Lucene search
+L

2199 matches found

Microsoft CVE
Microsoft CVE
added 2019/05/14 7:00 a.m.24 views

Chakra Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

7.6CVSS1.4AI score0.09215EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2019/05/14 7:00 a.m.24 views

Chakra Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

7.6CVSS1.4AI score0.09215EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2019/05/14 7:00 a.m.24 views

Chakra Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

7.6CVSS1.4AI score0.09215EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2019/05/14 7:00 a.m.29 views

Chakra Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

7.6CVSS1.4AI score0.0903EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2019/05/14 7:00 a.m.26 views

Chakra Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

7.6CVSS1.4AI score0.09215EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2019/05/14 7:00 a.m.31 views

Chakra Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

7.6CVSS1.4AI score0.09215EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2019/05/14 7:00 a.m.30 views

Chakra Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

7.6CVSS1.4AI score0.09215EPSS
SaveExploits0
Kaspersky
Kaspersky
added 2019/05/14 12:00 a.m.100 views

KLA11478 Multiple vulnerabilities in Microsoft Browsers

Multiple vulnerabilities were found in Microsoft Browsers. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, bypass security restrictions, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A memory...

9CVSS9.1AI score0.23102EPSS
SaveExploits0References38
Tenable Nessus
Tenable Nessus
added 2019/05/14 12:00 a.m.79 views

KB4494440: Windows 10 Version 1607 and Windows Server 2016 May 2019 Security Update (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)

The remote Windows host is missing security update 4494440. It is, therefore, affected by multiple vulnerabilities : - A new subclass of speculative execution side channel vulnerabilities, known as Microarchitectural Data Sampling, exist in Windows. An attacker who successfully exploited these...

9.8CVSS8.1AI score0.28225EPSS
SaveExploits4References59
OSS-Fuzz
OSS-Fuzz
added 2019/04/25 12:44 p.m.19 views

chakra: Stack-use-after-return in Js::NarrowStringToWide

Detailed report: https://oss-fuzz.com/testcase?key=5668803167387648 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: Stack-use-after-return READ Crash Address: 0x7f9fb8b97920 Crash State: Js::NarrowStringToWide Js::WabtInterface::EntryConvertWast2Wasm...

6.8AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/17 12:00 a.m.13 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser exists due to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

4.2CVSS6.9AI score0.11532EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/17 12:00 a.m.12 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser exists due to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

4.2CVSS7.6AI score0.1866EPSS
SaveExploits0References2Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2019/04/15 12:00 a.m.35 views

Microsoft Chakra Object Reoptimization Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Chakra. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

8.8CVSS2AI score0.11532EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/04/11 12:00 a.m.16 views

Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CNVD-2019-10377)

Microsoft ChakraCore and Microsoft Edge are both products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, and is also available as a standalone JavaScript engine. Microsoft Edge is a web browser that comes with Windows...

7.6CVSS7.8AI score0.1866EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/04/11 12:00 a.m.13 views

Microsoft Edge and ChakraCore Buffer Overflow Vulnerability (CNVD-2019-27397)

Microsoft ChakraCore and Microsoft Edge are both products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, and is also available as a standalone JavaScript engine. Microsoft Edge is a web browser that comes with Windows...

7.6CVSS7.5AI score0.08957EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/04/11 12:00 a.m.11 views

Microsoft Edge and ChakraCore Buffer Overflow Vulnerability (CNVD-2019-27402)

Microsoft ChakraCore and Microsoft Edge are both products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, and is also available as a standalone JavaScript engine. Microsoft Edge is a web browser that comes with Windows...

7.6CVSS7.5AI score0.11107EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/04/11 12:00 a.m.52 views

Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CNVD-2019-10378)

Microsoft ChakraCore and Microsoft Edge are both products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, and is also available as a standalone JavaScript engine. Microsoft Edge is a web browser that comes with Windows...

7.6CVSS7.8AI score0.11532EPSS
SaveExploits0References1
OSV
OSV
added 2019/04/09 9:29 p.m.30 views

CVE-2019-0861

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0806, CVE-2019-0810, CVE-2019-0812, CVE-2019-0829, CVE-2019-0860...

7.5CVSS7.5AI score
SaveExploits0References2
OSV
OSV
added 2019/04/09 9:29 p.m.26 views

CVE-2019-0860

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0806, CVE-2019-0810, CVE-2019-0812, CVE-2019-0829, CVE-2019-0861...

7.5CVSS7.5AI score
SaveExploits0References2
NVD
NVD
added 2019/04/09 9:29 p.m.18 views

CVE-2019-0860

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0806, CVE-2019-0810, CVE-2019-0812, CVE-2019-0829, CVE-2019-0861...

7.6CVSS7.4AI score0.10799EPSS
SaveExploits0References2
Rows per page
Query Builder