4635 matches found
Security feature bypass
Windows Scripting Host WSH in Windows 10 versions 1703 and 1709 and Windows Server, version 1709 allows a Device Guard security feature bypass vulnerability due to the way objects are handled in memory, aka "Windows Security Feature Bypass Vulnerability"...
CVE-2018-0827
Windows Scripting Host WSH in Windows 10 versions 1703 and 1709 and Windows Server, version 1709 allows a Device Guard security feature bypass vulnerability due to the way objects are handled in memory, aka "Windows Security Feature Bypass Vulnerability"...
CVE-2018-0827
CVE-2018-0827 affects Windows Scripting Host (WSH) on Windows 10 versions 1703/1709 and Windows Server 1709. The vulnerability is a Device Guard/UMCI security feature bypass caused by how objects are handled in memory, enabling a local attacker who has access to run a malicious program to bypass ...
CVE-2018-0827: Undefined Security Weakness
Windows Scripting Host WSH in Windows 10 versions 1703 and 1709 and Windows Server, version 1709 allows a Device Guard security feature bypass vulnerability due to the way objects are handled in memory, aka "Windows Security Feature Bypass Vulnerability"...
February 13, 2018—KB4074591 (OS Build 10586.1417)
None None...
Windows Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists in Windows Scripting Host which could allow an attacker to bypass Device Guard. An attacker who successfully exploited this vulnerability could circumvent a User Mode Code Integrity UMCI policy on the machine. To exploit the vulnerability, an attacke...
Microsoft Windows Device Guard CVE-2018-0827 Local Security Bypass Vulnerability
Description Microsoft Windows is prone to a local security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may aid in further attacks. Technologies Affected Microsoft Windows 10 version 1703 for 32-bit Systems...
KB4074588: Windows 10 Version 1709 and Windows Server Version 1709 February 2018 Security Update
The remote Windows host is missing security update 4074588. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a...
Attacks Leveraging Adobe Zero-Day (CVE-2018-4878) – Threat Attribution, Attack Scenario and Recommendations
On Jan. 31, KISA KrCERT published an advisory about an Adobe Flash zero-day vulnerability CVE-2018-4878 being exploited in the wild. On Feb. 1, Adobe issued an advisory confirming the vulnerability exists in Adobe Flash Player 28.0.0.137 and earlier versions, and that successful exploitation coul...
January 17, 2018—KB4057142 (OS Build 14393.2034)
None None...
CVE-2018-0818
Microsoft ChakraCore allows an attacker to bypass Control Flow Guard CFG in conjunction with another vulnerability to run arbitrary code on a target system, due to how the Chakra scripting engine handles accessing memory, aka "Scripting Engine Security Feature Bypass"...
Security feature bypass
Microsoft ChakraCore allows an attacker to bypass Control Flow Guard CFG in conjunction with another vulnerability to run arbitrary code on a target system, due to how the Chakra scripting engine handles accessing memory, aka "Scripting Engine Security Feature Bypass"...
CVE-2018-0818
Microsoft ChakraCore allows an attacker to bypass Control Flow Guard CFG in conjunction with another vulnerability to run arbitrary code on a target system, due to how the Chakra scripting engine handles accessing memory, aka "Scripting Engine Security Feature Bypass"...
CVE-2018-0818
CVE-2018-0818 is a security feature bypass in Microsoft ChakraCore that enables bypass of Control Flow Guard (CFG) by exploiting how the Chakra scripting engine handles memory. Affected software includes ChakraCore, Microsoft Edge and Internet Explorer, with the CFG bypass potentially enabling co...
CVE-2018-0818: Undefined Security Weakness
Microsoft ChakraCore allows an attacker to bypass Control Flow Guard CFG in conjunction with another vulnerability to run arbitrary code on a target system, due to how the Chakra scripting engine handles accessing memory, aka "Scripting Engine Security Feature Bypass"...
January 3, 2018—KB4056890 (OS Build 14393.2007)
None None...
Scripting Engine Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists in the Microsoft Chakra scripting engine that allows Control Flow Guard CFG to be bypassed. By itself, the CFG bypass vulnerability does not allow arbitrary code execution. However, an attacker could use the CFG bypass vulnerability in conjunction wi...
muhawesh4.rssing.com XSS vulnerability
On the 03.01.2018 security researcher reported a XSS vulnerability affecting the muhawesh4.rssing.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 3 January,...
PT-2018-1444
Name of the Vulnerable Software and Affected Versions Intel SGX affected versions not specified Huawei VRP affected versions not specified Description The issue is related to the implementation of Intel Software Guard Extensions SGX technology and speculative execution in microprocessors. It may...
