Lucene search
+L

770 matches found

VulnCheck KEV
VulnCheck KEV
added 2019/04/09 12:00 a.m.11 views

VulnCheck KEV: CVE-2019-0803

Microsoft Win32k contains an unspecified vulnerability due to it failing to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode...

7.8CVSS7.4AI score0.4523EPSS
SaveExploits26References1
OSV
OSV
added 2019/04/08 11:29 p.m.4 views

CVE-2019-0666

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0665, CVE-2019-0667, CVE-2019-0772...

7.5CVSS7.8AI score0.20403EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2019/04/04 12:00 a.m.5 views

PT-2019-1846 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to errors in object handling in memory within the Win32k component of the Windows operating system. This can allow a remote attacker to elevate their...

7.8CVSS8.1AI score0.4523EPSS
SaveExploits26References16
BDU FSTEC
BDU FSTEC
added 2019/03/22 12:00 a.m.28 views

The vulnerability of the Win32k component in Windows operating systems, which allows attackers to increase their privileges

The vulnerability of the Win32k component in Windows operating systems exists due to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7CVSS7.6AI score0.0189EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/03/22 12:00 a.m.11 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser exists due to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

5CVSS7.6AI score0.09215EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/03/22 12:00 a.m.10 views

The vulnerability of the Win32k component in Windows operating systems, which allows attackers to increase their privileges

The vulnerability of the Win32k component in Windows operating systems exists due to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7CVSS7.6AI score0.53017EPSS
SaveExploits10References3
BDU FSTEC
BDU FSTEC
added 2019/03/22 12:00 a.m.9 views

The vulnerability of the Internet Explorer browser’s script handler allows a hacker to execute arbitrary code.

The vulnerability of the Internet Explorer browser’s script handler exists due to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.6CVSS7.7AI score0.08096EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2019/03/13 12:00 a.m.17 views

Microsoft Chakra Scripting Engine Remote Memory Corruption Vulnerability Vulnerability

Microsoft ChakraCore and others are products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, or as a standalone JavaScript engine.Microsoft Edge is a web browser that comes with Windows 10 and later.Microsoft Internet...

6.5CVSS7.4AI score0.06553EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/03/06 12:00 a.m.10 views

The vulnerability of the Microsoft Office Access Connectivity Engine component in Microsoft Office and Office 365 programs allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Office Access Connectivity Engine component in Microsoft Office and Office 365 programs is related to errors in object handling in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created file...

9.3CVSS7.8AI score0.18414EPSS
SaveExploits0References3
OSV
OSV
added 2019/03/05 11:29 p.m.7 views

CVE-2019-0662

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0618...

8.8CVSS6.4AI score0.15355EPSS
SaveExploits0References2
OSV
OSV
added 2019/03/05 11:29 p.m.5 views

CVE-2019-0599

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0596, CVE-2019-0597, CVE-2019-0598, CVE-2019-0625...

7.8CVSS7.7AI score0.20132EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/03/01 12:00 a.m.11 views

The vulnerability of Human Interface Devices’ components in the Windows operating system, which allows a intruder to disclose protected information

The vulnerability of Human Interface Devices in the Windows operating system is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted application...

4.7CVSS6.5AI score0.0185EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/03/01 12:00 a.m.9 views

The vulnerability of the Windows GDI component of the Windows operating system, which allows a hacker to compromise sensitive information

The vulnerability of the Windows GDI component of the Windows operating system is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted document file...

4.7CVSS6.6AI score0.07708EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/03/01 12:00 a.m.9 views

The vulnerability of the Windows Jet Database Engine component of the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Windows Jet Database Engine component of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code using a specially crafted file...

6.8CVSS7.3AI score0.19059EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/03/01 12:00 a.m.14 views

The vulnerability of the Windows GDI component of the Windows operating system, which allows a hacker to compromise sensitive information

The vulnerability of the Windows GDI component of the Windows operating system is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted document file...

10CVSS6.6AI score0.67008EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/03/01 12:00 a.m.8 views

Vulnerability of the kernel component of the Windows operating system, allowing a hacker to disclose protected information

The vulnerability of the Windows operating system’s kernel component is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to disclose protected information...

5.5CVSS6.8AI score0.02063EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/03/01 12:00 a.m.9 views

The vulnerability of Human Interface Devices’ components in the Windows operating system, which allows a intruder to disclose protected information

The vulnerability of Human Interface Devices in the Windows operating system is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted application...

4.7CVSS6.6AI score0.01711EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/03/01 12:00 a.m.8 views

The vulnerability of the Windows GDI component of the Windows operating system, which allows a hacker to compromise sensitive information

The vulnerability of the Windows GDI component of the Windows operating system is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted document file...

4.7CVSS6.6AI score0.07708EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/03/01 12:00 a.m.13 views

The vulnerability in the JavaScript ChakraCore engine of the Microsoft Edge browser allows a attacker to trigger memory corruption and execute arbitrary code.

The vulnerability of Microsoft Edge’s JavaScript ChakraCore engine is related to memory object handling flaws. Exploiting this vulnerability can allow a remote attacker to trigger memory corruption and execute arbitrary code through a specially crafted web page...

9.6CVSS7.8AI score0.11107EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/01/22 12:00 a.m.16 views

The vulnerability of the Microsoft JET Database Engine database driver on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft JET Database Engine database driver for the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.7AI score0.13596EPSS
SaveExploits0References2
Rows per page
Query Builder