Lucene search
+L

26370 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/04/12 12:00 a.m.•4 views

CVE-2017-0201: Improper Restriction of Operations within the Bounds of a Memory Buffer

A remote code execution vulnerability exists in Internet Explorer in the way that the JScript and VBScript engines render when handling objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user, aka...

7.6CVSS6.8AI score0.13877EPSS
SaveExploits0References2
Kaspersky
Kaspersky
•added 2017/04/12 12:00 a.m.•167 views

KLA11915 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An implementation vulnerability in Securit...

9.3CVSS8.8AI score0.43272EPSS
SaveExploits8References32
ThreatPost
ThreatPost
•added 2017/04/11 6:19 p.m.•153 views

Microsoft Patches Three Vulnerabilities Under Attack

Microsoft today patched a zero-day Word vulnerability that has been publicly attacked along with deploying fixes for Internet Explorer, Microsoft Edge and Windows 10. In all, nine Microsoft products received updates totaling 45 unique CVEs. Three of the vulnerabilities among Tuesday’s updates,...

9.3CVSS7.7AI score0.99497EPSS
SaveExploits30References13
Microsoft KB
Microsoft KB
•added 2017/04/11 7:00 a.m.•92 views

April 11, 2017—KB4015221 (OS Build 10240.17354)

None None...

9.3CVSS6.9AI score0.45648EPSS
SaveExploits17
Microsoft KB
Microsoft KB
•added 2017/04/11 7:00 a.m.•82 views

April 11, 2017—KB4015546 (Security-only update)

None None...

9.3CVSS6.9AI score0.99497EPSS
SaveExploits33
Microsoft KB
Microsoft KB
•added 2017/04/11 7:00 a.m.•75 views

April 11, 2017—KB4015548 (Security-only update)

None None...

9.3CVSS6.9AI score0.99497EPSS
SaveExploits36
Microsoft KB
Microsoft KB
•added 2017/04/11 7:00 a.m.•140 views

April 11, 2017—KB4015547 (Security-only update)

None None...

9.3CVSS6.6AI score0.14087EPSS
SaveExploits11
Microsoft KB
Microsoft KB
•added 2017/04/11 7:00 a.m.•85 views

April 11, 2017—KB4015583 (OS Build 15063.138)

None None...

9.3CVSS6.9AI score0.45648EPSS
SaveExploits14
Microsoft KB
Microsoft KB
•added 2017/04/11 7:00 a.m.•78 views

April 11, 2017—KB4015551 (Monthly Rollup)

None None...

9.3CVSS6.9AI score0.99497EPSS
SaveExploits36
Microsoft KB
Microsoft KB
•added 2017/04/11 7:00 a.m.•31 views

Security update for the Scripting Engine Memory Corruption Vulnerability in Windows Server 2008: May 9, 2017

Security update for the Scripting Engine Memory Corruption Vulnerability in Windows Server 2008: May 9, 2017 Summary A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory when the engine is rendered in Internet Explorer. In a web-based attack...

7.6CVSS7.7AI score0.12793EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2017/04/11 7:00 a.m.•41 views

Internet Explorer Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain. In a web-based attack scenario, an attacker could host a website that is us...

8.8CVSS2.3AI score0.22334EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2017/04/11 7:00 a.m.•30 views

Internet Explorer Memory Corruption Vulnerability

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabilit...

7.6CVSS1.5AI score0.45648EPSS
SaveExploits3
Microsoft CVE
Microsoft CVE
•added 2017/04/11 7:00 a.m.•34 views

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...

7.6CVSS8.1AI score0.12793EPSS
SaveExploits0
Microsoft KB
Microsoft KB
•added 2017/04/11 7:00 a.m.•101 views

Internet Explorer help

None None...

8.8CVSS6.9AI score0.45648EPSS
SaveExploits3
Positive Technologies
Positive Technologies
•added 2017/04/11 12:00 a.m.•2 views

PT-2017-1871

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description A remote code execution issue exists due to improper memory object access in Internet Explorer. This could lead to memory corruption, allowing an attacker to execute arbitrary code ...

7.6CVSS0.45648EPSS
SaveExploits3References8
Symantec
Symantec
•added 2017/04/11 12:00 a.m.•36 views

Microsoft Internet Explorer CVE-2017-0201 Scripting Engine Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-i...

7.6CVSS0.8AI score0.13877EPSS
SaveExploits0Affected Software1
Symantec
Symantec
•added 2017/04/11 12:00 a.m.•67 views

Microsoft Internet Explorer CVE-2017-0202 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Internet Explorer 11 is vulnerable...

7.6CVSS0.2AI score0.45648EPSS
SaveExploits3Affected Software1
Symantec
Symantec
•added 2017/04/11 12:00 a.m.•36 views

Microsoft Internet Explorer CVE-2017-0158 Scripting Engine Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-i...

7.6CVSS1.1AI score0.12793EPSS
SaveExploits0Affected Software3
Symantec
Symantec
•added 2017/04/11 12:00 a.m.•48 views

Microsoft Internet Explorer CVE-2017-0210 Remote Privilege Escalation Vulnerability

Description Microsoft Internet Explorer is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Internet Explorer 10 and 11 are vulnerable. Technologies Affected Microsoft Internet...

4.3CVSS6.6AI score0.22334EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2017/04/11 12:00 a.m.•2 views

PT-2017-1872

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description The issue is caused by a buffer overflow in memory when the JScript and VBScript engines handle objects. This could allow a remote attacker to execute arbitrary code in the context ...

7.6CVSS0.13877EPSS
SaveExploits0References7
Rows per page
Query Builder