Lucene search
+L

608 matches found

CNVD
CNVD
added 2018/09/13 12:0 a.m.7 views

Microsoft Windows kernel privilege exploit

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. Windows kernel is one of the Windows system kernels. An elevation of privilege vulnerability exists in the way memory objects are handled in the Microsoft Windows kernel, which can be...

7.8CVSS8.6AI score0.01085EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2018/09/04 12:0 a.m.8 views

The vulnerability of the Microsoft Office software package, related to errors in memory object handling, allows an attacker to disclose protected information.

The vulnerability of the Microsoft Office suite is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created document...

6.2CVSS5.4AI score0.12255EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2018/09/04 12:0 a.m.6 views

The vulnerability of Microsoft Excel’s spreadsheet editor, related to errors in memory object handling, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Excel editors is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

8.6CVSS6AI score0.17078EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2018/09/04 12:0 a.m.7 views

The vulnerability of the Microsoft Office suite relates to errors in memory object handling, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Office suite is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

8.4CVSS6AI score0.16245EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2018/08/31 12:0 a.m.10 views

The vulnerability of the DirectX Graphics Kernel driver in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the DirectX Graphics Kernel Driver DXGKRNL on Windows operating systems is related to object handling errors in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7CVSS5.5AI score0.01936EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2018/08/14 12:0 a.m.4 views

PT-2018-1483 · Microsoft · Directx +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to errors in object handling in memory within the DirectX Graphics Kernel DXGKRNL driver of Windows operating systems. It may allow an attacker to escalate...

7.8CVSS8.2AI score0.01936EPSS
SaveExploits0References10
OSV
OSV
added 2018/07/11 12:29 a.m.4 views

CVE-2018-8281

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability." This affects Microsoft Excel Viewer, Microsoft PowerPoint Viewer, Microsoft Office, Microsoft Office...

7.8CVSS6.4AI score0.19546EPSS
SaveExploits0References3
CNVD
CNVD
added 2018/07/11 12:0 a.m.7 views

Microsoft Edge Information Disclosure Vulnerability (CNVD-2018-12879)

Edge is Microsoft's browser for Windows 10. Microsoft Edge suffers from an information disclosure vulnerability. The vulnerability stems from Microsoft Edge failing to properly handle objects in memory. An attacker could exploit the vulnerability to obtain information that could further compromis...

4.3CVSS4.3AI score0.0573EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2018/06/29 12:0 a.m.7 views

The vulnerability of the JavaScript script handler ChakraCore in browsers Internet Explorer and Microsoft Edge allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of ChakraCore JavaScript handlers in browsers Internet Explorer and Microsoft Edge is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

7.6CVSS7.3AI score0.66877EPSS
SaveExploits4References4Affected Software2
OSV
OSV
added 2018/06/14 12:29 p.m.4 views

CVE-2018-8233

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 10, Windows 10 Servers...

7.8CVSS5.8AI score0.01317EPSS
SaveExploits0References3
OSV
OSV
added 2018/06/14 12:29 p.m.2 views

CVE-2018-8210

A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka "Windows Remote Code Execution Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. This CVE I...

7.8CVSS6.4AI score0.24706EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2018/06/07 12:0 a.m.7 views

The vulnerability of JavaScript script handlers in Internet Explorer arises from errors in memory object handling, allowing attackers to execute arbitrary code.

The vulnerability of JavaScript script handlers in Internet Explorer arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted web page...

7.6CVSS8.3AI score0.15556EPSS
SaveExploits0References4Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2018/06/01 12:0 a.m.5 views

VulnCheck KEV: CVE-2018-1038

The Windows kernel in Windows 7 SP1 and Windows Server 2008 R2 SP1 allows an elevation of privilege vulnerability due to the way it handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability."...

7.8CVSS7.3AI score0.08915EPSS
SaveExploits3References1
BDU FSTEC
BDU FSTEC
added 2018/05/31 12:0 a.m.9 views

The vulnerability of the Microsoft Office suite arises from errors in memory object handling, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Office suite is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted Microsoft Office file, from a remote location...

9.3CVSS6AI score0.24982EPSS
SaveExploits0References4
OSV
OSV
added 2018/05/09 7:29 p.m.7 views

CVE-2018-8173

A remote code execution vulnerability exists in Microsoft InfoPath when the software fails to properly handle objects in memory, aka "Microsoft InfoPath Remote Code Execution Vulnerability." This affects Microsoft Infopath...

7.8CVSS6.4AI score0.19789EPSS
SaveExploits0References3
OSV
OSV
added 2018/05/09 7:29 p.m.2 views

CVE-2018-8158

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability." This affects Microsoft Office. This CVE ID is unique from CVE-2018-8157, CVE-2018-8161...

7.8CVSS6.4AI score0.24494EPSS
SaveExploits0References3
VulnCheck KEV
VulnCheck KEV
added 2018/05/08 12:0 a.m.4 views

VulnCheck KEV: CVE-2018-8120

A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory...

7.2CVSS6.9AI score0.73721EPSS
SaveExploits18References1
OSV
OSV
added 2018/04/12 1:29 a.m.6 views

CVE-2018-0920

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Excel. This CVE ID is unique from CVE-2018-1011, CVE-2018-1027, CVE-2018-1029...

7.8CVSS6.4AI score0.21001EPSS
SaveExploits0References3
CNVD
CNVD
added 2018/04/11 12:0 a.m.6 views

Microsoft Excel Remote Code Execution Vulnerability (CNVD-2018-08761)

Microsoft Excel 2010 SP2, Excel 2013 RT SP1 and Excel 2013 SP1 are spreadsheet processing software in the Office suite of Microsoft Corporation USA. A remote code execution vulnerability exists in Microsoft Excel 2010 SP2, Excel 2013 RT SP1, and Excel 2013 SP1, which stems from the program failin...

9.3CVSS8.3AI score0.20136EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/04/11 12:0 a.m.5 views

Microsoft Internet Explorer Scripting Engine Information Disclosure Vulnerability (CNVD-2018-08026)

Internet Explorer is a web browser from Microsoft. Microsoft Internet Explorer has a remote information disclosure vulnerability in the scripting engine's memory object handling, which can be exploited by an attacker to obtain sensitive information...

4.3CVSS6AI score0.05536EPSS
SaveExploits0References1
Rows per page
Query Builder