102 matches found
PT-2018-18527
Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Microsoft Excel Viewer affected versions not specified Microsoft PowerPoint Viewer affected versions not specified Microsoft Office Word Viewer affected versions not specified Description A remo...
Remote code execution
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Office...
Media Foundation Memory Corruption Vulnerability
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights. There are multiple ways an...
PT-2018-18496
Name of the Vulnerable Software and Affected Versions Windows Server 2008 Windows 7 Windows Server 2008 R2 Description An elevation of privilege issue exists due to the Windows kernel's improper handling of objects in memory. This allows attackers to affect the system. Recommendations For Windows...
Microsoft Exchange Memory Corruption Vulnerability
An information disclosure vulnerability exists when Microsoft Exchange improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the remote system. To exploit the vulnerability, an attacker would send a...
PT-2018-1320
Name of the Vulnerable Software and Affected Versions Microsoft Excel affected versions not specified Description A remote code execution issue exists in Microsoft Excel software due to improper handling of objects in memory. This can be exploited by a remote attacker using a specially crafted XL...
PT-2018-18470
Name of the Vulnerable Software and Affected Versions Windows 7 Windows Server 2008 Windows Server 2008 R2 Windows Server 2012 Windows Server 2012 R2 Windows Server 2016 Windows 8.1 Windows RT 8.1 Windows 10 Windows 10 Servers Description An elevation of privilege issue exists due to the improper...
Remote code execution
A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability." This affects Microsoft Office. This CVE ID is unique from CVE-2018-1026...
PT-2018-18443
Name of the Vulnerable Software and Affected Versions: Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers Description: A denial of service issue exists in the way that Windows...
PT-2018-9665
Name of the Vulnerable Software and Affected Versions: Windows Adobe Type Manager Font Driver ATMFD.dll versions prior to the fixed version Windows 7 Windows Server 2008 Windows Server 2008 R2 Windows 8.1 Windows RT 8.1 Windows Server 2012 Windows Server 2012 R2 Windows Server 2016 Windows 10...
Microsoft Windows Kernel Elevation of Privilege Vulnerability (KB4100480)
This host is missing a critical security update according to Microsoft KB4100480 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2018-9139
Name of the Vulnerable Software and Affected Versions: Microsoft Access versions 2010 SP2 through 2016 Description: A remote code execution issue exists due to improper handling of objects in memory. An attacker could run arbitrary code in the context of the current user. If the user has...
Information disclosure
The Windows kernel in Windows 10 version 1709 and Windows Server, version 1709 allows an information disclosure vulnerability due to how objects in memory are handled, aka "Windows Kernel Information Disclosure Vulnerability". This CVE is unique from CVE-2018-0742, CVE-2018-0756, CVE-2018-0809 an...
PT-2018-1105
Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Microsoft Office Compatibility Pack affected versions not specified Microsoft Word affected versions not specified Description A remote code execution issue exists in Microsoft Office software d...
The vulnerability in Internet Explorer, caused by an operation that goes beyond the buffer boundaries in memory, allows a malicious actor to gain the privileges of the current user.
The vulnerability of the Internet Explorer browser is related to improper handling of objects in memory. Exploiting this vulnerability can allow a remote attacker to gain privileges as the current user...
Windows Kernel Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create ne...
PT-2018-9062
Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: An information disclosure issue exists due to the scripting engine's improper handling of objects in memory. This could allow an attacker to obtain information that could be used to...
PT-2017-12297
Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description An information disclosure issue exists due to improper handling of objects in memory by Internet Explorer. This could allow an attacker to obtain information that could be used to...
CVE-2017-11845
Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how Microsoft Edge handles objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability"...
PT-2017-12250
Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description An information disclosure issue exists due to Microsoft Edge's improper handling of objects in memory. This could allow an attacker to obtain information that could be used to further...