CVE-2015-6148

Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6156...

CVE-2015-6160

CVE-2015-6160 affects Microsoft Internet Explorer 11. The vulnerability allows remote attackers to execute arbitrary code or cause a memory corruption-based DoS via a crafted web site. This is the Internet Explorer memory corruption vulnerability; Microsoft released MS15-124 as a fix. If exploiti...

CVE-2015-6164

CVE-2015-6164 affects Microsoft Internet Explorer 9–11. The issue is an improper implementation of the XSS Filter, allowing remote attackers to bypass the Same Origin Policy via a crafted web page. This is described as an XSS Filter Bypass vulnerability. Connected sources indicate public exploits...

CVE-2015-6134

Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6141...

CVE-2015-6150

Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6154...

CVE-2015-6145

Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6146...

CVE-2015-6151

Microsoft Internet Explorer 8 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6083...

CVE-2015-6156

CVE-2015-6156 refers to a memory corruption vulnerability in Microsoft Internet Explorer 9–11 (and related browser components) that could be triggered by visiting a crafted website. The issue allows remote attackers to potentially execute arbitrary code or cause a denial of service, and is noted ...

CVE-2015-6159

CVE-2015-6159 is described in connected CNVD entries as a memory-corruption vulnerability affecting Microsoft Internet Explorer 11 and Microsoft Edge, exploitable via a crafted web site and capable of remote code execution or denial of service. The CNVD entries label it under the umbrella of memo...

CVE-2015-6152

CVE-2015-6152 is a vulnerability in Microsoft Internet Explorer (IE) tied to a Use-After-Free in MSHTML (document object handling) that was addressed as part of MS15-124. The connected Exploit-DB entry for IE11 details the MSHTML!CObjectElement Use-After-Free vulnerability and confirms IE11 as af...

CVE-2015-6148

Summary of vulnerability (CVE-2015-6148) : Microsoft Internet Explorer versions 9–11 and Microsoft Edge are affected by a memory corruption vulnerability that can be exploited when a user visits a crafted website, enabling remote code execution or, per affected context, a denial of service. The i...

CVE-2015-6143

CVE-2015-6143 is part of a family of Internet Explorer/Edge memory‑corruption vulnerabilities described for IE11 and Edge. Connected sources reference a memory‑corruption/remote code execution risk via crafted web sites and note Microsoft bulletins (e.g., MS15‑124 for IE11 and MS15‑125 for Edge) ...

CVE-2015-6158

CVE-2015-6158 affects Microsoft Edge and Internet Explorer 11. The connected OpenVAS entry links this CVE to Microsoft Security Bulletin MS15-125 and indicates a critical update is needed. The vulnerability involves memory corruption triggered by a crafted web site, enabling remote code execution...

CVE-2015-6157

Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability."...

CVE-2015-6153

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6140, CVE-2015-6142,...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2015-08007)

Internet Explorer is a web browser from Microsoft. Internet Explorer 8 has a security vulnerability in the use of CStylesheet objects. By tampering with document elements, an attacker could cause out-of-bounds memory access and then execute arbitrary code in the current process context...

Microsoft Windows Media Center Incorrectly Resolved Reference

Advisory Information Title: Microsoft Windows Media Center link file incorrectly resolved reference Advisory ID: CORE-2015-0014 Advisory URL: http://www.coresecurity.com/advisories/microsoft-windows-media-center-link-file-incorrectly-resolved-reference Date published: 2015-12-08 Date of last...

Microsoft Windows Media Center Library - Parsing Remote Code Execution aka self-executing MCL File

Microsoft Windows Media Center Library - Parsing Remote Code Execution aka self-executing MCL File Title: Microsoft Windows Media Center Library Parsing RCE Vuln aka "self-executing" MCL file CVE-2015-6131 Software Vendor: Microsoft Software version : MS Windows Media Center latest version on any...

Microsoft VBScript and JScript Scripting Engine Information Disclosure Vulnerability (CNVD-2015-08015)

Microsoft Internet Explorer IE is a web browser developed by Microsoft, and is the default browser that comes with the Windows operating system.Microsoft VBScript known as Visual Basic Script is a scripting language, and is also the default programming language for ASP dynamic web pages. JScript ...

Microsoft Windows Media Center Link File Incorrectly Resolved Reference Exploit

Exploit for windows platform in category remote exploits 1. Advisory Information Title: Microsoft Windows Media Center link file incorrectly resolved reference Vendors contacted: Microsoft Release mode: Coordinated release 2. Vulnerability Information Class: Use of Incorrectly-Resolved Name or...