CVE-2016-3298

Microsoft Internet Explorer 9 through 11 and the Internet Messaging API in Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow remote attackers to determine the existence of arbitrary files via a crafted web site, aka "Internet Explorer Information Disclosure...

CVE-2016-3298

CVE-2016-3298 affects Microsoft Internet Explorer 9–11 and the Internet Messaging API on Windows (Vista/7/Server 2008 R2 family). The root cause is improper handling of objects in memory, enabling a crafted web site to disclose whether arbitrary files exist on disk (information disclosure). The v...

CVE-2016-3384

CVE-2016-3384 affects Microsoft Internet Explorer 9–11 and corresponds to memory-corruption when rendering a crafted webpage, leading to remote code execution or memory exhaustion as described by the connected records. The vulnerability is tied to IE memory-corruption behavior disclosed in MS16-1...

CVE-2016-3383

Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."...

CVE-2016-3384

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...

CVE-2016-3267

CVE-2016-3267 affects Microsoft Internet Explorer 9–11 and Microsoft Edge, enabling remote attackers to determine the existence of unspecified files via a crafted web site (information disclosure). Exploitation details are not provided beyond this remote-disclosure behavior. The vulnerability is ...

CVE-2016-3390

CVE-2016-3390 affects Microsoft Internet Explorer 11 and Microsoft Edge, involving memory corruption in the Chakra-based scripting engine that can lead to remote code execution or memory corruption via a crafted website. Connected sources (GHSA-CHAKRACORE RCE) reiterate a ChakraCore RCE vector ti...

Microsoft Internet Explorer Remote Memory Corruption Vulnerability (CNVD-2016-09377)

Internet Explorer is a web browser from Microsoft. A remote memory corruption vulnerability exists in the Handle Memory object in Internet Explorer versions 10 and 11. This vulnerability allows attackers to corrupt memory and execute arbitrary code in the current user context...

CVE-2016-3298

Microsoft Internet Explorer 9 through 11 and the Internet Messaging API in Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow remote attackers to determine the existence of arbitrary files via a crafted web site, aka “Internet Explorer Information Disclosure...

Microsoft Internet Explorer and Edge Remote Privilege Elevation Caveat

Microsoft Internet Explorer IE and Microsoft Edge are both web browsers developed by the American company Microsoft. The former is the default browser that came with operating systems before Windows 10, and the latter is the default browser that comes with the latest operating system, Windows 10...

Microsoft Internet Explorer and Edge Remote Code Execution Vulnerability

Microsoft Internet Explorer IE and Microsoft Edge are both web browsers developed by the American company Microsoft. The former is the default browser that came with operating systems before Windows 10, and the latter is the default browser that comes with the latest operating system, Windows 10....

Microsoft Internet Explorer and Edge Elevation of Privilege Vulnerability

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A security vulnerability exists in Microsoft Internet Explorer and Edge that fails to properly protect private namespaces, which...

Microsoft Internet Explorer Multiple Vulnerabilities (3192887)

This host is missing a critical security update according to Microsoft Bulletin MS16-118. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MS16-118: Cumulative Security Update for Internet Explorer (3192887)

The version of Internet Explorer installed on the remote Windows host is missing Cumulative Security Update 3192887. It is, therefore, affected by multiple vulnerabilities, the majority of which are remote code execution vulnerabilities. An unauthenticated, remote attacker can exploit these...

Microsoft Internet Explorer Remote Information Disclosure Vulnerability

Microsoft Internet Explorer is a popular WEB browser. An information leakage vulnerability exists when Internet Explorer fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could test for the presence of files on disk. For the attack to succeed, t...

Microsoft Internet Explorer and Edge Remote Memory Corruption Vulnerability (CNVD-2016-09373)

Microsoft Internet Explorer and Edge are both web browsers developed by the American company Microsoft and are the default browsers that come with the Windows operating system. A remote memory corruption vulnerability exists in Microsoft Internet Explorer version 11 and Edge, which can be exploit...

Microsoft Internet Explorer and Edge Information Disclosure Vulnerability (CNVD-2016-09405)

Microsoft Internet Explorer IE and Microsoft Edge are both web browsers developed by the American company Microsoft. The former is the default browser that came with operating systems before Windows 10, and the latter is the default browser that comes with the latest operating system, Windows 10...

Microsoft Internet Explorer and Edge Remote Memory Corruption Vulnerability

Microsoft Internet Explorer IE and Microsoft Edge are both web browsers developed by the American company Microsoft. The former is the default browser that came with operating systems before Windows 10, and the latter is the default browser that comes with the latest operating system, Windows 10....

HTA Web Server

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HTA Web Server', 'Description' = %q This module hosts an HTML Application HTA that when opened will run a payload via Powershell. When a user...

Microsoft Patches 5 Zero-Day Vulnerabilities Being Exploited in the Wild

Microsoft has released its monthly Patch Tuesday update including a total of 10 security bulletin, and you are required to apply the whole package of patches altogether, whether you like it or not. That's because the company is kicking off a controversial new all-or-nothing patch model this month...