Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2017-0201)

A remote code execution vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to the way JavaScript engine renders when handling objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafted we...

chromium-browser: out-of-bounds access in v8

Inappropriate use of JIT optimisation in V8 in Google Chrome prior to 61.0.3163.100 for Linux, Windows, and Mac allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page, related to the escape analysis phase...

Google Chrome V8 Crankshaft Type Confusion (CVE-2017-5070)

A type confusion vulnerability exists in Google Chrome. The vulnerability is due to improper handling of objects in memory by the V8 JavaScript engine while compiling code. A remote attacker could exploit this vulnerability by enticing a user to open a malicious web page...

Google Chrome < 61.0.3163.100 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 61.0.3163.100. It is, therefore, affected by multiple vulnerabilities as referenced in the 201709stable-channel-update-for-desktop21 advisory. - Inappropriate use of table size handling in V8 in Google Chrome prior to...

The Great DOM Fuzz-off of 2017

Posted by Ivan Fratric, Project Zero Introduction Historically, DOM engines have been one of the largest sources of web browser bugs. And while in the recent years the popularity of those kinds of bugs in targeted attacks has somewhat fallen in favor of Flash which allows for cross-browser exploi...

Memory corruption

Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine Memory...

Microsoft Windows Internet Explorer and Edge JavaScript Engine Remote Code Execution Vulnerability

Microsoft Windows 7, etc. are operating systems released by Microsoft Corporation, U.S.A. Microsoft Edge and Internet Explorer IE are web browsers that come with Windows. Microsoft Edge and Internet Explorer IE are both web browsers that come with Windows, the former being the default browser tha...

Microsoft Edge Memory Corruption Vulnerability (CNVD-2017-28654)

Microsoft Windows 10 is an operating system released by Microsoft Corporation.Microsoft Edge is a web browser that comes with the system.scripting engine is a JavaScript engine component. A memory corruption vulnerability exists in the scripting engine of Edge in Microsoft Windows. A remote...

Microsoft Edge Memory Corruption Vulnerability (CNVD-2017-28318)

Microsoft Windows 10 is an operating system released by Microsoft Corporation.Microsoft Edge is a web browser that comes with the system.scripting engine is a JavaScript engine component. A memory corruption vulnerability exists in the scripting engine of Edge in Microsoft Windows 10 version 1703...

Microsoft Windows Edge and Internet Explorer JavaScript Engine Remote Code Execution Vulnerability

Microsoft Windows 7, etc. are operating systems released by Microsoft Corporation, U.S.A. Microsoft Edge and Internet Explorer IE are web browsers that come with Windows. Microsoft Edge and Internet Explorer IE are both web browsers that come with Windows, the former being the default browser tha...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that Microsoft browser JavaScript engines render content when handling objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. In a web-based...

chromium-browser: type confusion in v8

Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker to potentially exploit object corruption via a crafted HTML page...

Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-8670)

A remote code execution Vulnerability exists in Microsoft Edge. The vulnerability is due to the way JavaScript engine renders when handling objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...

Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-8657)

A memory corruption vulnerability exists in Microsoft Edge. The vulnerability is due to the way JavaScript engine renders when handling objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...

Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-8671)

An off-by-one vulnerability exists in Microsoft Edge Chakra JavaScript Engine. The vulnerability is due to the way Microsoft Edge Chakra JavaScript engine renders when handling objects in memory. A remote attacker could exploit this vulnerability by enticing the target user to open a specially...

Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-8645)

A remote code execution vulnerability exists in Microsoft Edge. The vulnerability is in the way that Microsoft browser JavaScript engines render content when handling objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the conte...

Microsoft Edge EmitAssignment Memory Corruption

A memory corruption vulnerability exists in Microsoft Edge. The vulnerability is due to the way JavaScript engine renders when handling objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...

The vulnerability in the JavaScript engine of Microsoft Edge and Internet Explorer allows a hacker to execute arbitrary code.

The vulnerability in Microsoft Edge and Internet Explorer JavaScript engines arises from an operation that goes beyond the buffer boundaries in memory memory corruption due to script execution. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the...

Microsoft Edge Chakra Eval Integer Overflow (CVE-2017-8641)

An integer overflow vulnerability exists in Microsoft Edge Chakra JavaScript Engine. The vulnerability is due to an overly large size of the eval function argument. A remote attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...

Adobe Acrobat/Reader Remote Code Execution Vulnerability (CNVD-2017-28433)

Adobe Reader is a PDF document reading software.Acrobat is a PDF document editing software. Adobe Acrobat Reader has a remote code execution vulnerability in the JavaScript engine when creating larger strings, which can be exploited by attackers to execute arbitrary code...