CVE-2017-3935

CVE-2017-3935 affects McAfee Network Data Loss Prevention (NDLP). All connected sources describe a MIME type sniffing vulnerability where the response body could be interpreted/displayed as a content type different from the intended one, potentially impacting how IE renders the content. The root ...

CVE-2017-3935

Network Data Loss Prevention is vulnerable to MIME type sniffing which allows older versions of Internet Explorer to perform MIME-sniffing on the response body, potentially causing the response body to be interpreted and displayed as a content type other than the intended content type...

Windows Attachment Manager Incorrect High Risk JAR Handling Vulnerability

The Windows Attachment Manager does not correctly handle JAR files marked as high risk when accessed via Internet Explorer 11. Scenario: The Windows Attachment Manager does not correctly handle JAR files marked as "high risk" when accessed via Internet Explorer 11. This leads to direct execution ...

WePay: [stage-go.wepay.com] XSS via Request URI

PoC Open URL in Internet Explorer. This vulnerability only works in Internet Explorer and possibly in Edge, since it is necessary to send a Request-URI without a URL Encode, which is only possible in this browser via redirect...

The vulnerabilities of Microsoft Edge and Internet Explorer involve improper handling of objects in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Edge and Internet Explorer is related to incorrect handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using specially crafted content that causes memory corruption upon...

The vulnerabilities of Microsoft Edge and Internet Explorer involve improper memory management by JavaScript mechanisms when displaying content, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft Edge and Internet Explorer relates to the improper handling of memory objects by JavaScript mechanisms when displaying content. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially...

The vulnerability of the Internet Explorer browser, related to incorrect handling of objects in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Internet Explorer browser in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold versions 1511, 1607, 1703, and Windows Server 2016 is related to incorrect handling of objects in memory. Exploiting...

The vulnerability of the Internet Explorer browser, related to incorrect handling of objects in memory, allows attackers to execute arbitrary code.

The vulnerability of the Internet Explorer browser is related to incorrect handling of objects in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the context of the current user...

The vulnerabilities of Microsoft Edge and Internet Explorer involve improper memory management by JavaScript mechanisms when displaying content, allowing attackers to execute arbitrary code.

Vulnerability of browsers Internet Explorer and Microsoft Edge, where JavaScript memory-management mechanisms malfunction when displaying content. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the context of the current user...

October 17, 2017—KB4043961 (OS Build 16299.19)

None None...

Microsoft Internet Explorer 11 (Windows 7 x86) - mshtml.dll Remote Code Execution (MS17-007)

Microsoft Internet Explorer 11 Windows 7 x86 - mshtml.dll Remote Code Execution MS17-007 .class1 float: left; column-count: 5; .class2 column-span: all; columns: 1px; table border-spacing: 0px; var ntdllBase = ""; function infoleak var textarea = document.getElementById"textarea"; var frame =...

October 10, 2017—KB4041691 (OS Build 14393.1770)

None None...

October 10, 2017—KB4041676 (OS Build 15063.674)

None None...

October 10, 2017—KB4041681 (Monthly Rollup)

None None...

October 10, 2017—KB4041693 (Monthly Rollup)

None None...

October 10, 2017—KB4041678 (Security-only update)

None None...

October 10, 2017—KB4041689 (OS Build 10586.1176)

None None...

CVE-2017-11813

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 R2 allows an attacker to execute arbitrary code in the context of the current user, due to how Internet Explorer handles objects in memory, aka "Internet Explorer Memo...

CVE-2017-11822

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how...

CVE-2017-11810

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the...