Microsoft Edge and ChakraCore Buffer Overflow Vulnerability (CNVD-2019-27389)

Microsoft Edge is a web browser from Microsoft USA that is the default browser that comes with the Windows 10 operating system. A buffer overflow vulnerability exists in Microsoft Edge and ChakraCore. An attacker can exploit this vulnerability to execute arbitrary code in the context of the curre...

Microsoft Edge Buffer Overflow Vulnerability

Microsoft Edge is a web browser from Microsoft USA that is the default browser that comes with the Windows 10 operating system. A buffer overflow vulnerability exists in Microsoft Edge that stems from a program not properly accessing objects in memory. An attacker can exploit the vulnerability to...

Microsoft Edge and ChakraCore Buffer Overflow Vulnerability (CNVD-2019-27386)

Microsoft ChakraCore and Microsoft Edge are both products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, and is also available as a standalone JavaScript engine. Microsoft Edge is a web browser that comes with Windows...

The vulnerability of the Windows Theme API component of the Windows operating system allows a hacker to execute arbitrary code in the context of the current user.

The vulnerability of the Windows Theme API component of the operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially created file...

Microsoft SharePoint Enterprise Server 2016 Cross-Site Scripting Vulnerability

Microsoft SharePoint Enterprise Server 2016 is a suite of enterprise business collaboration platforms from Microsoft Corporation USA. The platform is used to consolidate business information and enables you to share work, collaborate with others, organize projects and workgroups, and search for...

Microsoft SharePoint Enterprise Server Cross-Site Scripting Vulnerability (CNVD-2019-16186)

Microsoft SharePoint Enterprise Server 2013 SP1 is a set of enterprise business collaboration platforms from Microsoft for consolidating business information and enabling you to share work, collaborate with others, organize projects and workgroups, and search for people and information. A...

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code in the context of the current user.

The vulnerability of the ChakraCore JavaScript script handler in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...

VulnCheck KEV: CVE-2018-0798

Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for remote code execution in the context of the current user. This vulnerability is known to be chained with CVE-2018-0802...

Microsoft Outlook Remote Code Execution Vulnerability (CNVD-2018-23152)

Microsoft Outlook is one of the components of the Microsoft Office software suite, which expands on the functionality of Outlook express that comes with Windows.Outlook has many features that can be used to send and receive e-mail, manage contact information, keep a diary, organize schedules, and...

Microsoft Outlook Remote Code Execution Vulnerability (CNVD-2018-23151)

Microsoft Outlook is one of the components of the Microsoft Office software suite, which expands on the functionality of Outlook express that comes with Windows.Outlook has many features that can be used to send and receive e-mail, manage contact information, keep a diary, organize schedules, and...

Microsoft Outlook Remote Code Execution Vulnerability (CNVD-2018-23153)

Microsoft Outlook is one of the components of the Microsoft Office software suite, which expands on the functionality of Outlook express that comes with Windows.Outlook has many features that can be used to send and receive e-mail, manage contact information, keep a diary, organize schedules, and...

The vulnerability of Microsoft Word text editors allows a hacker to execute arbitrary code in the context of the current user.

The vulnerability of Microsoft Word relates to errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted PDF file...

Microsoft Excel Remote Code Execution Vulnerability (CNVD-2019-00635)

Microsoft Excel is a spreadsheet processing software in the Office suite of the American Microsoft Microsoft company. A remote code execution vulnerability exists in Microsoft Excel due to the software's failure to properly handle objects in Protected View. A remote attacker could exploit the...

The vulnerability of the Internet Explorer browser, caused by errors in memory object handling, allows a hacker to execute arbitrary code.

The vulnerability of the Internet Explorer browser is related to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the context of the current user...

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

Microsoft ChakraCore and Edge Remote Code Execution Vulnerability (CNVD-2018-26983)

Microsoft Windows 10 and Windows Server 2019 are both products of the American company Microsoft. The former is a set of operating systems for personal computers, and the latter is a set of server operating systems.Edge is the default browser that comes with one of these systems.ChakraCore is the...

Microsoft ChakraCore Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2018-21204)

Microsoft ChakraCore is a core part of an open source JavaScript engine used in Edge. A remote memory corruption vulnerability exists in Microsoft ChakraCore Scripting Engine. A remote attacker can exploit this vulnerability to corrupt memory by executing arbitrary code in the context of the...

Microsoft ChakraCore and Edge Remote Code Execution Vulnerability (CNVD-2018-26971)

Microsoft Windows 10 and Windows Server 2019 are both products of the American company Microsoft. The former is a set of operating systems for personal computers, and the latter is a set of server operating systems.Edge is the default browser that comes with one of these systems.ChakraCore is the...

Microsoft Internet Explorer Remote Memory Corruption Vulnerability (CNVD-2018-19392)

Microsoft Internet Explorer is a popular WEB browser. A remote memory corruption vulnerability exists in Microsoft Internet Explorer. A remote attacker can exploit this vulnerability to corrupt memory by executing arbitrary code in the context of the current user...

Microsoft Excel Remote Code Execution Vulnerability (CNVD-2018-16841)

Microsoft Excel is a spreadsheet processing software in the Office suite of the American Microsoft Microsoft company. A remote code execution vulnerability exists in Microsoft Excel, which results from the program failing to properly handle objects in memory. A remote attacker can exploit the...