5540 matches found
UBUNTU-CVE-2017-5088
Insufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.104 for Mac, Windows, and Linux, and 59.0.3071.117 for Android, allowed a remote attacker to perform out of bounds memory access via a crafted HTML page...
UBUNTU-CVE-2017-5122
Inappropriate use of table size handling in V8 in Google Chrome prior to 61.0.3163.100 for Windows allowed a remote attacker to trigger out-of-bounds access via a crafted HTML page...
UBUNTU-CVE-2017-5071
Insufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows and Mac, and 59.0.3071.92 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...
Microsoft Edge Chakra ParseCatch Type Confusion (CVE-2017-11764)
A type confusion vulnerability exists in Microsoft Edge Chakra JavaScript Engine. The vulnerability is due to a lack of validation in the ParseCatch method which results in the generation on a malformed Abstract Syntax Tree AST. A remote attacker could exploit this vulnerability by enticing the...
USN-3460-1: WebKitGTK+ vulnerabilities
A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service...
Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-11809)
A Memory Corruption Vulnerability exists in Microsoft Edge. The vulnerability is due to the way JavaScript engine renders when handling objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...
Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-11800)
A Memory Corruption Vulnerability exists in Microsoft Edge. The vulnerability is due to the way JavaScript engine renders when handling objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...
PT-2017-3032
Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to the improper handling of objects in memory by the ChakraCore JavaScript engine handler in Microsoft Edge. This could allow a remote attacker to execute arbitrar...
PT-2017-3034
Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to the improper handling of objects in memory by the ChakraCore JavaScript engine handler in Microsoft Edge. This could allow a remote attacker to execute arbitrar...
PT-2017-3035
Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to the incorrect handling of objects in memory by the ChakraCore JavaScript engine handler in Microsoft Edge. This could allow a remote attacker to execute arbitra...
PT-2017-3033
Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to the improper handling of objects in memory by the ChakraCore JavaScript engine handler in Microsoft Edge. This could allow a remote attacker to execute arbitrar...
PT-2017-3041
Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to the improper handling of objects in memory by the ChakraCore JavaScript engine handler in Microsoft Edge. This could allow a remote attacker to execute arbitrar...
PT-2017-3043
Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to the improper handling of objects in memory by the ChakraCore JavaScript engine handler in Microsoft Edge. This could allow a remote attacker to execute arbitrar...
PT-2017-3029
Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to the incorrect handling of objects in memory by the ChakraCore JavaScript engine handler in Microsoft Edge. This could allow a remote attacker to execute arbitra...
PT-2017-3037
Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to the improper handling of objects in memory by the ChakraCore JavaScript engine handler in Microsoft Edge. This could allow a remote attacker to execute arbitrar...
PT-2017-3038
Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to the improper handling of JavaScript objects in memory by the scripting engine. This could allow a remote attacker to execute arbitrary code in the context of th...
PT-2017-3027
Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to the incorrect handling of objects in memory by the ChakraCore JavaScript engine handler in Microsoft Edge. This could allow a remote attacker to execute arbitra...
PT-2017-3028
Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to the incorrect handling of objects in memory by the ChakraCore JavaScript engine handler in Microsoft Edge. This could allow a remote attacker to execute arbitra...
PT-2017-3031
Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to the incorrect handling of objects in memory by the ChakraCore JavaScript engine handler in Microsoft Edge. This could allow a remote attacker to execute arbitra...
PT-2017-3039
Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to the improper handling of objects in memory by the ChakraCore JavaScript engine handler in Microsoft Edge. This could allow a remote attacker to execute arbitrar...