Lucene search
K

2814 matches found

Check Point Advisories
Check Point Advisories
added 2019/01/08 12:0 a.m.4 views

Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-0539)

A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.6CVSS5.1AI score0.9095EPSS
Exploits11
Kaspersky
Kaspersky
added 2019/01/08 12:0 a.m.61 views

KLA11397 Multiple vulnerabilities in Microsoft Browsers

Multiple vulnerabilities were found in Microsoft Browsers. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. A memory corruption vulnerability in Microsoft Edge can be exploited remotely via specially...

9.3CVSS9AI score0.9095EPSS
Exploits19References20
Check Point Advisories
Check Point Advisories
added 2019/01/08 12:0 a.m.3 views

Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-0567)

A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.6CVSS5.1AI score0.89616EPSS
Exploits11
Tenable Nessus
Tenable Nessus
added 2019/01/08 12:0 a.m.48 views

KB4480962: Windows 10 January 2019 Security Update

The remote Windows host is missing security update 4480962. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtai...

9.3CVSS7.9AI score0.9095EPSS
Exploits38References29
Tenable Nessus
Tenable Nessus
added 2019/01/08 12:0 a.m.96 views

KB4480116: Windows 10 Version 1809 and Windows Server 2019 January 2019 Security Update

The remote Windows host is missing security update 4480116. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtai...

9.3CVSS8AI score0.9095EPSS
Exploits39References34
Tenable Nessus
Tenable Nessus
added 2019/01/08 12:0 a.m.93 views

KB4480973: Windows 10 Version 1703 January 2019 Security Update

The remote Windows host is missing security update 4480973. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtai...

9.3CVSS8AI score0.9095EPSS
Exploits38References31
Tenable Nessus
Tenable Nessus
added 2018/12/28 12:0 a.m.44 views

EulerOS 2.0 SP2 : java-1.8.0-openjdk (EulerOS-SA-2018-1416)

According to the versions of the java-1.8.0-openjdk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - OpenJDK: Improper field access checks CVE-2018-3169 - OpenJDK: Unrestricted access to scripting engine CVE-2018-3183 - OpenJDK:...

9CVSS6.4AI score0.00589EPSS
Exploits2References8
CNVD
CNVD
added 2018/12/21 12:0 a.m.3 views

Microsoft Internet Explorer Scripting Engine Remote Code Execution Vulnerability

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A remote code execution vulnerability exists in the way memory objects are handled in the scripting engine of Microsoft IE 9, 10, an...

7.6CVSS8.5AI score0.35565EPSS
Exploits0References1
OSV
OSV
added 2018/12/20 1:29 p.m.0 views

CVE-2018-8653

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from...

7.5CVSS6.3AI score0.35565EPSS
Exploits0References3
Prion
Prion
added 2018/12/20 1:29 p.m.18 views

Remote code execution

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from...

7.6CVSS7.6AI score0.35565EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2018/12/20 1:0 p.m.9 views

CVE-2018-8653

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from...

7.7AI score0.35565EPSS
Exploits0References2
The Hacker News
The Hacker News
added 2018/12/20 7:35 a.m.2 views

Microsoft Issues Emergency Patch For Under-Attack IE Zero Day

Microsoft today issued an out-of-band security update to patch a critical zero-day vulnerability in Internet Explorer IE Web browser that attackers are already exploiting in the wild to hack into Windows computers. Discovered by security researcher Clement Lecigne of Google's Threat Analysis Grou...

7.6CVSS8AI score0.35565EPSS
Exploits0
OpenVAS
OpenVAS
added 2018/12/20 12:0 a.m.59 views

Scripting Engine Memory Corruption Vulnerability (KB4483228)

This host is missing an important security update according to Microsoft KB4483228 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.6CVSS7.7AI score0.35565EPSS
Exploits0References4
Talos Blog
Talos Blog
added 2018/12/19 4:19 p.m.175 views

Microsoft Patches Out-of-Band Internet Explorer Scripting Engine Vulnerability After Exploitation Detected in the Wild

Overview Microsoft released an out-of-band OOB patch on Wednesday related to a vulnerability in the scripting engine of Internet Explorer. This particular vulnerability is believed to be actively exploited in the wild and should be patched immediately. This remote code execution bug lies in the w...

7.6CVSS8AI score0.35565EPSS
Exploits0
VulnCheck KEV
VulnCheck KEV
added 2018/12/19 12:0 a.m.1 views

VulnCheck KEV: CVE-2018-8653

Microsoft Internet Explorer contains a memory corruption vulnerability due to how the Scripting Engine handles objects in memory, leading to remote code execution...

7.6CVSS7.5AI score0.35565EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2018/12/18 3:51 p.m.5 views

OpenJDK: Unrestricted access to scripting engine (Scripting, 8202936)

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Scripting. Supported versions that are affected are Java SE: 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network...

9CVSS7.3AI score0.00565EPSS
Exploits0References4
Veracode
Veracode
added 2018/12/12 3:59 a.m.26 views

Remote Code Execution (RCE)

Microsoft.ChakraCore is vulnerable to remote code execution. This is due to a buffer overflow in the JIT scripting engine which would allow an attacker to execute arbitrary code in the context of the authenticated user. This CVE ID is different from CVE-2018-8583, CVE-2018-8617, CVE-2018-8618,...

7.5CVSS7.6AI score0.90564EPSS
Exploits4References4Affected Software2
NVD
NVD
added 2018/12/12 12:29 a.m.20 views

CVE-2018-8617

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8583, CVE-2018-8618,...

7.6CVSS7.5AI score0.90564EPSS
Exploits3References3
OSV
OSV
added 2018/12/12 12:29 a.m.1 views

CVE-2018-8618

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8583, CVE-2018-8617,...

7.5CVSS6.3AI score0.12605EPSS
Exploits2References2
OSV
OSV
added 2018/12/12 12:29 a.m.1 views

CVE-2018-8629

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8583, CVE-2018-8617,...

7.5CVSS6.3AI score0.44915EPSS
Exploits0References2
Rows per page
Query Builder