Unspecified TOCTOU Security Bypass Vulnerability in Adobe Flash Player

Adobe Flash Player is a Flash file processing program.Adobe AIR is a cross-operating system runtime library produced by Adobe, through which developers can take advantage of existing Web development technology. Adobe Flash Player/AIR processing swf content exists TOCTOU competition condition bypa...

Microsoft Internet Explorer Elevation of Privilege Vulnerability (CNVD-2015-03075)

Microsoft Internet Explorer is a WEB-based browser. An unspecified elevation of privilege vulnerability exists in Microsoft Internet Explorer, which could be exploited by a remote attacker to construct a malicious web page and trick a user into parsing it, which could crash the application or...

Microsoft Internet Explorer Elevation of Privilege Vulnerability (CNVD-2015-03072)

Microsoft Internet Explorer is a WEB-based browser. An unspecified elevation of privilege vulnerability exists in Microsoft Internet Explorer, which could be exploited by a remote attacker to construct a malicious web page and trick a user into parsing it, which could crash the application or...

Microsoft Internet Explorer Elevation of Privilege Vulnerability (CNVD-2015-03071)

Microsoft Internet Explorer is a WEB-based browser. An unspecified elevation of privilege vulnerability exists in Microsoft Internet Explorer, which could be exploited by a remote attacker to construct a malicious web page and trick a user into parsing it, which could crash the application or...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2015-03099)

Microsoft Internet Explorer is a WEB-based browser. An unspecified memory corruption vulnerability exists in Microsoft Internet Explorer, which could be exploited by a remote attacker to construct a malicious web page that could be parsed by the user, causing the application to crash or execute...

Microsoft Internet Explorer Elevation of Privilege Vulnerability (CNVD-2015-03076)

Microsoft Internet Explorer is a WEB-based browser. An unspecified elevation of privilege vulnerability exists in Microsoft Internet Explorer, which could be exploited by a remote attacker to construct a malicious web page and trick a user into parsing it, which could crash the application or...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2015-03102)

Microsoft Internet Explorer is a WEB-based browser. An unspecified memory corruption vulnerability exists in Microsoft Internet Explorer, which could be exploited by a remote attacker to construct a malicious web page that could be parsed by the user, causing the application to crash or execute...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2015-03093)

Microsoft Internet Explorer is a WEB-based browser. An unspecified memory corruption vulnerability exists in Microsoft Internet Explorer, which could be exploited by a remote attacker to construct a malicious web page that could be parsed by the user, causing the application to crash or execute...

Microsoft VBScript ASLR Bypass Vulnerability

Microsoft Internet Explorer is a WEB-based browser. An unspecified ASLR bypass vulnerability exists in Microsoft Internet Explorer, which allows remote attackers to exploit the vulnerability to construct a malicious WEB page that can be tricked into parsing, bypassing security restrictions, and...

Microsoft Internet Explorer Clipboard Information Disclosure Vulnerability

Microsoft Internet Explorer is a WEB-based browser. A security vulnerability in Microsoft Internet Explorer's handling of the clipboard allows remote attackers to exploit the vulnerability to construct malicious WEB pages, which can be parsed by the user and can be used to obtain sensitive...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2015-03098)

Microsoft Internet Explorer is a WEB-based browser. An unspecified memory corruption vulnerability exists in Microsoft Internet Explorer, which could be exploited by a remote attacker to construct a malicious web page that could be parsed by the user, causing the application to crash or execute...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2015-03090)

Microsoft Internet Explorer is a WEB-based browser. An unspecified memory corruption vulnerability exists in Microsoft Internet Explorer, which could be exploited by a remote attacker to construct a malicious web page that could be parsed by the user, causing the application to crash or execute...

CVE-2015-3397

The CVE-2015-3397 issue affects the Yii Framework prior to 2.0.4, where an XSS flaw could be exploited by remote attackers via JSON/arrays, particularly affecting Internet Explorer 6/7. The vulnerability arises in how JSON data is handled when rendered, allowing injection of arbitrary web script ...

Microsoft Internet Explorer CTitleElement Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2015-3081

Race condition in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to bypass the Internet...

Race condition

Race condition in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to bypass the Internet...

UBUNTU-CVE-2015-3081

Race condition in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to bypass the Internet...

CVE-2015-3081

Race condition in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to bypass the Internet...

CVE-2015-1718

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1658, CVE-2015-1706, CVE-2015-1711, and...

CVE-2015-1717

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1658, CVE-2015-1706, CVE-2015-1711, and...