26151 matches found
Microsoft Internet Explorer and Edge CVE-2017-11791 Information Disclosure Vulnerability
Description Microsoft Internet Explorer and Edge are prone to an information disclosure vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Successful exploits will allow attackers to obtain sensitive information that may aid in...
Microsoft Internet Explorer CVE-2017-11856 Remote Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Internet Explorer 11 is vulnerable...
Microsoft Internet Explorer Memory Corruption (CVE-2017-11856)
A remote code execution vulnerability exists in Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page...
KB4048953: Windows 10 Version 1607 and Windows Server 2016 November 2017 Cumulative Update
The remote Windows host is missing security update 4048953. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists when Microsoft Edge improperly handles redirect requests. The vulnerability allows Microsoft Edge to bypass Cross- Origin Resource...
KLA11140 Multiple vulnerabilities in Microsoft Edge and Internet Explorer
Multiple serious vulnerabilities have been found in Microsoft Edge and Internet Explorer. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions and obtain sensitive information. Original advisories CVE-2017-11791 CVE-2017-11803 CVE-2017-11827...
KLA11855 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, cause denial of service. Below is a complete list of vulnerabilities: 1. An information...
Adobe Acrobat and Reader Security Bypass (APSB17-36: CVE-2017-16366)
A Security bypass vulnerability exists in Adobe Acrobat and Reader. The vulnerability is in the way Internet Explorer handles embedded pdf files. A remote attacker can exploit this issue by enticing a target user to open a specially crafted file...
Microsoft Internet Explorer CVE-2017-11869 Remote Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-i...
Microsoft Internet Explorer and Edge CVE-2017-11843 Remote Memory Corruption Vulnerability
Description Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currentl...
Windows 7 and Windows Server 2008 R2 November 2017 Security Updates
The remote Windows host is missing security update 4048960 or cumulative update 4048957. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a...
Microsoft Internet Explorer and Edge CVE-2017-11838 Remote Memory Corruption Vulnerability
Description Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currentl...
KB4048956: Windows 10 LTSB November 2017 Cumulative Update
The remote Windows host is missing security update 4048956. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an...
KB4048955: Windows 10 Version 1709 and Windows Server Version 1709 November 2017 Cumulative Update
The remote Windows host is missing security update 4048955. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an...
KB4048952: Windows 10 Version 1511 November 2017 Cumulative Update
The remote Windows host is missing security update 4048952. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an...
Microsoft Internet Explorer 11 jscript!JsErrorToString Use-After-Free Exploit
Microsoft Internet Explorer 11 suffers from a use-after-free vulnerability in jscript!JsErrorToString. Microsoft IE11: use-after-free in jscript!JsErrorToString CVE-2017-11810 There is a use-after-free in jscript.dll library that can be exploited in IE11. jscript.dll is an old JavaScript library...
Disdain exploit kit and a side of social engineering deliver Neutrino Bot
Today we picked up new activity from an exploit kit that was first discovered back in August of this year. The Disdain exploit kit, simply identified by a string of the same name found in its source code, is being distributed again after a short interruption via malvertising chains. Disdain EK...
The vulnerability of the Internet Explorer browser, related to improper handling of objects in memory, allows a malicious actor to execute arbitrary code.
The vulnerability of the Internet Explorer browser is related to improper handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted web page...
The vulnerability of the Internet Explorer browser is related to improper handling of objects in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the Internet Explorer browser is related to incorrect handling of objects in memory, resulting in operations exceeding the buffer limits of memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using...
Microsoft Internet Explorer 11 - jscript!JsErrorToString Use-After-Free
Microsoft Internet Explorer 11 - jscript!JsErrorToString Use-After-Free var e = new Error; var o = toString:function //alert'in toString'; e.name = 1; CollectGarbage; //reallocate forvar i=0;i !-- ========================================= This is a use-after-free in jscript!JsErrorToString that c...
Microsoft Internet Explorer 11 - 'jscript!JsErrorToString' Use-After-Free
var e = new Error; var o = toString:function //alert'in toString'; e.name = 1; CollectGarbage; //reallocate forvar i=0;i !-- ========================================= This is a use-after-free in jscript!JsErrorToString that can lead to a heap overflow. The PoC above crashes in memcpy when...