Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CNVD-2019-07383)

Edge is Microsoft's browser for Windows 10, characterized as fast and secure. Microsoft Edge suffers from a Chakra Scripting Engine Memory Corruption vulnerability that stems from a problem in the way the Chakra Scripting Engine handles objects in memory, which can be exploited by an attacker to...

CVE-2018-8643

CVE-2018-8643 relates to a memory corruption vulnerability in the Internet Explorer scripting engine. Affected products include IE9, IE10, and IE11, with remote code execution potential due to how memory objects are handled. The issue is documented across several feeds (CVE and related records); ...

CVE-2018-8643: Out-of-bounds Write

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10...

CVE-2018-8618

CVE-2018-8618 describes a remote code execution VULNERABILITY in the Chakra scripting engine, caused by how it handles objects in memory. The issue affects Microsoft Edge and ChakraCore, with a memory corruption root cause that can enable code execution on affected systems. Connected advisories c...

Microsoft Windows Multiple Vulnerabilities (KB4471327)

This host is missing a critical security update according to Microsoft KB4471327 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4471324)

This host is missing a critical security update according to Microsoft KB4471324 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Patch Tuesday — December 2018: Vulnerability disclosures and Snort coverage

Microsoft released its monthly security update today, disclosing a variety of vulnerabilities in several of its products. The latest Patch Tuesday covers 38 vulnerabilities, nine of which are rated “critical” and 29 that are considered “important.” There are no “moderate” or “low” vulnerabilities...

December 11, 2018—KB4471329 (OS Build 16299.846)

December 11, 2018—KB4471329 OS Build 16299.846 Applies To Windows 10, version 1709, all editions Note Because of minimal operations during the holidays and upcoming Western new year, there won’t be any preview releases for the month of December 2018. Monthly servicing will resume with the January...

December 11, 2018—KB4471332 (OS Build 17763.194)

December 11, 2018—KB4471332 OS Build 17763.194 Applies To Windows 10, version 1809, all editions Windows Server 2019, all editions Note Because of minimal operations during the holidays and upcoming Western new year, there won’t be any preview releases for the month of December 2018. Monthly...

December 11, 2018—KB4471324 (OS Build 17134.471)

December 11, 2018—KB4471324 OS Build 17134.471 Applies To Windows 10, version 1803, all editions Note Because of minimal operations during the holidays and upcoming Western new year, there won’t be any preview releases for the month of December 2018. Monthly servicing will resume with the January...

Chakra Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

Chakra Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

Chakra Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

Remote Code Execution (RCE)

microsoft.chakracore is vulnerable to remote code execution. This is due to the way the scripting engine accesses objects in memory which can lead to memory corruption or arbitrary code being executed in the context of the authenticated user...

PT-2018-2043

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to a remote code execution problem in the Chakra scripting engine of Microsoft Edge. It is caused by a buffer overflow in memory, allowing an attacker to potential...

PT-2018-2032

Name of the Vulnerable Software and Affected Versions Internet Explorer 9 Internet Explorer 10 Internet Explorer 11 Description A remote code execution issue exists due to the way the scripting engine handles objects in memory. This could allow an attacker to execute arbitrary code in the context...

PT-2018-2023

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to a remote code execution problem in the Chakra scripting engine, which can cause memory corruption. This allows an attacker to execute arbitrary code in the...

Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2018-8629)

A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

KB4471323: Windows 10 December 2018 Security Update

The remote Windows host is missing security update 4471323. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker...

Security Updates for Internet Explorer (December 2018)

The Internet Explorer installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a...