, PowerShell, Visual Studio, and...

10CVSS7.9AI score0.75339EPSS
SaveExploits16
Positive Technologies
Positive Technologies
added 2018/07/10 12:0 a.m.3 views

PT-2018-2017 · Microsoft · Internet Explorer 11 +2

Name of the Vulnerable Software and Affected Versions: Microsoft Edge and Internet Explorer 11 affected versions not specified Description: The issue is related to errors in the mechanisms for processing objects in memory in Microsoft browsers. Exploitation of this issue could allow a remote...

7.6CVSS8.2AI score0.70028EPSS
SaveExploits4References18
BDU FSTEC
BDU FSTEC
added 2018/06/29 12:0 a.m.8 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, caused by an operation that goes beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...

7.6CVSS8.3AI score0.1545EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/06/29 12:0 a.m.7 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, caused by an operation that goes beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...

7.6CVSS8.3AI score0.1545EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/06/29 12:0 a.m.9 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, caused by an operation that goes beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.6CVSS8.2AI score0.50503EPSS
SaveExploits5References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/06/22 12:0 a.m.8 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

7.6CVSS8.3AI score0.114EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2018/06/15 12:0 a.m.6 views

Microsoft Chakra Scripting Engine Remote Memory Corruption Vulnerability

Microsoft ChakraCore is the core of the JavaScript engine used by Edge, a web browser from Microsoft. A remote code execution vulnerability exists in Microsoft ChakraCore. The vulnerability can be exploited by a remote attacker to execute arbitrary code in the context of the current user,...

7.6CVSS7.7AI score0.11168EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/06/13 12:0 a.m.6 views

Microsoft Edge Memory Corruption Vulnerability (CNVD-2018-11918)

Microsoft Edge is Microsoft's built-in browser in its latest operating system, Windows 10. A memory corruption vulnerability exists in Microsoft Edge. The vulnerability stems from the program failing to properly access objects in memory. A remote attacker can exploit the vulnerability with the he...

7.6CVSS7.7AI score0.15214EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2018/06/07 12:0 a.m.13 views

The vulnerability of Microsoft Edge browser and the ChakraCore JavaScript engine lies in memory object handling errors, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft Edge browser and the JavaScript scenario handler ChakraCore arises due to an operation going beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...

7.6CVSS8.4AI score0.15556EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2018/05/31 12:0 a.m.10 views

The vulnerability of Microsoft Edge browser and the ChakraCore JavaScript engine lies in memory object handling errors, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft Edge browser and the JavaScript scenario handler ChakraCore arises due to an operation going beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...

7.6CVSS8.4AI score0.15556EPSS
SaveExploits0References4
Microsoft KB
Microsoft KB
added 2018/05/21 12:0 a.m.6 views

May 21, 2018—KB4103714 (OS Build 16299.461)

None None...

6.1AI score
SaveExploits0
OSV
OSV
added 2018/05/13 8:29 p.m.10 views

CVE-2018-10678

MyBB 1.8.15, when accessed with Microsoft Edge, mishandles 'target="blank" rel="noopener"' in A elements, which makes it easier for remote attackers to conduct redirection attacks...

6.1CVSS5.8AI score0.0103EPSS
SaveExploits0References2
CNVD
CNVD
added 2018/05/09 12:0 a.m.23 views

Microsoft Browser Information Disclosure Vulnerability

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. Internet Explorer IE and Edge are web browsers that come with Windows operating systems. An information disclosure vulnerability exists in Microsoft IE 11 and Edge, which arises from a...

4.3CVSS6.1AI score0.06141EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/05/09 12:0 a.m.19 views

Microsoft ChakraCore and Edge Remote Code Execution Vulnerability (CNVD-2018-10201)

Microsoft Windows 10 and Windows Server 2016 are both products of the American company Microsoft. The former is a set of operating systems for personal computers, and the latter is a set of server operating systems.Edge is the default browser that comes with one of these systems.ChakraCore is the...

7.6CVSS8.3AI score0.1545EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/05/09 12:0 a.m.25 views

Microsoft ChakraCore and Edge Remote Code Execution Vulnerability (CNVD-2018-10207)

Microsoft Windows 10 is a suite of operating systems from Microsoft Corporation.Edge is one of the default browsers that comes with the system.ChakraCore is the core of an open source JavaScript engine used in Edge, and is also available as a standalone JavaScript engine.... A remote code executi...

7.6CVSS8.2AI score0.1545EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/05/09 12:0 a.m.30 views

Microsoft ChakraCore and Edge Remote Code Execution Vulnerability (CNVD-2018-10208)

Microsoft Windows 10 is a suite of operating systems from Microsoft Corporation.Edge is one of the default browsers that comes with the system.ChakraCore is the core of an open source JavaScript engine used in Edge, and is also available as a standalone JavaScript engine.... A remote code executi...

7.6CVSS8.3AI score0.5142EPSS
SaveExploits2References1
CNVD
CNVD
added 2018/05/09 12:0 a.m.46 views

Microsoft Edge Sensitive Information Disclosure Vulnerability

Microsoft Windows Server 2012 and others are a series of operating systems released by Microsoft Corporation in the U.S. Edge and Internet Explorer IE are among the browsers that come with the systems. The former is the default browser that comes with the latest operating system, Windows 10, and...

7.6CVSS6AI score0.66877EPSS
SaveExploits4References1
CNVD
CNVD
added 2018/05/09 12:0 a.m.40 views

Microsoft ChakraCore and Edge Remote Code Execution Vulnerability (CNVD-2018-10202)

Microsoft Windows 10 is a suite of operating systems from Microsoft Corporation.Edge is one of the default browsers that comes with the system.ChakraCore is the core of an open source JavaScript engine used in Edge, and is also available as a standalone JavaScript engine.... A remote code executi...

7.6CVSS8.2AI score0.66554EPSS
SaveExploits4References1
CNVD
CNVD
added 2018/05/09 12:0 a.m.4 views

Microsoft ChakraCore and Edge Remote Code Execution Vulnerability (CNVD-2018-10210)

Microsoft Windows 10 and Windows Server 2016 are both products of the American company Microsoft. The former is a set of operating systems for personal computers, and the latter is a set of server operating systems.Edge is the default browser that comes with one of these systems.ChakraCore is the...

7.6CVSS8.3AI score0.66554EPSS
SaveExploits3References1
Rows per page
Query Builder