Information disclosure

An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8289, CVE-2018-8297, CVE-2018-8325...

Privilege escalation

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012,...

Denial of service

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka "Windows Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 200...

CVE-2018-8289

Microsoft Edge Information Disclosure Vulnerability (CVE-2018-8289): Affects Microsoft Edge; root cause is improper handling of objects in memory, leading to information disclosure. Connected documents also reference related Edge CVEs (8324/8325/8297) with identical disclosure theme. Practical im...

CVE-2018-8281

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability." This affects Microsoft Excel Viewer, Microsoft PowerPoint Viewer, Microsoft Office, Microsoft Office...

Microsoft Office Remote Code Execution Vulnerability (CNVD-2018-13382)

Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. A remote code execution vulnerability exists in Microsoft Office, which stems from the program failing to...

CVE-2018-8282

CVE-2018-8282 is a Win32k Elevation of Privilege vulnerability in Windows, caused by the Windows kernel-mode driver failing to properly handle objects in memory. It affects Windows 7, Server 2012 R2, RT 8.1, Server 2008/2012, 8.1, Server 2016, Server 2008 R2, 10 and Server 10 servers. Impact is l...

Microsoft Windows Win32k Elevation of Privilege Vulnerability (CNVD-2018-13364)

Microsoft Windows 7, etc. are operating systems released by Microsoft Corporation in the U.S. Microsoft Windows 7 is a set of operating systems for personal computers.Windows Server 2012 R2 is a set of server operating systems. A privileged access vulnerability exists in Microsoft Windows, which...

Microsoft Office Remote Code Execution Vulnerabilities (Jul 2018) - Mac OS X

This host is missing an important security update for Microsoft Office 2016 on Mac OS X according to Microsoft security update July 2018 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

CVE-2018-8325

An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8289, CVE-2018-8297, CVE-2018-8324...

Microsoft Edge Information Disclosure Vulnerability (CNVD-2018-12882)

Edge is Microsoft's browser for Windows 10. Microsoft Edge suffers from an information disclosure vulnerability. The vulnerability stems from Microsoft Edge failing to properly handle objects in memory. An attacker could exploit the vulnerability to obtain information that could further compromis...

CVE-2018-8312

A remote code execution vulnerability exists when Microsoft Access fails to properly handle objects in memory, aka "Microsoft Access Remote Code Execution Vulnerability." This affects Microsoft Access, Microsoft Office...

CVE-2018-8297

An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8289, CVE-2018-8324, CVE-2018-8325...

Microsoft Windows Multiple Vulnerabilities (KB4338826)

This host is missing a critical security update according to Microsoft KB4338826 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Edge Information Disclosure Vulnerability (CNVD-2018-12881)

Edge is Microsoft's browser for Windows 10. Microsoft Edge suffers from an information disclosure vulnerability. The vulnerability stems from Microsoft Edge failing to properly handle objects in memory. An attacker could exploit the vulnerability to obtain information that could further compromis...

VulnCheck KEV: CVE-2018-8373

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer...

CVE-2018-8281

CVE-2018-8281: A remote code execution vulnerability in Microsoft Office family (Excel Viewer, PowerPoint Viewer, Office, Word Viewer) arises when Office fails to properly handle objects in memory. Connected documents confirm the issue affects Microsoft Office Viewers and Office-related component...

Microsoft Windows Kernel Elevation of Privilege Vulnerability (CNVD-2018-13365)

Microsoft Windows 7 and others are a series of operating systems released by Microsoft Corporation in the U.S. Windows kernel is one of the Windows operating system kernels. A privilege vulnerability exists in Microsoft Windows kernel, which arises from a program's failure to handle objects in...

CVE-2018-8312

CVE-2018-8312 targets Microsoft Access and Microsoft Office. The vulnerability is described as a remote code execution flaw caused by improper handling of objects in memory, allowing an attacker to run arbitrary code when a user opens a crafted file. In public connected materials, related advisor...

Apple iOS Arbitrary Code Execution Vulnerability (CNVD-2018-14963)

iOS is a mobile operating system developed by Apple Inc. An arbitrary code execution vulnerability exists in Apple iOS due to a memory handling error in the WebKit component, which can be exploited by an attacker to execute arbitrary code on the target system...