The vulnerability in the JavaScript engine of Microsoft Edge and Internet Explorer allows a hacker to execute arbitrary code.

The vulnerability in Microsoft Edge and Internet Explorer JavaScript engines arises from an operation that goes beyond the buffer boundaries in memory memory corruption due to script execution. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the...

Vulnerability of object handlers in the memory of Internet Explorer and Microsoft Edge browsers, allowing attackers to execute arbitrary code

The vulnerability of object handlers in the memory of Internet Explorer and Microsoft Edge arises from the execution of operations beyond the buffer boundaries in memory memory corruption. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the curre...

Vulnerability of object handlers in Microsoft Edge and Internet Explorer browsers’ memory, allowing attackers to execute arbitrary code

The vulnerability of object handlers in the memory of Microsoft Edge and Internet Explorer arises from the execution of operations beyond the buffer boundaries in memory memory corruption. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the curre...

Microsoft Internet Explorer Remote Code Execution Vulnerability(CVE-2017-8618)

There is a type confusion issue related to how some arithmetic operations are performed in VBScript. To illustrate, see the following simplified code of VbsVarMod static unsigned char resultlookuptable1818 = ... void VbsVarModVAR v1, VAR v2 VAR arithv1 = v1-PvarGetArithVal; VAR arithv2 =...

Microsoft Chakra JavaScript Engine Remote Code Execution Vulnerability

Microsoft Chakra JavaScript engine is a component of the JavaScript engine used in Internet Explorer and Edge Web browsers by Microsoft. A remote code execution vulnerability exists in the Microsoft Chakra JavaScript engine. A remote attacker could exploit this vulnerability to execute arbitrary...

Microsoft Edge 38.14393.1066.0 - textarea.defaultValue Memory Disclosure

Microsoft Edge 38.14393.1066.0 - textarea.defaultValue Memory Disclosure var n = 0; function go document.addEventListener"DOMNodeRemoved", eventhandler; eventhandler; function eventhandler n++; ifn==5 return; //prevent going into an infinite recursion t.defaultValue = "aaaaaaaaaaaaaaaaaaaa";...

Cerber ransomware delivered in format of a different order of Magnitude

As a follow up to our study into the Magnitude exploit kit and its gate which we profiled in a previous blog post, we take a look at an interesting technique used to distribute the Cerber ransomware. Exploit kits are a very effective means of serving malicious payloads and an important aspect is...

Microsoft Internet Explorer Security Bypass Vulnerability (CNVD-2017-20512)

Microsoft Windows 10 and Windows Server 2016 are both products of Microsoft Corporation USA. The former is an operating system for personal computers and the latter is a server operating system.Internet Explorer IE is a web browser that comes with the Windows operating system. A security bypass...

Microsoft Internet Explorer Remote Memory Corruption Vulnerability (CNVD-2017-28004)

Microsoft Internet Explorer is a popular WEB browser. A memory corruption vulnerability exists in Microsoft Internet Explorer, which allows remote attackers to exploit the vulnerability by presenting a special WEB page and tricking a user into visiting it, which could crash the application or...

Microsoft Windows Multiple Vulnerabilities (KB4034668)

This host is missing a critical security update according to Microsoft KB4034668 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4034658)

This host is missing a critical security update according to Microsoft KB4034658 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4034660)

This host is missing a critical security update according to Microsoft KB4034660 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft IE And Microsoft Edge Multiple Flash Player Vulnerabilities (4034662)

This host is missing a critical security update according to Microsoft KB4034662. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Internet Explorer Remote Memory Corruption Vulnerability (CNVD-2017-28003)

Microsoft Internet Explorer is a popular WEB browser. A memory corruption vulnerability exists in Microsoft Internet Explorer, which allows remote attackers to exploit the vulnerability by presenting a special WEB page and tricking a user into visiting it, which could crash the application or...

Microsoft Edge and Internet Explorer Remote Memory Corruption Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Internet Explorer IE and Edge are among the web browsers. A security vulnerability exists in IE version 11 and Edge in Microsoft Windows. A remote attacker can exploit this vulnerability to execute...

Microsoft Internet Explorer and Edge Remote Memory Corruption Vulnerability (CNVD-2017-28005)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Microsoft Edge and Internet Explorer IE are web browsers that come with Windows. Microsoft Edge and Internet Explorer IE are both web browsers that come with Windows.The former is the default browser...

Microsoft Edge Remote Code Execution Vulnerability (CNVD-2017-24171)

Microsoft Internet Explorer is the default browser that comes with operating systems prior to Windows 10, and Microsoft Edge is the default browser that comes with the latest operating system, Windows 10. A remote code execution vulnerability exists in Microsoft Internet Explorer. An attacker can...

Microsoft Windows Internet Explorer and Edge JavaScript Engine Remote Code Execution Vulnerability (CNVD-2017-20505)

Microsoft Windows is a family of operating systems released by Microsoft Corporation in the U.S. Microsoft Internet Explorer IE and Edge are web browsers developed by Microsoft Corporation in the U.S. IE is the default browser that came with operating systems before Windows 10. Edge is the defaul...

Microsoft Windows Internet Explorer and Edge JavaScript Engine Remote Code Execution Vulnerability

Microsoft Windows is a family of operating systems released by Microsoft Corporation in the U.S. Microsoft Internet Explorer IE and Edge are web browsers developed by Microsoft Corporation in the U.S. IE is the default browser that came with operating systems before Windows 10. Edge is the defaul...

CVE-2017-8651

Internet Explorer in Microsoft Windows Server 2008 SP2 and Windows Server 2012 allows an attacker to execute arbitrary code in the context of the current user due to Internet Explorer improperly accessing objects in memory, aka "Internet Explorer Memory Corruption Vulnerability"...