Adobe Flash Player suffers from an unspecified vulnerability (CNVD-2016-03174)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from the American company Adobe. An unspecified vulnerability exists in Adobe Flash Player 21.0.0.213 and prior versions, Microsoft Internet Explorer 10 and 11, and Microsoft Edge versions, which could be exploited by...

CVE-2016-0188

CVE-2016-0188 affects Internet Explorer 11 via the Device Guard UMCI component, enabling a remote attacker to bypass code-signing protections and run unsigned code. The vulnerability stems from UMCI policy validation weaknesses in IE’s User Mode Code Integrity, allowing code that should be blocke...

Microsoft Internet Explorer CVE-2016-0187 Scripting Engine Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-i...

Vimeo: OAuth 2 Authorization Bypass via CSRF and Cross Site Flashing

Hello Vimeo Security Team, There is a vulnerability in api.vimeo.com/oauth which allows an attacker to gain full App privilege over a Vimeo victim user account without user approval, just by having the victim open a link to the attacker webpage. Proof of Concept link :...

May 3, 2016, update for InfoPath 2013 (KB3114818)

None None...

Microsoft Internet Explorer 11 - MSHTML!CMarkupPointer::UnEmbed Use-After-Free

body background-color:lime; font-color:white; ; / Title: MSHTML!CMarkupPointer::UnEmbed Use After Free Author: Marcin Ressel @resselm Date: 15.04.2016 Vendor Homepage: www.microsoft.com Software Link: n/a Version: IE11 latest Tested on: Windows 10 x64 && Windows 7 x64...

Microsoft Internet Explorer 9/10/11 - 'CDOMStringDataList::InitFromString' Out-of-Bounds Read (MS15-112)

!-- CVE-2015-6086 Out Of Bound Read Vulnerability Address Space Layout Randomization ASLR Bypass Improper handling of new line and white space character caused Out of Bound Read in CDOMStringDataList::InitFromString. This flaw can be used to leak the base address of MSHTML.DLL and effectively...

CVE-2016-0164

Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...

CVE-2016-0160

CVE-2016-0160 affects Internet Explorer 11 when DLLs are loaded via MSHTML.DLL, enabling binary planting/dll hijacking leading to remote code execution. The PacketStorm open writeup specifies MSHTML.DLL loading DLLs not present on Windows 7 SP1 and notes the vulnerability is not necessarily prese...

Microsoft Internet Explorer CVE-2016-0164 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-i...

Microsoft Browser Memory Corruption Vulnerability (CNVD-2016-01577)

Microsoft Internet Explorer IE and Microsoft Edge are both web browsers developed by the American company Microsoft. The former is the default browser that came with operating systems before Windows 10, and the latter is the default browser that comes with the latest operating system, Windows 10....

CVE-2016-0114

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0102, CVE-2016-0103, CVE-2016-0106, CVE-2016-010...

Memory corruption

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0102, CVE-2016-0103, CVE-2016-0108, CVE-2016-010...

Microsoft Internet Explorer and Edge CVE-2016-0109 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currentl...

Microsoft Internet Explorer CVE-2016-0106 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

Microsoft Internet Explorer CVE-2016-0103 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

Microsoft Internet Explorer CVE-2016-0107 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

Microsoft Internet Explorer CVE-2016-0108 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

Microsoft Internet Explorer Denial of Service Vulnerability (CNVD-2016-01020)

Microsoft Internet Explorer is a popular web browser introduced by Microsoft and bundled with the Windows operating system. A denial of service vulnerability exists in Microsoft Internet Explorer version 11 and Microsoft Edge, which could allow a remote attacker to execute arbitrary code or cause...

Microsoft Internet Explorer CVE-2016-0072 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...