Announcing the Windows Bounty Program

Windows 10 represents the best and newest in our strong commitment to security with world-class mitigations. One of Microsoft’s longstanding strategies toward improving software security involves investing in defensive technologies that make it difficult and costly for attackers to find, exploit...

Microsoft Is Paying Up To $250,000 With Its New Bug Bounty Program

Microsoft has finally launched a new dedicated bug bounty program to encourage security researchers and bug hunters for finding and responsibly reporting vulnerabilities in its latest Windows versions of operating systems and software. Being the favourite target of hackers and cyber criminals,...

Microsoft Edge browser vulnerability, allowing a hacker to execute arbitrary code in the context of the current user

The vulnerability of Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

Microsoft Edge browser vulnerability, allowing a hacker to execute arbitrary code in the context of the current user

The vulnerability of Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

HackerOne: Content Security Policy not applied to error pages at multiple HackerOne endpoints

HackerOne CSP "script-src" includes "unsafe-inline" bypass via % and %" ----- Summary & Description We utilize a strict Content Security Policy and a safe-by-default templating language to effectively neutralize Cross-Site Scripting XSS. We encrypt all network communications with SSL/TLS...

Microsoft Edge Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2017-14608)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge fails to properly handle memory objects and is implemented with a remote memory corruption vulnerability that can be exploited by an attacker to execute arbitrary code in the current user context...

Microsoft EDGE Remote Memory Corruption Code Execution Vulnerability (CNVD-2017-22682)

Microsoft Edge is a popular WEB browser. A memory corruption vulnerability exists in Microsoft Edge, which allows attackers to exploit the vulnerability by submitting a special WEB page and tricking the user into parsing it, which can crash the application or execute arbitrary code...

Microsoft EDGE Remote Memory Corrupted Code Execution Vulnerability (CNVD-2017-22681)

Microsoft Edge is a popular WEB browser. A memory corruption vulnerability exists in Microsoft Edge, which allows attackers to exploit the vulnerability by submitting a special WEB page and tricking the user into parsing it, which can crash the application or execute arbitrary code...

Microsoft Edge Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2017-14643)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge fails to properly handle memory objects, and a remote memory corruption vulnerability exists in the Chakra JavaScript engine presentation, which could be exploited by an attacker to execute arbitrary code in the...

Microsoft Windows Multiple Vulnerabilities (KB4025338)

This host is missing a critical security update according to Microsoft KB4025338 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Edge Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2017-14607)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge fails to properly handle memory objects and is implemented with a remote memory corruption vulnerability that can be exploited by an attacker to execute arbitrary code in the current user context...

Microsoft EDGE Remote Memory Corruption Code Execution Vulnerability

Microsoft Edge is a popular WEB browser. A memory corruption vulnerability exists in Microsoft Edge, which allows attackers to exploit the vulnerability by submitting a special WEB page and tricking the user into parsing it, which can crash the application or execute arbitrary code...

Microsoft Edge Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2017-14448)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge fails to properly handle memory objects and is implemented with a remote memory corruption vulnerability that allows an attacker to execute arbitrary code in the current user context...

Microsoft Edge Remote Code Execution Vulnerability (CNVD-2017-14639)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge fails to properly handle in-memory objects and has a remote code execution vulnerability in its implementation that could lead an attacker to execute arbitrary code in the current user context...

Microsoft Windows Multiple Vulnerabilities (KB4025342)

This host is missing a critical security update according to Microsoft KB4025342 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Edge Remote Code Execution Vulnerability (CNVD-2017-14640)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge does not properly handle memory objects and has a remote code execution vulnerability in its implementation that could be exploited by an attacker to execute arbitrary code in the current user context...

Microsoft Edge Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2017-14449)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge fails to properly handle memory objects and is implemented with a remote memory corruption vulnerability that can be exploited by an attacker to execute arbitrary code in the current user context...

Microsoft Edge Security Bypass Vulnerability (CNVD-2017-14644)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge fails to properly apply the same-origin policy to HTML elements within other browsers and is vulnerable to a remote security feature bypass vulnerability in its implementation. An attacker could exploit the...

Microsoft Edge Spoofing Vulnerability (CNVD-2017-14641)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge fails to properly parse HTTP content and has a spoofing vulnerability in its implementation. An attacker could exploit the vulnerability to trick users into opening malicious websites, among other things...

Microsoft EDGE Security Bypass Vulnerability

Microsoft Edge is a popular WEB browser. Microsoft Edge does not properly handle redirect requests, allowing attackers to exploit a vulnerability by submitting a special WEB page that induces users to parse it, which can bypass CORS redirect restrictions...