PT-2019-2620

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Microsoft browsers affected versions not specified Description The issue is related to errors in handling objects in memory by the scripting engine. This could allow a remote attacker to execut...

Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1024)

A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1051)

A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1003)

A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2019-1005)

A memory corruption vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-0991)

A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Edge Scripting Engine Information Disclosure (CVE-2019-0990)

An information disclosure vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

PT-2019-2492

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description An information disclosure issue exists due to the scripting engine's improper handling of objects in memory. This could allow a remote attacker to disclose protected information using ...

PT-2019-2606

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer affected versions not specified Description The issue is related to errors in handling objects in memory by the scripting engine. This could allow a remote attacker to execute arbitrary code using a specially crafte...

PT-2019-2608

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to the improper handling of objects in memory by the scripting engine in Microsoft Edge. This could allow a remote attacker to gain unauthorized access to protecte...

KLA11874 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products ESU. Malicious users can exploit these vulnerabilities to gain privileges, spoof user interface, execute arbitrary code, obtain sensitive information, bypass security restrictions, cause denial of service. Below is a complete list of...

PT-2019-2616

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer affected versions not specified Description The issue is related to errors in handling objects in memory by the scripting engine. This could allow a remote attacker to execute arbitrary code using a specially crafte...

PT-2019-2618

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to errors in handling objects in memory by the Chakra scripting engine in Microsoft Edge. This could allow a remote attacker to execute arbitrary code using a...

KB4503291: Windows 10 June 2019 Security Update

The remote Windows host is missing security update 4503291. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call ALPC. An attacker who successfully exploited this...

KB4503290: Windows 8.1 and Windows Server 2012 R2 June 2019 Security Update

The remote Windows host is missing security update 4503290 or cumulative update 4503276. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the Windows Event Viewer eventvwr.msc when it improperly parses XML input containing a reference to...

CVE-2019-12553

In SweetScape 010 Editor 9.0.1, improper validation of arguments in the internal implementation of the StrCat function provided by the scripting engine allows an attacker to overwrite arbitrary memory, which could lead to code execution...

CVE-2019-12555

In SweetScape 010 Editor 9.0.1, improper validation of arguments in the internal implementation of the SubStr function provided by the scripting engine allows an attacker to cause a denial of service by crashing the application...

CVE-2019-12554

In SweetScape 010 Editor 9.0.1, improper validation of arguments in the internal implementation of the WSubStr function provided by the scripting engine allows an attacker to cause a denial of service by crashing the application...

Input validation

In SweetScape 010 Editor 9.0.1, improper validation of arguments in the internal implementation of the StrCat function provided by the scripting engine allows an attacker to overwrite arbitrary memory, which could lead to code execution...

CVE-2019-12554

In SweetScape 010 Editor 9.0.1, improper validation of arguments in the internal implementation of the WSubStr function provided by the scripting engine allows an attacker to cause a denial of service by crashing the application...