CVE-2018-8281

CVE-2018-8281: A remote code execution vulnerability in Microsoft Office family (Excel Viewer, PowerPoint Viewer, Office, Word Viewer) arises when Office fails to properly handle objects in memory. Connected documents confirm the issue affects Microsoft Office Viewers and Office-related component...

CVE-2018-8312

CVE-2018-8312 targets Microsoft Access and Microsoft Office. The vulnerability is described as a remote code execution flaw caused by improper handling of objects in memory, allowing an attacker to run arbitrary code when a user opens a crafted file. In public connected materials, related advisor...

VulnCheck KEV: CVE-2018-8373

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer...

Description of the security update for the Windows denial of service vulnerability in Windows Server 2008: July 10, 2018

Description of the security update for the Windows denial of service vulnerability in Windows Server 2008: July 10, 2018 Summary A denial of service vulnerability exists when Windows improperly handles objects in memory. To learn more about the vulnerabilities, go to the following Common...

Microsoft Edge based on Edge HTML Information Disclosure Vulnerability

An information disclosure vulnerability exists when Microsoft Edge based on Edge HTML improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, in a web-based attac...

Windows Denial of Service Vulnerability

A denial of service vulnerability exists when Windows improperly handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system to stop responding. To exploit this vulnerability, an attacker would have to log on to an affected system and run a...

Microsoft Access Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Microsoft Access fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new...

Microsoft Office Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

Microsoft Edge based on Edge HTML Information Disclosure Vulnerability

An information disclosure vulnerability exists when Microsoft Edge based on Edge HTML improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, in a web-based attac...

PT-2018-18532 · Microsoft · Browsers +2

Name of the Vulnerable Software and Affected Versions: Microsoft browsers affected versions not specified Description: A remote code execution issue exists in the way the scripting engine handles objects in memory in Microsoft browsers. This could corrupt memory, allowing an attacker to execute...

PT-2018-2017 · Microsoft · Internet Explorer 11 +2

Name of the Vulnerable Software and Affected Versions: Microsoft Edge and Internet Explorer 11 affected versions not specified Description: The issue is related to errors in the mechanisms for processing objects in memory in Microsoft browsers. Exploitation of this issue could allow a remote...

PT-2018-18537 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Internet Explorer affected versions not specified Description: A remote code execution issue exists due to the scripting engine's handling of objects in memory. This could lead to memory corruption, allowing an attacker to execute arbitrary...

Security Update for Microsoft Office (July 2018) (macOS)

The Microsoft Office 2016 application installed on the remote macOS or Mac OS X host is missing a security update. It is, therefore, affected by the following vulnerabilities: - A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle...

Security Updates for Microsoft Access Products (July 2018)

The Microsoft Access Products are missing a security update. It is, therefore, affected by the following vulnerability : - A remote code execution vulnerability exists when Microsoft Access fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could...

USN-3708-1: OpenSLP vulnerabilities

It was discovered that OpenSLP incorrectly handled certain memory operations. A remote attacker could use this issue to cause OpenSLP to crash, resulting in a denial of service, or possibly execute arbitrary code...

CVE-2018-8248

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Office...

CVE-2018-8243

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8267...

CVE-2018-8267

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from...

CVE-2018-8248

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Office...

CVE-2018-8224

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2...