23359 matches found
The vulnerability of the Internet Explorer browser, which allows a hacker to bypass the sandboxing protection mechanism
The vulnerability of the Internet Explorer browser is related to incorrect security settings and zone parameters. Exploiting this vulnerability allows a malicious actor to bypass the sandbox protection mechanisms by using a specially crafted website...
Vulnerability of browsers Internet Explorer and Microsoft Edge, allowing intruders to obtain confidential information
The vulnerability of Internet Explorer and Microsoft Edge relates to errors in requests between different sources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information through a specially crafted website...
Microsoft Internet Explorer 11 CORS Disrespect
IE11 is not following CORS specification for local files like Chrome and Firefox. I've contacted Microsoft and they say this is not a security issue so I'm sharing it. From my tests IE11 is not following CORS specifications for local files as supposed to be. In order to prove I've created a...
The vulnerability of the Internet Explorer browser, which allows a violator to circumvent existing access restrictions
The vulnerability of the Internet Explorer browser is related to errors in files with the .url extension on the Internet. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions using a specially crafted file...
The vulnerability of the Internet Explorer browser, which allows a violator to trigger a service failure or execute arbitrary code
The vulnerability of the Internet Explorer browser is related to errors in its code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely or cause a service failure memory corruption by using a specially crafted web page...
Cumulative update for Windows 10: September 20, 2016
None None...
Microsoft Internet Explorer 11.0.9600.18482 - Use After Free
No description provided by source. body background-color:lime; font-color:red; ; / Exploit Title: Internet Explorer 11 Use After Free Date: 05/09/2016 - 11/09/2016 Exploit Author: Marcin Ressel Vendor Homepage: https://www.microsoft.com/pl-pl/ Version: 11.0.9600.18482 Tested on: Windows 7 x64 0:0...
Microsoft Internet Explorer Information Disclosure Vulnerability (CNVD-2016-07593)
Microsoft Internet Explorer is a popular WEB browser. A security vulnerability exists in Microsoft Internet Explorer that can be exploited by remote attackers to construct malicious web pages that can be parsed by users to obtain sensitive information...
Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2016-07594)
Microsoft Internet Explorer is a popular WEB browser. A memory corruption vulnerability exists in Microsoft Internet Explorer that can be exploited by a remote attacker to construct a malicious web page that can be parsed by a user to execute arbitrary code in the context of the application...
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (CNVD-2016-07591)
Microsoft Internet Explorer is a popular WEB browser. A memory corruption vulnerability exists in the Microsoft Internet Explorer browser engine, which can be exploited by remote attackers to construct a malicious web page that can be parsed by a user to execute arbitrary code...
Microsoft Internet Explorer Add-on Installer Enhanced Protected Mode Sandbox Escape Vulnerability
This vulnerability allows attackers to escape from the Enhanced Protected Mode sandbox on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...
Microsoft Internet Explorer elevation of privilege vulnerability (CNVD-2016-07592)
Microsoft Internet Explorer is a popular WEB browser. A security vulnerability exists in Microsoft Internet Explorer that allows remote attackers to build malicious web pages that can be exploited to trick users into parsing them with elevated privileges...
Microsoft Patches Zero Day Used in AdGholas Malvertising Campaigns
An attack group behind a long-running malvertising campaign made effective use of a previously unreported low-level vulnerability in Microsoft’s Internet Explorer and Edge browsers to rake in money via banking Trojans and ad fraud. Microsoft patched the zero-day this week among dozens of other...
CVE-2016-3375
The OLE Automation mechanism and VBScript scripting engine in Microsoft Internet Explorer 9 through 11, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow remote attackers to...
CVE-2016-3375
The OLE Automation mechanism and VBScript scripting engine in Microsoft Internet Explorer 9 through 11, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow remote attackers to...
CVE-2016-3353
Microsoft Internet Explorer 9 through 11 mishandles .url files from the Internet zone, which allows remote attackers to bypass intended access restrictions via a crafted file, aka "Internet Explorer Security Feature Bypass."...
CVE-2016-3353
Microsoft Internet Explorer 9 through 11 mishandles .url files from the Internet zone, which allows remote attackers to bypass intended access restrictions via a crafted file, aka "Internet Explorer Security Feature Bypass."...
CVE-2016-3351
Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."...
CVE-2016-3351
Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."...