26157 matches found
Information disclosure
Microsoft Internet Explorer 10 and 11 allows remote attackers to bypass file permissions and obtain sensitive information via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability."...
CVE-2016-0189
The Microsoft 1 JScript 5.8 and 2 VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption...
CVE-2016-0188
The User Mode Code Integrity UMCI implementation in Device Guard in Microsoft Internet Explorer 11 allows remote attackers to bypass a code-signing protection mechanism via unspecified vectors, aka "Internet Explorer Security Feature Bypass."...
CVE-2016-0192
CVE-2016-0192 affects Microsoft Internet Explorer 9–11 and Microsoft Edge. It is a remote code-execution/memory-corruption vulnerability that could allow an attacker to run arbitrary code on a vulnerable system by convincing a user to visit a crafted website. The root cause involves memory handli...
CVE-2016-0187
The Microsoft 1 JScript 5.8 and 2 VBScript 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a...
CVE-2016-0194
Microsoft Internet Explorer 10 and 11 allows remote attackers to bypass file permissions and obtain sensitive information via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability."...
CVE-2016-0192
Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."...
CVE-2016-0194
CVE-2016-0194 is Internet Explorer Information Disclosure. Public docs confirm that IE10/IE11 could disclose file contents by a crafted webpage due to improper handling of file access permissions. The vulnerability enables remote attackers to read sensitive data from arbitrary files via web conte...
CVE-2016-0188
CVE-2016-0188 affects Internet Explorer 11 via the Device Guard UMCI component, enabling a remote attacker to bypass code-signing protections and run unsigned code. The vulnerability stems from UMCI policy validation weaknesses in IE’s User Mode Code Integrity, allowing code that should be blocke...
CVE-2016-0187
Technical details for CVE-2016-0187 are not provided in the connected documents. The sources discuss related CVEs (e.g., CVE-2016-0189) and EK activity, but no product/version/impact specifics or remediation for 2016-0187 are given.
CVE-2016-0189
CVE-2016-0189 is a memory-corruption flaw in Microsoft JScript/VBScript engines used by Internet Explorer 9–11 that attackers could trigger via crafted web content to achieve remote code execution or memory corruption. Connected sources show exploitation within exploit kits (notably Neutrino/Nept...
Microsoft Internet Explorer Information Leakage Vulnerability (CNVD-2016-03017)
Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. An information leakage vulnerability exists in Microsoft IE versions 10 and 11, which stems from the program not properly handling...
Microsoft Browser Memory Corruption Vulnerability (CNVD-2016-03018)
Microsoft Internet Explorer IE and Edge are both web browsers developed by Microsoft Corporation, U.S.A. IE was the default browser that came with operating systems prior to Windows 10, and Edge is the default browser that comes with the latest operating system, Windows 10. A memory corruption...
Microsoft Internet Explorer Multiple Vulnerabilities (3155533)
This host is missing a critical security update according to Microsoft Bulletin MS16-051. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2016-0189
The Microsoft 1 JScript 5.8 and 2 VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka “Scripting Engine Memory Corruption...
CVE-2016-0187
The Microsoft 1 JScript 5.8 and 2 VBScript 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka “Scripting Engine Memory Corruption Vulnerability,” a...
Cumulative Security Update for Internet Explorer 10 for Windows Embedded 8 Standard (KB3154070)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
Cumulative Security Update for Internet Explorer 10 for Windows Embedded 8 Standard for x64-based Systems (KB3154070)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
Outdated, Unpatched Software Rampant in Businesses
We all know outdated software, browsers, and plugins are unsafe, but how unsafe? Duo Labs has taken a hard look at the dangers of outdated software in a report released Tuesday that said 25 percent of business systems risk exposure to 700 possible vulnerabilities. The most insecure software, Duo...
