Lucene search
+L

11063 matches found

Symantec
Symantec
added 2019/11/12 12:00 a.m.33 views

Microsoft Edge Chakra Scripting Engine CVE-2019-1426 Remote Memory Corruption Vulnerability

Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft ChakraCore Microsoft...

0.6AI score0.10025EPSS
SaveExploits0
zdt
zdt
added 2019/11/12 12:00 a.m.803 views

Microsoft Edge 44.18362.449.0 - Denial Of Service Exploit

function blah var buff = '\x41'; var buffer = buff.repeat600000000; document.writebuffer;...

0.2AI score
SaveExploits0
Symantec
Symantec
added 2019/11/12 12:00 a.m.33 views

Microsoft Edge CVE-2019-1413 Security Bypass Vulnerability

Description Microsoft Edge is prone to a security-bypass vulnerability. Successfully exploiting this issue may allow an attacker to bypass certain security restrictions and perform unauthorized actions. This may lead to other attacks. Technologies Affected Microsoft Edge Recommendations Run all...

6.6AI score0.01122EPSS
SaveExploits0
Symantec
Symantec
added 2019/11/12 12:00 a.m.33 views

Microsoft Edge Chakra Scripting Engine CVE-2019-1427 Remote Memory Corruption Vulnerability

Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft ChakraCore Microsoft...

1AI score0.10025EPSS
SaveExploits0
Talos
Talos
added 2019/11/12 12:00 a.m.47 views

Microsoft Media Foundation CMP4MetadataHandler AddQTMetadata Code Execution Vulnerability

Summary An exploitable use-after-free vulnerability exists in the mfmp4srcsnk.dll of Microsoft Media Foundation. A specially crafted QuickTime file can cause a Use-After-Free, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim to trigger the...

9.3CVSS7.9AI score0.13843EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2019/11/12 12:00 a.m.47 views

CVE-2019-1428

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge HTML-based, aka ‘Scripting Engine Memory Corruption Vulnerability’. This CVE ID is unique from CVE-2019-1426, CVE-2019-1427, CVE-2019-1429. Recent assessments: Assessed...

7.6CVSS7.7AI score0.7729EPSS
SaveIn wildExploits4References2
Symantec
Symantec
added 2019/11/12 12:00 a.m.28 views

Microsoft Edge Chakra Scripting Engine CVE-2019-1428 Remote Memory Corruption Vulnerability

Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft ChakraCore Microsoft...

0.6AI score0.10106EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2019/11/04 12:00 a.m.13 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

7.6CVSS6AI score0.09901EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/11/04 12:00 a.m.10 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

7.6CVSS6AI score0.10103EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/11/04 12:00 a.m.10 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

7.6CVSS6AI score0.09901EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/10/24 12:00 a.m.8 views

The vulnerability in the Microsoft Edge web browser, related to improper memory handling, allows an attacker to gain unauthorized access to protected information.

The vulnerability in the Microsoft Edge web browser is related to improper handling of data in memory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

6.5CVSS5.5AI score0.0624EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/10/24 12:00 a.m.15 views

The vulnerability in Microsoft Edge and Internet Explorer web browsers, related to cookie file processing flaws, allows attackers to perform spoofing attacks.

The vulnerability in Microsoft Edge and Internet Explorer browsers is related to deficiencies in cookie file handling. Exploiting this vulnerability can allow a remote attacker to perform spoofing attacks...

4.3CVSS5.5AI score0.02287EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2019/10/17 12:00 a.m.7 views

Microsoft Edge Information Disclosure Vulnerability (CNVD-2019-42790)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. An information disclosure vulnerability exists in Microsoft Edge based on EdgeHTML, which arises from the program's failure to properly handle memory objects. An attacker could exploit th...

6.5CVSS5.9AI score0.0624EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/10/11 12:00 a.m.46 views

Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CNVD-2019-36634)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge suffers from a memory corruption vulnerability in the Chakra scripting engine. The vulnerability stems from a problem in the way the Chakra scripting engine handles objects...

7.6CVSS7.2AI score0.10103EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/10/11 12:00 a.m.49 views

Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CNVD-2019-36636)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge suffers from a memory corruption vulnerability in the Chakra scripting engine. The vulnerability stems from a problem in the way the Chakra scripting engine handles objects...

7.6CVSS7.2AI score0.09901EPSS
SaveExploits0References1
OSV
OSV
added 2019/10/10 2:15 p.m.8 views

CVE-2019-1366

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1307, CVE-2019-1308, CVE-2019-1335...

7.5CVSS7.3AI score0.09901EPSS
SaveExploits0References1
NVD
NVD
added 2019/10/10 2:15 p.m.24 views

CVE-2019-1366

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1307, CVE-2019-1308, CVE-2019-1335...

7.6CVSS7.4AI score0.09901EPSS
SaveExploits0References1
NVD
NVD
added 2019/10/10 2:15 p.m.17 views

CVE-2019-1356

An information disclosure vulnerability exists when Microsoft Edge based on Edge HTML improperly handles objects in memory, aka 'Microsoft Edge based on Edge HTML Information Disclosure Vulnerability'...

6.5CVSS5.9AI score0.0624EPSS
SaveExploits0References1
OSV
OSV
added 2019/10/10 2:15 p.m.8 views

CVE-2019-1335

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1307, CVE-2019-1308, CVE-2019-1366...

7.5CVSS7.3AI score0.09901EPSS
SaveExploits0References1
NVD
NVD
added 2019/10/10 2:15 p.m.24 views

CVE-2019-1335

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1307, CVE-2019-1308, CVE-2019-1366...

7.6CVSS7.4AI score0.09901EPSS
SaveExploits0References1
Rows per page
Query Builder