Lucene search
K

765 matches found

BDU FSTEC
BDU FSTEC
added 2019/01/15 12:0 a.m.2 views

The vulnerability of the Windows GDI component of the Windows operating system, which allows a hacker to gain access to confidential information

The vulnerability of the Windows GDI component of the Microsoft Windows operating system is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to access confidential information through a specially crafted document...

5.2CVSS6.7AI score0.06874EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/01/15 12:0 a.m.1 views

The vulnerability of the Windows operating system’s kernel, which allows a hacker to disclose protected information

The vulnerability of the Windows operating system’s kernel is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted application...

3.3CVSS6.8AI score0.01796EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/01/10 12:0 a.m.5 views

The vulnerability of Excel spreadsheet editors, related to errors in memory object processing, allows attackers to gain access to protected information.

The vulnerability of Excel spreadsheet editors is related to errors in memory object processing. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information through a specially created file...

9.3CVSS6.1AI score0.06217EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/01/10 12:0 a.m.4 views

The vulnerability of the Microsoft Graphics component in the Microsoft Excel Viewer, a software for viewing electronic spreadsheets; the Microsoft Office and Office 365 products; the Microsoft Office Compatibility Pack; the Microsoft PowerPoint Viewer, a software for viewing presentations; the Microsoft Office Word Viewer, a software for reading documents; and the Microsoft Windows operating system. This vulnerability allows attackers to disclose protected information.

The vulnerability of the Microsoft Graphics component in the Microsoft Excel Viewer, Microsoft Office programs and Office 365, the Microsoft Office Compatibility Pack, the Microsoft PowerPoint Viewer, the Microsoft Office Word Viewer, and the Microsoft Windows operating system is related to objec...

5.5CVSS6.6AI score0.02293EPSS
Exploits0References2
OSV
OSV
added 2019/01/08 9:29 p.m.2 views

CVE-2019-0576

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows...

7.8CVSS7.9AI score0.17347EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2018/12/28 12:0 a.m.6 views

The vulnerability of the Windows operating system, related to errors in memory object handling, allows an intruder to disclose protected information.

The vulnerability of the DirectX driver for the Windows operating system is related to object handling errors in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

4.7CVSS6.2AI score0.01819EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2018/12/28 12:0 a.m.3 views

The vulnerability of the Windows operating system, related to errors in memory object handling, allows a perpetrator to trigger a service failure.

The vulnerability of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker, acting locally, to cause a service failure through a specially crafted application...

5CVSS6.2AI score0.01666EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2018/12/28 12:0 a.m.3 views

The vulnerability of the Microsoft Windows operating system, related to errors in memory object handling, allows a perpetrator to trigger a service failure.

The vulnerability of the Connected User Experience and Telemetry Service services in the Microsoft Windows operating system is related to improper handling of objects in memory. Exploiting this vulnerability can allow a local attacker to cause service failures through a specially created...

4.7CVSS6.8AI score0.01383EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2018/12/27 12:0 a.m.5 views

The vulnerability of the ChakraCore JavaScript script handler, related to errors in memory object handling mechanisms, allows attackers to execute arbitrary code.

The vulnerability of the ChakraCore JavaScript script handler is related to errors in memory object handling mechanisms. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with the privileges of the current user...

7.6CVSS7.4AI score0.75339EPSS
Exploits3References6
BDU FSTEC
BDU FSTEC
added 2018/12/13 12:0 a.m.4 views

The vulnerability of the Win32k component of the Windows operating system, which allows a hacker to increase their privileges and execute arbitrary code.

The vulnerability of the Win32k component of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code using a specially crafted application...

8.4CVSS8.2AI score0.04196EPSS
Exploits0References3
OSV
OSV
added 2018/12/12 12:29 a.m.2 views

CVE-2018-8631

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10...

7.5CVSS6.3AI score0.69214EPSS
Exploits3References3
ATTACKERKB
ATTACKERKB
added 2018/12/12 12:29 a.m.1 views

CVE-2018-8634

A remote code execution vulnerability exists in Windows where Microsoft text-to-speech fails to properly handle objects in the memory, aka "Microsoft Text-To-Speech Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers...

9.3CVSS6.7AI score0.14507EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2018/12/12 12:29 a.m.1 views

CVE-2018-8636

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Excel. This CVE ID is unique from...

9.3CVSS6.7AI score0.162EPSS
Exploits0References3
OSV
OSV
added 2018/12/12 12:29 a.m.0 views

CVE-2018-8597

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Excel. This CVE ID is unique from...

7.8CVSS6.4AI score0.1613EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2018/12/07 12:0 a.m.4 views

The vulnerability of Microsoft Excel’s spreadsheet editor, related to errors in memory object handling, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Excel editors is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code with user privileges using a specially crafted file...

10CVSS8AI score0.19059EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2018/12/07 12:0 a.m.5 views

The vulnerability of Microsoft Word’s text editor lies in memory object processing errors, which allow attackers to execute arbitrary code.

The vulnerability of Microsoft Word relates to errors in memory object handling. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code with user privileges using a specially crafted file...

9CVSS8AI score0.19059EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2018/12/04 12:0 a.m.5 views

The vulnerability of the DirectX component of the Windows operating system, which allows a hacker to compromise protected information

The vulnerability of the DirectX component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

4.7CVSS7.7AI score0.01655EPSS
Exploits0References7
BDU FSTEC
BDU FSTEC
added 2018/12/04 12:0 a.m.5 views

The vulnerability of the DirectX component in the Windows operating system allows attackers to elevate their privileges and execute arbitrary code in kernel mode.

The vulnerability of the DirectX component in the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code in kernel mode through a specially created application...

7CVSS8.2AI score0.01193EPSS
Exploits0References7
Debian CVE
Debian CVE
added 2018/11/28 2:0 p.m.43 views

CVE-2018-16851

Samba from version 4.0.0 and before versions 4.7.12, 4.8.7, 4.9.3 is vulnerable to a denial of service. During the processing of an LDAP search before Samba's AD DC returns the LDAP entries to the client, the entries are cached in a single memory object with a maximum size of 256MB. When this siz...

6.5CVSS6.7AI score0.03251EPSS
Exploits0
Samba
Samba
added 2018/11/27 12:0 a.m.121 views

NULL pointer de-reference in Samba AD DC LDAP server

Description During the processing of an LDAP search before Samba's AD DC returns the LDAP entries to the client, the entries are cached in a single memory object with a maximum size of 256MB. When this size is reached, the Samba process providing the LDAP service will follow the NULL pointer,...

6.5CVSS0.03251EPSS
Exploits0
Rows per page
Query Builder