CVE-2018-0767: Out-of-bounds Read

Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE...

CVE-2018-0778: Out-of-bounds Write

Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762,...

CVE-2018-0776: Out-of-bounds Write

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is...

CVE-2018-0769: Out-of-bounds Write

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is...

CVE-2018-0772: Out-of-bounds Write

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in th...

Chakra Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

Scripting Engine Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in the Microsoft Chakra scripting engine that allows Control Flow Guard CFG to be bypassed. By itself, the CFG bypass vulnerability does not allow arbitrary code execution. However, an attacker could use the CFG bypass vulnerability in conjunction wi...

Chakra Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

PT-2018-9072

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: An information disclosure issue exists due to the scripting engine's improper handling of objects in memory. This could allow an attacker to obtain information that could be used to...

PT-2018-9064

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: An information disclosure issue exists due to the scripting engine's improper handling of objects in memory. This could allow an attacker to obtain information that could be used to...

PT-2018-1014

Name of the Vulnerable Software and Affected Versions Internet Explorer and Microsoft Edge affected versions not specified Description A remote code execution issue exists in the way the scripting engine handles objects in memory in Microsoft browsers. This could allow an attacker to corrupt memo...

PT-2018-9062

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: An information disclosure issue exists due to the scripting engine's improper handling of objects in memory. This could allow an attacker to obtain information that could be used to...

KLA11167 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in...

Microsoft Internet Explorer Scripting Engine Information Disclosure (CVE-2017-11906)

An information disclosure vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to the way the scripting engine improperly handles objects in memory in Internet Explorer. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with ...

Apple WebKit Use After Free Code Execution (CVE-2017-13795)

A remote code execution vulnerability has been discovered in Apple's WebKit. The vulnerability is due to the way the scripting engine handles objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...

Microsoft Windows Internet Explorer scripting remote code execution vulnerability (CNVD-2018-00782)

Microsoft Windows Server 2016 and others are operating systems released by Microsoft Corporation USA.Internet Explorer IE is one of the browsers. scripting engine is one of the scripting engines. A remote code execution vulnerability exists in the scripting engine of IE 9, 10, and 11 in Microsoft...

Microsoft Windows Internet Explorer scripting remote code execution vulnerability

Microsoft Windows 7 SP1 and others are operating systems released by Microsoft Corporation in the U.S. Internet Explorer IE is a web browser that comes with the Windows operating system. scripting engines is one of the JavaScript engine components. A remote code execution vulnerability exists in...