Lucene search
+L

1591 matches found

BDU FSTEC
BDU FSTEC
added 2017/10/25 12:0 a.m.8 views

The vulnerability of the Windows Shell component of the Windows operating system, which allows a hacker to execute arbitrary code

The vulnerability of the Windows Shell component of the Windows operating system exists due to insufficient checking of file copy addresses. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code in the context of the current user, using specially...

7.6CVSS7.8AI score0.20519EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2017/10/25 12:0 a.m.9 views

Microsoft Edge browser’s vulnerability, related to improper handling of objects in memory, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Edge relates to improper handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using specially crafted content...

7.6CVSS7.7AI score0.51553EPSS
Exploits1References6
BDU FSTEC
BDU FSTEC
added 2017/10/17 12:0 a.m.9 views

Microsoft Edge browser’s vulnerability, related to improper handling of objects in memory, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Edge browser on Microsoft Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using specially crafted content that cause...

7.6CVSS7.7AI score0.08891EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2017/10/17 12:0 a.m.8 views

The vulnerability of the Internet Explorer browser, related to incorrect handling of objects in memory, allows attackers to execute arbitrary code.

The vulnerability of the Internet Explorer browser is related to incorrect handling of objects in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the context of the current user...

7.6CVSS7.9AI score0.10801EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/10/17 12:0 a.m.7 views

Microsoft Edge browser’s vulnerability, related to improper handling of objects in memory, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Edge browser on Microsoft Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

7.6CVSS7.7AI score0.08716EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2017/10/17 12:0 a.m.8 views

Microsoft Edge browser’s vulnerability, related to improper handling of objects in memory, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Edge browser on Microsoft Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using specially crafted content that cause...

7.6CVSS7.7AI score0.71272EPSS
Exploits3References6
ATTACKERKB
ATTACKERKB
added 2017/10/13 1:29 p.m.7 views

CVE-2017-11810

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the...

9.3CVSS6AI score0.69163EPSS
Exploits20References5
CVE
CVE
added 2017/10/13 1:0 p.m.87 views

CVE-2017-11801

CVE-2017-11801 is a ChakraCore-hosted RCE vulnerability. The connected documents describe an issue where the ChakraCore scripting engine exposes memory handling flaws that allow an attacker to execute arbitrary code in the context of the current user. The core detail across sources is that the bu...

7.6CVSS7.7AI score0.05799EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2017/10/11 12:0 a.m.5 views

Microsoft Office Remote Code Execution Vulnerability (CNVD-2017-30582)

Microsoft Office is a suite of office software based on the Windows operating system developed by Microsoft. A remote code execution vulnerability exists in the implementation of Microsoft Office when it does not properly handle memory objects, which could allow an attacker to run arbitrary code ...

9.3CVSS7.9AI score0.2207EPSS
Exploits0References1
CNVD
CNVD
added 2017/10/11 12:0 a.m.4 views

Microsoft Edge Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2017-30542)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge suffers from a remote memory corruption vulnerability in the scripting engine's handling of in-memory objects, which can be exploited by an attacker to corrupt memory by executing arbitrary code in the current use...

7.6CVSS7.5AI score0.6546EPSS
Exploits4References1
CNVD
CNVD
added 2017/10/11 12:0 a.m.10 views

Microsoft SharePoint Server Cross-Site Scripting Vulnerability (CNVD-2017-30538)

Microsoft Office is a suite of office software based on the Windows operating system developed by Microsoft. A cross-site scripting vulnerability exists in the implementation of Microsoft SharePoint Server when it does not properly filter incoming web requests, which can be exploited by an attack...

5.4CVSS5.3AI score0.02267EPSS
Exploits0References1
CNVD
CNVD
added 2017/10/11 12:0 a.m.4 views

Microsoft Edge Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2017-30543)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge suffers from a remote memory corruption vulnerability in the scripting engine's handling of in-memory objects, which can be exploited by an attacker to corrupt memory by executing arbitrary code in the current use...

9.3CVSS7.5AI score0.4726EPSS
Exploits0References1
CNVD
CNVD
added 2017/10/11 12:0 a.m.5 views

Microsoft Edge Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2017-30539)

Microsoft Edge is the web browser built into the Windows 10 version. A remote memory corruption vulnerability exists in the JavaScript engine content when the Microsoft Edge scripting engine handles in-memory objects, which can be exploited by an attacker to corrupt memory by executing arbitrary...

7.6CVSS7.5AI score0.08761EPSS
Exploits0References1
CNVD
CNVD
added 2017/10/11 12:0 a.m.7 views

Microsoft ChakraCore Memory Corruption Vulnerability

Microsoft ChakraCore is the core of the JavaScript engine used by Edge, a web browser from Microsoft. A memory corruption vulnerability exists in Microsoft ChakraCore. A remote attacker can exploit this vulnerability to execute arbitrary code in the context of the current user, resulting in memor...

7.6CVSS7.7AI score0.05799EPSS
Exploits0References1
CNVD
CNVD
added 2017/10/11 12:0 a.m.5 views

Microsoft Edge Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2017-30540)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge suffers from a remote memory corruption vulnerability in the scripting engine's handling of in-memory objects, which can be exploited by an attacker to corrupt memory by executing arbitrary code in the current use...

7.6CVSS7.5AI score0.08761EPSS
Exploits0References1
VulnCheck KEV
VulnCheck KEV
added 2017/09/28 12:0 a.m.4 views

VulnCheck KEV: CVE-2017-11826

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user...

9.3CVSS7.6AI score0.81454EPSS
Exploits3References1
BDU FSTEC
BDU FSTEC
added 2017/09/28 12:0 a.m.7 views

The vulnerability in Microsoft Edge browsers arises from an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

7.6CVSS7.9AI score0.50373EPSS
Exploits4References3
Prion
Prion
added 2017/09/13 1:29 a.m.18 views

Memory corruption

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of th...

7.6CVSS7.7AI score0.09202EPSS
Exploits0References4Affected Software1
OpenVAS
OpenVAS
added 2017/09/13 12:0 a.m.42 views

Microsoft Office Mac 2011 Multiple Vulnerabilities (KB3212225)

This host is missing an important security update according to Microsoft KB3212225 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

9.3CVSS6.2AI score0.19589EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2017/09/13 12:0 a.m.44 views

Microsoft PowerPoint 2013 Service Pack 1 Remote Code Execution Vulnerability (KB4011069)

This host is missing an important security update according to Microsoft KB4011069 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

9.3CVSS7.5AI score0.20097EPSS
Exploits0References2
Rows per page
Query Builder