Lucene search
+L

693 matches found

osv_cve
osv_cve
•added 2019/04/09 12:29 a.m.•11 views

CVE-2019-0755

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0702, CVE-2019-0767, CVE-2019-0775, CVE-2019-0782...

5.5CVSS6.3AI score0.02354EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/04/09 12:00 a.m.•6 views

CVE-2019-0685: Undefined Security Weakness

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0803, CVE-2019-0859...

7.8CVSS5.9AI score0.01649EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2019/04/09 12:00 a.m.•6 views

PT-2019-1797

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling objects in memory, which can allow an attacker to gain unauthorized access to protected information using a specially crafted application. It is an...

5.5CVSS0.02127EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2019/04/08 11:29 p.m.•10 views

CVE-2019-0666

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0665, CVE-2019-0667, CVE-2019-0772...

7.5CVSS7.8AI score0.20403EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2019/04/04 12:00 a.m.•11 views

PT-2019-1846 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to errors in object handling in memory within the Win32k component of the Windows operating system. This can allow a remote attacker to elevate their...

7.8CVSS7.3AI score0.4523EPSS
SaveExploits26References16
BDU FSTEC
BDU FSTEC
•added 2019/03/22 12:00 a.m.•16 views

Internet Explorer Script Handler RCE

The vulnerability of the Internet Explorer browser’s script handler exists due to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.6CVSS7.7AI score0.08096EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2019/03/22 12:00 a.m.•18 views

ChakraCore Microsoft Edge RCE

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser exists due to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

5CVSS7.6AI score0.09215EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2019/03/22 12:00 a.m.•21 views

Win32k Privilege Escalation

The vulnerability of the Win32k component in Windows operating systems exists due to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7CVSS7.6AI score0.53017EPSS
SaveExploits10References3
BDU FSTEC
BDU FSTEC
•added 2019/03/22 12:00 a.m.•40 views

Win32k Privilege Escalation

The vulnerability of the Win32k component in Windows operating systems exists due to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7CVSS7.6AI score0.01874EPSS
SaveExploits0References2
CNVD
CNVD
•added 2019/03/13 12:00 a.m.•29 views

Microsoft Chakra Scripting Engine Remote Memory Corruption Vulnerability Vulnerability

Microsoft ChakraCore and others are products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, or as a standalone JavaScript engine.Microsoft Edge is a web browser that comes with Windows 10 and later.Microsoft Internet...

6.5CVSS7.4AI score0.06553EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2019/03/12 12:00 a.m.•8 views

PT-2019-1639

Name of the Vulnerable Software and Affected Versions Windows Print Spooler affected versions not specified Description The issue is related to an information disclosure problem due to the Windows Print Spooler's failure to properly handle objects in memory. This could allow an attacker to disclo...

5.5CVSS0.01729EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
•added 2019/03/06 12:00 a.m.•21 views

Microsoft Office Access Connectivity Engine Code Execution

The vulnerability of the Microsoft Office Access Connectivity Engine component in Microsoft Office and Office 365 programs is related to errors in object handling in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created file...

9.3CVSS7.8AI score0.18414EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2019/03/05 11:29 p.m.•19 views

CVE-2019-0662

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0618...

8.8CVSS6.4AI score0.15355EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2019/03/05 11:29 p.m.•12 views

CVE-2019-0599

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0596, CVE-2019-0597, CVE-2019-0598, CVE-2019-0625...

7.8CVSS7.7AI score0.20132EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2019/03/01 12:00 a.m.•23 views

Windows GDI Information Disclosure

The vulnerability of the Windows GDI component of the Windows operating system is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted document file...

10CVSS6.6AI score0.67008EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2019/03/01 12:00 a.m.•14 views

Windows GDI Information Disclosure

The vulnerability of the Windows GDI component of the Windows operating system is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted document file...

4.7CVSS6.6AI score0.07708EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2019/03/01 12:00 a.m.•14 views

Windows kernel Information Disclosure

The vulnerability of the Windows operating system’s kernel component is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to disclose protected information...

5.5CVSS6.8AI score0.02063EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2019/03/01 12:00 a.m.•17 views

Windows GDI Information Disclosure

The vulnerability of the Windows GDI component of the Windows operating system is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted document file...

4.7CVSS6.6AI score0.07708EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2019/03/01 12:00 a.m.•17 views

Windows Jet Database Engine Code Execution

The vulnerability of the Windows Jet Database Engine component of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code using a specially crafted file...

6.8CVSS7.3AI score0.19059EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2019/03/01 12:00 a.m.•22 views

Microsoft Edge ChakraCore Memory Corruption Code Execution

The vulnerability of Microsoft Edge’s JavaScript ChakraCore engine is related to memory object handling flaws. Exploiting this vulnerability can allow a remote attacker to trigger memory corruption and execute arbitrary code through a specially crafted web page...

9.6CVSS7.8AI score0.11107EPSS
SaveExploits0References2
Rows per page
Query Builder