Microsoft IE VBScript/JScript ASLR Bypass Vulnerability

Internet Explorer is a web browser from Microsoft. A security vulnerability exists in the implementation of Internet Explorer 8-11 and other products, VBScript 5.7/5.8, and JScript 5.7/5.8 engines. A remote attacker could bypass the ASLR protection mechanism by exploiting this vulnerability via a...

Microsoft Windows JScript and VBScript Remote Code Execution Vulnerability (3089659)

This host is missing a critical security update according to Microsoft Bulletin MS15-108. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Adobe Acrobat Pro DC Color Object Address Disclosure Vulnerability

This vulnerability allows remote attackers to gain information about the layout of memory on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exis...

Adobe Reader DC createSquareMesh Information Disclosure Vulnerability

This vulnerability allows remote attackers to gain information about the layout of memory on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

Adobe Reader DC setBackground Information Disclosure Vulnerability

This vulnerability allows remote attackers to gain information about the layout of memory on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

Adobe Reader DC animations Information Disclosure Vulnerability

This vulnerability allows remote attackers to gain information about the layout of memory on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

Adobe Reader DC ambientIlluminationColor Information Disclosure Vulnerability

This vulnerability allows remote attackers to gain information about the layout of memory on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

Microsoft Internet Explorer empty-cells Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability relates to how...

Adobe Reader DC loadFlashMovie Information Disclosure Vulnerability

This vulnerability allows remote attackers to gain information about the layout of memory on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

Adobe Reader DC addForegroundSprite Information Disclosure Vulnerability

This vulnerability allows remote attackers to gain information about the layout of memory on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2015-5893

SMBClient in SMB in Apple OS X before 10.11 allows local users to obtain sensitive kernel memory-layout information via unspecified vectors...

CVE-2015-5870

The debugging interfaces in the kernel in Apple OS X before 10.11 allow local users to obtain sensitive memory-layout information via unspecified vectors...

CVE-2015-5864

IOAudioFamily in Apple OS X before 10.11 allows local users to obtain sensitive kernel memory-layout information via unspecified vectors...

Design/Logic Flaw

SMBClient in SMB in Apple OS X before 10.11 allows local users to obtain sensitive kernel memory-layout information via unspecified vectors...

Memory corruption

IOGraphics in Apple OS X before 10.11 allows attackers to obtain sensitive kernel memory-layout information via a crafted app...

CVE-2015-5870

The debugging interfaces in the kernel in Apple OS X before 10.11 allow local users to obtain sensitive memory-layout information via unspecified vectors...

CVE-2015-5865

CVE-2015-5865 corresponds to a vulnerability in the IOGraphics component of Apple OS X before 10.11, where a crafted app can cause leakage of sensitive kernel memory layout information. The affected entry describes a local information disclosure via the IOGraphics kernel path, enabling an attacke...

CVE-2015-5893

SMBClient in SMB in Apple OS X before 10.11 allows local users to obtain sensitive kernel memory-layout information via unspecified vectors...

The vulnerability of the Flash Player and Adobe Integrated Runtime software allows attackers to bypass the ASLR protection mechanism.

The vulnerability of the Flash Player and Adobe Integrated Runtime programming platforms is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass ASLR protection due to errors in access control to memory cells...

Apple OS X Kernel Information Disclosure Vulnerability

Apple OS X is a specialized operating system developed by Apple for Mac computers. kernel is one of the kernel components. A security vulnerability exists in the debugging interface of the Kernel in Apple OS X 10.10.5 and earlier versions. A local attacker could exploit this vulnerability to obta...