1635 matches found
CVE-2009-0550
CVE-2009-0550 impacts Windows HTTP Services (WinHTTP) and WinINet used by Internet Explorer, on Windows 2000 SP4, XP SP2/SP3, Server 2003, Vista, and Server 2008; the vulnerability allows an attacker-controlled remote web server to capture NTLM credentials and replay them, and to execute arbitrar...
CVE-2017-11791
CVE-2017-11791 is described in the provided documents as an information-disclosure vulnerability affecting the scripting engine in ChakraCore/Internet Explorer. The vulnerability arises from how objects are handled in memory and is reported for Internet Explorer and ChakraCore components on Windo...
CVE-2017-11930
CVE-2017-11930 affects ChakraCore and related Windows components (Internet Explorer). The core issue is a memory-handling flaw in the scripting engine that can lead to arbitrary code execution in the context of the current user. Descriptions in connected advisories frame this as a “Scripting Engi...
CVE-2019-1208
CVE-2019-1208 is a VBScript engine use-after-free vulnerability in Internet Explorer. The CVE describes a UAF in how VBScript handles in-memory objects, enabling remote code execution under the current user when the vulnerability is triggered (e.g., via a crafted web page or ActiveX elements). Co...
CVE-2020-1062
CVE-2020-1062 is an Internet Explorer remote code execution/memory-corruption vulnerability. Connected docs confirm IE versions affected include IE 9 and IE 11, with root cause described as improper access to memory objects. Public details in CNVD entries reiterate IE RCE for IE9/11, aligning wit...
CVE-2020-1403
Technical details about CVE-2020-1403 are not provided in the connected documents; no specific products, root cause, impact, or remediation are listed here. Monitor for updates.
CVE-2016-3353
CVE-2016-3353 affects Microsoft Internet Explorer 9–11. The vulnerability arises because IE mishandles .url shortcut files from the Internet zone, enabling a security feature bypass that could bypass access restrictions via a crafted file and is described as the Internet Explorer Security Feature...
CVE-2018-0762
CVE-2018-0762 concerns memory corruption in Microsoft scripting engines used by Internet Explorer/Edge. Connected reports focus on CVE-2018-0770 (Edge scripting engine memory corruption) as the active remote code execution vulnerability: the issue arises from how the scripting engine handles obje...
CVE-2018-0891
The vulnerability is a ChakraCore/information-disclosure issue in the scripting engine. Public details show that ChakraCore and related components in Microsoft Edge/IE could disclose memory-resident objects due to scripting engine memory handling, affecting ChakraCore-based runtimes and Edge/IE o...
CVE-2019-0918
Technical details (affected product, vulnerable component, impact, fixes) are not publicly available in the provided documents. Monitor for updates from official sources.
CVE-2017-8741
CVE-2017-8741 affects Internet Explorer/Edge rendering engines in Windows platforms; the vulnerability arises from how scripting engines render objects in memory, enabling an attacker to execute arbitrary code in the context of the current user. The Nessus-derived details describe a remote-code-e...
CVE-2008-3013
CVE-2008-3013 corresponds to a GDI+ GIF parsing vulnerability. The connected KB954593 (MS08-052) describes remote code execution in Windows GDI+ when a user views a specially crafted GIF, affecting multiple Windows versions and Office components. The underlying issue is memory corruption during G...
CVE-2013-3886
CVE-2013-3886 affects Microsoft Internet Explorer 9 and 10. The vulnerability is a memory-corruption flaw exploitable via a crafted web site, allowing remote code execution or a denial of service. The issue is addressed by MS13-080 (CVE-2013-3886 is one of multiple IE vulnerabilities resolved by ...
CVE-2019-1238
Technical details about CVE-2019-1238 are not provided in the connected documents. The initial description lacks further specifics; monitor for updates from official sources.
CVE-2009-2502
CVE-2009-2502 is a GDI+ TIFF buffer overflow vulnerability that could allow remote code execution when processing a specially crafted TIFF image. The vulnerability affects multiple Microsoft products enabled via Internet Explorer 6 SP1, various Windows and Office suites, Viewer components, and re...
CVE-2015-1666
CVE-2015-1666 is a Microsoft Internet Explorer memory‑corruption vulnerability affecting IE6–IE11 that can allow remote code execution via a crafted web page. The connected documents confirm the vulnerability exists (shared with CVE-2015-1652 as a different issue) and note related advisories (e.g...
CVE-2017-11837
CVE-2017-11837 affects ChakraCore/Edge scripting engine memory handling. Root cause: memory corruption when manipulating JavaScript objects in memory, enabling an attacker to execute code with the current user’s privileges. Affected products include ChakraCore and Microsoft Edge on Windows 10 (17...
CVE-2017-11895
CVE-2017-11930 concerns ChakraCore/Edge up through Windows 10 and Windows Server 2016, caused by memory handling in the scripting engine that can permit code execution in the context of the current user. The related advisories describe a “Scripting Engine Memory Corruption Vulnerability” with rem...
CVE-2017-11919
CVE-2017-11919 affects ChakraCore and Internet Explorer in multiple Windows versions (Windows 7 SP1, Server 2008 R2 SP1, 8.1/RT 8.1, 2012 R2, 10 (various builds), and Edge). Root cause: vulnerability in the scripting engine due to how it handles objects in memory, leading to information disclosur...
CVE-2018-0866
Technical details for CVE-2018-0866 are not publicly available in the provided documents. Connected advisories describe ChakraCore-related issues unrelated to this CVE. Monitor for updates.
CVE-2019-0783
Technical details about CVE-2019-0783 are not publicly available in the provided Connected documents. Monitor for updates.
CVE-2019-1357
Technical details are not publicly available in the provided documents. No information on affected products, versions, root cause, or remediation is provided. Action: monitor for updates.
CVE-2020-17058
CVE-2020-17058 is described as a Microsoft Browser Memory Corruption Vulnerability. The available details show a memory corruption flaw in the Microsoft Browser, with impact on confidentiality, integrity, and availability rated HIGH (CVSS v3.1: AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H). The vulnerabil...
CVE-2013-1312
CVE-2013-1312 affects Microsoft Internet Explorer 9 and 10. The vulnerability is a use-after-free in mshtml/CDOMTextNode where an in-memory object that has been deleted is accessed via a crafted web page, leading to remote code execution. Exploitation requires the user to visit a malicious page o...
CVE-2017-8618
CVE-2017-8618 affects Internet Explorer across multiple Windows versions, describing memory corruption in scripting engines when handling objects in memory (VBScript/JavaScript rendering). The root cause is how the scripting engines render in memory, enabling remote code execution when a user vis...
CVE-2018-0949
CVE-2018-0949 is a security feature bypass affecting Microsoft Internet Explorer (IE9, IE10, IE11) caused by improper handling of UNC resource requests. Multiple sources (NVD and OpenVAS feeds) corroborate a vulnerability class described as an Internet Explorer Security Feature Bypass Vulnerabili...
CVE-2019-0680
Technical details for CVE-2019-0680 are not present in the provided documents; no affected products, root cause, impact, or fixes are disclosed here. Monitor for updates.
CVE-2019-0988
CVE-2019-0988 describes a remote code execution in the Microsoft scripting engine used by Internet Explorer and related browser components. The vulnerability arises from memory handling in the scripting engine, allowing an attacker to run arbitrary code with the current user’s privileges if a use...
CVE-2019-1485
CVE-2019-1485 maps to a remote code execution via the VBScript engine in Microsoft Internet Explorer (IE 9–11). The CNVD entry describes memory object handling in the VBScript engine as the root cause, enabling arbitrary code execution in the context of the current user when processing crafted VB...
CVE-2014-0310
Technical details for CVE-2014-0310 are not provided in the connected documents. The available sources describe IE memory-corruption vulnerabilities in general; monitor for updates and verify against official advisories for specifics (affected versions, root cause, fix).
CVE-2016-7195
CVE-2016-7195 affects Microsoft Internet Explorer 9–11 and Microsoft Edge, exposing memory corruption via a crafted webpage that can lead to remote code execution or memory DO S. This entry is closely tied to CVE-2016-7198 (a different vulnerability with the same attack surface) and is corroborat...
CVE-2017-11846
CVE-2017-11846 affects ChakraCore and Edge/IE scripting engine in Windows 7 SP1, Windows Server 2008/2008 R2, 8.1, 10 (various builds), and Windows Server 2012/2012 R2, with memory handling in the scripting engine leading to memory corruption. The vulnerability could allow an attacker to execute ...
CVE-2017-11912
CVE-2017-11912 is a ChakraCore scripting engine memory corruption vulnerability affecting ChakraCore, IE/Edge on Windows platforms listed in the Initial document. Connected sources describe remote code execution risk due to memory object handling, enabling an attacker to run code in the context o...
CVE-2018-0889
The CVE-2018-0889 entry concerns Microsoft Edge on Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016, where remote code execution is possible due to how the Scripting Engine handles objects in memory (Scripting Engine Memory Corruption Vulnerability). Affected component is Edge’s ...
CVE-2019-1194
The CVE-2019-1194 entry concerns a memory corruption vulnerability in the Microsoft Internet Explorer scripting engine. The issue could allow remote code execution with the attacker gaining the same user rights as the current user, potentially taking full control of the affected system if the use...
CVE-2019-0764
Technical details for CVE-2019-0764 are not publicly available in the provided documents. The materials reference general browser tampering and unrelated Windows KB updates; monitor for future updates for affected products, components, and remediation.
CVE-2020-1060
CVE-2020-1060 is a remote code execution vulnerability in the VBScript engine related to how it handles objects in memory. The CVE entry notes it is distinct from CVE-2020-1035, CVE-2020-1058, and CVE-2020-1093. The provided documents do not specify affected products/versions beyond referencing t...
CVE-2002-0862
CVE-2002-0862 concerns the CryptoAPI in Microsoft products (Windows 98 through XP; Office for Mac; IE for Mac; Outlook Express for Mac). The issue: the CertGetCertificateChain, CertVerifyCertificateChainPolicy, and WinVerifyTrust APIs fail to properly verify the Basic Constraints of intermediate ...
CVE-2009-2504
CVE-2009-2504 corresponds to MS09-062: multiple remote code execution vulnerabilities in Windows GDI+ exposed via GDI+ APIs used by .NET Framework and Office components. The issue stems from integer overflows/buffer handling in GDI+, enabling remote code execution when rendering crafted images in...
CVE-2016-1100
Technical details about CVE-2016-1100 are not publicly provided in the supplied documents. Monitor for updates on affected products, impact, and remediation.
CVE-2017-11887
CVE-2017-11906 is described across multiple sources as an information disclosure vulnerability in Microsoft Internet Explorer caused by improper handling of memory objects in the scripting engine. Affected software includes Internet Explorer on Windows platforms listed in the CVE description (Win...
CVE-2018-8619
CVE-2018-8619 is a remote code execution vulnerability in Internet Explorer tied to VBScript execution policy not properly restricting VBScript under certain conditions. Affected: IE 9, 10, and 11. Root cause: VBScript execution policy insufficiently restrictive, enabling code execution via craft...
CVE-2018-8643
CVE-2018-8643 relates to a memory corruption vulnerability in the Internet Explorer scripting engine. Affected products include IE9, IE10, and IE11, with remote code execution potential due to how memory objects are handled. The issue is documented across several feeds (CVE and related records); ...
CVE-2019-1081
CVE-2019-1081 is an information disclosure vulnerability in affected Microsoft browsers caused by improper handling of objects in memory. Exploitation could allow an attacker to obtain information to further compromise the user’s system, typically via web-based attack scenarios (malicious sites o...
CVE-2019-1133
CVE-2019-1133 is a remote code execution vulnerability in the Internet Explorer scripting engine caused by memory handling flaws. An attacker could craft a web page or content that leverages the scripting engine to corrupt memory and run arbitrary code with the current user’s privileges, potentia...
CVE-2020-1058
CVE-2020-1058 is a VBScript Engine Remote Code Execution vulnerability. Connected CNVD-2021-24007 ties this to Microsoft Internet Explorer, stating that the VBScript engine in IE versions 9 and 11 can be exploited via memory object handling to execute arbitrary code. The CVE entry references IE/V...
CVE-2020-1432
CVE-2020-1432 is an information-disclosure vulnerability affecting Skype for Business when accessed through Internet Explorer. The CNVD entry describes IE11 as the affected component and notes exploitation could enable an attacker to obtain user information via a specially crafted URL (e.g., a ph...
CVE-2016-3326
CVE-2016-3326 is an information-disclosure vulnerability affecting Microsoft Internet Explorer (IE9–IE11) and Edge, arising from how the browser handles objects in memory when processing crafted web content. The issue could allow remote attackers to obtain sensitive data via a malicious page. Aff...
CVE-2017-11827
CVE-2017-11827 is a memory corruption vulnerability in Microsoft Internet Explorer/Edge that could allow remote code execution with the current user’s privileges. The issue affects Internet Explorer and Edge components on Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, Win...