PT-2017-12279

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description A security feature bypass issue exists due to how memory is accessed in code compiled by the Edge Just-In-Time JIT compiler, allowing Control Flow Guard CFG to be bypassed. This issue...

Microsoft Edge Scripting Engine Remote Memory Corruption Vulnerability(CVE-2017-11799)

Bailout: "ChakraCore’s background JIT compiler generates highly optimized JIT’ed code based upon the data and infers likely usage patterns based on the profile data collected by the interpreter. Given the dynamic nature of JavaScript code, if the code gets executed in a way that breaks the profil...

Microsoft Edge Chakra JIT - Incorrect GenerateBailOut Calling Patterns

/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1333 Bailout: "ChakraCore’s background JIT compiler generates highly optimized JIT’ed code based upon the data and infers likely usage patterns based on the profile data collected by the interpreter. Given the dynamic nature of...

Microsoft Edge Chakra JIT Incorrect GenerateBailOut Calling Patterns

Microsoft Edge: Chakra: JIT: Incorrect GenerateBailOut calling patterns CVE-2017-11799 Bailout: "ChakraCoreas background JIT compiler generates highly optimized JITaed code based upon the data and infers likely usage patterns based on the profile data collected by the interpreter. Given the dynam...

Description of the Security and Quality Rollup for the .NET Framework 4.6, 4.6.1, 4.6.2, and 4.7 for Windows 7 SP1 and Windows Server 2008 R2 SP1 and for the .NET Framework 4.6 for Windows Server 2008 SP2: September 12, 2017

None None...

CVE-2017-8637

Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to bypass Arbitrary Code Guard ACG due to how Microsoft Edge accesses memory in code compiled by the Edge Just-In-Time JIT compiler, aka "Scripting Engine Security Feature Bypass Vulnerability"...

Scripting Engine Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in Microsoft Edge as a result of how memory is accessed in code compiled by the Edge Just-In-Time JIT compiler that allows Arbitrary Code Guard ACG to be bypassed. By itself, this ACG bypass vulnerability does not allow arbitrary code execution...

PT-2017-18449

Name of the Vulnerable Software and Affected Versions Microsoft Edge in Microsoft Windows 10 1703 Description A security feature bypass issue exists due to how Microsoft Edge accesses memory in code compiled by the Edge Just-In-Time JIT compiler, allowing Arbitrary Code Guard ACG to be bypassed...

CVE-2017-8637: Undefined Security Weakness

Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to bypass Arbitrary Code Guard ACG due to how Microsoft Edge accesses memory in code compiled by the Edge Just-In-Time JIT compiler, aka "Scripting Engine Security Feature Bypass Vulnerability"...

Mozilla Firefox ESR < 45.7 Multiple Vulnerabilities

Binary data 9928.prm...

openSUSE Security Update : pcre2 (openSUSE-2016-966)

This update for pcre2 fixes the following issues : - pcre2 10.22 : - The POSIX wrapper function regcomp did not used to support back references and subroutine calls if called with the REGNOSUB option. It now does. - A new function, pcre2codecopy, is added, to make a copy of a compiled pattern. -...

[SECURITY] Fedora 23 Update: pypy3-2.4.0-3.fc23

PyPy's implementation of Python 3, featuring a Just-In-Time compiler on som e CPU architectures, and various optimized implementations of the standard types strings, dictionaries, etc This build of PyPy has JIT-compilation enabled...

[SECURITY] Fedora 23 Update: pypy-4.0.1-3.fc23

PyPy's implementation of Python, featuring a Just-In-Time compiler on some CPU architectures, and various optimized implementations of the standard types strings, dictionaries, etc This build of PyPy has JIT-compilation enabled...

[SECURITY] Fedora 24 Update: pypy-5.0.1-3.fc24

PyPy's implementation of Python, featuring a Just-In-Time compiler on some CPU architectures, and various optimized implementations of the standard types strings, dictionaries, etc This build of PyPy has JIT-compilation enabled...

[SECURITY] Fedora 24 Update: pypy3-2.4.0-6.fc24

PyPy's implementation of Python 3, featuring a Just-In-Time compiler on som e CPU architectures, and various optimized implementations of the standard types strings, dictionaries, etc This build of PyPy has JIT-compilation enabled...

The vulnerability of the Firefox browser, which allows a malicious individual to execute arbitrary code or trigger a service denial

Mozilla Firefox browsers contain a vulnerability related to errors in the implementation of the MPostWriteBarrier class. Exploiting this vulnerability allows malicious actors to cause service interruptions memory corruption and unexpected application termination or execute arbitrary code by...

openSUSE: Security Advisory for Security (openSUSE-SU-2016:1211-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update update for MozillaFirefox, mozilla-nss (important)

This update to Mozilla Firefox 46.0 fixes several security issues and bugs boo977333. The following vulnerabilities were fixed: - CVE-2016-2804: Miscellaneous memory safety hazards - MFSA 2016-39 boo977373 - CVE-2016-2806: Miscellaneous memory safety hazards - MFSA 2016-39 boo977375 -...

Code injection

The bpfintjitcompile function in arch/x86/net/bpfjitcomp.c in the Linux kernel before 4.0.6 allows local users to cause a denial of service system crash by creating a packet filter and then loading crafted BPF instructions that trigger late convergence by the JIT compiler...

CVE-2015-4700

The bpfintjitcompile function in arch/x86/net/bpfjitcomp.c in the Linux kernel before 4.0.6 allows local users to cause a denial of service system crash by creating a packet filter and then loading crafted BPF instructions that trigger late convergence by the JIT compiler...