Lucene search
+L

896 matches found

BDU FSTEC
BDU FSTEC
added 2018/12/28 12:00 a.m.11 views

The vulnerability of the VBScript mechanism in Internet Explorer arises due to errors in object handling in memory, allowing attackers to execute arbitrary code in the context of the current user.

The vulnerability of the VBScript mechanism in Internet Explorer exists due to object handling errors in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, through a specially created web page...

7.1CVSS7.9AI score0.43761EPSS
SaveExploits3References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/12/28 12:00 a.m.10 views

The vulnerability of the Windows operating system, related to errors in memory object handling, allows a perpetrator to trigger a service failure.

The vulnerability of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker, acting locally, to cause a service failure through a specially crafted application...

5CVSS6.2AI score0.01666EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2018/12/28 12:00 a.m.10 views

The vulnerability of the Microsoft Windows operating system, related to errors in memory object handling, allows a perpetrator to trigger a service failure.

The vulnerability of the Connected User Experience and Telemetry Service services in the Microsoft Windows operating system is related to improper handling of objects in memory. Exploiting this vulnerability can allow a local attacker to cause service failures through a specially created...

4.7CVSS6.8AI score0.01424EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2018/12/28 12:00 a.m.13 views

The vulnerability of the Windows operating system, related to errors in memory object handling, allows an intruder to disclose protected information.

The vulnerability of the DirectX driver for the Windows operating system is related to object handling errors in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

4.7CVSS6.2AI score0.01819EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2018/12/27 12:00 a.m.18 views

The vulnerability of the ChakraCore JavaScript script handler, related to errors in memory object handling mechanisms, allows attackers to execute arbitrary code.

The vulnerability of the ChakraCore JavaScript script handler is related to errors in memory object handling mechanisms. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with the privileges of the current user...

7.6CVSS7.4AI score0.74789EPSS
SaveExploits4References6
BDU FSTEC
BDU FSTEC
added 2018/12/13 12:00 a.m.18 views

The vulnerability of the Win32k component of the Windows operating system, which allows a hacker to increase their privileges and execute arbitrary code.

The vulnerability of the Win32k component of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code using a specially crafted application...

8.4CVSS8.2AI score0.04196EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2018/12/12 12:29 a.m.13 views

CVE-2018-8636

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Excel. This CVE ID is unique from...

9.3CVSS6.7AI score0.162EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2018/12/12 12:29 a.m.6 views

CVE-2018-8634

A remote code execution vulnerability exists in Windows where Microsoft text-to-speech fails to properly handle objects in the memory, aka "Microsoft Text-To-Speech Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers...

9.3CVSS6.7AI score0.15355EPSS
SaveExploits0References3
OSV
OSV
added 2018/12/12 12:29 a.m.5 views

CVE-2018-8597

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Excel. This CVE ID is unique from...

7.8CVSS6.4AI score0.1613EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2018/12/07 12:00 a.m.19 views

The vulnerability of Microsoft Word’s text editor lies in memory object processing errors, which allow attackers to execute arbitrary code.

The vulnerability of Microsoft Word relates to errors in memory object handling. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code with user privileges using a specially crafted file...

10CVSS8.2AI score0.19059EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2018/12/07 12:00 a.m.16 views

The vulnerability of Microsoft Excel’s spreadsheet editor, related to errors in memory object handling, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Excel editors is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code with user privileges using a specially crafted file...

10CVSS8AI score0.19059EPSS
SaveExploits0References4
Veracode
Veracode
added 2018/12/05 1:20 a.m.29 views

Remote Code Execution (RCE)

Microsoft ChakraCore is vulnerable to remote code execution. This is due to how the scripting engine handles objects in memory, allowing a remote attacker to execute arbitrary code in the context of the authenticated user. This CVE ID is different from CVE-2017-0010, CVE-2017-0015, CVE-2017-0032,...

7.5CVSS7.6AI score0.78538EPSS
SaveExploits5References1Affected Software2
BDU FSTEC
BDU FSTEC
added 2018/12/04 12:00 a.m.12 views

The vulnerability of the DirectX component of the Windows operating system, which allows a hacker to compromise protected information

The vulnerability of the DirectX component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

4.7CVSS7.7AI score0.01655EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2018/12/04 12:00 a.m.13 views

The vulnerability of the DirectX component in the Windows operating system allows attackers to elevate their privileges and execute arbitrary code in kernel mode.

The vulnerability of the DirectX component in the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code in kernel mode through a specially created application...

7CVSS8.2AI score0.01193EPSS
SaveExploits0References7
CNVD
CNVD
added 2018/11/19 12:00 a.m.12 views

Microsoft Windows DirectX elevation of privilege vulnerability (CNVD-2019-14446)

Microsoft Windows Server is an operating system released by Microsoft Corporation.DirectX Graphics Kernel DXGKRNL is one of the graphics kernel drivers. An elevation of privilege vulnerability exists in the way Microsoft Windows DirectX handles memory objects, which could be exploited by an...

7.8CVSS8.6AI score0.01193EPSS
SaveExploits0References1
OSV
OSV
added 2018/11/14 1:29 a.m.4 views

CVE-2018-8577

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft Excel, Microsoft Excel Viewer, Excel. This...

7.8CVSS6.4AI score0.19059EPSS
SaveExploits0References3
OSV
OSV
added 2018/11/14 1:29 a.m.9 views

CVE-2018-8544

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server...

8.8CVSS7.9AI score0.47556EPSS
SaveExploits4References4
NVD
NVD
added 2018/10/29 9:29 p.m.34 views

CVE-2018-17623

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS8.8AI score0.03279EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2018/10/19 12:00 a.m.11 views

The vulnerability of the DirectX Graphics Kernel driver on Windows operating systems allows attackers to execute processes with elevated privileges.

The vulnerability of the DirectX Graphics Kernel Driver DXGKRNL on Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute processes with elevated privileges...

7CVSS7.9AI score0.01192EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2018/10/11 12:00 a.m.27 views

Foxit Reader XFA TimeField addItem Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

7.8CVSS1.9AI score0.03918EPSS
SaveExploits0References1
Rows per page
Query Builder