Lucene search
K

2820 matches found

CNVD
CNVD
added 2016/11/09 12:0 a.m.2 views

Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2016-10955)

Microsoft Edge is a Web browser developed by the American company Microsoft Microsoft. A memory corruption vulnerability exists in the scripting engine implementation of Microsoft Edge's handling of in-memory objects, which can be exploited by an attacker via a specially crafted Web site to run...

7.6CVSS6.8AI score0.69429EPSS
Exploits11References1
CNVD
CNVD
added 2016/11/09 12:0 a.m.2 views

Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2016-10952)

Microsoft Edge is a Web browser developed by the American company Microsoft Microsoft. A memory corruption vulnerability exists in the scripting engine implementation of Microsoft Edge's handling of in-memory objects, which can be exploited by an attacker via a specially crafted Web site to run...

7.6CVSS6.8AI score0.76867EPSS
Exploits4References1
CNVD
CNVD
added 2016/11/09 12:0 a.m.1 views

Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2016-10946)

Microsoft Edge is a Web browser developed by the American company Microsoft Microsoft. A memory corruption vulnerability exists in the scripting engine implementation of Microsoft Edge's handling of in-memory objects, which can be exploited by an attacker via a specially crafted Web site to run...

7.6CVSS6.8AI score0.69291EPSS
Exploits1References1
CNVD
CNVD
added 2016/11/09 12:0 a.m.3 views

Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2016-10941)

Microsoft Edge is a web browser developed by Microsoft USA and is the default browser that comes with the Windows 10 operating system. A memory corruption vulnerability exists in the rendering of the Microsoft Edge scripting engine, which stems from the program failing to properly handle objects ...

8.8CVSS7.2AI score0.88251EPSS
Exploits6References1
CNVD
CNVD
added 2016/11/09 12:0 a.m.1 views

Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2016-10953)

Microsoft Edge is a Web browser developed by the American company Microsoft Microsoft. A memory corruption vulnerability exists in the scripting engine implementation of Microsoft Edge's handling of in-memory objects, which can be exploited by an attacker via a specially crafted Web site to run...

8.8CVSS6.8AI score0.89752EPSS
Exploits6References1
Microsoft CVE
Microsoft CVE
added 2016/11/08 8:0 a.m.21 views

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...

7.6CVSS7.6AI score0.11931EPSS
Exploits11
Check Point Advisories
Check Point Advisories
added 2016/11/08 12:0 a.m.3 views

Microsoft Edge Scripting Engine Memory Corruption (MS16-129: CVE-2016-7242)

A type confusion vulnerability exists in Microsoft Edge. The vulnerability is due to the way JavaScript engine renders when handling objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...

7.6CVSS3.2AI score0.11931EPSS
Exploits11
Check Point Advisories
Check Point Advisories
added 2016/11/08 12:0 a.m.2 views

Microsoft Internet Explorer Memory Corruption (MS16-142: CVE-2016-7198)

A remote code execution vulnerability exists in Internet Explorer and Microsoft Edge. The vulnerability is due to the way scripting engine renders when handling objects in memory. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected...

7.6CVSS7.6AI score0.16295EPSS
Exploits0
Kaspersky
Kaspersky
added 2016/11/08 12:0 a.m.209 views

KLA10900 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to obtain sensitive information, spoof user interface, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Microsoft Browser c...

8.8CVSS8.3AI score0.89752EPSS
Exploits16References40
CNVD
CNVD
added 2016/10/16 12:0 a.m.4 views

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (CNVD-2016-09651)

Microsoft Internet Explorer is the default browser that comes with operating systems prior to Windows 10. A security vulnerability in Microsoft Internet Explorer's scripting engine that fails to properly handle objects in memory allows remote attackers to exploit the vulnerability to build...

9.3CVSS7.5AI score0.14909EPSS
Exploits0References1
NVD
NVD
added 2016/10/14 2:59 a.m.12 views

CVE-2016-3385

The scripting engine in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."...

9.3CVSS7.6AI score0.14909EPSS
Exploits0References4
OSV
OSV
added 2016/10/14 2:59 a.m.1 views

CVE-2016-3385

The scripting engine in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."...

7.5CVSS6.1AI score
Exploits0References4
Prion
Prion
added 2016/10/14 2:59 a.m.26 views

Memory corruption

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3386, CVE-2016-7190, and...

7.6CVSS7.7AI score0.78999EPSS
Exploits0References3
Prion
Prion
added 2016/10/14 2:59 a.m.18 views

Memory corruption

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3386, CVE-2016-3389, and...

7.6CVSS7.7AI score0.78999EPSS
Exploits0References3
Cvelist
Cvelist
added 2016/10/14 1:0 a.m.24 views

CVE-2016-3382

The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, as demonstrated by the Chakra JavaScript engine, aka "Scripting Engine Memory Corruption...

7.4AI score0.17771EPSS
Exploits0References5
CVE
CVE
added 2016/10/14 1:0 a.m.85 views

CVE-2016-3385

CVE-2016-3385 concerns the Microsoft Internet Explorer scripting engine (IE9–IE11) memory corruption vulnerability. A remote attacker can exploit it by tricking a user to visit a crafted website, potentially gaining arbitrary code execution or causing a memory corruption Denial of Service. The CV...

9.3CVSS7.5AI score0.14909EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2016/10/14 1:0 a.m.24 views

CVE-2016-3390

The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, as demonstrated by the Chakra JavaScript engine, aka "Scripting Engine Memory Corruption Vulnerability...

7.5AI score0.20493EPSS
Exploits0References5
CNVD
CNVD
added 2016/10/13 12:0 a.m.3 views

Microsoft Edge Scripting Engine Information Disclosure Vulnerability

Microsoft Edge is the web browser built into the Windows 10 version. An information leakage vulnerability exists when Microsoft Edge fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise a user's system...

9.3CVSS6.2AI score0.74578EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2016/10/12 12:0 a.m.48 views

Microsoft Internet Explorer Multiple Vulnerabilities (3192887)

This host is missing a critical security update according to Microsoft Bulletin MS16-118. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

9.3CVSS6.8AI score0.47217EPSS
Exploits0References15
Kaspersky
Kaspersky
added 2016/10/11 12:0 a.m.56 views

KLA11906 Multiple vulnerabilities for Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in...

10CVSS8.9AI score0.55736EPSS
Exploits0References40
Rows per page
Query Builder