Information disclosure

Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Windows Hyperlink Object Library Information Disclosure Vulnerability."...

CVE-2016-7283

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...

CVE-2016-7283

CVE-2016-7283 affects Microsoft Internet Explorer 9–11. The vulnerability enables remote code execution or memory corruption via a crafted web site. Affected components include IE’s rendering stack (IEXPLORE/IE frame) and associated DLLs (e.g., Mshtml, Urlmon, Wininet, etc.) across IE9–IE11 on Wi...

CVE-2016-7282

Cross-site scripting XSS vulnerability in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Microsoft Browser Information Disclosure Vulnerability."...

CVE-2016-7284

Microsoft Internet Explorer 10 and 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability."...

CVE-2016-7279

CVE-2016-7279 affects Microsoft Internet Explorer 9–11 and Microsoft Edge, enabling remote code execution or memory corruption via a crafted web site. The vulnerability is listed in OpenVAS feeds among Windows browser vulnerabilities (Edge/IE) and is addressed by Microsoft security updates MS16-1...

CVE-2016-7287

The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."...

CVE-2016-7282

Technical details for CVE-2016-7282 are not provided in the connected documents. Public details (affected product/version, root cause, exploit info, and fixes) are not disclosed here; monitor official bulletins for updates.

CVE-2016-7281

The Web Workers implementation in Microsoft Internet Explorer 10 and 11 and Microsoft Edge allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Microsoft Browser Security Feature Bypass Vulnerability."...

CVE-2016-7284

CVE-2016-7284 concerns Microsoft Internet Explorer 10/11 information disclosure: a crafted website can cause the browser to reveal sensitive information from process memory. Affected products are Internet Explorer 10 and 11; no exploitation details are provided in the documents beyond the general...

CVE-2016-7278

Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Windows Hyperlink Object Library Information Disclosure Vulnerability."...

CVE-2016-7278

CVE-2016-7278 affects Microsoft Internet Explorer 9–11 and is described as an information-disclosure vulnerability by the Windows Hyperlink Object Library, allowing remote attackers to read memory contents via a crafted web site. Affected product: IE (IE9–IE11). Root cause: information disclosure...

CVE-2016-7281

CVE-2016-7281 affects Microsoft Internet Explorer (IE10/IE11) and Microsoft Edge. The Web Workers implementation allows remote attackers to bypass the Same Origin Policy via unspecified vectors, enabling cross-origin access that should be restricted. Root cause per the description is a security f...

CVE-2016-7287

CVE-2016-7287 is a memory-corruption vulnerability in the scripting engines of Internet Explorer 11 and Microsoft Edge, exploitable via a crafted web site that can lead to remote code execution or memory corruption-based denial of service. Public references confirm exploitation (Exploit-DB entry ...

Microsoft Internet Explorer 11 - MSHTML CSplice­Tree­Engine::Remove­Splice Use-After-Free (MS14-035)

Microsoft Internet Explorer 11 - MSHTML CSplice­Tree­Engine::Remove­Splice Use-After-Free MS14-035 document.add­Event­Listener"DOMNode­Removed", function document.open; // free // attempt to modify freed memory here // because it will be...

Microsoft Internet Explorer 11 - MSHTML CSplice­Tree­Engine::Remove­Splice Use-After-Free (MS14-035)

document.add­Event­Listener"DOMNode­Removed", function document.open; // free // attempt to modify freed memory here // because it will be reused after this function returns. , true; window.onload = function docume...

Microsoft Internet Explorer 9 IEFRAME CView::EnsureSize Use-After-Free

Since November I have been releasing details on all vulnerabilities I found that I have not released before. This is the 34th entry in the series. This information is available in more detail on my blog at http://blog.skylined.nl/20161216001.html. There you can find a repro that triggered this...

Microsoft Internet Explorer 9 - IEFRAME CMarkup­Pointer::Move­To­Gap Use-After-Free

!-- Source: http://blog.skylined.nl/20161215001.html Synopsis A specially crafted web-page can trigger a use-after-free vulnerability in Microsoft Internet Explorer 9. The use appears to happen only once almost immediately after the free, which makes practical exploitation unlikely. Known affecte...

Microsoft Internet Explorer 9 IEFRAME - CMarkup::Remove­Pointer­Pos Use-After-Free (MS13-055) Exploi

Exploit for windows platform in category dos / poc document.add­Event­Listener"load", function document.document­Element.remove­Nodetrue; , true; document.add­Event­Listener"DOMNode­Removed", function document.write""; , true; !-- Time-line Sometime in November 2012: This vulnerability was found...

Microsoft Internet Explorer 9 - IEFRAME CView::Ensure­Size Use-After-Free (MS13-021)

Microsoft Internet Explorer 9 - IEFRAME CView::Ensure­Size Use-After-Free MS13-021 var o­Element = document.get­Element­By­Id"ruby"; var o­Element = o­Element.parent­Node.remove­Childo­Element; document.write""; document.document­Element.offset­Top; set­Timeout"location.reload", 100; !-- Time-lin...