Microsoft Office Graph Serialized Data Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Graph. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing o...

Microsoft ChakraCore Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2018-11133)

Microsoft ChakraCore is the core of the JavaScript engine used by Edge, a web browser from Microsoft. A remote code execution vulnerability exists in Microsoft ChakraCore. A remote attacker could exploit this vulnerability to execute arbitrary code in the context of the current user, resulting in...

Microsoft ChakraCore and Edge Remote Code Execution Vulnerability (CNVD-2018-10206)

Microsoft Edge is a web browser developed by Microsoft.Chakra Engine is a JavaScript scripting engine.ChakraCore is the core of the open source Chakra JavaScript scripting engine used in Edge, and can also be used as a stand-alone JavaScript engine. ChakraCore is the core of an open source Chakra...

Microsoft Internet Explorer Arbitrary Code Execution Vulnerability (CNVD-2018-10669)

Microsoft Windows Server 2012 and others are a series of operating systems released by Microsoft Corporation, U.S.A. Internet Explorer IE is one of the web browsers that comes with the Windows operating system. A remote code execution vulnerability exists in the way the scripting engine handles I...

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

Internet Explorer is a web browser from Microsoft. A scripting engine memory corruption vulnerability exists in Microsoft Internet Explorer. The vulnerability is caused due to a problem in the way the scripting engine handles objects in memory. A remote attacker could use this vulnerability to...

Microsoft Office Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

The vulnerability in Microsoft Edge browsers arises from an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2018-08027)

Internet Explorer is a web browser from Microsoft. A memory corruption vulnerability exists in Microsoft Internet Explorer. The vulnerability arises because the software fails to properly access objects in memory. An attacker can exploit the vulnerability to run arbitrary code in the context of t...

Microsoft Excel and Office Remote Code Execution Vulnerability

Microsoft Excel is one of the components of Microsoft's office software Microsoft office, a spreadsheet software written and run by Microsoft for computers with Windows and Apple Macintosh operating systems. A remote code execution vulnerability exists in Microsoft Excel and Office. The...

Microsoft Excel Remote Code Execution Vulnerability (CNVD-2018-08937)

Microsoft Excel is one of the components of Microsoft's office software Microsoft office, a spreadsheet software written and run by Microsoft for computers with Windows and Apple Macintosh operating systems. A remote code execution vulnerability exists in Microsoft Excel. The vulnerability arises...

Microsoft Windows Remote Assistance XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Microsoft ChakraCore Remote Code Execution Vulnerability (CNVD-2018-05887)

Microsoft ChakraCore is the core of the JavaScript engine used by Edge, a web browser from Microsoft. A remote code execution vulnerability exists in Microsoft ChakraCore. A remote attacker could exploit this vulnerability to execute arbitrary code in the context of the current user, corrupting...

Microsoft Office Arbitrary Code Execution Vulnerability (CNVD-2018-05885)

Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. A remote code execution vulnerability exists in Microsoft Office, which stems from the program's failure t...

Microsoft Windows Shell Remote Code Execution Vulnerability (CNVD-2018-05838)

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. A Windows Shell is an interface under Windows that interacts with the user and allows the user to perform public tasks such as accessing the file system, exporting executable programs,...

Microsoft Access Arbitrary Code Execution Vulnerability

Microsoft Access is a relational database management system in the Office suite of the U.S. Microsoft Microsoft Corporation. A remote code execution vulnerability exists in Microsoft Access due to the program's failure to properly handle objects in memory. A remote attacker can exploit this...

Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2018-07039)

Edge is Microsoft's browser for Windows 10. Microsoft Edge suffers from a Scripting Engine Memory Corruption vulnerability. The vulnerability arises due to a problem in the way the scripting engine handles objects in memory. An attacker can exploit the vulnerability to execute arbitrary code in t...

Microsoft Edge and ChakraCore Remote Memory Corruption Vulnerability (CNVD-2018-06699)

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation.Edge is one of the browsers that comes with the system.ChakraCore is the core of an open source JavaScript engine used in Edge, and can also be used as a standalone JavaScript engine.... ChakraCore...

Microsoft Edge and ChakraCore Remote Memory Corruption Vulnerability (CNVD-2018-06698)

Microsoft Windows 10 is a next-generation cross-platform operating system from Microsoft.Edge is one of the browsers that comes with the system.ChakraCore is the core of an open-source JavaScript engine that is used in Edge, and can also be used as a stand-alone JavaScript engine. engine. A memor...

Microsoft Edge and ChakraCore Remote Memory Corruption Vulnerability (CNVD-2018-06694)

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation.Edge is one of the browsers that comes with the system.ChakraCore is the core of an open source JavaScript engine used in Edge, and can also be used as a standalone JavaScript engine.... ChakraCore...

Microsoft Edge and ChakraCore Remote Memory Corruption Vulnerability (CNVD-2018-06696)

Microsoft Windows 10 is a next-generation cross-platform operating system from Microsoft.Edge is one of the default browsers that comes with the system.ChakraCore is the core of an open-source JavaScript engine that is used in Edge, and is also available as a separate JavaScript engine. A remote...