Lucene search
+L

26370 matches found

ThreatPost
ThreatPost
•added 2017/12/12 5:12 p.m.•54 views

Microsoft December Patch Tuesday Update Fixes Six Critical Bugs

Microsoft patched 34 vulnerabilities that are part of its December Patch Tuesday release. A total of 20 vulnerabilities were rated critical and another 12 were rated important. Impacted are Internet Explorer, Microsoft Edge, Microsoft Windows, Microsoft Office, SharePoint and Exchange. Notable...

9.3CVSS8.7AI score0.64733EPSS
SaveExploits5References9
Talos Blog
Talos Blog
•added 2017/12/12 3:32 p.m.•179 views

Microsoft Patch Tuesday - December 2017

Today, Microsoft has released its monthly set of security advisories for vulnerabilities that have been identified and addressed in various products. This month's advisory release addresses 34 new vulnerabilities with 21 of them rated critical and 13 of them rated important. These vulnerabilities...

9.3CVSS1AI score0.68491EPSS
SaveExploits48
Microsoft CVE
Microsoft CVE
•added 2017/12/12 8:00 a.m.•44 views

Internet Explorer Information Disclosure Vulnerability

An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, in a web-based attack scenario, an...

5.3CVSS1.3AI score0.25116EPSS
SaveExploits5
Microsoft CVE
Microsoft CVE
•added 2017/12/12 8:00 a.m.•42 views

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...

7.6CVSS7.9AI score0.07912EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2017/12/12 8:00 a.m.•37 views

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...

7.6CVSS7.9AI score0.64733EPSS
SaveExploits5
Microsoft CVE
Microsoft CVE
•added 2017/12/12 8:00 a.m.•33 views

Internet Explorer Information Disclosure Vulnerability

An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, in a web-based attack scenario, an...

5.3CVSS1.3AI score0.06423EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2017/12/12 8:00 a.m.•35 views

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...

7.6CVSS7.9AI score0.46826EPSS
SaveExploits5
Microsoft CVE
Microsoft CVE
•added 2017/12/12 8:00 a.m.•40 views

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...

7.6CVSS7.9AI score0.50051EPSS
SaveExploits5
Microsoft KB
Microsoft KB
•added 2017/12/12 8:00 a.m.•100 views

December 12, 2017—KB4054517 (OS Build 16299.125)

None None...

9.8CVSS6.7AI score0.68491EPSS
SaveExploits48
Microsoft KB
Microsoft KB
•added 2017/12/12 8:00 a.m.•61 views

December 12, 2017—KB4053580 (OS Build 15063.786)

None None...

9.8CVSS6.7AI score0.68491EPSS
SaveExploits48
Microsoft KB
Microsoft KB
•added 2017/12/12 8:00 a.m.•99 views

Internet Explorer help

None None...

7.6CVSS6.7AI score0.64733EPSS
SaveExploits20
Symantec
Symantec
•added 2017/12/12 12:00 a.m.•42 views

Microsoft Internet Explorer CVE-2017-11913 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer are prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-...

7.6CVSS0.8AI score0.08643EPSS
SaveExploits0Affected Software1
Symantec
Symantec
•added 2017/12/12 12:00 a.m.•41 views

Microsoft Internet Explorer CVE-2017-11930 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currentl...

7.6CVSS0.9AI score0.08643EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/12/12 12:00 a.m.•5 views

CVE-2017-11906: Exposure of Sensitive Information to an Unauthorized Actor

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to h...

5.3CVSS6.8AI score0.25116EPSS
SaveExploits5References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/12/12 12:00 a.m.•6 views

CVE-2017-11890: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user, due to how Internet Explorer handle...

7.6CVSS7.9AI score0.50051EPSS
SaveExploits5References2
Symantec
Symantec
•added 2017/12/12 12:00 a.m.•49 views

Microsoft Internet Explorer Scripting Engine CVE-2017-11901 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Internet Explorer 10 and 11 are...

7.6CVSS0.2AI score0.07912EPSS
SaveExploits0Affected Software1
Symantec
Symantec
•added 2017/12/12 12:00 a.m.•64 views

Microsoft Internet Explorer Scripting Engine CVE-2017-11907 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Internet Explorer 9, 10 and 11 are...

7.6CVSS0.2AI score0.64733EPSS
SaveExploits5Affected Software1
Symantec
Symantec
•added 2017/12/12 12:00 a.m.•32 views

Microsoft Internet Explorer CVE-2017-11886 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer are prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-...

7.6CVSS0.8AI score0.08643EPSS
SaveExploits0Affected Software1
Symantec
Symantec
•added 2017/12/12 12:00 a.m.•83 views

Microsoft Internet Explorer Scripting Engine CVE-2017-11903 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Internet Explorer 9, 10 and 11 are...

7.6CVSS0.2AI score0.46826EPSS
SaveExploits5Affected Software1
Symantec
Symantec
•added 2017/12/12 12:00 a.m.•27 views

Microsoft Internet Explorer and Edge CVE-2017-11912 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currentl...

7.6CVSS0.8AI score0.08474EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder