CVE-2019-6215

CVE-2019-6215 is a WebKit/Web content processing type confusion vulnerability that could allow arbitrary code execution on affected Apple platforms. Root cause: memory handling issue in WebKit. Affects Safari/WebKit on iOS, macOS, tvOS, and Windows components listed in Apple/Windows advisories. I...

CVE-2019-6230

CVE-2019-6230 is a memory initialization issue in CoreAnimation that could allow a sandboxed application to break out of its sandbox. Apple documents indicate the flaw is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, and watchOS 5.1.3, with affected entries appearing under Apple CoreAni...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : GD vulnerabilities (USN-3900-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3900-1 advisory. It was discovered that GD incorrectly handled memory when processing certain images. A remote attacker could use this issue with ...

The vulnerability of the Windows GDI component of the Windows operating system, which allows a hacker to compromise sensitive information

The vulnerability of the Windows GDI component of the Windows operating system is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted application...

The vulnerability in the JavaScript ChakraCore engine of the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Edge’s JavaScript ChakraCore engine is related to memory object handling flaws. Exploiting this vulnerability can allow a remote attacker to trigger memory corruption and execute arbitrary code through a specially crafted web page...

The vulnerability of the Windows Jet Database Engine component of the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Windows Jet Database Engine component of the Windows operating system is related to deficiencies in object handling in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted file...

The vulnerability in the JavaScript ChakraCore engine of the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Edge’s JavaScript ChakraCore engine is related to memory object handling flaws. Exploiting this vulnerability can allow a remote attacker to trigger memory corruption and execute arbitrary code through a specially crafted web page...

The vulnerability of the ChakraCore component in the Microsoft Edge browser allows a hacker to execute arbitrary code with the privileges of the current user.

The vulnerability of Microsoft Edge’s ChakraCore component is related to errors in memory object handling mechanisms. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with the privileges of the current user, through a specially crafted web page...

The vulnerability of the Windows GDI component of the Windows operating system, which allows a hacker to compromise sensitive information

The vulnerability of the Windows GDI component of the Windows operating system is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted document file...

Ubuntu: Security Advisory (USN-3893-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3893-1 bind9 vulnerabilities

Toshifumi Sakaguchi discovered that Bind incorrectly handled memory. A remote attacker could possibly use this issue to cause Bind to consume resources, leading to a denial of service. This issue only affected Ubuntu 18.04 LTS and Ubuntu 18.10. CVE-2018-5744 It was discovered that Bind incorrectl...

VulnCheck KEV: CVE-2019-0797

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0808...

VulnCheck KEV: CVE-2018-8406

An elevation of privilege vulnerability exists when the DirectX Graphics Kernel DXGKRNL driver improperly handles objects in memory...

VulnCheck KEV: CVE-2018-8405

An elevation of privilege vulnerability exists when the DirectX Graphics Kernel DXGKRNL driver improperly handles objects in memory...

Microsoft Office Access Connectivity Engine Buffer Error Vulnerability (CNVD-2019-27308)

Microsoft Office is a U.S. Microsoft Microsoft company's office software suite of products. Common components of the product include Word, Excel, Access, Powerpoint, FrontPage, etc. Office Access Connectivity Engine is one of the database connection engine. A remote code execution vulnerability...

Microsoft Office Access Connectivity Engine Buffer Error Vulnerability (CNVD-2019-27310)

Microsoft Office is a U.S. Microsoft Microsoft company's office software suite of products. Common components of the product include Word, Excel, Access, Powerpoint, FrontPage, etc. Office Access Connectivity Engine is one of the database connection engine. A remote code execution vulnerability...

Microsoft Windows Multiple Vulnerabilities (KB4486563)

This host is missing a critical security update according to Microsoft KB4486563 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Jet Database Engine Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to...

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by entici...

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by entici...