PT-2018-2022

Name of the Vulnerable Software and Affected Versions Microsoft Office versions prior to the fixed version Microsoft Office 365 ProPlus versions prior to the fixed version Microsoft PowerPoint versions prior to the fixed version Microsoft SharePoint versions prior to the fixed version Microsoft...

Microsoft Excel Memory Object Handling Code Execution

The vulnerability of Microsoft Excel editors is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code with user privileges using a specially crafted file...

DirectX Windows Privilege Escalation

The vulnerability of the DirectX component in the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code in kernel mode through a specially created application...

DirectX Windows Compromise Protected Information

The vulnerability of the DirectX component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

Microsoft Windows DirectX elevation of privilege vulnerability (CNVD-2019-14446)

Microsoft Windows Server is an operating system released by Microsoft Corporation.DirectX Graphics Kernel DXGKRNL is one of the graphics kernel drivers. An elevation of privilege vulnerability exists in the way Microsoft Windows DirectX handles memory objects, which could be exploited by an...

CVE-2018-8577

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft Excel, Microsoft Excel Viewer, Excel. This...

CVE-2018-8544

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server...

DirectX Graphics Kernel Driver Privilege Escalation

The vulnerability of the DirectX Graphics Kernel Driver DXGKRNL on Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute processes with elevated privileges...

CVE-2018-8472

An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in memory, allowing an attacker to retrieve information from a targeted system, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows 7, Windows Server...

Windows kernel driver Memory Leak

The vulnerability of the kernel driver driver bowser.sys is caused by errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain access to system memory contents...

Windows kernel Information Disclosure

The vulnerability of the Windows operating system’s kernel is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted application...

Internet Explorer Memory Object Handling Code Execution

The vulnerability of the Internet Explorer browser is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, through a specially crafted web page...

ChakraCore Microsoft Edge RCE

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

ChakraCore Microsoft Edge RCE

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

CVE-2018-8455

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers...

CVE-2018-8456

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8354, CVE-2018-8391, CVE-2018-8457,...

Microsoft Windows kernel privilege exploit

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. Windows kernel is one of the Windows system kernels. An elevation of privilege vulnerability exists in the way memory objects are handled in the Microsoft Windows kernel, which can be...

Microsoft Excel Memory Object Handling Code Execution

The vulnerability of Microsoft Excel editors is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

Microsoft Office Memory Object Handling Code Execution

The vulnerability of the Microsoft Office suite is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

Microsoft Office Memory Disclosure

The vulnerability of the Microsoft Office suite is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created document...