11063 matches found
September 8, 2020—KB4577041 (OS Build 16299.2107)
None None...
October 13, 2020—KB4580327 (OS Build 10240.18725) - EXPIRED
None None...
October 13, 2020—KB4580330 (OS Build 17134.1792) - EXPIRED
None None...
Microsoft Edge (Chromium) < 86.0.622.38 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 86.0.622.38. It is, therefore, affected by multiple vulnerabilities as referenced in the ADV200002-10-8-2020 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's...
The vulnerability of the IEToEdge Browser Helper Object (BHO), a browser component of Microsoft Edge, allows a hacker to execute arbitrary code.
The vulnerability of the IEToEdge Browser Helper Object BHO, a component of the Microsoft Edge browser, is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...
Microsoft Edge (Chromium) < 85.0.564.63 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 85.0.564.63. It is, therefore, affected by multiple vulnerabilities as referenced in the ADV200002-9-23-2020 advisory. - Heap buffer overflow in storage in Google Chrome prior to 85.0.564.63 allowed a remote attacker t...
Microsoft Edge (Chromium) < 85.0.564.44 RCE
The version of Microsoft Edge Chromium installed on the remote Windows host is prior to 85.0.564.44. It is, therefore, affected by a remote code execution vulnerability. The vulnerability exists in the way that the IEToEdge Browser Helper Object BHO plugin on Internet Explorer handles objects in...
Remote code execution
A remote code execution vulnerability exists when the Windows Text Service Module improperly handles memory. An attacker who successfully exploited the vulnerability could gain execution on a victim system. An attacker could host a specially crafted website that is designed to exploit the...
Microsoft ChakraCore Remote Code Execution Vulnerability (CNVD-2020-72699)
Microsoft ChakraCore is an open source ChakraJavaScript scripting engine used by Microsoft in the Edge browser, or as a stand-alone JavaScript engine. A remote code execution vulnerability exists in Microsoft ChakraCore. The vulnerability stems from a lack of authentication measures or insufficie...
Microsoft Browser Memory Corruption Vulnerability
Microsoft Edge is a web browser that comes with Windows 10 onwards.Microsoft Internet Explorer IE is a web browser that comes with Windows operating systems from Microsoft Corporation. Microsoft ChakraCore is the core of an open source Chakra JavaScript scripting engine used in the Edge browser b...
Microsoft Edge (Chromium-Based) Memory Corruption Vulnerability (Sep 2020)
This host is missing an important security update according to Microsoft Edge Chromium-Based updates. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Windows Text Service Module Remote Code Execution Vulnerability
A remote code execution vulnerability exists when the Windows Text Service Module improperly handles memory. An attacker who successfully exploited the vulnerability could gain execution on a victim system. An attacker could host a specially crafted website that is designed to exploit the...
PT-2020-4039 · Microsoft · Chakracore +1
Name of the Vulnerable Software and Affected Versions: Microsoft Edge ChakraCore affected versions not specified Description: A remote code execution issue exists in the way the ChakraCore scripting engine handles objects in memory. This could allow an attacker to corrupt memory and execute...
PT-2020-4035 · Microsoft · Edge +1
Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: A remote code execution issue exists in the way the ChakraCore scripting engine handles objects in memory. This could allow an attacker to corrupt memory and execute arbitrary code i...
PT-2020-4038 · Microsoft · Chakracore +1
Name of the Vulnerable Software and Affected Versions: Microsoft Edge ChakraCore affected versions not specified Description: A remote code execution issue exists in the way the ChakraCore scripting engine handles objects in memory. This could allow an attacker to corrupt memory and execute...
Multiple vulnerabilities fixed in Microsoft browsers
There are multiple vulnerabilities in the Scripting Engine, Microsoft Edge and Microsoft Internet Explorer. The vulnerabilities allow a malicious party to execute arbitrary code execute arbitrary code or to obtain elevated privileges. The vulnerability with the highest rating has the attribute...
The vulnerability of the PDF Reader component of the Microsoft Edge browser, which allows a hacker to execute arbitrary code.
The vulnerability of the PDF Reader component of the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability may allow a remote attacker to execute arbitrary code...
Microsoft Edge browser’s vulnerability, related to memory object handling errors, allows attackers to execute arbitrary code.
The vulnerability of Microsoft Edge exists due to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
snipergear.be Cross Site Scripting vulnerability OBB-1284009
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
The vulnerability of the ChakraCore JavaScript script engine component in the Microsoft Edge web browser, based on EdgeHTML, relates to memory object handling flaws. This vulnerability allows an attacker to execute arbitrary code.
The vulnerability of the ChakraCore JavaScript script engine component in the Microsoft Edge web browser, based on EdgeHTML, is related to memory object handling flaws. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...