Lucene search
K

2814 matches found

Check Point Advisories
Check Point Advisories
added 2016/11/08 12:0 a.m.3 views

Microsoft Edge Scripting Engine Memory Corruption (MS16-129: CVE-2016-7242)

A type confusion vulnerability exists in Microsoft Edge. The vulnerability is due to the way JavaScript engine renders when handling objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...

7.6CVSS3.2AI score0.11931EPSS
Exploits11
Check Point Advisories
Check Point Advisories
added 2016/11/08 12:0 a.m.2 views

Microsoft Internet Explorer Memory Corruption (MS16-142: CVE-2016-7198)

A remote code execution vulnerability exists in Internet Explorer and Microsoft Edge. The vulnerability is due to the way scripting engine renders when handling objects in memory. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected...

7.6CVSS7.6AI score0.16295EPSS
Exploits0
Kaspersky
Kaspersky
added 2016/11/08 12:0 a.m.209 views

KLA10900 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to obtain sensitive information, spoof user interface, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Microsoft Browser c...

8.8CVSS8.3AI score0.89752EPSS
Exploits16References40
CNVD
CNVD
added 2016/10/16 12:0 a.m.3 views

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (CNVD-2016-09651)

Microsoft Internet Explorer is the default browser that comes with operating systems prior to Windows 10. A security vulnerability in Microsoft Internet Explorer's scripting engine that fails to properly handle objects in memory allows remote attackers to exploit the vulnerability to build...

9.3CVSS7.5AI score0.14909EPSS
Exploits0References1
NVD
NVD
added 2016/10/14 2:59 a.m.10 views

CVE-2016-3385

The scripting engine in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."...

9.3CVSS7.6AI score0.14909EPSS
Exploits0References4
OSV
OSV
added 2016/10/14 2:59 a.m.0 views

CVE-2016-3385

The scripting engine in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."...

7.5CVSS6.1AI score
Exploits0References4
Prion
Prion
added 2016/10/14 2:59 a.m.24 views

Memory corruption

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3386, CVE-2016-7190, and...

7.6CVSS7.7AI score0.78999EPSS
Exploits0References3
Prion
Prion
added 2016/10/14 2:59 a.m.16 views

Memory corruption

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3386, CVE-2016-3389, and...

7.6CVSS7.7AI score0.78999EPSS
Exploits0References3
Cvelist
Cvelist
added 2016/10/14 1:0 a.m.20 views

CVE-2016-3382

The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, as demonstrated by the Chakra JavaScript engine, aka "Scripting Engine Memory Corruption...

7.4AI score0.17771EPSS
Exploits0References5
CVE
CVE
added 2016/10/14 1:0 a.m.84 views

CVE-2016-3385

CVE-2016-3385 concerns the Microsoft Internet Explorer scripting engine (IE9–IE11) memory corruption vulnerability. A remote attacker can exploit it by tricking a user to visit a crafted website, potentially gaining arbitrary code execution or causing a memory corruption Denial of Service. The CV...

9.3CVSS7.5AI score0.14909EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2016/10/14 1:0 a.m.18 views

CVE-2016-3390

The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, as demonstrated by the Chakra JavaScript engine, aka "Scripting Engine Memory Corruption Vulnerability...

7.5AI score0.20493EPSS
Exploits0References5
CNVD
CNVD
added 2016/10/13 12:0 a.m.1 views

Microsoft Edge Scripting Engine Information Disclosure Vulnerability

Microsoft Edge is the web browser built into the Windows 10 version. An information leakage vulnerability exists when Microsoft Edge fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise a user's system...

9.3CVSS6.2AI score0.74578EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2016/10/12 12:0 a.m.48 views

Microsoft Internet Explorer Multiple Vulnerabilities (3192887)

This host is missing a critical security update according to Microsoft Bulletin MS16-118. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

9.3CVSS6.8AI score0.47217EPSS
Exploits0References15
Check Point Advisories
Check Point Advisories
added 2016/10/11 12:0 a.m.19 views

Microsoft Internet Explorer Memory Corruption (MS16-118: CVE-2016-3385)

A remote code execution vulnerability exists in Internet Explorer and Microsoft Edge. The vulnerability is due to the way scripting engine renders when handling objects in memory. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected...

9.3CVSS7.6AI score0.14909EPSS
Exploits0
Kaspersky
Kaspersky
added 2016/10/11 12:0 a.m.56 views

KLA11906 Multiple vulnerabilities for Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in...

10CVSS8.9AI score0.55736EPSS
Exploits0References40
Check Point Advisories
Check Point Advisories
added 2016/10/11 12:0 a.m.2 views

Microsoft Internet Explorer Memory Corruption (MS16-118: CVE-2016-3382)

A remote code execution vulnerability exists in Internet Explorer and Microsoft Edge. The vulnerability is due to the way scripting engine renders when handling objects in memory. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected...

9.3CVSS7.6AI score0.17771EPSS
Exploits0
CNVD
CNVD
added 2016/09/16 12:0 a.m.2 views

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (CNVD-2016-07591)

Microsoft Internet Explorer is a popular WEB browser. A memory corruption vulnerability exists in the Microsoft Internet Explorer browser engine, which can be exploited by remote attackers to construct a malicious web page that can be parsed by a user to execute arbitrary code...

7.6CVSS7.5AI score0.21552EPSS
Exploits0References1
NVD
NVD
added 2016/09/14 10:59 a.m.18 views

CVE-2016-3375

The OLE Automation mechanism and VBScript scripting engine in Microsoft Internet Explorer 9 through 11, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow remote attackers to...

7.6CVSS7.6AI score0.21552EPSS
Exploits0References4
Cvelist
Cvelist
added 2016/09/14 10:0 a.m.25 views

CVE-2016-3350

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3377...

7.8AI score0.15905EPSS
Exploits0References3
Cvelist
Cvelist
added 2016/09/14 10:0 a.m.39 views

CVE-2016-3375

The OLE Automation mechanism and VBScript scripting engine in Microsoft Internet Explorer 9 through 11, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow remote attackers to...

7.9AI score0.21552EPSS
Exploits0References4
Rows per page
Query Builder