Lucene search
+L

2840 matches found

CVE
CVE
added 2018/01/04 2:00 p.m.99 views

CVE-2018-0767

CVE-2018-0767 affects Microsoft Edge on Windows 10 (versions 1511, 1607, 1703, 1709) and Windows Server 2016. The vulnerability stems from how the Scripting Engine handles objects in memory , enabling an attacker to perform an information-disclosure attack. Public references describe it as the Ed...

5.3CVSS5AI score0.65467EPSS
SaveExploits2References4Affected Software2
Cvelist
Cvelist
added 2018/01/04 2:00 p.m.36 views

CVE-2018-0800

Microsoft Edge in Microsoft Windows 10 1709 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0767 and...

5.1AI score0.06664EPSS
SaveExploits0References3
Check Point Advisories
Check Point Advisories
added 2018/01/04 12:00 a.m.42 views

Microsoft Edge Scripting Engine Memory Corruption (CVE-2018-0774)

A remote code execution vulnerability exists in Microsoft Edge. The vulnerability is due to the way that the scripting engine handles objects in memory in Microsoft Edge. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the curre...

7.6CVSS7.5AI score0.6787EPSS
SaveExploits5
OpenVAS
OpenVAS
added 2018/01/04 12:00 a.m.90 views

Microsoft Windows Multiple Vulnerabilities (KB4056892)

This host is missing a critical security update according to Microsoft KB4056892. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8AI score0.93838EPSS
SaveExploits75References1
OpenVAS
OpenVAS
added 2018/01/04 12:00 a.m.95 views

Microsoft Windows Multiple Vulnerabilities (KB4056888)

This host is missing a critical security update according to Microsoft KB4056888 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8AI score0.93838EPSS
SaveExploits59References1
OpenVAS
OpenVAS
added 2018/01/04 12:00 a.m.94 views

Microsoft Windows Multiple Vulnerabilities (KB4056893)

This host is missing a critical security update according to Microsoft KB4056893 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8AI score0.93838EPSS
SaveExploits57References1
Check Point Advisories
Check Point Advisories
added 2018/01/04 12:00 a.m.33 views

Microsoft Edge Scripting Engine Memory Corruption (CVE-2018-0776)

A remote code execution vulnerability has been reported in Microsoft Edge. The vulnerability is due to a type confusion when handling certain objects in JavaScript. A remote attacker can exploit this issue by enticing a victim to open a specially crafted web page that could cause memory corruptio...

7.6CVSS7.8AI score0.78434EPSS
SaveExploits5
Tenable Nessus
Tenable Nessus
added 2018/01/04 12:00 a.m.308 views

KB4056891: Windows 10 Version 1703 January 2018 Security Update (Meltdown)(Spectre)

The remote Windows host is missing security update 4056891 or 4057144. It is, therefore, affected by multiple vulnerabilities : - An vulnerability exists within microprocessors utilizing speculative execution and indirect branch prediction, which may allow an attacker with local user access to...

7.8CVSS8.2AI score0.93838EPSS
SaveExploits65References29
OpenVAS
OpenVAS
added 2018/01/04 12:00 a.m.371 views

Microsoft Internet Explorer Multiple Vulnerabilities (KB4056568)

This host is missing a critical security update according to Microsoft security updates KB4056568 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

7.6CVSS7.8AI score0.93838EPSS
SaveExploits14References1
Tenable Nessus
Tenable Nessus
added 2018/01/04 12:00 a.m.714 views

KB4056890: Windows 10 Version 1607 and Windows Server 2016 January 2018 Security Update (Meltdown)(Spectre)

The remote Windows host is missing security update 4056890 or 4057142. It is, therefore, affected by multiple vulnerabilities : - An vulnerability exists within microprocessors utilizing speculative execution and indirect branch prediction, which may allow an attacker with local user access to...

7.8CVSS8.2AI score0.93838EPSS
SaveExploits59References28
Microsoft CVE
Microsoft CVE
added 2018/01/03 8:00 a.m.34 views

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

7.6CVSS1.5AI score0.78434EPSS
SaveExploits5
Microsoft CVE
Microsoft CVE
added 2018/01/03 8:00 a.m.42 views

Scripting Engine Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in the Microsoft Chakra scripting engine that allows Control Flow Guard CFG to be bypassed. By itself, the CFG bypass vulnerability does not allow arbitrary code execution. However, an attacker could use the CFG bypass vulnerability in conjunction wi...

8.5CVSS1.4AI score0.03686EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/01/03 8:00 a.m.26 views

Chakra Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

5.3CVSS1.4AI score0.58572EPSS
SaveExploits5
Microsoft CVE
Microsoft CVE
added 2018/01/03 8:00 a.m.33 views

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

7.6CVSS1.5AI score0.78434EPSS
SaveExploits4
Microsoft CVE
Microsoft CVE
added 2018/01/03 8:00 a.m.29 views

Chakra Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

5.3CVSS1.4AI score0.06664EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/01/03 8:00 a.m.26 views

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

7.6CVSS1.5AI score0.08643EPSS
SaveExploits0
Kaspersky
Kaspersky
added 2018/01/03 12:00 a.m.170 views

KLA11167 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in...

7.8CVSS8.5AI score0.11932EPSS
SaveExploits6References34
Check Point Advisories
Check Point Advisories
added 2017/12/20 12:00 a.m.36 views

Microsoft Internet Explorer Scripting Engine Information Disclosure (CVE-2017-11906)

An information disclosure vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to the way the scripting engine improperly handles objects in memory in Internet Explorer. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with ...

2.6CVSS5.5AI score0.25116EPSS
SaveExploits5
Check Point Advisories
Check Point Advisories
added 2017/12/19 12:00 a.m.14 views

Apple WebKit Use After Free Code Execution (CVE-2017-13795)

A remote code execution vulnerability has been discovered in Apple's WebKit. The vulnerability is due to the way the scripting engine handles objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...

6.8CVSS2.8AI score0.05787EPSS
SaveExploits4
CNVD
CNVD
added 2017/12/13 12:00 a.m.5 views

Microsoft Windows Internet Explorer scripting remote code execution vulnerability (CNVD-2018-00779)

Microsoft Windows Server 2016 and others are operating systems released by Microsoft Corporation USA.Internet Explorer IE is one of the browsers. scripting engine is one of the scripting engines. A remote code execution vulnerability exists in the scripting engine of IE 9, 10, and 11 in Microsoft...

7.6CVSS7.9AI score0.46826EPSS
SaveExploits5References1
Rows per page
Query Builder