Microsoft Internet Explorer CVE-2016-3324 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. The could allow the attackers to execute arbitrary code in the context of the currently logged-in...

PT-2016-2744 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Internet Explorer versions 9 through 11 Description: The issue is related to how Internet Explorer handles files with the .url extension from the Internet zone, allowing a remote attacker to bypass access restrictions using a specially crafte...

PT-2016-2762

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 10 through 11 Description The issue is related to the mishandling of integrity settings and zone settings in Internet Explorer, allowing remote attackers to bypass a sandbox protection mechanism via a craft...

KLA10908 Obsolete Adobe Flash Player for Windows

Microsoft released update to address vulnerabilities in Flash Player for Internet Explorer & Edge. For details look at KLA10868. Technical details To mitigate this vulnerability you can implement some of workarounds listed in original Microsoft advisory: don’t click a link in an email message or...

KLA10875 Multiple vulnerabilities in Microsoft Edge and Internet Explorer

Multiple serious vulnerabilities have been found in Microsoft Edge and Internet Explorer. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions or obtain sensitive information. Below is a complete list of vulnerabilities 1. An improper memory...

MS16-104: Cumulative Security Update for Internet Explorer (3183038)

The version of Internet Explorer installed on the remote Windows host is missing Cumulative Security Update 3183038. It is, therefore, affected by multiple vulnerabilities, the majority of which are remote code execution vulnerabilities. An unauthenticated, remote attacker can exploit these...

September 13, 2016 — KB3189866 (OS Builds 14393.187 and 14393.189)

None None...

September 13, 2016 — KB3185611 (OS Build 10240.17113)

None None...

September 13, 2016 — KB3185614 (OS Build 10586.589)

None None...

Microsoft Internet Explorer Memory Corruption (MS16-104: CVE-2016-3375; CVE-2017-11913)

A remote code execution vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to a type confusion when handling scripts. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page that could cause memory corruption in a way th...

Microsoft Internet Explorer Memory Corruption (MS16-104: CVE-2016-3324)

A remote code execution vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to a type confusion when handling certain objects in JavaScript. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page that could cause memory...

Microsoft Edge Memory Corruption (MS2016-08: CVE-2016-3294)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to a type confusion when handling certain objects in JavaScript. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page that could...

Microsoft Internet Explorer 11.0.9600.18482 - Use After Free

Microsoft Internet Explorer 11.0.9600.18482 - Use After Free body background-color:lime; font-color:red; ; / Exploit Title: Internet Explorer 11 Use After Free Date: 05/09/2016 - 11/09/2016 Exploit Author: Marcin Ressel Vendor Homepage: https://www.microsoft.com/pl-pl/ Version: 11.0.9600.18482...

Microsoft Internet Explorer and Edge CVE-2016-3351 Information Disclosure Vulnerability

Description Microsoft Internet Explorer and Edge are prone to an information disclosure vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Successful exploits will allow attackers to obtain sensitive information that may aid in...

Microsoft Internet Explorer Memory Corruption (MS16-104: CVE-2016-3247)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer and Edge. The vulnerability is due to an out of bounds read when handling certain objects in JavaScript. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page...

PT-2016-2755

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 9 through 11 Description The issue is related to memory corruption and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site. Multiple remote code execution...

PT-2016-2754

Name of the Vulnerable Software and Affected Versions Internet Explorer version 11 Microsoft Edge affected versions not specified Description The issue is related to the handling of objects in memory, which can lead to information disclosure. An attacker could exploit this by using a specially...

PT-2016-2760

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 10 through 11 Microsoft Edge affected versions not specified Description The issue is caused by a memory corruption flaw that allows remote attackers to execute arbitrary code or cause a denial of service v...

PT-2016-2763

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer version 11 Microsoft Edge affected versions not specified Description The issue is related to errors in handling cross-origin requests, which can be exploited by a remote attacker to obtain sensitive information via...

PT-2016-2764

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer version 11 Microsoft Edge affected versions not specified Description The issue is related to memory corruption and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web...