Lucene search
K

765 matches found

BDU FSTEC
BDU FSTEC
added 2019/12/13 12:0 a.m.1 views

The vulnerabilities of Firefox, Firefox ESR, and the email client Thunderbird, related to errors in memory object handling, allow attackers to execute arbitrary code.

The vulnerabilities of the web browsers Firefox, Firefox ESR, and the email client Thunderbird are related to errors in memory object handling. Allowing these vulnerabilities to be exploited allows a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.0298EPSS
Exploits0References10Affected Software7
OSV
OSV
added 2019/12/10 10:15 p.m.1 views

CVE-2019-1485

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'...

7.5CVSS7.7AI score0.07709EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:0 a.m.4 views

The vulnerability of the Windows Installer component allows attackers to exploit their privileges.

The vulnerability of the Windows Installer component in operating systems is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.8CVSS7.1AI score0.00786EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:0 a.m.3 views

The vulnerability of the DirectWrite programming interface in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially crafted document or web page...

6.5CVSS5.9AI score0.04888EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:0 a.m.3 views

The vulnerability of the Windows Modules Installer Service component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows Modules Installer Service component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

3.3CVSS5.4AI score0.01629EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:0 a.m.4 views

The vulnerability of the Win32k component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Win32k component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS5.9AI score0.02077EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:0 a.m.1 views

The vulnerability of the Win32k component in Windows operating systems, which allows attackers to escalate their privileges

The vulnerability of the Win32k component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7.8CVSS7.2AI score0.01131EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:0 a.m.6 views

The vulnerability of the Microsoft Office suite relates to errors in memory object handling, which allows an intruder to gain unauthorized access to protected information.

The vulnerability of the Microsoft Office suite is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS5.9AI score0.02365EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:0 a.m.2 views

The vulnerability of the Windows GDI component of the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows GDI component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

6.5CVSS6.1AI score0.75859EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:0 a.m.4 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the ChakraCore JavaScript script handler in the Microsoft Edge browser exists due to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...

4.2CVSS6.9AI score0.09374EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:0 a.m.3 views

The vulnerability of the Media Foundation component in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Media Foundation component in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created QuickTime file...

7.3CVSS7.6AI score0.12956EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:0 a.m.4 views

The vulnerability of the Internet Explorer browser script handler allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the Internet Explorer browser’s script handler exists due to errors in memory object processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, or to cause a service failure through a specially created web...

7.6CVSS7.4AI score0.72626EPSS
Exploits3References4Affected Software1
OSV
OSV
added 2019/11/12 7:15 p.m.1 views

CVE-2019-1435

An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1407, CVE-2019-1433, CVE-2019-1437, CVE-2019-1438...

7.8CVSS7.1AI score0.00869EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2019/11/04 12:0 a.m.2 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

7.6CVSS6AI score0.09703EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/11/04 12:0 a.m.1 views

The vulnerability of the Internet Explorer browser’s script handler allows a hacker to execute arbitrary code.

The vulnerability of the Internet Explorer browser’s script handler exists due to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

7.6CVSS6AI score0.071EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/04 12:0 a.m.2 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

7.6CVSS6AI score0.09509EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/11/04 12:0 a.m.1 views

The vulnerability of the Open Enclave SDK, a software development tool, is related to an error in object processing in memory, which allows a hacker to disclose sensitive information that is protected by this security measure.

The vulnerability of the Open Enclave SDK software development tools is related to an object handling error in memory. Exploiting this vulnerability can allow a remote attacker to gain access to protected information...

7.8CVSS5.5AI score0.01976EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/04 12:0 a.m.4 views

The vulnerability of the VBScript script handler in Internet Explorer allows a hacker to execute arbitrary code.

The vulnerability of VBScript script handlers in Internet Explorer exists due to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

7.6CVSS6AI score0.07053EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/10/29 12:0 a.m.2 views

The vulnerability of the Microsoft Internet Information Services network services for Windows operating systems stems from memory object handling errors, which allows attackers to exploit their privileges.

The vulnerability of the Microsoft Internet Information Services network services on Windows operating systems is related to object handling errors in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges by allowing unprivileged functions launched by users to...

7.6CVSS5.7AI score0.04064EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/10/24 12:0 a.m.3 views

Vulnerability of Microsoft Excel, Office, and Office 365 spreadsheet applications, related to object processing in memory, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Excel, Office, and Office 365 packages relates to the processing of objects in memory. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

9.3CVSS5.9AI score0.17876EPSS
Exploits0References2
Rows per page
Query Builder