Lucene search
+L

4873 matches found

OSV
OSV
added 2016/12/06 12:00 a.m.7 views

UBUNTU-CVE-2016-9651

A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

8.8CVSS7.7AI score0.14476EPSS
SaveExploits3References4
ThreatPost
ThreatPost
added 2016/12/02 11:45 a.m.37 views

Google Fixes 12 High-Severity Vulnerabilities In Chrome Browser

Google is urging Windows, Mac and Linux users to update their Chrome browsers to fix multiple vulnerabilities that could allow malicious third parties to take control of targeted systems. Released Thursday, Chrome version 55.0.2883.75 for Windows, Mac, and Linux fixes those security issues. It al...

6.8CVSS0.5AI score0.14476EPSS
SaveExploits6References4
Exploit DB
Exploit DB
added 2016/11/17 12:00 a.m.39 views

Microsoft Edge - 'eval' Type Confusion

var p = new Proxyeval, ; p"alert"e"";...

7.6CVSS7.4AI score0.60818EPSS
SaveExploits2
NVD
NVD
added 2016/11/10 6:59 a.m.28 views

CVE-2016-7202

The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," as demonstrated by the Chakra...

7.6CVSS7.7AI score0.714EPSS
SaveExploits5References7
Prion
Prion
added 2016/11/10 6:59 a.m.32 views

Memory corruption

The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," as demonstrated by the Chakra...

7.6CVSS7.6AI score0.8249EPSS
SaveExploits18References7
Vulnrichment
Vulnrichment
added 2016/11/10 6:16 a.m.18 views

CVE-2016-7201

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7200, CVE-2016-7202,...

8.8AI score0.79687EPSS
SaveExploits7References7
Cvelist
Cvelist
added 2016/11/10 6:16 a.m.53 views

CVE-2016-7208

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7200, CVE-2016-7201,...

7.9AI score0.15244EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2016/11/10 6:16 a.m.36 views

CVE-2016-7240

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7200, CVE-2016-7201,...

7.9AI score0.60818EPSS
SaveExploits2References4
Cvelist
Cvelist
added 2016/11/10 6:16 a.m.43 views

CVE-2016-7202

The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," as demonstrated by the Chakra...

7.9AI score0.714EPSS
SaveExploits5References7
ATTACKERKB
ATTACKERKB
added 2016/11/10 12:00 a.m.49 views

CVE-2016-7201

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka “Scripting Engine Memory Corruption Vulnerability,” a different vulnerability than CVE-2016-7200, CVE-2016-7202,...

8.8CVSS8AI score0.8249EPSS
SaveIn wildExploits18References10
ATTACKERKB
ATTACKERKB
added 2016/11/10 12:00 a.m.34 views

CVE-2016-7202

The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka “Scripting Engine Memory Corruption Vulnerability,” as demonstrated by the Chakra...

8.8CVSS8AI score0.8249EPSS
SaveIn wildExploits18References8
ATTACKERKB
ATTACKERKB
added 2016/11/10 12:00 a.m.46 views

CVE-2016-7200

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka “Scripting Engine Memory Corruption Vulnerability,” a different vulnerability than CVE-2016-7201, CVE-2016-7202,...

8.8CVSS8AI score0.8249EPSS
SaveIn wildExploits18References10
Check Point Advisories
Check Point Advisories
added 2016/11/08 12:00 a.m.16 views

Microsoft Edge Scripting Engine Memory Corruption (MS16-129: CVE-2016-7200)

A memory corruption vulnerability exists in Microsoft Edge. The vulnerability is due to the way JavaScript engine renders when handling objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...

7.6CVSS3.5AI score0.8249EPSS
SaveExploits7
Positive Technologies
Positive Technologies
added 2016/11/08 12:00 a.m.9 views

PT-2016-2925 · Microsoft · Chakra Javascript Engine +1

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is caused by a buffer overflow in the Chakra JavaScript engine of Microsoft Edge, allowing a remote attacker to execute arbitrary code or cause a denial of service memory...

7.6CVSS8.3AI score0.15236EPSS
SaveExploits0References20
Check Point Advisories
Check Point Advisories
added 2016/11/08 12:00 a.m.29 views

Microsoft Edge Scripting Engine Memory Corruption (MS16-129: CVE-2016-7242)

A type confusion vulnerability exists in Microsoft Edge. The vulnerability is due to the way JavaScript engine renders when handling objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...

7.6CVSS3.2AI score0.1675EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
added 2016/11/08 12:00 a.m.40 views

Microsoft Edge Scripting Engine Memory Corruption (MS16-129: CVE-2016-7240)

A memory corruption vulnerability exists in Microsoft Edge. The vulnerability is due to the way Chakra JavaScript engine renders when handling objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...

7.6CVSS3.4AI score0.60818EPSS
SaveExploits2
Positive Technologies
Positive Technologies
added 2016/11/08 12:00 a.m.7 views

PT-2016-2973 · Microsoft · Chakra Javascript Engine +1

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is caused by a buffer overflow in the Chakra JavaScript engine of Microsoft Edge, allowing a remote attacker to execute arbitrary code or cause a denial of service memory...

8.8CVSS8.3AI score0.79687EPSS
SaveExploits7References28
CNVD
CNVD
added 2016/11/04 12:00 a.m.6 views

Google V8 suffers from an unspecified vulnerability (CNVD-2016-10713)

Google V8 is the United States Google Google company developed a Web browser. Google Chrome set of open source JavaScript engine. An unspecified vulnerability exists in Google V8. No detailed vulnerability details are available at this time...

8.8CVSS8.9AI score0.34814EPSS
SaveExploits1References1
OSV
OSV
added 2016/10/29 1:59 a.m.5 views

CVE-2016-7505

A buffer overflow vulnerability was observed in divby function of Artifex Software, Inc. MuJS before 8c805b4eb19cf2af689c860b77e6111d2ee439d5. A successful exploitation of this issue can lead to code execution or denial of service condition...

9.8CVSS6.4AI score0.02644EPSS
SaveExploits1References2
OSV
OSV
added 2016/10/14 2:59 a.m.6 views

CVE-2016-3390

The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, as demonstrated by the Chakra JavaScript engine, aka "Scripting Engine Memory Corruption Vulnerability...

7.5CVSS6.1AI score0.16919EPSS
SaveExploits0References5
Rows per page
Query Builder