23359 matches found
Cryptic Rumblings Ahead of First 2020 Patch Tuesday
Sources tell KrebsOnSecurity that Microsoft Corp. is slated to release a software update on Tuesday to fix an extraordinarily serious security vulnerability in a core cryptographic component present in all versions of Windows. Those sources say Microsoft has quietly shipped a patch for the bug to...
CVE-2019-18652
A DOM based XSS vulnerability has been identified on the WatchGuard XMT515 through 12.1.3, allowing a remote attacker to execute JavaScript in the victim's browser by tricking the victim into clicking on a crafted link. The payload was tested in Microsoft Internet Explorer 11.418.18362.0 and...
Design/Logic Flaw
A DOM based XSS vulnerability has been identified on the WatchGuard XMT515 through 12.1.3, allowing a remote attacker to execute JavaScript in the victim's browser by tricking the victim into clicking on a crafted link. The payload was tested in Microsoft Internet Explorer 11.418.18362.0 and...
Xiaozhi Dual Core Browser suffers from dll hijacking vulnerability
Xiaozhi Duo Browser, a secure dual-core browser with built-in Chromium and IE kernels. Xiaozhi Dual Core Browser suffers from a dll hijacking vulnerability, which can be exploited by attackers to gain server privileges...
Mapbox: Stored XSS | api.mapbox.com | IE 11 | Styles name
On December 24, 2019, user @renekroka reported a stored XSS injection vulnerability on api.mapbox.com that affected users in Internet Explorer 11. An attacker could store XSS injections on Mapbox servers, and then exploit them in IE11 due to JSON responses not including the X-Content-Type-Options...
Microsoft Issues Out-of-Band Update for SharePoint Bug
UPDATE Microsoft has added a fresh CVE to its security portal, linking it to the existing November security updates the patch itself was already included in the updates, but not specifically named. The CVE describes a vulnerability in SharePoint Server. According to a Microsoft Security Advisory,...
Take a screenshot of browser content when Browser Content Redirection is active
When Browser Content Redirection is active, pressing the Print Screen button or using Win+Shift+S to capture a screenshot will only capture the frame of the Internet Explorer or Chrome window. This is a limitation of the feature, as the screenshot will be captured within the session, but the BCR...
The vulnerability of Internet Explorer and Microsoft Edge browsers, related to bypassing authentication through spoofing, allows attackers to access confidential data.
The vulnerability of Internet Explorer and Microsoft Edge relates to bypassing authentication through spear-phishing tactics. Exploiting this vulnerability allows a malicious actor to gain access to confidential data through a specially created web page...
The vulnerability of the VBScript script handler in Internet Explorer allows a hacker to execute arbitrary code.
The vulnerability of the VBScript script handler in Internet Explorer arises from the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted web page...
Microsoft Internet Explorer Remote Code Execution Vulnerability (CNVD-2019-45913)
Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from Microsoft Corporation.VBScript Engine is one of the VBScript scripting language engines. A remote code execution vulnerability exists in the way the VBScript Engine handles memory objects in Microsof...
Internet Explorer help
None None...
VBScript Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabili...
Security Updates for Internet Explorer (December 2019)
The Internet Explorer installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability : - A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in...
Microsoft Internet Explorer VBScript Engine CVE-2019-1485 Remote Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the current user. Failed exploit attempts may result in a denial of service condition. Internet explorer 9, 10 and 11 are...
KLA11619 ACE vulnerability in Microsoft Internet Explorer
A remote code execution vulnerability was found in Microsoft Internet Explorer. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2019-1485 Exploitation Malware exists for this vulnerability. Usually such malware is classified as Exploit. More...
The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge and Internet Explorer allows a perpetrator to execute arbitrary code.
The vulnerability of the ChakraCore JavaScript script handler in Microsoft Edge and Internet Explorer is related to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially crafted web page...
The vulnerability of the Internet Explorer browser script handler allows a perpetrator to trigger a service failure or execute arbitrary code.
The vulnerability of the Internet Explorer browser’s script handler exists due to errors in memory object processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, or to cause a service failure through a specially created web...
Internet Explorer - Use-After-Free in JScript Arguments During toJSON Callback Exploit
There is a use-after-free issue in JSCript triggerable via Internet Explorer where the members of the 'arguments' object aren't tracked by the garbage collector during the 'toJSON' callback. Thus, during the 'toJSON' callback, it is possible to assign a variable to the 'arguments' object, have it...
Internet Explorer - Use-After-Free in JScript Arguments During toJSON Callback
Internet Explorer - Use-After-Free in JScript Arguments During toJSON Callback There is a use-after-free issue in JSCript triggerable via Internet Explorer where the members of the 'arguments' object aren't tracked by the garbage collector during the 'toJSON' callback. Thus, during the 'toJSON'...
Internet Explorer - Use-After-Free in JScript Arguments During toJSON Callback
There is a use-after-free issue in JSCript triggerable via Internet Explorer where the members of the 'arguments' object aren't tracked by the garbage collector during the 'toJSON' callback. Thus, during the 'toJSON' callback, it is possible to assign a variable to the 'arguments' object, have it...