23359 matches found
KB4457140: Windows Server 2012 September 2018 Security Update
The remote Windows host is missing security update 4457140 or cumulative update 4457135. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could...
Microsoft Internet Explorer CVE-2018-8461 Remote Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Internet Explorer 11 is vulnerable...
Microsoft Internet Explorer and Edge CVE-2018-8452 Information Disclosure Vulnerability
Description Microsoft Internet Explorer and Edge are prone to an information disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft ChakraCore Microsoft Edge Microsoft Internet Explorer 11...
Microsoft Internet Explorer CVE-2018-8470 Security Bypass Vulnerability
Description Microsoft Internet Explorer is prone to a security-bypass vulnerability. Successfully exploiting this issue may allow an attacker to bypass certain security restrictions and perform unauthorized actions. This may lead to other attacks. Internet Explorer 11 is vulnerable. Technologies...
Microsoft Internet Explorer Memory Corruption (CVE-2018-8447)
A memory corruption vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Internet Explorer Memory Corruption (CVE-2018-8461)
A memory corruption vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
KLA11890 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in...
Security Updates for Internet Explorer (September 2018)
The Internet Explorer installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corru...
The vulnerabilities of browsers Internet Explorer and Microsoft Edge, related to deficiencies in access control in isolated environments, allow attackers to escalate their privileges.
The vulnerability of browsers Internet Explorer and Microsoft Edge is related to deficiencies in access control in isolated environments. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...
August 30, 2018—KB4343894 (Preview of Monthly Rollup)
None None...
August 30, 2018—KB4343891 (Preview of Monthly Rollup)
None None...
The vulnerability of JavaScript script handlers in Internet Explorer allows a perpetrator to execute arbitrary code.
The vulnerability of JavaScript script handlers in Internet Explorer browsers is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...
The vulnerabilities of Microsoft Edge and Internet Explorer, related to errors in implementing inter-frame interactions, allow attackers to disclose protected information.
The vulnerabilities of Microsoft Edge and Internet Explorer are related to errors in the implementation of inter-frame interaction. Exploiting these vulnerabilities can allow a malicious actor to disclose sensitive information by using a specially crafted web page...
Microsoft Windows - JScript RegExp.lastIndex Use-After-Free Exploit
Exploit for windows platform in category dos / poc alert'start'; var vars = ; var r = new RegExp; forvar i=0; i20000; i++...
Microsoft Windows - JScript RegExp.lastIndex Use-After-Free
alert'start'; var vars = ; var r = new RegExp; forvar i=0; i20000; i++ varsi = "aaaaa"; r.lastIndex = "aaaaa"; forvar i=20000; i40000;...
Microsoft Windows - JScript RegExp.lastIndex Use-After-Free
Microsoft Windows - JScript RegExp.lastIndex Use-After-Free alert'start'; var vars = ; var r = new RegExp; forvar i=0; i20000; i++ varsi =...
The vulnerability of JavaScript script handlers in Internet Explorer allows a perpetrator to execute arbitrary code.
The vulnerability of JavaScript script handlers in Internet Explorer arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted web page or document...
The vulnerability of JavaScript script handlers in Internet Explorer allows a perpetrator to execute arbitrary code.
The vulnerability of JavaScript script handlers in Internet Explorer arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted web page or document...
The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge and Internet Explorer, related to the execution of operations beyond the buffer in memory, allows an attacker to execute arbitrary code.
The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge and Internet Explorer arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...
The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge and Internet Explorer, related to the execution of operations beyond the buffer in memory, allows an attacker to execute arbitrary code.
The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge and Internet Explorer arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...