CVE-2018-6682

Cross Site Scripting Exposure in McAfee True Key TK 4.0.0.0 and earlier allows local users to expose confidential data via a crafted web site...

Internet Explorer Memory Corruption Vulnerability

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabilit...

Internet Explorer Memory Corruption Vulnerability

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabilit...

Microsoft Edge Chakra Scripting Engine Remote Memory Corruption Vulnerability

Microsoft Windows 10 and others are a family of operating systems released by Microsoft Corporation in the U.S. Microsoft Windows 10 is a set of operating systems for personal computers.Windows Server 2016 is a set of server operating systems.Edge is one of the web browsers. ChakraCore is the cor...

Microsoft ChakraCore and Edge Memory Corruption Vulnerability

Microsoft Edge is a web browser developed by Microsoft.ChakraCore is the core of the open source Chakra JavaScript scripting engine, which can also be used as a standalone JavaScript engine. A remote code execution vulnerability exists in Microsoft Edge Windows 10 version 1803 and ChakraCore. A...

Microsoft Edge Spoofing Vulnerability (CNVD-2018-18475)

Microsoft Edge is a Web browser developed by the American company Microsoft Microsoft. A spoofing vulnerability exists in Microsoft Edge. The vulnerability stems from a failure of the program to properly process HTML content. The vulnerability can be exploited by an attacker to spoof users with t...

Microsoft Edge and ChakraCore Remote Memory Corruption Vulnerability (CNVD-2018-18049)

Microsoft Edge is a web browser developed by Microsoft.ChakraCore is the core of the open source Chakra JavaScript scripting engine, which can also be used as a standalone JavaScript engine. A memory corruption memory corruption vulnerability exists in Microsoft Edge and ChakraCore. A remote...

chromium-browser: Cross origin information leak in Blink

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. watchOS before 4.3 is affected. The issue involves the fetch API in the "WebKit" component. It...

Google Chrome Extensions URL Spoofing Vulnerability

Google Chrome is a web browser developed by Google, Inc.Extensions is one of the browser extensions. A security vulnerability exists in Extensions in Google Chrome versions prior to 68.0.3440.75. The vulnerability can be exploited by remote attackers to forge a UIL with the help of a specially...

Google Chrome Blink Cross-Origin Information Disclosure Vulnerability

Google Chrome is a web browser developed by Google Inc. Blink is a browser layout engine rendering engine jointly developed by Google Inc. and Opera Software of Norway. A security vulnerability exists in Blink in Google Chrome versions prior to 68.0.3440.75. The vulnerability can be exploited by ...

Google Chrome Request Elevation of Privilege Vulnerability

Google Chrome is a web browser developed by Google, Inc.Extensions is one of the browser extensions. A security vulnerability exists in Extensions in Google Chrome versions prior to 68.0.3440.75. A remote attacker can exploit the vulnerability to gain elevated privileges with the help of a...

Google Chrome Extensions Local User Elevation of Privilege Vulnerability

Google Chrome is a web browser developed by Google, Inc.Extensions is one of the browser extensions. A security vulnerability exists in Extensions in Google Chrome versions prior to 68.0.3440.75. A remote attacker can exploit the vulnerability to gain elevated privileges with the help of a...

Google Chrome Omnibox URL Spoofing Vulnerability (CNVD-2018-18761)

Google Chrome is a web browser developed by Google, Inc. and Omnibox is a real-time search engine. A security vulnerability exists in Omnibox in versions of Google Chrome prior to 68.0.3440.75. A remote attacker can exploit the vulnerability to forge URLs with the help of a specially crafted...

Google Chrome PDFium Type Obfuscation Vulnerability (CNVD-2018-18748)

Google Chrome is the United States Google Google company developed a Web browser. PDFium is one of the open source PDF rendering engine. A type confusion vulnerability exists in PDFium in versions of Google Chrome prior to 68.0.3440.75. A remote attacker can exploit this vulnerability with the he...

Mozilla Thunderbird Information Disclosure Vulnerability (CNVD-2018-13663)

Mozilla Thunderbird is the United States Mozilla Foundation developed from the Mozilla Application Suite independent of the e-mail client software, support for IMAP, POP mail protocol and HTML mail format. An information disclosure vulnerability exists in Mozilla Thunderbird versions prior to 52....

Mozilla Thunderbird Information Disclosure Vulnerability (CNVD-2018-13662)

Mozilla Thunderbird is the United States Mozilla Foundation developed from the Mozilla Application Suite independent of the e-mail client software, support for IMAP, POP mail protocol and HTML mail format. An information disclosure vulnerability exists in Mozilla Thunderbird versions prior to 52....

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploit...

Microsoft Edge Spoofing (CVE-2018-8278)

A spoofing vulnerability exists in Microsoft Edge. The vulnerability is due to improper parsing of HTTP content. A remote attacker could trick a user by redirecting them to a specially crafted website which could spoof content or be used as a pivot to chain an attack with other vulnerabilities in...

Mozilla Firefox Same-Origin Policy Bypass Vulnerability (CNVD-2018-14984)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox prior to version 61. A remote attacker could exploit this vulnerability by tricking users into visiting a specially crafted website to bypass...