Lucene search
+L

26145 matches found

CNVD
CNVD
added 2018/12/12 12:00 a.m.13 views

Microsoft Internet Explorer VBScript Engine Remote Memory Corruption Vulnerability (CNVD-2019-39018)

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system. A memory corruption vulnerability exists in Microsoft IE 9, 10, and 11 that stems from a VBScript execution policy that does not strictly restrict VBScript.A remote attacker can exploit this vulnerabilit...

7.6CVSS7.6AI score0.45762EPSS
SaveExploits3References1
CNVD
CNVD
added 2018/12/12 12:00 a.m.15 views

Internet Explorer Scripting Engine Memory Corruption Vulnerability

Internet Explorer is a web browser from Microsoft. Formerly known as Microsoft Internet Explorer prior to version 6 and Windows Internet Explorer versions 7, 8, 9, 10, 11, or IE for short. A memory corruption vulnerability exists in the way memory objects are handled in the Internet Explorer...

7.6CVSS7.7AI score0.09906EPSS
SaveExploits0References1
ThreatPost
ThreatPost
added 2018/12/11 10:02 p.m.59 views

Zero-Day Bug Patched by Microsoft, Part of December Patch TuesdZero-Day Bug Fixed by Microsoft in December Patch Tuesdayay

Microsoft has patched a zero-day vulnerability actively being used against older versions of the Windows operating system, as part of its December Patch Tuesday updates. According to the software giant, the vulnerability CVE-2018-8611 is an elevation-of-privilege EoP bug that affects Windows 7...

9.3CVSS1.2AI score0.15355EPSS
SaveExploits1References7
Krebs on Security
Krebs on Security
added 2018/12/11 9:05 p.m.290 views

Patch Tuesday, December 2018 Edition

Adobe and Microsoft each released updates today to tackle critical security weaknesses in their software. Microsoft's December patch batch is relatively light, addressing more than three dozen vulnerabilities in Windows and related applications. Adobe has issued security fixes for its Acrobat and...

9.3CVSS0.6AI score0.69214EPSS
SaveExploits5
Talos Blog
Talos Blog
added 2018/12/11 10:35 a.m.93 views

Microsoft Patch Tuesday — December 2018: Vulnerability disclosures and Snort coverage

Microsoft released its monthly security update today, disclosing a variety of vulnerabilities in several of its products. The latest Patch Tuesday covers 38 vulnerabilities, nine of which are rated “critical” and 29 that are considered “important.” There are no “moderate” or “low” vulnerabilities...

10CVSS1.5AI score0.69214EPSS
SaveExploits15
Microsoft CVE
Microsoft CVE
added 2018/12/11 8:00 a.m.42 views

Internet Explorer Memory Corruption Vulnerability

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabilit...

7.6CVSS1.5AI score0.69214EPSS
SaveExploits4
Microsoft CVE
Microsoft CVE
added 2018/12/11 8:00 a.m.45 views

Internet Explorer Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Internet Explorer VBScript execution policy does not properly restrict VBScript under specific conditions. An attacker who exploited the vulnerability could run arbitrary code with medium-integrity level privileges the permissions of the curre...

7.6CVSS2.7AI score0.45762EPSS
SaveExploits3
Microsoft KB
Microsoft KB
added 2018/12/11 8:00 a.m.230 views

December 11, 2018—KB4471332 (OS Build 17763.194)

None None...

10CVSS6.8AI score0.69214EPSS
SaveExploits15
Microsoft KB
Microsoft KB
added 2018/12/11 8:00 a.m.80 views

December 11, 2018—KB4471330 (Monthly Rollup)

None None...

8.4CVSS6.8AI score0.69214EPSS
SaveExploits11
Microsoft KB
Microsoft KB
added 2018/12/11 8:00 a.m.78 views

December 11, 2018—KB4471320 (Monthly Rollup)

None None...

10CVSS6.8AI score0.69214EPSS
SaveExploits11
Microsoft KB
Microsoft KB
added 2018/12/11 8:00 a.m.85 views

December 11, 2018—KB4471324 (OS Build 17134.471)

None None...

10CVSS6.8AI score0.69214EPSS
SaveExploits15
MSRC
MSRC
added 2018/12/11 8:00 a.m.40 views

2018 年 12 月のセキュリティ更新プログラム (月例)

2018/12/20 更新: 新たに定例外で公開した Internet Explorer の脆弱性 CVE-2018-8653 の情報を追加しました。 2018 年 12 月 12 日 日本時間、マイクロ...

7.6CVSS0.8AI score0.29822EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2018/12/11 8:00 a.m.60 views

December 11, 2018—KB4471329 (OS Build 16299.846)

None None...

10CVSS6.8AI score0.69214EPSS
SaveExploits15
Microsoft KB
Microsoft KB
added 2018/12/11 8:00 a.m.93 views

Internet Explorer help

None None...

7.6CVSS7.1AI score0.69214EPSS
SaveExploits10
Microsoft CVE
Microsoft CVE
added 2018/12/11 8:00 a.m.47 views

Windows VBScript Engine Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabili...

7.6CVSS8.6AI score0.43761EPSS
SaveExploits3
Check Point Advisories
Check Point Advisories
added 2018/12/11 12:00 a.m.47 views

Microsoft Internet Explorer Remote Code Execution (CVE-2018-8619)

A remote code execution vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.6CVSS9AI score0.45762EPSS
SaveExploits3
Symantec
Symantec
added 2018/12/11 12:00 a.m.43 views

Microsoft Internet Explorer VBScript Engine CVE-2018-8619 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Internet...

0.3AI score0.45762EPSS
SaveExploits3References1Affected Software1
Symantec
Symantec
added 2018/12/11 12:00 a.m.45 views

Microsoft Internet Explorer VBScript Engine CVE-2018-8625 Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the current user. Failed exploit attempts may result in a denial of service condition. Technologies Affected Microsoft Internet...

0.7AI score0.43761EPSS
SaveExploits3Affected Software1
Tenable Nessus
Tenable Nessus
added 2018/12/11 12:00 a.m.73 views

KB4471332: Windows 10 Version 1809 and Windows Server 2019 December 2018 Security Update

The remote Windows host is missing security update 4471332. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain informati...

10CVSS8.2AI score0.69214EPSS
SaveExploits15References26
Tenable Nessus
Tenable Nessus
added 2018/12/11 12:00 a.m.173 views

KB4471321: Windows 10 Version 1607 and Windows Server 2016 December 2018 Security Update

The remote Windows host is missing security update 4471321. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly. An attacker who successfully exploited this vulnerability could...

10CVSS8.2AI score0.69214EPSS
SaveExploits15References22
Rows per page
Query Builder