CVE-2017-11909: Improper Restriction of Operations within the Bounds of a Memory Buffer

ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from...

CVE-2017-11908: Improper Restriction of Operations within the Bounds of a Memory Buffer

ChakraCore and Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889,...

CVE-2017-11905: Improper Restriction of Operations within the Bounds of a Memory Buffer

ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ...

CVE-2017-11901: Improper Restriction of Operations within the Bounds of a Memory Buffer

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to how Internet Explorer...

CVE-2017-11893: Improper Restriction of Operations within the Bounds of a Memory Buffer

ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ...

PT-2017-12304

Name of the Vulnerable Software and Affected Versions Microsoft browsers affected versions not specified Description A remote code execution issue exists in the way the scripting engine handles objects in memory. This could corrupt memory, allowing an attacker to execute arbitrary code in the...

PT-2017-12309

Name of the Vulnerable Software and Affected Versions Microsoft browsers affected versions not specified Description An information disclosure issue exists due to the scripting engine's improper handling of objects in memory. This could allow an attacker to obtain information that could be used t...

PT-2017-12291

Name of the Vulnerable Software and Affected Versions Microsoft browsers affected versions not specified Description A remote code execution issue exists in the way the scripting engine handles objects in memory. This could corrupt memory, allowing an attacker to execute arbitrary code in the...

PT-2017-12313

Name of the Vulnerable Software and Affected Versions Microsoft browsers affected versions not specified Description A remote code execution issue exists due to how the scripting engine handles objects in memory. This could lead to memory corruption, allowing an attacker to execute arbitrary code...

KLA10918 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extedned Support Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Windows RRAS Servi...

KLA11158 Multiple vunlerabilities in Microsoft Browsers

Multiple vulnerabilities were found in Microsoft Browsers. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A memory corruption vulnerability in Scripting Engine can be exploited remotely via...

PT-2017-12289

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description A remote code execution issue exists due to the scripting engine's handling of objects in memory. This could lead to memory corruption, allowing an attacker to execute arbitrary code i...

Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-11893)

A remote code execution vulnerability exists in Microsoft Edge. The vulnerability is due to the way the scripting engine handles objects in memory. An attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...

PT-2017-12307

ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890,...

PT-2017-12299

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description A remote code execution issue exists due to the scripting engine's handling of objects in memory. This could lead to memory corruption, allowing an attacker to execute arbitrary code i...

PT-2017-12296

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description A remote code execution issue exists in the way the scripting engine handles objects in memory. This could allow an attacker to corrupt memory and execute arbitrary code in the context...

PT-2017-12302

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description A remote code execution issue exists in the way the scripting engine handles objects in memory. This could allow an attacker to corrupt memory and execute arbitrary code in the context...

CVE-2017-11889: Improper Restriction of Operations within the Bounds of a Memory Buffer

ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". Thi...

PT-2017-12303

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description A remote code execution issue exists due to the scripting engine's handling of objects in memory. This could lead to memory corruption, allowing an attacker to execute arbitrary code i...

Windows Server 2012 December 2017 Security Updates

The remote Windows host is missing security update 4054523 or cumulative update 4054520. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in RPC if the server has Routing and Remote Access enabled. An attacker who successfully exploited this...