11356 matches found
Remote Code Execution (RCE)
ChakraCore is vulnerable to remote code execution RCE. This is due to how the scripting engine handles objects in memory, allowing a remote attacker to execute arbitrary code in the context of the current user...
macOS : Apple Safari < 11.1.1 Multiple Vulnerabilities
The version of Apple Safari installed on the remote macOS or Mac OS X host is prior to 11.1.1 It is, therefore, affected by multiple vulnerabilities. - A remote code execution vulnerability exists in WebKit due to improper memory handling. An unauthenticated, remote attacker can exploit this, via...
The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, which allows a hacker to exploit it to disclose protected information
The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information by using a specially crafted web page...
The vulnerability of the DirectX component of the Windows operating system, which allows a hacker to execute arbitrary code in kernel mode
The vulnerability of the DirectX component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in kernel mode using a specially created program...
The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.
The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted web page...
About the security content of iTunes 12.9.4 for Windows - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...
SUSE-SU-2019:1648-1 Recommended update for evince
This update for evince provides the following fixes: Security issue fixed: - CVE-2019-11459: Fixed an improper error handling in which could have led to use of unitialized use of memory bsc1133037. Other issue addressed: - Removed Supplements from psdocument package, so that it isn't pulled in by...
The vulnerability of the Win32k component of the Windows operating system allows a hacker to increase their privileges and execute arbitrary code in kernel mode.
The vulnerability of the Win32k component of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code in kernel mode through a specially created application...
Buffer Overflow Vulnerability in Multiple Qualcomm Products (CNVD-2019-18596)
Qualcomm MDM9206 and others are products of Qualcomm Incorporated.The MDM9206 is a central processing unit CPU product.The MDM9607 is a central processing unit CPU product.The SDX20 is a modem.The MDM9206 is a central processing unit CPU product.The MDM9607 is a central processing unit CPU...
The vulnerability of the Windows Installer component in Windows operating systems, related to object handling errors in memory, allows attackers to exploit their privileges.
The vulnerability of the Windows Installer component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the Windows Network File System (NFS) protocol in Windows operating systems arises from improper handling of objects in memory, allowing attackers to exploit their privileges.
The vulnerability of the Windows Network File System NFS protocol in Windows operating systems is related to improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Windows Secure Kernel Mode mechanism allows a malicious actor to induce incorrect application of virtual trust levels.
The vulnerability of the Windows Secure Kernel Mode mechanism in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to improperly apply Virtual Trust Levels VTLs through a specially created application...
The vulnerability of the Windows GDI interface on Windows operating systems allows attackers to disclose protected information.
The vulnerability of Windows GDI graphical device interfaces on Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information through a specially crafted document or web page...
The vulnerability of the JavaScript script handler ChakraCore in browsers Internet Explorer and Microsoft Edge allows a hacker to execute arbitrary code.
The vulnerability of the JavaScript script handler ChakraCore in browsers Internet Explorer and Microsoft Edge is related to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
Remote Code Execution (RCE)
ChakraCore is vulnerable to remote code execution RCE. This is due to how the scripting engine handles objects in memory, allowing a remote attacker to execute arbitrary code in the context of the current user...
Remote Code Execution (RCE)
ChakraCore is vulnerable to remote code execution RCE. This is due to how the scripting engine handles objects in memory, allowing a remote attacker to execute arbitrary code in the context of the current user...
CVE-2019-1081
An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, in a web-based attack...
CVE-2019-1055
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploit...
CVE-2019-1034
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the...
CVE-2019-1045
An elevation of privilege vulnerability exists in the way that the Windows Network File System NFS handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could...