26370 matches found
MS16-104: Cumulative security update for Internet Explorer: September 13, 2016
Resolves vulnerabilities that could allow remote code execution if a user views a specially crafted webpage in Internet Explorer.SummaryThis security update resolves several reported vulnerabilities in Internet Explorer. These vulnerabilities could allow remote code execution if a user views a...
Microsoft Internet Explorer CVE-2016-3292 Remote Privilege Escalation Vulnerability
Description Microsoft Internet Explorer is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Internet Explorer 10 and 11 are vulnerable. Technologies Affected Microsoft Internet...
Microsoft Internet Explorer and Edge CVE-2016-3295 Remote Memory Corruption Vulnerability
Description Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Edge and Internet Explorer 10...
Microsoft Internet Explorer Elevation of Privilege (MS16-104: CVE-2016-3292)
An elevation of privilege vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer validates permissions under specific conditions, potentially allowing script to be run with elevated privileges...
PT-2016-2895
Name of the Vulnerable Software and Affected Versions Internet Explorer versions 9 through 11 Windows Vista version SP2 Windows Server version 2008 SP2 and R2 SP1 Windows 7 version SP1 Windows 8.1 Windows Server version 2012 Gold and R2 Windows RT version 8.1 Windows 10 versions Gold, 1511, and...
VulnCheck KEV: CVE-2016-3351
An information disclosure vulnerability exists in the way that certain functions in Internet Explorer and Edge handle objects in memory. The vulnerability could allow an attacker to detect specific files on the user's computer...
Microsoft Internet Explorer CVE-2016-3353 Security Bypass Vulnerability
Description Microsoft Internet Explorer is prone to a security-bypass vulnerability. An attacker can exploit this issue by tricking an unsuspecting victim into viewing a page containing malicious content. This could allow the attacker to bypass certain security restrictions. This may lead to othe...
Microsoft Internet Explorer 11.0.9600.18482 - Use After Free
body background-color:lime; font-color:red; ; / Exploit Title: Internet Explorer 11 Use After Free Date: 05/09/2016 - 11/09/2016 Exploit Author: Marcin Ressel Vendor Homepage: https://www.microsoft.com/pl-pl/ Version: 11.0.9600.18482 Tested on: Windows 7 x64 0:014 g 13a8.9b8: Access violation -...
PT-2016-2759
Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 9 through 11 Microsoft Edge affected versions not specified Description The issue is related to errors in the code of Microsoft browsers, allowing a remote attacker to execute arbitrary code or cause a deni...
Microsoft VBScript CVE-2016-3375 Remote Memory Corruption Vulnerability
Description Microsoft VBScript is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can take advantage of this vulnerability to execute arbitrary code in the context of the currently...
Microsoft Internet Explorer 11.0.9600.18482 - Use After Free
Exploit for windows platform in category dos / poc body background-color:lime; font-color:red; ; / Exploit Title: Internet Explorer 11 Use After Free Date: 05/09/2016 - 11/09/2016 Exploit Author: Marcin Ressel Vendor Homepage: https://www.microsoft.com/pl-pl/ Version: 11.0.9600.18482 Tested on:...
KLA10875 Multiple vulnerabilities in Microsoft Edge and Internet Explorer
Multiple serious vulnerabilities have been found in Microsoft Edge and Internet Explorer. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions or obtain sensitive information. Below is a complete list of vulnerabilities 1. An improper memory...
KLA10908 Obsolete Adobe Flash Player for Windows
Microsoft released update to address vulnerabilities in Flash Player for Internet Explorer & Edge. For details look at KLA10868. Technical details To mitigate this vulnerability you can implement some of workarounds listed in original Microsoft advisory: don’t click a link in an email message or...
QIWI: [contact-sys.com] XSS via Request-URI
PoC Открыть ссылку с помощью Internet Explorer https://blackfan.ru/x?r=https://contact-sys.com/xxx'-alertdocument.domain,var routes='xxx\'-alert1,!--','%2e%2e',...
August 31, 2016 — KB3176938 (OS Build 14393.105)
None None...
QIWI: [ibank.qiwi.ru] XSS via Request-URI
PoC Internet Explorer и, может быть, Edge https://blackfan.ru/x?r=https://ibank.qiwi.ru/xx'-alertdocument.domain-'xx/%252e%252e/webbanking/sessiontimeout.jsf blackfan.ru/x?r простой скрипт перенаправления, необходимый для формирования Request-URI и обхода XSS фильтра IE. HTTP Response //...
August 23, 2016 — KB3176934 (OS Build 14393.82)
None None...
Vulnerability of browsers Internet Explorer and Microsoft Edge, allowing intruders to obtain confidential information
The vulnerability of Internet Explorer and Microsoft Edge is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information through a specially crafted web page...
Vulnerability of Microsoft Edge and Internet Explorer browsers, allowing a hacker to execute arbitrary code
The vulnerabilities of Microsoft Edge and Internet Explorer are caused by buffer overflow attacks. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code through a specially crafted web page from a remote location...
The vulnerability of the Internet Explorer browser, which allows a hacker to execute arbitrary code
The vulnerability of the Internet Explorer browser arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page from a remote location...