Microsoft Edge browser’s vulnerability, related to improper handling of objects in memory, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Edge browser on Microsoft Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted web page, Active...

Microsoft Edge browser’s vulnerability, related to improper handling of objects in memory, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Edge browser on Microsoft Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using specially crafted content that cause...

CVE-2017-11822

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how...

CVE-2017-11809

ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability"...

CVE-2017-11763

The Microsoft Graphics Component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability in the way it handles speciall...

CVE-2017-11812

ChakraCore and Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2017-30137)

Microsoft Windows 7 SP1 and others are a series of operating systems from Microsoft Corporation USA.Internet Explorer IE is a web browser that comes with the Windows operating system. A memory corruption vulnerability exists in versions 9 and 11 of IE in Microsoft Windows, which arises from the...

CVE-2017-14947

Artifex GSView 6.0 Beta on Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "Read Access Violation on Block Data Move starting at mupdfnet64!mIncrementalSaveFile+0x0000000000193359."...

The vulnerability in the implementation of the SDP protocol for Bluetooth driver of Windows operating systems allows attackers to carry out “man-in-the-middle” attacks.

The vulnerability of the SDP protocol implementation for Bluetooth drivers in Windows operating systems is related to incorrect security requirements. Exploiting this vulnerability allows a malicious actor to create a network interface and use it to execute a type of “man-in-the-middle” attack...

CVE-2017-8695

Windows Uniscribe in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607, 1703, and Server 2016; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for Mac 2011 and 2016; Skype for Business 2016;...

Microsoft Windows Hyper-V Remote Code Execution Vulnerability (CNVD-2017-32917)

Microsoft Windows 8.1 and others are operating systems released by Microsoft Corporation in the U.S. The Hyper-V component is one of the virtualization components. A remote code execution vulnerability exists in the Hyper-V component of Microsoft Windows, which is caused by the program failing to...

Microsoft Windows Internet Explorer and Edge JavaScript Engine Remote Code Execution Vulnerability

Microsoft Windows 7, etc. are operating systems released by Microsoft Corporation, U.S.A. Microsoft Edge and Internet Explorer IE are web browsers that come with Windows. Microsoft Edge and Internet Explorer IE are both web browsers that come with Windows, the former being the default browser tha...

Microsoft Windows NetBT Session Services Remote Code Execution Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft.NetBT Session Services is one of the session service components. A remote code execution vulnerability exists in NetBT Session Services in Microsoft Windows. A remote attacker can exploit this vulnerability by sending...

Microsoft Windows Internet Explorer Memory Corruption Vulnerability

Microsoft Windows 7 SP1 and others are a series of operating systems from Microsoft Corporation USA.Internet Explorer IE is a web browser that comes with the Windows operating system. A remote code execution vulnerability exists in IE 10 and 11 in Microsoft Windows that originates from a program...

Microsoft Windows Edge and Internet Explorer JavaScript Engine Remote Code Execution Vulnerability

Microsoft Windows 7, etc. are operating systems released by Microsoft Corporation, U.S.A. Microsoft Edge and Internet Explorer IE are web browsers that come with Windows. Microsoft Edge and Internet Explorer IE are both web browsers that come with Windows, the former being the default browser tha...

CVE-2017-9511

The MultiPathResource class in Atlassian Fisheye and Crucible, before version 4.4.1 allows anonymous remote attackers to read arbitrary files via a path traversal vulnerability when Fisheye or Crucible is running on the Microsoft Windows operating system...

Announcing the Fourth Annual Flare-On Challenge

The fourth annual Flare-On Challenge – the FireEye Labs Advanced Reverse Engineering FLARE team’s yearly reverse engineering contest – is scheduled to kick off on Sept. 1, 2017, at 8pm ET. This is a CTF-style challenge for all active and aspiring reverse engineers, malware analysts, and security...

Oracle Hospitality Hotel Mobile Unauthorized Access Vulnerability

Oracle Hospitality Applications is a suite of business applications, servers and storage solutions for hotel management from Oracle. The solution provides human resources cost management, provide customer service throughout the journey tracking management to improve customer satisfaction, etc...

Microsoft Internet Explorer Security Bypass Vulnerability (CNVD-2017-20512)

Microsoft Windows 10 and Windows Server 2016 are both products of Microsoft Corporation USA. The former is an operating system for personal computers and the latter is a server operating system.Internet Explorer IE is a web browser that comes with the Windows operating system. A security bypass...

Microsoft Windows Edge JavaScript Engine Remote Code Execution Vulnerability (CNVD-2017-23799)

Microsoft Windows 10 and Windows Server 2016 are both products of the American company Microsoft. The former is a set of operating systems for personal computers and the latter is a set of server operating systems.Edge is one of the default browsers that comes with the system.JavaScript engines i...