26141 matches found
SandboxEscaper Drops Three More Windows Exploits, IE Zero-Day
On the heels of releasing a Windows zero-day exploit on Wednesday, developer SandboxEscaper has dropped exploit code for four more flaws on Thursday morning. On Wednesday, she dropped a Windows zero-day exploit that would allow local privilege-escalation LPE, by importing legacy tasks from other...
Update: Hacker Disclosed 4 New Microsoft Zero-Day Exploits in Last 24 Hours
Less than 24 hours after publicly disclosing an unpatched zero-day vulnerability in Windows 10, the anonymous hacker going by online alias "SandboxEscaper" has now dropped new exploits for two more unpatched Microsoft zero-day vulnerabilities. The two new zero-day vulnerabilities affect Microsoft...
Update: Hacker Disclosed 4 New Microsoft Zero-Day Exploits in Last 24 Hours
Less than 24 hours after publicly disclosing an unpatched zero-day vulnerability in Windows 10, the anonymous hacker going by online alias "SandboxEscaper" has now dropped new exploits for two more unpatched Microsoft zero-day vulnerabilities. The two new zero-day vulnerabilities affect Microsoft...
Microsoft Internet Explorer 11 - Sandbox Escape Exploit
Exploit for windows platform in category local exploits Inject into IE11. Will work on other sandboxes that allow the opening of windows filepickers through a broker. You will gain medium IL javascript execution, at which point you simply retrigger your IE RCE bug. EDB Note Download:...
Microsoft Internet Explorer 11 - Sandbox Escape
Microsoft Internet Explorer 11 - Sandbox Escape Inject into IE11. Will work on other sandboxes that allow the opening of windows filepickers through a broker. You will gain medium IL javascript execution, at which point you simply retrigger your IE RCE bug. EDB Note Download:...
Microsoft Internet Explorer 11 - Sandbox Escape
Inject into IE11. Will work on other sandboxes that allow the opening of windows filepickers through a broker. You will gain medium IL javascript execution, at which point you simply retrigger your IE RCE bug. EDB Note Download:...
Microsoft Patch Tuesday — May 2019: Vulnerability disclosures and Snort coverage
Microsoft released its monthly security update today, disclosing a variety of vulnerabilities in several of its products. The latest Patch Tuesday covers 79 vulnerabilities, 22 of which are rated “critical," 55 that are considered "important" and one "moderate." This release also includes two...
May 21, 2019—KB4499183 (OS Build 17134.799)
None None...
May 19, 2019—KB4505056 (OS Build 17763.504)
None None...
May 19, 2019—KB4505064 (OS Build 17134.766)
None None...
May 19, 2019—KB4505051 (OS Build 10240.18218)
None None...
Microsoft Internet Explorer Information Disclosure Vulnerability (CNVD-2019-16213)
Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from the American company Microsoft. An information disclosure vulnerability exists in Microsoft IE 9, 10, and 11. The vulnerability arises from errors such as configuration during operation of a networke...
Microsoft Internet Explorer Buffer Overflow Vulnerability
Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from the American company Microsoft. A buffer overflow vulnerability exists in the way the scripting engine handles memory objects in Microsoft Internet Explorer 9, 10, and 11. The vulnerability originate...
Microsoft Internet Explorer and Microsoft Edge Buffer Overflow Vulnerability
Microsoft Edge and Microsoft Internet Explorer IE are both products of Microsoft Corporation.Microsoft Edge is a web browser that comes with Windows 10 and later.Microsoft Internet Explorer is a web browser that comes with Windows operating systems. Microsoft Edge is a web browser that comes with...
Microsoft Internet Explorer Buffer Overflow Vulnerability (CNVD-2019-16204)
Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from the American company Microsoft. A buffer overflow vulnerability exists in Microsoft IE 11. The vulnerability originates when a network system or product performs an operation in memory without proper...
Microsoft Internet Explorer Input Validation Error Vulnerability
Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from the American company Microsoft. An input validation error vulnerability exists in Microsoft IE 9, 10, and 11. The vulnerability originates from a network system or product that does not properly...
CVE-2019-0995
A security feature bypass vulnerability exists when urlmon.dll improperly handles certain Mark of the Web queries, aka 'Internet Explorer Security Feature Bypass Vulnerability'...
CVE-2019-0929
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'...