Lucene search
+L

890 matches found

CNVD
CNVD
added 2018/10/10 12:0 a.m.24 views

Microsoft Word Remote Code Execution Vulnerability (CNVD-2019-00630)

Microsoft Word is a word processing software in the Office suite of the American Microsoft Microsoft company. A remote code execution vulnerability exists in Microsoft Word due to the software's failure to properly handle objects in Protected View. A remote attacker can exploit the vulnerability ...

9.3CVSS8.7AI score0.18674EPSS
SaveExploits0References1
Veracode
Veracode
added 2018/10/09 5:28 a.m.26 views

Remote Code Execution (RCE)

pyopenssl is vulnerable to remote code execution. A Use-After-Free UAF vulnerability exists in the X509 object handling which can be remotely exploited to cause a denial of service condition or execute arbitrary code...

8.1CVSS8.4AI score0.04075EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2018/10/08 12:0 a.m.31 views

CVE-2018-1000807

Python Cryptographic Authority pyopenssl version prior to version 17.5.0 contains a CWE-416: Use After Free vulnerability in X509 object handling that can result in Use after free can lead to possible denial of service or remote code execution.. This attack appear to be exploitable via Depends on...

8.5AI score0.04075EPSS
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
added 2018/09/28 12:0 a.m.39 views

Foxit Reader OCG setAction Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of OCG...

6.8CVSS1.8AI score0.03279EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2018/09/21 12:0 a.m.7 views

The vulnerability of the Windows operating system’s kernel driver, caused by errors in memory object handling, allows a hacker to gain access to system memory contents.

The vulnerability of the kernel driver driver bowser.sys is caused by errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain access to system memory contents...

3.8CVSS7.8AI score0.02782EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2018/09/21 12:0 a.m.12 views

The vulnerability of the Windows operating system’s kernel, which allows a hacker to disclose protected information

The vulnerability of the Windows operating system’s kernel is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted application...

4.7CVSS7.7AI score0.02782EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2018/09/18 12:0 a.m.9 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

7.6CVSS8.2AI score0.14558EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/09/18 12:0 a.m.9 views

The vulnerability of the Internet Explorer browser, caused by errors in memory object handling, allows a hacker to execute arbitrary code.

The vulnerability of the Internet Explorer browser is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, through a specially crafted web page...

10CVSS8.2AI score0.12895EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/09/18 12:0 a.m.12 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

10CVSS8.2AI score0.69019EPSS
SaveExploits3References2Affected Software1
OSV
OSV
added 2018/09/13 12:29 a.m.7 views

CVE-2018-8455

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers...

7.8CVSS5.8AI score0.01085EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2018/09/13 12:29 a.m.3 views

CVE-2018-8456

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8354, CVE-2018-8391, CVE-2018-8457,...

7.6CVSS6.3AI score0.14558EPSS
SaveExploits0References4
CNVD
CNVD
added 2018/09/13 12:0 a.m.7 views

Microsoft Windows kernel privilege exploit

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. Windows kernel is one of the Windows system kernels. An elevation of privilege vulnerability exists in the way memory objects are handled in the Microsoft Windows kernel, which can be...

7.8CVSS8.6AI score0.01085EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2018/09/04 12:0 a.m.6 views

The vulnerability of Microsoft Excel’s spreadsheet editor, related to errors in memory object handling, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Excel editors is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

8.6CVSS6AI score0.17078EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2018/09/04 12:0 a.m.8 views

The vulnerability of the Microsoft Office suite relates to errors in memory object handling, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Office suite is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

8.4CVSS6AI score0.16245EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2018/09/04 12:0 a.m.8 views

The vulnerability of the Microsoft Office software package, related to errors in memory object handling, allows an attacker to disclose protected information.

The vulnerability of the Microsoft Office suite is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created document...

6.2CVSS5.4AI score0.12255EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2018/08/31 12:0 a.m.13 views

The vulnerability of the DirectX Graphics Kernel driver in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the DirectX Graphics Kernel Driver DXGKRNL on Windows operating systems is related to object handling errors in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7CVSS5.5AI score0.03444EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2018/08/31 12:0 a.m.10 views

The vulnerability of the DirectX Graphics Kernel driver in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the DirectX Graphics Kernel Driver DXGKRNL on Windows operating systems is related to object handling errors in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7CVSS5.5AI score0.01936EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2018/08/29 12:0 a.m.13 views

The vulnerability of the DirectX Graphics Kernel driver on Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the DirectX Graphics Kernel Driver DXGKRNL on Windows operating systems is related to object handling errors in memory. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

7CVSS5.5AI score0.03444EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2018/08/14 12:0 a.m.4 views

PT-2018-1483 · Microsoft · Directx +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to errors in object handling in memory within the DirectX Graphics Kernel DXGKRNL driver of Windows operating systems. It may allow an attacker to escalate...

7.8CVSS8.2AI score0.01936EPSS
SaveExploits0References10
Zero Day Initiative
Zero Day Initiative
added 2018/07/19 12:0 a.m.32 views

Foxit Reader Field object signatureSetSeedValue Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

6.8CVSS2AI score0.02773EPSS
SaveExploits0References1
Rows per page
Query Builder