Lucene search
+L

11063 matches found

Microsoft CVE
Microsoft CVE
added 2020/05/12 2:00 p.m.38 views

Microsoft Edge PDF Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the...

7.6CVSS2AI score0.01999EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2020/05/12 12:00 a.m.69 views

KB4551853: Windows 10 Version 1809 and Windows Server 2019 May 2020 Security Update

The remote Windows host is missing security update 4551853. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a...

9.9CVSS7.8AI score0.54158EPSS
SaveExploits18References89
Microsoft KB
Microsoft KB
added 2020/05/12 12:00 a.m.29 views

May 12, 2020—KB4556804 (OS Build 15063.2375)

None None...

6.1AI score
SaveExploits0
Kaspersky
Kaspersky
added 2020/05/12 12:00 a.m.117 views

KLA11771 Multiple vulnerabilities in Microsoft Internet Explorer and Edge

Multiple vulnerabilities were found in Microsoft Internet Explorer and Edge. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in MSHTML Engine c...

8.1CVSS8.1AI score0.06244EPSS
SaveExploits0References27
Tenable Nessus
Tenable Nessus
added 2020/05/12 12:00 a.m.72 views

KB4556807: Windows 10 Version 1803 May 2020 Security Update

The remote Windows host is missing security update 4556807. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a...

9.9CVSS8AI score0.54158EPSS
SaveExploits18References85
zdt
zdt
added 2020/04/23 12:00 a.m.54 views

AMD Radeon DirectX 11 Driver 8.17.10.0871 Memory Corruption Vulnerability

AMD Radeon DirectX 11 Driver version 8.17.10.0871 suffers from a memory corruption vulnerability. / Title : Advanced Micro Devices, Inc. Radeon DirectX 11 Driver Firefox/MS Edge Memory Corruption Exploit Author : Marcin Ressel Vendor Homepage : https://www.amd.com/ Software Link: n/a Version:...

0.3AI score
SaveExploits0
CNVD
CNVD
added 2020/04/16 12:00 a.m.11 views

Microsoft Edge Memory Corruption Vulnerability (CNVD-2020-23446)

Microsoft ChakraCore and Microsoft Edge are both products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, and is also available as a standalone JavaScript engine. Microsoft Edge is a web browser that comes with Windows...

7.6CVSS7AI score0.13303EPSS
SaveExploits0References1
NVD
NVD
added 2020/04/15 3:15 p.m.18 views

CVE-2020-0969

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'...

7.6CVSS8AI score0.13303EPSS
SaveExploits0References1
OSV
OSV
added 2020/04/15 3:15 p.m.25 views

CVE-2020-0969

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'...

7.5CVSS6.7AI score
SaveExploits0References1
Prion
Prion
added 2020/04/15 3:15 p.m.20 views

Remote code execution

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'...

7.6CVSS7.4AI score0.13303EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/04/15 3:13 p.m.30 views

CVE-2020-0969

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'...

7.9AI score0.13303EPSS
SaveExploits0References1
CVE
CVE
added 2020/04/15 3:13 p.m.127 views

CVE-2020-0969

CVE-2020-0969 is described in the connected documents as a remote code execution vulnerability in the Chakra Scripting Engine used by Microsoft Edge (HTML-based) / ChakraCore. The advisory notes memory corruption when handling in‑memory objects, i.e., a Chakra Scripting Engine Memory Corruption v...

7.6CVSS7.8AI score0.13303EPSS
SaveExploits0References1Affected Software1
ThreatPost
ThreatPost
added 2020/04/14 7:45 p.m.274 views

April Patch Tuesday: Microsoft Battles 4 Bugs Under Active Exploit

Microsoft has released its April 2020 Patch Tuesday security updates, its first big patch update released since the work-from-home era truly got underway. It’s a doozie, with the tech giant disclosing 113 vulnerabilities. Out of these, 19 are rated as critical, and 94 are rated as important...

7.6CVSS9.7AI score0.69166EPSS
SaveExploits3References25
Microsoft CVE
Microsoft CVE
added 2020/04/14 7:00 a.m.34 views

Chakra Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

7.6CVSS1.4AI score0.13303EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2020/04/14 7:00 a.m.200 views

April 14, 2020—KB4550927 (OS Build 16299.1806)

None None...

9.3CVSS6.8AI score0.69166EPSS
SaveExploits4
Kaspersky
Kaspersky
added 2020/04/14 12:00 a.m.55 views

KLA11749 Multiple vulnerabilities in Microsoft Browsers

Multiple vulnerabilities were found in Microsoft Browsers. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. A memory corruption vulnerability in Scripting Engine can be exploited remotely via specially crafted website to...

9.3CVSS8.6AI score0.30676EPSS
SaveExploits0References21
Microsoft KB
Microsoft KB
added 2020/04/09 8:40 a.m.96 views

Update 1.1 for Microsoft Dynamics CRM 2015

Describes the updates and changes that are included in Update 1.1 for Microsoft Dynamics CRM 2015.INTRODUCTIONUpdate 1.1 for Microsoft Dynamics CRM 2015 Online is available. Update 1.1 is not available for on-premises server installations. However, we recommend that you install Update 1.1 on top ...

7.2AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/03/25 12:00 a.m.10 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code in the context of the current user.

The vulnerability of the ChakraCore JavaScript script handler in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a...

4.2CVSS7.4AI score0.07713EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/03/25 12:00 a.m.10 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, which allows a hacker to exploit it to disclose protected information

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

5CVSS6.1AI score0.05458EPSS
SaveExploits0References3
Malwarebytes
Malwarebytes
added 2020/03/24 5:37 p.m.47 views

Windows 7 is EOL: What next?

End-of-life EOL is an expression commonly used by software vendors to indicate that a product or version of a product has reached the end of usefulness in the eyes of the vendor. Many companies, including Microsoft, announce the EOL dates for their products far in advance. Every Windows product h...

SaveExploits0
Rows per page
Query Builder