The vulnerability in Internet Explorer, caused by an operation that goes beyond the buffer boundaries in memory, allows a malicious actor to gain the privileges of the current user.

The vulnerability of the Internet Explorer browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain privileges of the current user...

The vulnerability in Internet Explorer, caused by an operation that goes beyond the buffer boundaries in memory, allows a malicious actor to gain the privileges of the current user.

The vulnerability of the Internet Explorer browser is related to improper handling of objects in memory. Exploiting this vulnerability can allow a remote attacker to gain privileges as the current user...

The vulnerability of JavaScript ChakraCore and Microsoft Edge browsers, related to improper handling of objects in memory, allows attackers to execute arbitrary code.

The vulnerability of JavaScript ChakraCore and Microsoft Edge browsers is related to improper handling of objects in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with the privileges of the current user...

Vulnerability of the JavaScript ChakraCore kernel and Microsoft Edge browsers, caused by operations beyond the buffer in memory, allowing attackers to gain control of the current user’s rights

The vulnerability of JavaScript ChakraCore and Microsoft Edge browsers arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain privileges of the current user...

The vulnerability of JavaScript ChakraCore and Microsoft Edge browsers, related to improper handling of objects in memory, allows attackers to execute arbitrary code.

The vulnerability of JavaScript ChakraCore and Microsoft Edge browsers is related to improper handling of objects in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with the privileges of the current user...

The vulnerability of JavaScript ChakraCore and Microsoft Edge browsers, related to improper handling of objects in memory, allows attackers to execute arbitrary code.

The vulnerability of JavaScript ChakraCore and Microsoft Edge browsers is related to improper handling of objects in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with the privileges of the current user...

The vulnerability of Microsoft Excel’s spreadsheet editor lies in its improper handling of objects in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors is related to incorrect handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

Vulnerability of the JavaScript ChakraCore kernel, Internet Explorer and Microsoft Edge browsers, caused by operations beyond the buffer in memory, allowing attackers to gain control of the current user’s rights

The vulnerability in the JavaScript ChakraCore engine, as well as in browsers Internet Explorer and Microsoft Edge, arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain privileges of the current user...

Windows UAC Protection Bypass (Via Slui File Handler Hijack)

This module will bypass UAC on Windows 8-10 by hijacking a special key in the Registry under the Current User hive, and inserting a custom command that will get invoked when any binary .exe application is launched. But slui.exe is an auto-elevated binary that is vulnerable to file handler...

Microsoft Word Remote Code Execution Vulnerability (CNVD-2018-00901)

Microsoft Office 2007 and so on are the United States Microsoft Microsoft company developed office software suite of products. word is one of the set of word processing software. Word in Microsoft Office suffers from a remote code execution vulnerability that stems from the program's failure to...

Microsoft Office Memory Corruption Vulnerability (CNVD-2018-00736)

Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. There is a memory corruption vulnerability in Microsoft Office, which arises from the program's failure to...

Microsoft Office Remote Code Execution Vulnerability (CNVD-2018-00889)

Microsoft Office is a suite of office software products developed by Microsoft.Equation Editor is one of the formula editors. A remote code execution vulnerability exists in Equation Editor in Microsoft Office, which stems from the program failing to properly handle objects in memory. The...

VulnCheck KEV: CVE-2018-0802

Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for remote code execution in the context of the current user. This vulnerability is known to be chained with CVE-2018-0798...

Microsoft Edge Scripting Engine Memory Corruption (CVE-2018-0774)

A remote code execution vulnerability exists in Microsoft Edge. The vulnerability is due to the way that the scripting engine handles objects in memory in Microsoft Edge. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the curre...

NetGain Systems Enterprise Manager Remote Code Execution Vulnerability (CNVD-2018-01638)

NetGain Enterprise Manager is an end-to-end IT infrastructure monitoring platform. NetGain Enterprise Manager suffers from a remote code execution vulnerability in its implementation, which can be exploited by an attacker to execute arbitrary code in the current user context...

NetGain Systems Enterprise Manager Remote Code Execution Vulnerability

NetGain Enterprise Manager is an end-to-end IT infrastructure monitoring platform. NetGain Enterprise Manager suffers from a remote code execution vulnerability in its implementation, which can be exploited by an attacker to execute arbitrary code in the current user context...

Microsoft ChakraCore Remote Code Execution Vulnerability

Microsoft ChakraCore is the core of the JavaScript engine used by Edge, a web browser from Microsoft. A remote code execution vulnerability exists in Microsoft ChakraCore. A remote attacker could exploit this vulnerability to execute arbitrary code in the context of the current user, corrupting...

Microsoft Windows Internet Explorer and Microsoft ChakraCore Remote Code Execution Vulnerability

Microsoft Windows is an operating system released by Microsoft Corporation.Internet Explorer IE is a web browser that comes with the Windows operating system.ChakraCore is the core of an open-source JavaScript engine used in IE, and can also be used as a stand-alone JavaScript engine. ChakraCore ...

NetGain Enterprise Manager upload_save_do Remote Upload Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within uploadsavedo.jsp. The issue results from the lack of proper validation of a...

CVE-2017-11890

Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user, due to how Internet Explorer handle...