CVE-2017-11307

Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user...

CVE-2017-11306

Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user...

CVE-2018-4917

Adobe Acrobat and Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, 2015.006.30394 and earlier have an exploitable heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user...

CVE-2018-4932

Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable Use-After-Free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user...

CVE-2018-4919

Adobe Flash Player versions 28.0.0.161 and earlier have an exploitable use after free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user...

Microsoft PowerPoint Remote Code Execution Vulnerability (CNVD-2018-10942)

Microsoft Office 2016 for Mac is a Mac-based office software suite product developed by Microsoft Corporation in the U.S. PowerPoint is a document presentation tool in the Office suite. A security vulnerability exists in PowerPoint in Microsoft Office 2016 for Mac-based platforms, which stems fro...

Adobe Acrobat 2017 Security Updates (APSB18-09) - Windows

Adobe Acrobat 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...

Microsoft Internet Explorer Remote Code Execution Vulnerability (CNVD-2018-09474)

Microsoft Windows Server 2012 and others are a series of operating systems released by Microsoft Corporation, U.S.A. Internet Explorer IE is one of the web browsers that comes with the Windows operating system. A remote code execution vulnerability exists in Microsoft IE versions 10 and 11, which...

Microsoft Office Graph Serialized Data Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Graph. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing o...

Microsoft ChakraCore Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2018-11133)

Microsoft ChakraCore is the core of the JavaScript engine used by Edge, a web browser from Microsoft. A remote code execution vulnerability exists in Microsoft ChakraCore. A remote attacker could exploit this vulnerability to execute arbitrary code in the context of the current user, resulting in...

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

Internet Explorer is a web browser from Microsoft. A scripting engine memory corruption vulnerability exists in Microsoft Internet Explorer. The vulnerability is caused due to a problem in the way the scripting engine handles objects in memory. A remote attacker could use this vulnerability to...

Microsoft Internet Explorer Arbitrary Code Execution Vulnerability (CNVD-2018-10669)

Microsoft Windows Server 2012 and others are a series of operating systems released by Microsoft Corporation, U.S.A. Internet Explorer IE is one of the web browsers that comes with the Windows operating system. A remote code execution vulnerability exists in the way the scripting engine handles I...

Microsoft ChakraCore and Edge Remote Code Execution Vulnerability (CNVD-2018-10206)

Microsoft Edge is a web browser developed by Microsoft.Chakra Engine is a JavaScript scripting engine.ChakraCore is the core of the open source Chakra JavaScript scripting engine used in Edge, and can also be used as a stand-alone JavaScript engine. ChakraCore is the core of an open source Chakra...

Microsoft Office Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

The vulnerability in Microsoft Edge browsers arises from an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2018-08027)

Internet Explorer is a web browser from Microsoft. A memory corruption vulnerability exists in Microsoft Internet Explorer. The vulnerability arises because the software fails to properly access objects in memory. An attacker can exploit the vulnerability to run arbitrary code in the context of t...

Microsoft Excel and Office Remote Code Execution Vulnerability

Microsoft Excel is one of the components of Microsoft's office software Microsoft office, a spreadsheet software written and run by Microsoft for computers with Windows and Apple Macintosh operating systems. A remote code execution vulnerability exists in Microsoft Excel and Office. The...

Microsoft Excel Remote Code Execution Vulnerability (CNVD-2018-08937)

Microsoft Excel is one of the components of Microsoft's office software Microsoft office, a spreadsheet software written and run by Microsoft for computers with Windows and Apple Macintosh operating systems. A remote code execution vulnerability exists in Microsoft Excel. The vulnerability arises...

Windows UAC Protection Bypass (Via Slui File Handler Hijack)

This module will bypass UAC on Windows 8-10 by hijacking a special key in the Registry under the Current User hive, and inserting a custom command that will get invoked when any binary .exe application is launched. But slui.exe is an auto-elevated binary that is vulnerable to file handler...

Microsoft Windows Remote Assistance XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...