CVE-2018-8114

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 11. This CVE ID is unique from CVE-2018-0945, CVE-2018-0946, CVE-2018-0951,...

CVE-2018-1025

CVE-2018-1025 is an information-disclosure vulnerability in affected Microsoft browsers, specifically Internet Explorer 11 and Microsoft Edge, caused by improper handling of objects in memory. The NVD entry states the issue leads to leakage of information but does not provide exploit details, aff...

EUVD-2018-19847

A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka "Microsoft Browser Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge...

CVE-2018-8178

Technical details, affected versions/limitations, and remediation for CVE-2018-8178 are not provided in the supplied documents. Monitor for updates from official advisories.

CVE-2018-8126

CVE-2018-8126 is a security feature bypass in Internet Explorer 11 where the component fails to validate User Mode Code Integrity (UMCI) policies, enabling a bypass of security controls. The vulnerability’s impact is described as a high-severity security feature bypass with a CVSS v3 base score o...

Microsoft Patches Two Zero-Day Flaws Under Active Attack

It's time to gear up for the latest May 2018 Patch Tuesday. Microsoft has today released security patches for a total of 67 vulnerabilities, including two zero-days that have actively been exploited in the wild by cybercriminals, and two publicly disclosed bugs. In brief, Microsoft is addressing ...

The King is dead. Long live the King!

In late April 2018, a new zero-day vulnerability for Internet Explorer IE was found using our sandbox; more than two years since the last in the wild example CVE-2016-0189. This particular vulnerability and subsequent exploit are interesting for many reasons. The following article will examine th...

Microsoft Browser Information Disclosure Vulnerability

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. Internet Explorer IE and Edge are web browsers that come with Windows operating systems. An information disclosure vulnerability exists in Microsoft IE 11 and Edge, which arises from a...

Microsoft Internet Explorer and Edge Remote Memory Corruption Vulnerability (CNVD-2018-10731)

Microsoft Windows Server 2012 and others are a series of operating systems released by Microsoft Corporation in the U.S. Edge and Internet Explorer IE are among the browsers that come with the systems. The former is the default browser that comes with the latest operating system, Windows 10, and...

Microsoft Windows Multiple Vulnerabilities (KB4103723)

This host is missing a critical security update according to Microsoft KB4103723 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Internet Explorer Arbitrary Code Execution Vulnerability (CNVD-2018-10669)

Microsoft Windows Server 2012 and others are a series of operating systems released by Microsoft Corporation, U.S.A. Internet Explorer IE is one of the web browsers that comes with the Windows operating system. A remote code execution vulnerability exists in the way the scripting engine handles I...

Microsoft Edge Sensitive Information Disclosure Vulnerability

Microsoft Windows Server 2012 and others are a series of operating systems released by Microsoft Corporation in the U.S. Edge and Internet Explorer IE are among the browsers that come with the systems. The former is the default browser that comes with the latest operating system, Windows 10, and...

Microsoft Internet Explorer Security Feature Bypass Vulnerability

Internet Explorer is a web browser from Microsoft. A security feature bypass vulnerability exists in Microsoft Internet Explorer. The vulnerability arises because Internet Explorer fails to properly validate the User Mode Code Integrity UMCI policy. An attacker could exploit this vulnerability to...

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

Internet Explorer is a web browser from Microsoft. A scripting engine memory corruption vulnerability exists in Microsoft Internet Explorer. The vulnerability is caused due to a problem in the way the scripting engine handles objects in memory. A remote attacker could use this vulnerability to...

Microsoft Browser Scripting Engine Memory Corruption Vulnerability

Microsoft Windows Server 2012 and others are a series of operating systems released by Microsoft Corporation in the U.S. Edge and Internet Explorer IE are among the browsers that come with the systems. The former is the default browser that comes with the latest operating system, Windows 10, and...

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (CNVD-2018-10733)

Microsoft Internet Explorer is a popular WEB browser. A memory corruption vulnerability exists in Microsoft Internet Explorer's handling of memory objects, which allows remote attackers to exploit a vulnerable special WEB page and trick the user into parsing it, which could cause the application ...

CVE-2018-8174

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka “Windows VBScript Engine Remote Code Execution Vulnerability.” This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1,...

Microsoft Windows Multiple Vulnerabilities (KB4103731)

This host is missing a critical security update according to Microsoft KB4103731 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4103721)

This host is missing a critical security update according to Microsoft KB4103721 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4103716)

This host is missing a critical security update according to Microsoft KB4103716 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...