Remote Code Execution Vulnerability in Microsoft Windows VBScript Engine

Microsoft Windows is the popular computer operating system. A remote code execution vulnerability exists in the Microsoft Windows VBScript Engine, which can be exploited by an attacker to execute arbitrary code in the current user context...

The vulnerability in Microsoft Edge browsers arises from an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

Microsoft Excel Remote Code Execution Vulnerability (CNVD-2018-08937)

Microsoft Excel is one of the components of Microsoft's office software Microsoft office, a spreadsheet software written and run by Microsoft for computers with Windows and Apple Macintosh operating systems. A remote code execution vulnerability exists in Microsoft Excel. The vulnerability arises...

Microsoft Internet Explorer Remote Memory Corruption Vulnerability (CNVD-2018-08025)

Internet Explorer is a web browser from Microsoft. Microsoft Internet Explorer suffers from a remote memory corruption vulnerability in the scripting engine's memory object handling, which can be exploited by an attacker to execute arbitrary code in the current user context...

CVE-2018-4937

Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user...

Microsoft Excel CVE-2018-1011 Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft...

Microsoft Internet Explorer Scripting Engine CVE-2018-0996 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Internet...

ManageEngine Application Manager Remote Code Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "ManageEngine Applications Manager Remote Code Execution", 'Description' = %q This module exploits command injection vulnerability in the...

Microsoft Office Arbitrary Code Execution Vulnerability (CNVD-2018-05885)

Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. A remote code execution vulnerability exists in Microsoft Office, which stems from the program's failure t...

Microsoft ChakraCore Remote Code Execution Vulnerability (CNVD-2018-05887)

Microsoft ChakraCore is the core of the JavaScript engine used by Edge, a web browser from Microsoft. A remote code execution vulnerability exists in Microsoft ChakraCore. A remote attacker could exploit this vulnerability to execute arbitrary code in the context of the current user, corrupting...

Microsoft Access Arbitrary Code Execution Vulnerability

Microsoft Access is a relational database management system in the Office suite of the U.S. Microsoft Microsoft Corporation. A remote code execution vulnerability exists in Microsoft Access due to the program's failure to properly handle objects in memory. A remote attacker can exploit this...

Microsoft Windows Shell Remote Code Execution Vulnerability (CNVD-2018-05838)

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. A Windows Shell is an interface under Windows that interacts with the user and allows the user to perform public tasks such as accessing the file system, exporting executable programs,...

Microsoft Edge and ChakraCore Remote Memory Corruption Vulnerability (CNVD-2018-06695)

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation.Edge is one of the browsers that comes with the system.ChakraCore is the core of an open source JavaScript engine used in Edge, and can also be used as a standalone JavaScript engine.... ChakraCore...

Microsoft Edge and ChakraCore Remote Memory Corruption Vulnerability (CNVD-2018-06700)

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation.Edge is one of the browsers that comes with the system.ChakraCore is the core of an open source JavaScript engine used in Edge, and can also be used as a standalone JavaScript engine.... ChakraCore...

Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2018-07039)

Edge is Microsoft's browser for Windows 10. Microsoft Edge suffers from a Scripting Engine Memory Corruption vulnerability. The vulnerability arises due to a problem in the way the scripting engine handles objects in memory. An attacker can exploit the vulnerability to execute arbitrary code in t...

PT-2018-16624 · Adobe +2 · Flash Player +2

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 28.0.0.161 and earlier Description: The issue is related to a use-after-free vulnerability that could lead to arbitrary code execution in the context of the current user. This vulnerability allows attackers to...

Microsoft ChakraCore Scripting Engine CVE-2018-0925 Remote Memory Corruption Vulnerability

Description Microsoft ChakraCore is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft ChakraCore...

Microsoft Edge CVE-2018-0876 Remote Memory Corruption Vulnerability

Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Edge Recommendations...

NAT32 HTTPD Cross-Site Request Forgery Vulnerability

NAT32 is a network sharing application. A cross-site request forgery vulnerability exists in the NAT32 HTTPD component, which allows remote attackers to exploit the vulnerability to construct malicious URIs, bait requests, and can be used in the target user context to perform malicious actions...

Microsoft ChakraCore Remote Code Execution Vulnerability (CNVD-2018-05734)

Microsoft ChakraCore is the core of the JavaScript engine used by Edge, a web browser from Microsoft. A remote code execution vulnerability exists in Microsoft ChakraCore. A remote attacker could exploit this vulnerability to execute arbitrary code in the context of the current user, causing memo...