Lucene search
K

4495 matches found

CNVD
CNVD
added 2016/12/07 12:0 a.m.5 views

Google Chrome V8 Memory Misreference Vulnerability (CNVD-2016-12117)

Google Chrome is the United States Google Google company developed a Web browser. Google V8 is one of the open source JavaScript engine. A memory misreference vulnerability exists in Google Chrome versions prior to 55.0.2883.75 for Google V8. An attacker could exploit this vulnerability to cause ...

8.8CVSS8.8AI score0.01151EPSS
Exploits0References1
OSV
OSV
added 2016/12/06 12:0 a.m.2 views

UBUNTU-CVE-2016-9651

A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

8.8CVSS7.7AI score0.11182EPSS
Exploits2References4
OSV
OSV
added 2016/12/06 12:0 a.m.1 views

UBUNTU-CVE-2016-5213

A use after free in V8 in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.3AI score0.01151EPSS
Exploits0References4
ThreatPost
ThreatPost
added 2016/12/02 11:45 a.m.36 views

Google Fixes 12 High-Severity Vulnerabilities In Chrome Browser

Google is urging Windows, Mac and Linux users to update their Chrome browsers to fix multiple vulnerabilities that could allow malicious third parties to take control of targeted systems. Released Thursday, Chrome version 55.0.2883.75 for Windows, Mac, and Linux fixes those security issues. It al...

6.8CVSS0.5AI score0.11182EPSS
Exploits5References4
Exploit DB
Exploit DB
added 2016/11/17 12:0 a.m.35 views

Microsoft Edge - 'eval' Type Confusion

var p = new Proxyeval, ; p"alert"e"";...

7.4AI score
Exploits0
NVD
NVD
added 2016/11/10 6:59 a.m.22 views

CVE-2016-7202

The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," as demonstrated by the Chakra...

7.6CVSS7.7AI score0.73289EPSS
Exploits4References7
Prion
Prion
added 2016/11/10 6:59 a.m.25 views

Memory corruption

The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," as demonstrated by the Chakra...

7.6CVSS7.6AI score0.8249EPSS
Exploits13References7
Cvelist
Cvelist
added 2016/11/10 6:16 a.m.35 views

CVE-2016-7202

The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," as demonstrated by the Chakra...

7.9AI score0.73289EPSS
Exploits4References7
Vulnrichment
Vulnrichment
added 2016/11/10 6:16 a.m.9 views

CVE-2016-7201

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7200, CVE-2016-7202,...

8.8AI score0.79687EPSS
Exploits6References7
Cvelist
Cvelist
added 2016/11/10 6:16 a.m.41 views

CVE-2016-7208

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7200, CVE-2016-7201,...

7.9AI score0.15277EPSS
Exploits0References3
Cvelist
Cvelist
added 2016/11/10 6:16 a.m.28 views

CVE-2016-7240

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7200, CVE-2016-7201,...

7.9AI score0.66469EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2016/11/10 12:0 a.m.41 views

CVE-2016-7200

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka “Scripting Engine Memory Corruption Vulnerability,” a different vulnerability than CVE-2016-7201, CVE-2016-7202,...

8.8CVSS8AI score0.8249EPSS
In wildExploits13References10
ATTACKERKB
ATTACKERKB
added 2016/11/10 12:0 a.m.38 views

CVE-2016-7201

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka “Scripting Engine Memory Corruption Vulnerability,” a different vulnerability than CVE-2016-7200, CVE-2016-7202,...

8.8CVSS8AI score0.8249EPSS
In wildExploits13References10
ATTACKERKB
ATTACKERKB
added 2016/11/10 12:0 a.m.29 views

CVE-2016-7202

The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka “Scripting Engine Memory Corruption Vulnerability,” as demonstrated by the Chakra...

8.8CVSS8AI score0.8249EPSS
In wildExploits13References8
Check Point Advisories
Check Point Advisories
added 2016/11/08 12:0 a.m.5 views

Microsoft Edge Scripting Engine Memory Corruption (MS16-129: CVE-2016-7200)

A memory corruption vulnerability exists in Microsoft Edge. The vulnerability is due to the way JavaScript engine renders when handling objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...

7.6CVSS3.5AI score0.8249EPSS
Exploits6
Check Point Advisories
Check Point Advisories
added 2016/11/08 12:0 a.m.5 views

Microsoft Edge Scripting Engine Memory Corruption (MS16-129: CVE-2016-7240)

A memory corruption vulnerability exists in Microsoft Edge. The vulnerability is due to the way Chakra JavaScript engine renders when handling objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...

7.6CVSS3.4AI score0.66469EPSS
Exploits1
Check Point Advisories
Check Point Advisories
added 2016/11/08 12:0 a.m.4 views

Microsoft Edge Scripting Engine Memory Corruption (MS16-129: CVE-2016-7242)

A type confusion vulnerability exists in Microsoft Edge. The vulnerability is due to the way JavaScript engine renders when handling objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...

7.6CVSS3.2AI score0.1628EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2016/11/08 12:0 a.m.3 views

PT-2016-2973 · Microsoft · Chakra Javascript Engine +1

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is caused by a buffer overflow in the Chakra JavaScript engine of Microsoft Edge, allowing a remote attacker to execute arbitrary code or cause a denial of service memory...

8.8CVSS8.3AI score0.79687EPSS
Exploits6References28
Positive Technologies
Positive Technologies
added 2016/11/08 12:0 a.m.3 views

PT-2016-2925 · Microsoft · Chakra Javascript Engine +1

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is caused by a buffer overflow in the Chakra JavaScript engine of Microsoft Edge, allowing a remote attacker to execute arbitrary code or cause a denial of service memory...

7.6CVSS8.3AI score0.15168EPSS
Exploits0References20
CNVD
CNVD
added 2016/11/04 12:0 a.m.1 views

Google V8 suffers from an unspecified vulnerability (CNVD-2016-10713)

Google V8 is the United States Google Google company developed a Web browser. Google Chrome set of open source JavaScript engine. An unspecified vulnerability exists in Google V8. No detailed vulnerability details are available at this time...

8.8CVSS8.9AI score0.34703EPSS
Exploits1References1
Rows per page
Query Builder