CVE-2017-8605: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Edge, aka "Scripting Engine Memory...

CVE-2017-8603: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Edge in Microsoft Windows 10 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption...

The vulnerability in the JavaScript engine of Internet Explorer and Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability in the JavaScript engine of Internet Explorer and Microsoft Edge is related to improper data processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code under the identity of the current user, during errors in data processing in memory using...

The vulnerability in the JavaScript engine of Internet Explorer and Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability in the JavaScript engine of Internet Explorer and Microsoft Edge is related to improper data processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code under the identity of the current user, during errors in data processing in memory using...

The vulnerability in the JavaScript engine of Internet Explorer and Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability in the JavaScript engine of Internet Explorer and Microsoft Edge is related to improper data processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code under the identity of the current user, during errors in data processing in memory using...

Google Chrome V8 Denial of Service Vulnerability (CNVD-2017-14350)

Google Chrome is the United States Google Google company developed a Web browser. v8 is one of the open source JavaScript engine. A denial of service vulnerability exists in V8 in versions of Google Chrome prior to 59.0.3071.104. An attacker can exploit this vulnerability to cause a denial of...

CVE-2017-5471

Memory safety bugs were reported in Firefox 53. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox 54...

Microsoft Internet Explorer Memory Corruption (CVE-2017-8547)

A remote code execution vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to the way JavaScript engine renders when handling objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafted we...

Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-8497)

A remote code execution Vulnerability exists in Microsoft Edge. The vulnerability is due to the way JavaScript engine renders when handling objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...

Microsoft Browser Scripting Engine Memory Corruption (CVE-2017-8524)

A remote code execution Vulnerability exists in Microsoft Edge and Internet Explorer 11. The vulnerability is due to the way JavaScript engine renders when handling objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a speciall...

PT-2017-2330

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to the improper handling of objects in memory by the Microsoft Edge JavaScript scripting engine. This could allow a remote attacker to execute arbitrary code in th...

PT-2017-2416

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer and Microsoft Edge affected versions not specified Description The issue is related to the improper handling of data by JavaScript engines in Microsoft browsers, potentially allowing a remote attacker to execute...

PT-2017-2337

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to the improper handling of objects in memory by the Microsoft Edge JavaScript scripting engine. This could allow a remote attacker to execute arbitrary code with...

Google Chrome V8 Out-of-Bounds Read Vulnerability

Google Chrome is the United States Google Google company developed a Web browser. v8 is one of the open source JavaScript engine. An out-of-bounds read vulnerability exists in V8 in versions of Google Chrome prior to 59.0.3071.86. An attacker could exploit this vulnerability to cause a denial of...

chromium-browser: out of bounds read in v8

Insufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows and Mac, and 59.0.3071.92 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

PT-2017-3233

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 59.0.3071.86 for Linux, Windows, and Mac Google Chrome version prior to 59.0.3071.92 for Android Opera versions prior to 59.0.3071.86 Description The issue is related to a type confusion in the V8 JavaScript...

PT-2017-2655

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is caused by a buffer overflow in the JavaScript engine of Microsoft Edge, leading to memory corruption when handling objects. This could allow a remote attacker to execute...

Google Chrome V8 JavaScript Engine Out-of-Bounds Write Vulnerability

Google Chrome is a fast, secure and free web browser that is well suited to meet the browser requirements of new types of websites. A security vulnerability exists in the V8 JavaScript Engine in Google Chrome. A remote attacker can exploit the vulnerability to cause out-of-bounds memory writes wi...

PT-2017-2656

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is caused by a buffer overflow in the JavaScript engine of Microsoft Edge, leading to memory corruption when handling objects. This could allow a remote attacker to execute...

USN-3303-1: WebKitGTK+ vulnerabilities

A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service...