CVE-2015-6047

The broker EditWith feature in Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the AppContainer protection mechanism and gain privileges via a DelegateExecute launch of an arbitrary application, as demonstrated by a transition from Low Integrity to Medium Integrity, aka...

CVE-2015-6051

CVE-2015-6051 affects Microsoft Internet Explorer 10 and 11. The vulnerability is an elevation of privilege caused by an error in how Internet Explorer validates permissions under specific conditions, enabling a crafted website to transition from Low Integrity to Medium (and related privilege lev...

CVE-2015-6053

CVE-2015-6053 affects Microsoft Internet Explorer (versions 7–11); the vulnerability enables remote info disclosure by passing crafted parameters to ArrayBuffer.slice, allowing memory content exposure from the process. The root cause is unsafe handling of parameters in ArrayBuffer.slice within IE...

CVE-2015-6048

Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6049...

CVE-2015-6056

CVE-2015-6056 is an Internet Explorer scripting engine memory corruption vulnerability affecting IE9–IE11. The issue arises in the JScript/VBScript engines when processing a crafted web page, allowing remote code execution or memory corruption leading to a denial of service. Public exploit activi...

CVE-2015-2482

CVE-2015-2482 affects Microsoft VBScript/JScript engines (VBScript 5.7/5.8 and JScript 5.7/5.8) used in Internet Explorer 8–11 and related products. A crafted replace operation on a JavaScript RegExp can trigger memory corruption, enabling remote code execution or a denial of service. Connected s...

CVE-2015-6050

Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...

CVE-2015-6049

Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6048...

CVE-2015-6046

Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability."...

CVE-2015-6055

The Microsoft 1 VBScript 5.7 and 5.8 and 2 JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted Filter arguments, aka "Scripting Engine Memory Corrupti...

CVE-2015-6046

CVE-2015-6046 affects Microsoft Internet Explorer 9–11. A remote attacker can trigger an information-disclosure vulnerability by luring a user to a crafted webpage, allowing access to sensitive data from the browser process memory. Connected sources confirm multiple IE-related vulnerabilities und...

CVE-2015-2482

The Microsoft 1 VBScript 5.7 and 5.8 and 2 JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted replace operation with a JavaScript regular expressio...

CVE-2015-6044

CVE-2015-6044 affects Microsoft Internet Explorer 8. An attacker could trigger a remote privilege-escalation by visiting a crafted webpage, enabling a transition from Low to Medium integrity. Publicly documented mitigation is the MS15-106 update (Internet Explorer cumulative security update); app...

CVE-2015-6048

CVE-2015-6048 affects Microsoft Internet Explorer 7–11 and is described as allowing remote code execution or a memory corruption denial of service via a crafted website (Internet Explorer Memory Corruption Vulnerability). Connected documents also describe a related IE vulnerability (CVE-2015-6184...

CVE-2015-6052

CVE-2015-6052 covers a security feature bypass in the VBScript 5.7/5.8 and JScript 5.7/5.8 engines used by Internet Explorer 8–11 and other products. A remote attacker could bypass ASLR via a crafted website. The issue is described as a VBScript/JScript ASLR bypass affecting IE components; relate...

CVE-2015-6047

CVE-2015-6047 affects Microsoft Internet Explorer 8–11 via the broker EditWith feature, enabling remote attackers to bypass AppContainer and escalate privileges (Low to Medium Integrity) by a crafted DelegateExecute launch. The vulnerability is discussed across multiple sources as part of the MS1...

Microsoft Internet Explorer Multiple Vulnerabilities (3096441)

This host is missing a critical security update according to Microsoft Bulletin MS15-106. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Patch Report: All Versions of Windows affected by Critical Vulnerability

Microsoft has rolled out six security updates this Patch Tuesday, out of which three are considered to be "critical," while the rest are marked as "important." Bulletin MS15-106 is considered to be critical for Internet Explorer IE and affects absolutely all versions of Windows operating system...

October 2015 Microsoft Patch Tuesday Security Bulletins

Microsoft’s monthly release of security bulletins today is a relatively light load of patches to be tested and deployed. The real news, however, could be in a separate advisory in which it continues to deprecate the outdated RC4 encryption algorithm. Following its initial advisory in May that...

KLA10676 Multiple vulnerabilities in Microsoft JScript and VBScript

Multiple serious vulnerabilities have been found in Microsoft JScript and VBScript. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. Improperly handling objects...