Microsoft Internet Explorer CAnchor Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability relates to how...

KLA10858 Multiple vulnerabilities in Microsoft Edge and Internet Explorer

Multiple serious vulnerabilities have been found in Microsoft Internet Explorer and Edge. Malicious users can exploit these vulnerabilities to execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. An improper memory objects handling can be exploite...

August 9, 2016 — KB3176493 (OS Build 10586.545)

None None...

August 9, 2016 — KB3176495 (OS Build 14393.51)

None None...

August 9, 2016 — KB3176492 (OS Build 10240.17071)

None None...

MS16-095: Cumulative Security Update for Internet Explorer (3177356)

The version of Internet Explorer installed on the remote Windows host is missing Cumulative Security Update 3177356. It is, therefore, affected by multiple vulnerabilities, the majority of which are remote code execution vulnerabilities. An unauthenticated, remote attacker can exploit these...

Microsoft Internet Explorer CVE-2016-3288 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-i...

Microsoft Internet Explorer Memory Corruption (MS16-095: CVE-2016-3290)

A remote code execution vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to a type confusion when handling certain objects in JavaScript. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page that could cause memory...

Microsoft Internet Explorer Memory Corruption (MS16-095: CVE-2016-3288)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has been deleted. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page...

Microsoft Internet Explorer and Edge CVE-2016-3327 Information Disclosure Vulnerability

Description Microsoft Internet Explorer and Edge are prone to an information-disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks. Edge and Internet explorer 9, 10 and 11 are vulnerable. Technologies Affected Microsoft...

Microsoft Internet Explorer Information Disclosure (MS16-095: CVE-2016-3327)

An information disclosure vulnerability has been reported in Microsoft Internet Explorer and Edge. The vulnerability is due to improper handling of objects in memory. A remote attacker can exploit this vulnerability by enticing a victim to open a maliciously crafted web page...

Microsoft Internet Explorer Information Disclosure (MS16-095: CVE-2016-3321)

An information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in Microsoft Internet Explorer while handling URIs. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected...

Microsoft Internet Explorer Memory Corruption (MS16-095: CVE-2016-3322)

A use after free vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to the mishandling of cached objects in complex webpages. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page that could allow attackers to execute...

CVE-2015-8935

The sapiheaderop function in main/SAPI.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 supports deprecated line folding without considering browser compatibility, which allows remote attackers to conduct cross-site scripting XSS attacks against Internet Explorer by leveraging ...

Cross site scripting

The sapiheaderop function in main/SAPI.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 supports deprecated line folding without considering browser compatibility, which allows remote attackers to conduct cross-site scripting XSS attacks against Internet Explorer by leveraging ...

CVE-2015-8935

CVE-2015-8935 affects PHP’s sapi_header_op in main/SAPI.c, where legacy line folding is allowed without considering browser compatibility. This enables remote XSS against Internet Explorer via header folding payloads such as %0A%20 or %0D%0A%20. Affected PHP branches include 5.4.x up to 5.4.38, 5...

Internet Explorer 11 VBScript Engine Memory Corruption

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule "Internet Explorer 11 VBScript Engine Memory Corruption", 'Description' = %q This module exploits the memory corruption...

Windows A high-risk vulnerability allows a hacker in the user access to phishing pages to steal their Microsoft account and related services-vulnerability warning-the black bar safety net

! In all Windows System are the presence of a security may cause the user to visit a phishing site case leaked their Microsoft account user name, password, and Microsoft account binding and is associated with a large number of important business, this information will also be affected Including:...

ownCloud: [forum.owncloud.org] IE, Edge XSS via Request-URI

PoC Internet Explorer, Edge: https://blackfan.ru/x?r=https://forum.owncloud.org//%252e%252e blackfan.ru/x?r - simple redirection script, that necessary for exploitation HTTP Response: html Information No route found for "GET //%2e%2e"...

TG Soft VirIT eXplorer 'viritsvclite' Service Local Lift Vulnerability

TG Soft VirIT eXplorer is a suite of antivirus software from the Italian company TG Soft. A security vulnerability exists in TG Soft VirIT eXplorer that could be exploited by a local attacker to execute arbitrary code with SYSTEM privileges...