Microsoft Edge Chakra ParseCatch Type Confusion (CVE-2017-11764)

A type confusion vulnerability exists in Microsoft Edge Chakra JavaScript Engine. The vulnerability is due to a lack of validation in the ParseCatch method which results in the generation on a malformed Abstract Syntax Tree AST. A remote attacker could exploit this vulnerability by enticing the...

USN-3460-1: WebKitGTK+ vulnerabilities

A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service...

Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-11809)

A Memory Corruption Vulnerability exists in Microsoft Edge. The vulnerability is due to the way JavaScript engine renders when handling objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...

Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-11800)

A Memory Corruption Vulnerability exists in Microsoft Edge. The vulnerability is due to the way JavaScript engine renders when handling objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...

PT-2017-3041

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to the improper handling of objects in memory by the ChakraCore JavaScript engine handler in Microsoft Edge. This could allow a remote attacker to execute arbitrar...

PT-2017-3032

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to the improper handling of objects in memory by the ChakraCore JavaScript engine handler in Microsoft Edge. This could allow a remote attacker to execute arbitrar...

PT-2017-3034

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to the improper handling of objects in memory by the ChakraCore JavaScript engine handler in Microsoft Edge. This could allow a remote attacker to execute arbitrar...

PT-2017-3035

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to the incorrect handling of objects in memory by the ChakraCore JavaScript engine handler in Microsoft Edge. This could allow a remote attacker to execute arbitra...

PT-2017-3037

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to the improper handling of objects in memory by the ChakraCore JavaScript engine handler in Microsoft Edge. This could allow a remote attacker to execute arbitrar...

PT-2017-3038

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to the improper handling of JavaScript objects in memory by the scripting engine. This could allow a remote attacker to execute arbitrary code in the context of th...

PT-2017-3028

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to the incorrect handling of objects in memory by the ChakraCore JavaScript engine handler in Microsoft Edge. This could allow a remote attacker to execute arbitra...

PT-2017-3031

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to the incorrect handling of objects in memory by the ChakraCore JavaScript engine handler in Microsoft Edge. This could allow a remote attacker to execute arbitra...

PT-2017-3029

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to the incorrect handling of objects in memory by the ChakraCore JavaScript engine handler in Microsoft Edge. This could allow a remote attacker to execute arbitra...

PT-2017-3039

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to the improper handling of objects in memory by the ChakraCore JavaScript engine handler in Microsoft Edge. This could allow a remote attacker to execute arbitrar...

PT-2017-3043

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to the improper handling of objects in memory by the ChakraCore JavaScript engine handler in Microsoft Edge. This could allow a remote attacker to execute arbitrar...

PT-2017-3027

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to the incorrect handling of objects in memory by the ChakraCore JavaScript engine handler in Microsoft Edge. This could allow a remote attacker to execute arbitra...

PT-2017-3033

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to the improper handling of objects in memory by the ChakraCore JavaScript engine handler in Microsoft Edge. This could allow a remote attacker to execute arbitrar...

Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2017-0201)

A remote code execution vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to the way JavaScript engine renders when handling objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafted we...

chromium-browser: out-of-bounds access in v8

Inappropriate use of JIT optimisation in V8 in Google Chrome prior to 61.0.3163.100 for Linux, Windows, and Mac allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page, related to the escape analysis phase...

Google Chrome V8 Crankshaft Type Confusion (CVE-2017-5070)

A type confusion vulnerability exists in Google Chrome. The vulnerability is due to improper handling of objects in memory by the V8 JavaScript engine while compiling code. A remote attacker could exploit this vulnerability by enticing a user to open a malicious web page...