Lucene search
+L

921 matches found

OSV
OSV
•added 2019/04/09 9:29 p.m.•11 views

CVE-2019-0842

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability'...

8.8CVSS7.9AI score0.18031EPSS
SaveExploits0References2
Microsoft CVE
Microsoft CVE
•added 2019/04/09 7:00 a.m.•42 views

Win32k Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data;...

7.8CVSS7.5AI score0.4523EPSS
SaveExploits26
OSV
OSV
•added 2019/04/09 3:29 a.m.•10 views

CVE-2019-0780

A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corruption Vulnerability'...

7.5CVSS7.7AI score0.07985EPSS
SaveExploits0References1
OSV
OSV
•added 2019/04/09 2:29 a.m.•14 views

CVE-2019-0765

A remote code execution vulnerability exists in the way that comctl32.dll handles objects in memory, aka 'Comctl32 Remote Code Execution Vulnerability'...

8.8CVSS7.9AI score0.14334EPSS
SaveExploits0References1
OSV
OSV
•added 2019/04/09 12:29 a.m.•6 views

CVE-2019-0755

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0702, CVE-2019-0767, CVE-2019-0775, CVE-2019-0782...

5.5CVSS6.3AI score0.02354EPSS
SaveExploits0References3
OSV
OSV
•added 2019/04/09 12:29 a.m.•20 views

CVE-2019-0746

An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge, aka 'Scripting Engine Information Disclosure Vulnerability'...

6.5CVSS5.8AI score0.06553EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/04/09 12:00 a.m.•4 views

CVE-2019-0685: Undefined Security Weakness

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0803, CVE-2019-0859...

7.8CVSS5.9AI score0.01649EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2019/04/09 12:00 a.m.•4 views

PT-2019-1797

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling objects in memory, which can allow an attacker to gain unauthorized access to protected information using a specially crafted application. It is an...

5.5CVSS0.02127EPSS
SaveExploits0References6
VulnCheck KEV
VulnCheck KEV
•added 2019/04/09 12:00 a.m.•15 views

VulnCheck KEV: CVE-2019-0803

Microsoft Win32k contains an unspecified vulnerability due to it failing to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode...

7.8CVSS7.3AI score0.4523EPSS
SaveIn wildExploits26References12
OSV
OSV
•added 2019/04/08 11:29 p.m.•8 views

CVE-2019-0666

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0665, CVE-2019-0667, CVE-2019-0772...

7.5CVSS7.8AI score0.20403EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2019/04/04 12:00 a.m.•8 views

PT-2019-1846 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to errors in object handling in memory within the Win32k component of the Windows operating system. This can allow a remote attacker to elevate their...

7.8CVSS7.3AI score0.4523EPSS
SaveExploits26References16
BDU FSTEC
BDU FSTEC
•added 2019/03/22 12:00 a.m.•34 views

The vulnerability of the Win32k component in Windows operating systems, which allows attackers to increase their privileges

The vulnerability of the Win32k component in Windows operating systems exists due to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7CVSS7.6AI score0.0189EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2019/03/22 12:00 a.m.•17 views

The vulnerability of the Win32k component in Windows operating systems, which allows attackers to increase their privileges

The vulnerability of the Win32k component in Windows operating systems exists due to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7CVSS7.6AI score0.53017EPSS
SaveExploits10References3
BDU FSTEC
BDU FSTEC
•added 2019/03/22 12:00 a.m.•13 views

The vulnerability of the Internet Explorer browser’s script handler allows a hacker to execute arbitrary code.

The vulnerability of the Internet Explorer browser’s script handler exists due to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.6CVSS7.7AI score0.08096EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2019/03/22 12:00 a.m.•14 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser exists due to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

5CVSS7.6AI score0.09215EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
•added 2019/03/13 12:00 a.m.•22 views

Microsoft Chakra Scripting Engine Remote Memory Corruption Vulnerability Vulnerability

Microsoft ChakraCore and others are products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, or as a standalone JavaScript engine.Microsoft Edge is a web browser that comes with Windows 10 and later.Microsoft Internet...

6.5CVSS7.4AI score0.06553EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2019/03/12 12:00 a.m.•3 views

PT-2019-1657

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description A remote code execution issue exists due to improper memory object access in Microsoft Edge. This could allow an attacker to execute arbitrary code in the context of the current user b...

7.6CVSS0.07869EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2019/03/12 12:00 a.m.•5 views

PT-2019-1639

Name of the Vulnerable Software and Affected Versions Windows Print Spooler affected versions not specified Description The issue is related to an information disclosure problem due to the Windows Print Spooler's failure to properly handle objects in memory. This could allow an attacker to disclo...

5.5CVSS0.01729EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2019/03/12 12:00 a.m.•3 views

PT-2019-1588

Name of the Vulnerable Software and Affected Versions Microsoft Edge and Internet Explorer affected versions not specified Description A remote code execution issue exists due to errors in processing objects in memory. This could allow an attacker to execute arbitrary code in the context of the...

7.6CVSS0.07985EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2019/03/06 12:00 a.m.•15 views

The vulnerability of the Microsoft Office Access Connectivity Engine component in Microsoft Office and Office 365 programs allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Office Access Connectivity Engine component in Microsoft Office and Office 365 programs is related to errors in object handling in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created file...

9.3CVSS7.8AI score0.18414EPSS
SaveExploits0References3
Rows per page
Query Builder