PT-2016-2929

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 9 through 11 Microsoft Edge affected versions not specified Description The issue allows remote attackers to conduct cross-site scripting XSS attacks and obtain sensitive information via unspecified vectors...

PT-2016-2932

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 9 through 11 Microsoft Edge affected versions not specified Description The issue is related to the improper handling of objects in memory by the scripting engines, which could allow a remote attacker to...

PT-2016-2937

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 10 through 11 Microsoft Edge affected versions not specified Description The issue is caused by a memory corruption flaw that allows remote attackers to execute arbitrary code or cause a denial of service v...

PT-2016-2938

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 9 through 11 Microsoft Edge affected versions not specified Description The issue is caused by a memory corruption vulnerability that allows remote attackers to execute arbitrary code or cause a denial of...

PT-2016-2939

Name of the Vulnerable Software and Affected Versions Microsoft Edge and Internet Explorer affected versions not specified Description The issue is caused by a buffer overflow in memory, allowing a remote attacker to bypass existing access restriction policies using a specially crafted website...

PT-2016-2976

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 9 through 11 Microsoft Edge affected versions not specified Description The issue is caused by a memory corruption problem, allowing remote attackers to execute arbitrary code or cause a denial of service v...

PT-2016-2927

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer 11 affected versions not specified Microsoft Edge affected versions not specified Description The issue is caused by a memory corruption vulnerability that allows remote attackers to execute arbitrary code or cause ...

Microsoft Internet Explorer and Edge CVE-2016-7227 Information Disclosure Vulnerability

Description Microsoft Internet Explorer and Edge are prone to an information disclosure vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Successful exploits will allow attackers to obtain sensitive information that may aid in...

PT-2016-2975

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 9 through 11 Microsoft Edge affected versions not specified Description The issue allows remote attackers to bypass the Same Origin Policy and obtain sensitive window-state information via a crafted web sit...

MS16-142: Cumulative security update for Internet Explorer: November 8, 2016

Resolves vulnerabilities in Internet Explorer that could allow remote code execution if a user views a specially crafted webpage in Internet Explorer.SummaryThis security update resolves several reported vulnerabilities in Internet Explorer. These vulnerabilities could allow remote code execution...

MS16-142: Cumulative Security Update for Internet Explorer (3198467)

The version of Internet Explorer installed on the remote Windows host is missing Cumulative Security Update 3198467. It is, therefore, affected by multiple vulnerabilities, the majority of which are remote code execution vulnerabilities. An unauthenticated, remote attacker can exploit these...

November 8, 2016 — KB3198586 (OS Build 10586.679)

None None...

Microsoft Internet Explorer 9 - MSHTML CPtsTextParaclient::CountApes Out-of-Bounds Read

Microsoft Internet Explorer 9 - MSHTML CPtsTextParaclient::CountApes Out-of-Bounds Read oElement1 position: absolute; oElement2:after position: relative; content: counterx; onload = function oElement1 = document.createElement'oElement1'; document.documentElement.appendChildoElement1; oElement2 =...

VBScript CRegExp::Execute Uninitialized Memory Use

Throughout November, I plan to release details on vulnerabilities I found in web-browsers which I've not released before. This is the fifth entry in that series. The below information is available in more detail on my blog at http://blog.skylined.nl/20161107001.html. There you can find a repro th...

Microsoft Internet Explorer 891011 IIS CScript.exeWScript.exe VBScript - CRegExp..Execute Use of Uninitialized Memory (MS14-080MS14-084)

Microsoft Internet Explorer 891011 IIS CScript.exeWScript.exe VBScript - CRegExp..Execute Use of Uninitialized Memory MS14-080MS14-084 !-- Source: http://blog.skylined.nl/20161107001.html Synopsis A specially crafted script can cause the VBScript engine to access data before initializing it. An...

Microsoft Internet Explorer 9 - MSHTML CPtsTextParaclient::CountApes Out-of-Bounds Read

oElement1 position: absolute; oElement2:after position: relative; content: counterx; onload = function oElement1 = document.createElement'oElement1'; document.documentElement.appendChildoElement1; oElement2 = document.createElement'oElement2'; document.documentElement.appendChildoElement2; ; !--...

Microsoft Internet Explorer 8/9/10/11 / IIS / CScript.exe/WScript.exe VBScript - CRegExp..Execute Use of Uninitialized Memory (MS14-080/MS14-084)

!-- Source: http://blog.skylined.nl/20161107001.html Synopsis A specially crafted script can cause the VBScript engine to access data before initializing it. An attacker that is able to run such a script in any application that embeds the VBScript engine may be able to control execution flow and...

Microsoft Internet Explorer 9 MSHTML CPtsTextParaclient::CountApes Out-Of-Bounds Read

Throughout November, I plan to release details on vulnerabilities I found in web-browsers which I've not released before. This is the third entry in that series. The below information is also available on my blog at http://blog.skylined.nl/20161104001.html. There you can find a repro that trigger...

Microsoft Internet Explorer 10 MSHTML CElement::GetPlainTextInScope Out-Of-Bounds Read

Throughout November, I plan to release details on vulnerabilities I found in web-browsers which I've not released before. This is the third entry in that series. The below information is also available on my blog at http://blog.skylined.nl/20161103001.html. There you can find a repro that trigger...

Microsoft Internet Explorer 11 - MSHTML CView::CalculateImageImmunity Use-After-Free Exploit

Exploit for windows platform in category dos / poc var oDocumentFragment = document.createDocumentFragment, oElement = document.createElement'x'; oDocumentFragment.appendChildoElement; oElement.style.listStyleImage = "urlx"; oDocumentFragment.removeChildoElement; !-- Exploit I tried a few tricks ...