PT-2018-18550

Name of the Vulnerable Software and Affected Versions Windows Server 2012 R2 Windows RT 8.1 Windows Server 2012 Windows Server 2016 Windows 8.1 Windows 10 Windows 10 Servers Description An elevation of privilege issue exists due to the way the Windows Kernel API enforces permissions. This allows...

KLA11285 Multiple vulnerabilities in Microsoft Windows

Multiple serious vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. Multiple vulnerabilities in Windows kernel ca...

PT-2018-18495

Name of the Vulnerable Software and Affected Versions Windows Server 2016 Windows 10 Windows 10 Servers Description A security feature bypass issue exists, allowing an attacker to inject malicious code into a Windows PowerShell session. This could potentially affect system integrity...

KB4338820: Windows Server 2012 July 2018 Security Update

The remote Windows host is missing security update 4338820 or cumulative update 4338830. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists in Windows Domain Name System DNS DNSAPI.dll when it fails to properly handle DNS responses. An attacker who...

PT-2018-18546

Name of the Vulnerable Software and Affected Versions Windows 7 Windows Server 2008 Windows Server 2008 R2 Windows Server 2012 Windows Server 2012 R2 Windows Server 2016 Windows 8.1 Windows RT 8.1 Windows 10 Windows 10 Servers Description An elevation of privilege issue exists due to the Windows...

Remote Code Execution (RCE)

microsoft.chakracore is vulnerable to remote code execution. This happens because it does have correct GenerateBailOut calling patterns during compilation, causing memory corruption.This CVE ID is different from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798,...

Remote Code Execution (RCE)

microsoft.chakracore is vulnerable to remote code execution. When the RegexHelper::StringReplace calls the callback function, it does not mark it with an ImplicitCallFlag, allowing a malicious user to pass a function to be executed in certain cases.This CVE ID is different from CVE-2017-11792,...

Remote Code Execution (RCE)

microsoft.chakracore is vulnerable to remote code execution. This happens because it allows redeferral of functions during byte code generation.This CVE ID is different from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800,...

Remote Code Execution (RCE)

microsoft.chakracore is vulnerable to remote code execution. This happens due to the type confustion in FrameDisplay items that can lead to an Out-Of-Bound Read . This CVE ID is different from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799,...

Remote Code Execution (RCE)

microsoft.chakracore is vulnerable to remote code execution attacks. This can happen because it does not prevent the StackScriptFunction::BoxState::Box from accessing uninitialized pointers. This CVE ID is different from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797,...

Remote Code Execution (RCE)

microsoft.chakracore is vulnerable to remote code execution. This happens because the scripting engine does not properly handle the objects in memory if a non-int-type-specialized index operand on a switch table branch is used,causing memory corruption.This CVE ID is unique from CVE-2017-11792,...

Remote Code Execution (RCE)

microsoft.chakracore is vulnerable to remote code execution. This happens because the application attempts to index a detached ArrayBuffer, leading to a use-after-free that can allow RCE attacks. This CVE ID is different from CVE-2017-11886, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894,...

Remote Code Execution (RCE)

microsoft.chakracore is vulnerable to remote code execution. In inline.cpp, the OpMaxInAnArray and OpMinInAnArray functions are not prevented from calling user-defined javascript functions. This CVE ID is different from from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11894,...

Remote Code Execution (RCE)

microsoft.chakracore is vulnerable to remote code execution. This happens because it performs an invalid stack restore in Parse.h when destructuring is used. This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901,...

Remote Code Execution (RCE)

microsoft.chakracore is vulnerable to remote code execution. This happens because the RemoveEmptyLoopAfterMemOp function in BackwardPass.cpp does not properly insert branches. This CVE ID is different from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894,...

Remote Code Execution (RCE)

microsoft.chakracore is vulnerable to remote code execution RCE. This happens because it does not have ample InlineCache checks, leading to type confusion which allows an attacker to perform RCE. This CVE ID is different from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893,...

Remote Code Execution (RCE)

microsoft.chakracore is vulnerable to remote code execution. This happens because the SetupLocalVariables function in AsmJsModule.cpp fails to check whether a variable was previously used in the initializer, leading to out-of-bound reads which can allow an attacker to perform RCE. This CVE ID is...

Information Disclosure

microsoft.chakracore is affected by an information disclosure vulnerability which discloses the contents of its memory due an out-of-bounds read vulnerability in AppendLeftOverItemsFromEndSegment. This vulnerability only affects Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and...

Privilege Escalation

microsoft.chakracore is vulnerable to privilege escalation. The vulnerability exists because the compiler contains a bug during escape analysis, leading to privilege escalation. This CVE ID is different from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894,...

Remote Code Execution (RCE)

microsoft.chakracore is vulnerable to remote code execution. It exists because the CreateLabel function in IRBuilderAsmJs.cpp, does not properly check instrPrevparameter, causing memory corruption which allows attacker to trigger RCE. This CVE ID is different from CVE-2017-11886, CVE-2017-11889,...