Lucene search
K

4287 matches found

CNVD
CNVD
added 2016/07/14 12:0 a.m.2 views

Microsoft Edge Scripting Engine Memory Corruption Vulnerability

Microsoft Edge is a web browser developed by Microsoft and is the default browser that comes with the Windows 10 operating system.Chakra JavaScript engine is a JavaScript engine component used by Edge web browser. A memory corruption vulnerability exists in the Chakra JavaScript engine in Microso...

9.3CVSS7.6AI score0.17936EPSS
Exploits0References1
NVD
NVD
added 2016/07/13 1:59 a.m.12 views

CVE-2016-3269

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3265...

9.3CVSS8.7AI score0.17936EPSS
Exploits0References3
NVD
NVD
added 2016/07/13 1:59 a.m.14 views

CVE-2016-3265

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3269...

9.3CVSS8.7AI score0.20114EPSS
Exploits0References3
Prion
Prion
added 2016/07/13 1:59 a.m.19 views

Memory corruption

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3269...

9.3CVSS8.6AI score0.20114EPSS
Exploits0References3
Cvelist
Cvelist
added 2016/07/13 1:0 a.m.16 views

CVE-2016-3265

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3269...

8.7AI score0.20114EPSS
Exploits0References3
CVE
CVE
added 2016/07/13 1:0 a.m.61 views

CVE-2016-3265

CVE-2016-3265 impacts the Chakra JavaScript engine used by Microsoft Edge (ChakraCore). The connected documents describe a memory corruption vulnerability in the ChakraJS engine that could allow a remote attacker to execute arbitrary code or cause a denial of service via a crafted web site. The r...

9.3CVSS8.6AI score0.20114EPSS
Exploits0References3Affected Software1
OpenVAS
OpenVAS
added 2016/07/13 12:0 a.m.44 views

Microsoft Edge Multiple Vulnerabilities (3169999)

This host is missing a critical security update according to Microsoft Bulletin MS16-085. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

9.3CVSS6.1AI score0.32531EPSS
Exploits0References16
Tenable Nessus
Tenable Nessus
added 2016/07/12 12:0 a.m.53 views

MS16-085: Cumulative Security Update for Microsoft Edge (3169999)

The version of Microsoft Edge installed on the remote Windows host is missing Cumulative Security Update 3169999. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists due to a failure to properly implement Address Space Layout Randomization ASL...

9.3CVSS7.3AI score0.32531EPSS
Exploits0References14
exploitpack
exploitpack
added 2016/06/21 12:0 a.m.26 views

Microsoft Internet Explorer 11 - Garbage Collector Attribute Type Confusion (MS16-063)

Microsoft Internet Explorer 11 - Garbage Collector Attribute Type Confusion MS16-063 !-- CVE-2016-0199 / MS16-063: MSIE 11 garbage collector attribute type confusion ============================================================================ This information is available in an easier to read...

9.3CVSS0.2AI score0.70122EPSS
Exploits5
0day.today
0day.today
added 2016/06/21 12:0 a.m.32 views

Microsoft Internet Explorer 11 - Garbage Collector Attribute Type Confusion (MS16-063)

Exploit for windows platform in category dos / poc !-- CVE-2016-0199 / MS16-063: MSIE 11 garbage collector attribute type confusion ============================================================================ This information is available in an easier to read format on my blog at...

9.3CVSS8.6AI score0.70122EPSS
Exploits5
CNVD
CNVD
added 2016/06/19 12:0 a.m.2 views

Microsoft Edge Memory Corruption Vulnerability (CNVD-2016-04193)

Microsoft Edge is a browser that comes with win10. A memory corruption vulnerability exists in the way the Chakra JavaScript engine used by Microsoft Edge is rendered, allowing remote attackers to exploit the vulnerability to build special WEB pages that users are tricked into parsing, which can...

9.3CVSS7.3AI score0.67453EPSS
Exploits1References1
Packet Storm
Packet Storm
added 2016/06/17 12:0 a.m.39 views

Microsoft Internet Explorer 11 Garbage Collector Attribute Type Confusion

CVE-2016-0199 / MS16-063: MSIE 11 garbage collector attribute type confusion ============================================================================ This information is available in an easier to read format on my blog at http://blog.skylined.nl/ With MS16-063 Microsoft has patched...

9.3CVSS0.2AI score0.70122EPSS
Exploits5
OSV
OSV
added 2016/06/16 1:59 a.m.2 views

CVE-2016-3205

The Microsoft 1 JScript 5.8 and 2 VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption...

7.5CVSS6.1AI score0.14916EPSS
Exploits0References4
Cvelist
Cvelist
added 2016/06/16 1:0 a.m.23 views

CVE-2016-3199

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3214...

8.7AI score0.19183EPSS
Exploits0References4
Cvelist
Cvelist
added 2016/06/16 1:0 a.m.20 views

CVE-2016-3214

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3199...

8.7AI score0.22845EPSS
Exploits0References2
CVE
CVE
added 2016/06/16 1:0 a.m.59 views

CVE-2016-3214

The CVE-2016-3214 entry concerns the Chakra JavaScript engine used by Microsoft Edge. The provided documents describe a memory corruption vulnerability in Chakra that can be triggered by a crafted web site, enabling remote code execution or a denial of service. The connected advisories and CVE re...

9.3CVSS8.6AI score0.22845EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2016/06/16 1:0 a.m.90 views

CVE-2016-3199

The Chakra JavaScript engine in Microsoft Edge is affected by CVE-2016-3199, described as a memory corruption vulnerability triggered by a crafted web site that can lead to remote code execution or a denial of service. Connected advisories (GHSA-VFJW-CRCQ-Q92V and GHSA-538H-6RV2-WMJ3) reference a...

9.3CVSS8.6AI score0.19183EPSS
Exploits0References4Affected Software1
CNVD
CNVD
added 2016/06/16 12:0 a.m.2 views

Microsoft Edge Chakra JavaScript Scripting Engine Memory Corruption Vulnerability (CNVD-2016-04074)

Microsoft Edge is a web browser developed by Microsoft and is the default browser that comes with the Windows 10 operating system.Chakra JavaScript engine is a JavaScript engine component used by Edge web browser. A memory vulnerability exists in the way the Chakra JavaScript engine used in...

9.3CVSS7.5AI score0.19183EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2016/06/14 12:0 a.m.45 views

MS16-068: Cumulative Security Update for Microsoft Edge (3163656)

The version of Microsoft Edge installed on the remote Windows host is missing Cumulative Security Update 3163656. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists due to a failure to properly validate specially crafted documents. An...

9.3CVSS7.6AI score0.67453EPSS
Exploits1References9
RedHat Linux
RedHat Linux
added 2016/06/01 10:50 a.m.3 views

chromium-browser: out-of-bounds read in v8

The regexp aka regular expression implementation in Google V8 before 5.0.71.40, as used in Google Chrome before 51.0.2704.63, mishandles external string sizes, which allows remote attackers to cause a denial of service out-of-bounds read via crafted JavaScript code...

6.5CVSS7.4AI score0.04802EPSS
Exploits0References5
Rows per page
Query Builder