Lucene search
+L

890 matches found

BDU FSTEC
BDU FSTEC
added 2018/12/27 12:0 a.m.15 views

The vulnerability of the ChakraCore JavaScript script handler, related to errors in memory object handling mechanisms, allows attackers to execute arbitrary code.

The vulnerability of the ChakraCore JavaScript script handler is related to errors in memory object handling mechanisms. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with the privileges of the current user...

7.6CVSS7.4AI score0.75339EPSS
SaveExploits4References6
BDU FSTEC
BDU FSTEC
added 2018/12/13 12:0 a.m.13 views

The vulnerability of the Win32k component of the Windows operating system, which allows a hacker to increase their privileges and execute arbitrary code.

The vulnerability of the Win32k component of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code using a specially crafted application...

8.4CVSS8.2AI score0.04196EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2018/12/12 12:29 a.m.4 views

CVE-2018-8634

A remote code execution vulnerability exists in Windows where Microsoft text-to-speech fails to properly handle objects in the memory, aka "Microsoft Text-To-Speech Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers...

9.3CVSS6.7AI score0.14507EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2018/12/12 12:29 a.m.10 views

CVE-2018-8636

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Excel. This CVE ID is unique from...

9.3CVSS6.7AI score0.162EPSS
SaveExploits0References3
OSV
OSV
added 2018/12/12 12:29 a.m.3 views

CVE-2018-8597

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Excel. This CVE ID is unique from...

7.8CVSS6.4AI score0.1613EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2018/12/07 12:0 a.m.13 views

The vulnerability of Microsoft Excel’s spreadsheet editor, related to errors in memory object handling, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Excel editors is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code with user privileges using a specially crafted file...

10CVSS8AI score0.19059EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2018/12/07 12:0 a.m.13 views

The vulnerability of Microsoft Word’s text editor lies in memory object processing errors, which allow attackers to execute arbitrary code.

The vulnerability of Microsoft Word relates to errors in memory object handling. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code with user privileges using a specially crafted file...

10CVSS8.2AI score0.19059EPSS
SaveExploits0References4
Veracode
Veracode
added 2018/12/05 1:20 a.m.27 views

Remote Code Execution (RCE)

Microsoft ChakraCore is vulnerable to remote code execution. This is due to how the scripting engine handles objects in memory, allowing a remote attacker to execute arbitrary code in the context of the authenticated user. This CVE ID is different from CVE-2017-0010, CVE-2017-0015, CVE-2017-0032,...

7.5CVSS7.6AI score0.78538EPSS
SaveExploits5References1Affected Software2
BDU FSTEC
BDU FSTEC
added 2018/12/04 12:0 a.m.10 views

The vulnerability of the DirectX component in the Windows operating system allows attackers to elevate their privileges and execute arbitrary code in kernel mode.

The vulnerability of the DirectX component in the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code in kernel mode through a specially created application...

7CVSS8.2AI score0.01193EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2018/12/04 12:0 a.m.9 views

The vulnerability of the DirectX component of the Windows operating system, which allows a hacker to compromise protected information

The vulnerability of the DirectX component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

4.7CVSS7.7AI score0.01655EPSS
SaveExploits0References7
CNVD
CNVD
added 2018/11/19 12:0 a.m.6 views

Microsoft Windows DirectX elevation of privilege vulnerability (CNVD-2019-14446)

Microsoft Windows Server is an operating system released by Microsoft Corporation.DirectX Graphics Kernel DXGKRNL is one of the graphics kernel drivers. An elevation of privilege vulnerability exists in the way Microsoft Windows DirectX handles memory objects, which could be exploited by an...

7.8CVSS8.6AI score0.01193EPSS
SaveExploits0References1
OSV
OSV
added 2018/11/14 1:29 a.m.3 views

CVE-2018-8577

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft Excel, Microsoft Excel Viewer, Excel. This...

7.8CVSS6.4AI score0.19059EPSS
SaveExploits0References3
OSV
OSV
added 2018/11/14 1:29 a.m.5 views

CVE-2018-8544

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server...

8.8CVSS7.9AI score0.47556EPSS
SaveExploits4References4
NVD
NVD
added 2018/10/29 9:29 p.m.31 views

CVE-2018-17623

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS8.8AI score0.03279EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2018/10/19 12:0 a.m.9 views

The vulnerability of the DirectX Graphics Kernel driver on Windows operating systems allows attackers to execute processes with elevated privileges.

The vulnerability of the DirectX Graphics Kernel Driver DXGKRNL on Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute processes with elevated privileges...

7CVSS7.9AI score0.01192EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2018/10/11 12:0 a.m.23 views

Foxit Reader XFA TimeField addItem Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

7.8CVSS1.9AI score0.03918EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/11 12:0 a.m.30 views

Foxit Reader Annotation attachIcon Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

7.8CVSS2AI score0.03918EPSS
SaveExploits0References1
OSV
OSV
added 2018/10/10 1:29 p.m.8 views

CVE-2018-8500

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore...

9.8CVSS6.3AI score0.1847EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2018/10/10 1:29 p.m.5 views

CVE-2018-8472

An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in memory, allowing an attacker to retrieve information from a targeted system, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows 7, Windows Server...

5.5CVSS5.6AI score0.18869EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2018/10/10 1:29 p.m.4 views

CVE-2018-8502

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in Protected View, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Excel...

9.3CVSS6.7AI score0.19791EPSS
SaveExploits0References4
Rows per page
Query Builder