11399 matches found
Memory corruption
In FreeBSD before 11.0-STABLE, 11.0-RELEASE-p10, 10.3-STABLE, and 10.3-RELEASE-p19, ipfilter using "keep state" or "keep frags" options can cause a kernel panic when fed specially crafted packet fragments due to incorrect memory handling...
CVE-2017-1081
In FreeBSD before 11.0-STABLE, 11.0-RELEASE-p10, 10.3-STABLE, and 10.3-RELEASE-p19, ipfilter using "keep state" or "keep frags" options can cause a kernel panic when fed specially crafted packet fragments due to incorrect memory handling...
Microsoft Edge PDF Information Disclosure Vulnerability
An information disclosure vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, in a web-based attack...
Microsoft Excel Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...
Graphics Component Font Parsing Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploits this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete dat...
Microsoft Office Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...
Scripting Engine Information Disclosure Vulnerability
An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Internet Explorer. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. In a web-based attack scenario, an...
Windows Kernel Information Disclosure Vulnerability
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have to log on ...
Security Updates for Microsoft Office Products (April 2018)
The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the...
Microsoft Windows kernel local elevation of privilege vulnerability (CNVD-2018-08190)
Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 are both operating systems released by Microsoft Corporation in the United States.Microsoft Windows 7 SP1 is an operating system for personal computers.Windows Server 2008 R2 SP1 is a server operating system. Windows Server 2008 R2 SP1 is a...
CVE-2018-1038
The Windows kernel in Windows 7 SP1 and Windows Server 2008 R2 SP1 allows an elevation of privilege vulnerability due to the way it handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability."...
CVE-2018-1038
The Windows kernel in Windows 7 SP1 and Windows Server 2008 R2 SP1 allows an elevation of privilege vulnerability due to the way it handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability."...
The vulnerability of the Microsoft Office software package arises from improper handling of objects in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the Microsoft Office suite is related to improper handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file from a remote location...
The vulnerability of Microsoft Edge browser and the ChakraCore JavaScript engine handler involves improper handling of objects in memory, allowing an attacker to trigger memory corruption and execute arbitrary code.
The vulnerability of Microsoft Edge browser and the JavaScript script handler ChakraCore is related to improper handling of objects in memory. Exploiting this vulnerability can allow a remote attacker to trigger memory corruption and execute arbitrary code using a specially crafted web page...
The vulnerability of the Microsoft Office software package arises from improper handling of objects in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the Microsoft Office suite is related to improper handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file from a remote location...
The vulnerability of Microsoft Edge browser and the ChakraCore JavaScript engine handler involves improper handling of objects in memory, allowing an attacker to trigger memory corruption and execute arbitrary code.
The vulnerability of Microsoft Edge browser and the JavaScript script handler ChakraCore is related to improper handling of objects in memory. Exploiting this vulnerability can allow a remote attacker to trigger memory corruption and execute arbitrary code using a specially crafted web page...
The vulnerability of the Microsoft Office software package arises from improper handling of objects in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the Microsoft Office suite is related to improper handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file from a remote location...
Microsoft Edge’s vulnerability, related to improper handling of objects in memory, allows a malicious actor to trigger memory corruption and execute arbitrary code.
The vulnerability of Microsoft Edge relates to improper handling of objects in memory. Exploiting this vulnerability can allow a remote attacker to cause memory corruption and execute arbitrary code using a specially crafted web page...
The vulnerability of the Microsoft Office software package arises from improper handling of objects in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the Microsoft Office suite is related to improper handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file from a remote location...
The vulnerability of Microsoft Edge browser and the ChakraCore JavaScript engine handler involves improper handling of objects in memory, allowing an attacker to trigger memory corruption and execute arbitrary code.
The vulnerability of Microsoft Edge browser and the JavaScript script handler ChakraCore is related to improper handling of objects in memory. Exploiting this vulnerability can allow a remote attacker to trigger memory corruption and execute arbitrary code using a specially crafted web page...