23361 matches found
Immunity Canvas: MS16_006_SILVERLIGHT
Name| ms16006silverlight ---|--- CVE| CVE-2016-0034 Exploit Pack| CANVAS Description| ms16006silverlight Notes| CVE Name: CVE-2016-0034 VENDOR: Microsoft Notes: This module exploits a mishandling of negative offsets during a decoding. This situation could be exploited to overwrite with controlled...
Memory corruption
The Microsoft 1 VBScript 5.7 and 5.8 and 2 JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."...
CVE-2016-0002
Technical details for CVE-2016-0002 are not publicly available in the provided connected documents. Monitor for updates.
CVE-2016-0005
CVE-2016-0005 is an Elevation of Privilege vulnerability in Microsoft Internet Explorer (IE) 9–11. Connected sources confirm it involves bypassing cross-origin/same-origin policy to gain elevated privileges (cross-domain policy enforcement failure). IE versions 9–11 are affected, with the CVE exp...
CVE-2016-0005
Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Internet Explorer Elevation of Privilege Vulnerability."...
CVE-2016-0002
The Microsoft 1 VBScript 5.7 and 5.8 and 2 JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."...
Microsoft Internet Explorer Multiple Vulnerabilities (3124903)
This host is missing a critical security update according to Microsoft Bulletin MS16-001. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
End of Life for Internet Explorer 8, 9 and 10
Microsoft has started the year with an announcement that, effective Jan. 12, 2016, support for all older versions of Internet Explorer IE will come to an end known as an EoL, or End of Life. The affected versions are Internet Explorer 7, 8, 9, and 10. What this means for users is that Microsoft...
KLA10740 Multiple vulnerabilities in Microsoft Internet Explorer and Edge
Multiple serious vulnerabilities have been found in Microsoft Internet Explorer and Edge. Malicious users can exploit these vulnerabilities to gain privileges or execute arbitrary code. Below is a complete list of vulnerabilities 1. Improper memory objects handling at VBScript engine can be...
Microsoft Internet Explorer Memory Corruption (MS16-001: CVE-2016-0002)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...
Microsoft Internet Explorer Elevation of Privilege (MS16-001: CVE-2016-0005)
An elevation of privilege vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer validates permissions under specific conditions, potentially allowing script to be run with elevated privileges...
Microsoft Internet Explorer CVE-2016-0005 Remote Privilege Escalation Vulnerability
Description Microsoft Internet Explorer is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Internet Explorer 9, 10, and 11 are vulnerable. Technologies Affected Microsoft Internet...
Microsoft Internet Explorer (IE) 6.x - 10.x End of Life (EOL) Detection
The Microsoft Internet Explorer IE version on the remote host has reached the End of Life EOL and should not be used anymore. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Microsoft VBScript CVE-2016-0002 Remote Memory Corruption Vulnerability
Description Microsoft VBScript is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can take advantage of this vulnerability to execute arbitrary code in the context of the currently...
MS16-001: Cumulative Security Update for Internet Explorer (3124903)
The version of Internet Explorer installed on the remote host is missing Cumulative Security Update 3124903. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the VBScript engine due to improper handling of objects in memory. An attacker ca...
Microsoft Windows Mapi DLL Loading Elevation of Privilege (MS16-007: CVE-2016-0020)
An elevation of privilege vulnerability has been reported in Microsoft Windows. The vulnerability is due to an error in certain DLL files, which could be abused by attackers to gain higher privileges or bypass sandboxing mechanisms. The attacker must entice the victim to run an executable file to...
MS16-001: Cumulative Security Update for Internet Explorer: January 12, 2016
Resolves vulnerabilities in Internet Explorer that could allow remote code execution if a user views a specially crafted webpage using Internet Explorer.SummaryThis security update resolves several reported vulnerabilities in Internet Explorer. These vulnerabilities could allow remote code...
Cumulative Update for Windows 10: January 12, 2016
None None...
Cumulative Update for Windows 10 Version 1511: January 12, 2016
None None...
From Today Onwards, Don't You Even Dare to Use Microsoft Internet Explorer
Yes, from today, Microsoft is ending the support for versions 8, 9 and 10 of its home-built browser Internet Explorer, thereby encouraging Windows users to switch on to Internet Explorer version 11 or its newest Edge browser. Microsoft is going to release one last patch update for IE8, IE9 and IE...