Microsoft Windows Kernel CVE-2018-8313 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based...

KB4338820: Windows Server 2012 July 2018 Security Update

The remote Windows host is missing security update 4338820 or cumulative update 4338830. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists in Windows Domain Name System DNS DNSAPI.dll when it fails to properly handle DNS responses. An attacker who...

Remote Code Execution (RCE)

microsoft.chakracore is vulnerable to remote code execution. This happens because it does have correct GenerateBailOut calling patterns during compilation, causing memory corruption.This CVE ID is different from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798,...

Remote Code Execution (RCE)

microsoft.chakracore is vulnerable to remote code execution. When the RegexHelper::StringReplace calls the callback function, it does not mark it with an ImplicitCallFlag, allowing a malicious user to pass a function to be executed in certain cases.This CVE ID is different from CVE-2017-11792,...

Remote Code Execution (RCE)

microsoft.chakracore is vulnerable to remote code execution. This happens because it allows redeferral of functions during byte code generation.This CVE ID is different from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800,...

Remote Code Execution (RCE)

microsoft.chakracore is vulnerable to remote code execution. This happens due to the type confustion in FrameDisplay items that can lead to an Out-Of-Bound Read . This CVE ID is different from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799,...

Remote Code Execution (RCE)

microsoft.chakracore is vulnerable to remote code execution attacks. This can happen because it does not prevent the StackScriptFunction::BoxState::Box from accessing uninitialized pointers. This CVE ID is different from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797,...

Remote Code Execution (RCE)

microsoft.chakracore is vulnerable to remote code execution. This happens because the scripting engine does not properly handle the objects in memory if a non-int-type-specialized index operand on a switch table branch is used,causing memory corruption.This CVE ID is unique from CVE-2017-11792,...

Remote Code Execution (RCE)

microsoft.chakracore is vulnerable to remote code execution. This happens because the application attempts to index a detached ArrayBuffer, leading to a use-after-free that can allow RCE attacks. This CVE ID is different from CVE-2017-11886, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894,...

Remote Code Execution (RCE)

microsoft.chakracore is vulnerable to remote code execution. In inline.cpp, the OpMaxInAnArray and OpMinInAnArray functions are not prevented from calling user-defined javascript functions. This CVE ID is different from from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11894,...

Remote Code Execution (RCE)

microsoft.chakracore is vulnerable to remote code execution. This happens because it performs an invalid stack restore in Parse.h when destructuring is used. This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901,...

Remote Code Execution (RCE)

microsoft.chakracore is vulnerable to remote code execution. This happens because the RemoveEmptyLoopAfterMemOp function in BackwardPass.cpp does not properly insert branches. This CVE ID is different from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894,...

Remote Code Execution (RCE)

microsoft.chakracore is vulnerable to remote code execution RCE. This happens because it does not have ample InlineCache checks, leading to type confusion which allows an attacker to perform RCE. This CVE ID is different from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893,...

Remote Code Execution (RCE)

microsoft.chakracore is vulnerable to remote code execution. This happens because the SetupLocalVariables function in AsmJsModule.cpp fails to check whether a variable was previously used in the initializer, leading to out-of-bound reads which can allow an attacker to perform RCE. This CVE ID is...

Information Disclosure

microsoft.chakracore is affected by an information disclosure vulnerability which discloses the contents of its memory due an out-of-bounds read vulnerability in AppendLeftOverItemsFromEndSegment. This vulnerability only affects Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and...

Privilege Escalation

microsoft.chakracore is vulnerable to privilege escalation. The vulnerability exists because the compiler contains a bug during escape analysis, leading to privilege escalation. This CVE ID is different from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894,...

Remote Code Execution (RCE)

microsoft.chakracore is vulnerable to remote code execution. It exists because the CreateLabel function in IRBuilderAsmJs.cpp, does not properly check instrPrevparameter, causing memory corruption which allows attacker to trigger RCE. This CVE ID is different from CVE-2017-11886, CVE-2017-11889,...

Remote Code Execution (RCE) Via Memory Corruption

microsoft.chakracore is vulnerable to remote code execution via memory corruption vulnerability. This happens when an attacker inputs a large numeric or spread array literal to ByteCodeGenerator, leading to an out-of-bounds write. This CVE ID is different from CVE-2017-11886, CVE-2017-11889,...

Taking apart a double zero-day sample discovered in joint hunt with ESET

In late March 2018, I analyzed an interesting PDF sample found by ESET senior malware researcherAnton Cherepanov. The sample was initially reported to Microsoft as a potential exploit for an unknown Windows kernel vulnerability. During my investigation in parallel with ESET researchers, I was...

Release Notes for Veeam Backup & Replication 9.5 Update 3a

More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Challenge Release Notes for Veeam Backup Replication 9.5 Update 3a Cause Please confirm that you are running version 9.5.0.580, 9.5.0.711, 9.5.0.802, 9.5.0.823,...