Lucene search
+L

1866 matches found

CNVD
CNVD
added 2017/11/01 12:0 a.m.5 views

MIT krb5 Remote Buffer Overflow Vulnerability

Kerberos is a widely used, super-strong encryption to authenticate client-side and server-side network protocols. MIT krb5 suffers from a remote buffer overflow vulnerability in its implementation, which can be exploited by an attacker to execute arbitrary code in the current user context...

9.8CVSS8.2AI score0.0837EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2017/10/26 12:0 a.m.8 views

The vulnerability of Microsoft Excel, Microsoft Excel for Mac, and the Microsoft Office Compatibility Pack relates to improper handling of objects in memory, allowing an attacker to gain privileges of the current user.

The vulnerability of Microsoft Excel and Microsoft Excel for Mac editors, as well as the Microsoft Office Web Apps suite and the Microsoft Office Compatibility Pack, is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow a malicious actor, operating remotel...

9.3CVSS7.2AI score0.16997EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2017/10/26 12:0 a.m.10 views

Microsoft Edge’s vulnerability, related to improper handling of objects in memory, allows a hacker to execute arbitrary code using specially crafted content.

The vulnerability of Microsoft Edge relates to improper handling of objects in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code in the context of the current user...

7.6CVSS7.8AI score0.08643EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2017/10/25 12:0 a.m.11 views

Microsoft Edge browser’s vulnerability, related to improper handling of objects in memory, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Edge relates to improper handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using specially crafted content...

7.6CVSS7.7AI score0.51553EPSS
SaveExploits2References6
BDU FSTEC
BDU FSTEC
added 2017/10/25 12:0 a.m.10 views

The vulnerability of the Windows Shell component of the Windows operating system, which allows a hacker to execute arbitrary code

The vulnerability of the Windows Shell component of the Windows operating system exists due to insufficient checking of file copy addresses. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code in the context of the current user, using specially...

7.6CVSS7.8AI score0.20519EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2017/10/25 12:0 a.m.8 views

Microsoft Edge browser’s vulnerability, related to improper handling of objects in memory, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Edge relates to improper handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user through specially crafted content...

7.6CVSS7.7AI score0.72171EPSS
SaveExploits4References6
BDU FSTEC
BDU FSTEC
added 2017/10/17 12:0 a.m.9 views

Microsoft Edge browser’s vulnerability, related to improper handling of objects in memory, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Edge browser on Microsoft Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using specially crafted content that cause...

7.6CVSS7.7AI score0.08716EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2017/10/17 12:0 a.m.10 views

Microsoft Edge browser’s vulnerability, related to improper handling of objects in memory, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Edge browser on Microsoft Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using specially crafted content that cause...

7.6CVSS7.7AI score0.08891EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2017/10/17 12:0 a.m.9 views

The vulnerability of the Internet Explorer browser, related to incorrect handling of objects in memory, allows attackers to execute arbitrary code.

The vulnerability of the Internet Explorer browser is related to incorrect handling of objects in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the context of the current user...

7.6CVSS7.9AI score0.10801EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/10/17 12:0 a.m.9 views

Microsoft Edge browser’s vulnerability, related to improper handling of objects in memory, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Edge browser on Microsoft Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

7.6CVSS7.7AI score0.08716EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2017/10/17 12:0 a.m.8 views

Microsoft Edge browser’s vulnerability, related to improper handling of objects in memory, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Edge relates to improper handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user through specially crafted content...

7.6CVSS7.8AI score0.52537EPSS
SaveExploits4References6
OSV
OSV
added 2017/10/13 1:29 p.m.2 views

CVE-2017-11804

ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability"...

7.5CVSS6.1AI score0.08761EPSS
SaveExploits0References3
Prion
Prion
added 2017/10/13 1:29 p.m.18 views

Memory corruption

Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user, due to how Microsoft Windows Text Services...

7.6CVSS7.8AI score0.0827EPSS
SaveExploits0References3Affected Software3
ATTACKERKB
ATTACKERKB
added 2017/10/13 1:29 p.m.7 views

CVE-2017-11810

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the...

9.3CVSS6AI score0.69163EPSS
SaveExploits26References5
CNVD
CNVD
added 2017/10/11 12:0 a.m.5 views

Microsoft Office Remote Code Execution Vulnerability (CNVD-2017-30582)

Microsoft Office is a suite of office software based on the Windows operating system developed by Microsoft. A remote code execution vulnerability exists in the implementation of Microsoft Office when it does not properly handle memory objects, which could allow an attacker to run arbitrary code ...

9.3CVSS7.9AI score0.2207EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/10/11 12:0 a.m.4 views

Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2017-30325)

Edge is Microsoft's browser for Windows 10, characterized as fast and secure. A memory corruption vulnerability exists in the way the Microsoft Edge scripting engine handles objects in memory, which can be exploited by an attacker to execute arbitrary code in the context of the current user or to...

7.6CVSS7.8AI score0.08761EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/10/11 12:0 a.m.4 views

Microsoft Edge Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2017-30543)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge suffers from a remote memory corruption vulnerability in the scripting engine's handling of in-memory objects, which can be exploited by an attacker to corrupt memory by executing arbitrary code in the current use...

9.3CVSS7.5AI score0.4726EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
added 2017/09/28 12:0 a.m.4 views

VulnCheck KEV: CVE-2017-11826

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user...

9.3CVSS7.6AI score0.81454EPSS
SaveExploits3References1
Prion
Prion
added 2017/09/13 1:29 a.m.19 views

Memory corruption

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of th...

7.6CVSS7.7AI score0.09202EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
added 2017/09/13 12:0 a.m.5 views

Microsoft Windows Shell Remote Code Execution Vulnerability

Microsoft Windows 7 SP1, etc. are a series of operating systems from Microsoft USA.Shell is one of the scripting plug-ins. A remote code execution vulnerability exists in Shell in Microsoft Windows. A remote attacker can exploit this vulnerability to execute arbitrary code in the context of the...

7.6CVSS7.8AI score0.20519EPSS
SaveExploits0References1
Rows per page
Query Builder