1635 matches found
CVE-2020-0824
Technical details for CVE-2020-0824 are not publicly provided in the connected documents. No vendor/version/exploit information is present here. Monitor for updates from official advisories to reveal affected components, impact, and fixes.
CVE-2007-1765
A stack buffer overflow vulnerability exists in the LoadAniIcon() function of USER32.dll within Microsoft Windows (including 2000 SP4, XP SP2, and XP 64-Bit Edition). A remote attacker can trigger memory corruption by providing a malformed .ANI file, which can be used to execute arbitrary code or...
CVE-2018-0772
Technical details for CVE-2018-0772 are not provided in the supplied Connected documents. Public details (affected products, exploit specifics, impact, or fixes) are not available here. Monitor for updates and new disclosures.
CVE-2010-0805
CVE-2010-0805 is an actively discussed vulnerability affecting the Internet Explorer Tabular Data Control ActiveX. The issue arises when a long DataURL parameter triggers a memory corruption inside CTDCCtl::SecurityCHeckDataURL, enabling remote code execution. Public material in connected docs co...
CVE-2013-0022
CVE-2013-0022 is a use-after-free vulnerability in Microsoft Internet Explorer 9 (LSGetTrailInfo) that could allow remote code execution via a crafted web site. Affected product: Internet Explorer 9. Root cause: use-after-free leading to access to a deleted object. Impact: high/critical, per CVSS...
CVE-2015-6146
The provided connected sources confirm a memory corruption vulnerability in Microsoft Internet Explorer versions 7 and 8. The root cause is memory access issues that allow remote attackers to execute arbitrary code or cause a denial of service when visiting a crafted webpage. CNVD-2015-08067 and ...
CVE-2016-1097
CVE-2016-1097 is a use-after-free vulnerability in Adobe Flash Player (affecting 21.0.0.213 and earlier) that, per connected sources, could lead to arbitrary code execution. Affected platforms include Windows, OS X, and Linux before the indicated patched builds (e.g., Linux before 11.2.202.621 an...
CVE-2016-1100
Technical details about CVE-2016-1100 are not publicly provided in the supplied documents. Monitor for updates on affected products, impact, and remediation.
CVE-2017-11827
CVE-2017-11827 is a memory corruption vulnerability in Microsoft Internet Explorer/Edge that could allow remote code execution with the current user’s privileges. The issue affects Internet Explorer and Edge components on Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, Win...
CVE-2017-11913
Technical details for CVE-2017-11913 are not provided in the supplied documents. Monitor for official updates for affected products, impact, and remediation.
CVE-2018-0981
Technical details for CVE-2018-0981 are not provided in the supplied documents. Monitoring for updates is recommended; the connected items do not illuminate affected products, root cause, or remediation in this set.
CVE-2019-1081
CVE-2019-1081 is an information disclosure vulnerability in affected Microsoft browsers caused by improper handling of objects in memory. Exploitation could allow an attacker to obtain information to further compromise the user’s system, typically via web-based attack scenarios (malicious sites o...
CVE-2019-1220
Technical details for CVE-2019-1220 are not publicly available in the provided documents. No explicit affected products, versions, impact, or remediation are provided here. Monitor for updates from official sources.
CVE-2019-1056
Technical details about CVE-2019-1056 are not publicly available in the provided Connected documents; no specifics on affected product/version or remediation are given. Monitor for updates.
CVE-2020-1012
CVE-2020-1012 is a Windows vulnerability tied to the WinINet API (listed in KB articles) with Elevation of Privilege impact. Publicly available connected docs confirm the affected component as WinINet API and indicate a security update is included in September 2020 rollups (e.g., KB4577015 and re...
CVE-2016-7284
CVE-2016-7284 concerns Microsoft Internet Explorer 10/11 information disclosure: a crafted website can cause the browser to reveal sensitive information from process memory. Affected products are Internet Explorer 10 and 11; no exploitation details are provided in the documents beyond the general...
CVE-2017-11858
CVE-2017-11858 is related to ChakraCore/Edge memory corruption via the scripting engine, enabling a user-rights gain by manipulating in-memory objects. Affected components include ChakraCore and Microsoft Edge on Windows 10 versions 1703/1709 and Windows Server equivalents, tied to how memory obj...
CVE-2018-8145
The CVE-2018-8145 entry describes an information-disclosure vulnerability in the Chakra Scripting Engine memory handling, affecting ChakraCore, Internet Explorer 11, Microsoft Edge, and IE10. The root cause is improper disclosure of memory contents, enabling an attacker to obtain sensitive data t...
CVE-2018-8452
CVE-2018-8452 is an information disclosure vulnerability reported in the scripting engine used by Microsoft browsers. The affected components cited in connected documents are ChakraCore, Internet Explorer 11, and Microsoft Edge, with the root cause described as improper handling of objects in mem...
CVE-2019-1193
CVE-2019-1193 is a remote code execution vulnerability in Microsoft browsers caused by memory corruption when handling objects in memory. Exploitation requires a user to browse a malicious website or open crafted content; an attacker could gain the user’s privileges and potentially take control o...
CVE-2020-1058
CVE-2020-1058 is a VBScript Engine Remote Code Execution vulnerability. Connected CNVD-2021-24007 ties this to Microsoft Internet Explorer, stating that the VBScript engine in IE versions 9 and 11 can be exploited via memory object handling to execute arbitrary code. The CVE entry references IE/V...
CVE-2010-0490
CVE-2010-0490 is an Uninitialized Memory Corruption vulnerability in Microsoft Internet Explorer (IE6, IE6 SP1, IE7, IE8) that could allow remote code execution when IE accesses an object that has not been properly initialized or has been deleted. Exploitation involves viewing a specially crafted...
CVE-2016-0192
CVE-2016-0192 affects Microsoft Internet Explorer 9–11 and Microsoft Edge. It is a remote code-execution/memory-corruption vulnerability that could allow an attacker to run arbitrary code on a vulnerable system by convincing a user to visit a crafted website. The root cause involves memory handli...
CVE-2018-0955
A remote code execution (RCE) vulnerability exists in the scripting engine of Internet Explorer (versions 9, 10, and 11) due to improper handling of objects in memory. This memory corruption flaw, specifically involving out-of-bounds operations, allows an attacker to execute arbitrary code via a ...
CVE-2020-1092
Technical details for CVE-2020-1092 are not publicly provided in the connected documents. The initial description covers memory corruption in IE, but no affected versions, vectors, or fixes are given here. Monitor for updates.
CVE-2009-2503
CVE-2009-2503 is a GDI+ memory corruption vulnerability in Microsoft components that can be triggered by a crafted TIFF image file, enabling remote code execution. The weakness resides in how GDI+ allocates memory when processing TIFFs, affecting a wide range of Windows and Office products listed...
CVE-2016-3204
CVE-2016-3204 involves a memory corruption vulnerability in Microsoft JScript 5.8/9 and VBScript 5.7/5.8 engines used by Internet Explorer 9–11 and related components. The flaw could allow remote code execution or a denial-of-service condition when a user visits a crafted website. Public details ...
CVE-2016-7241
CVE-2016-7241 concerns memory corruption in Microsoft Internet Explorer 11 and Microsoft Edge triggered by visiting a crafted website, leading to remote code execution or memory corruption-induced denial of service. The issue is attributed to memory corruption in the browser’s handling of certain...
CVE-2017-11834
CVE-2017-11834 affects Internet Explorer in Windows 7/8.x/10 and corresponding Server SKUs. The root cause is how the scripting engine handles objects in memory, leading to information disclosure that could help an attacker further compromise the system. The vulnerability is listed with CVE-2017-...
CVE-2017-8606
CVE-2017-8606 is described as a remote code execution vulnerability in Microsoft browsers (JavaScript engine) where memory objects mishandled during rendering could allow code execution in the context of the current user. The initial CVE entry lists multiple Windows versions affected. Connected d...
CVE-2018-0954
CVE-2018-0954 describes a remote code execution vulnerability in the scripting engine’s handling of in-memory objects that affects Microsoft browsers. Affected products include Internet Explorer 9/10/11, Edge, and ChakraCore. Root cause: memory/object handling flaw in the scripting engine leading...
CVE-2018-8631
CVE-2018-8631 is a remote code execution vulnerability in Microsoft Internet Explorer caused by improper access to objects in memory. Affects Internet Explorer 9, 10, and 11. The issue enables an attacker to execute arbitrary code on a vulnerable system, with attack vector over network and user i...
CVE-2019-0940
CVE-2019-0940 is a remote code‑execution vulnerability in Microsoft browsers caused by improper memory handling (memory buffer/ boundary validation) in Edge/Internet Explorer. The issue enables an attacker to execute arbitrary code by sending crafted content over the network, with user interactio...
CVE-2019-1221
CVE-2019-1221 is a remote code execution in the Internet Explorer scripting engine memory handling, leading to arbitrary code execution when an attacker can cause memory corruption. Affected software includes Internet Explorer 11 and related scripting components (including Chakra/VBScript-based p...
CVE-2020-0847
Technical details (affected products/versions/root cause/fix) for CVE-2020-0847 are not provided in connected documents; monitor for updates. The initial description confirms a VBScript RCE in the VBScript engine but lacks actionable specifics in the supplied materials.
CVE-2008-3014
CVE-2008-3014 is the GDI+ WMF Buffer Overrun vulnerability. A buffer overflow in gdiplus.dll (GDI+) allows remote code execution when processing a malformed WMF image, affecting multiple Windows and Office components listed in the description (e.g., Internet Explorer 6 SP1 on various Windows vers...
CVE-2012-1875
A use-after-free vulnerability in the mshtml.dll module of Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code by accessing deleted objects in memory, specifically when processing GetAtomTable objects. This flaw is bypassable despite ASLR and DEP protections. Affected ...
CVE-2014-4140
CVE-2014-4140 affects Microsoft Internet Explorer 8–11 and is a security-bypass via ASLR circumvention when visiting a crafted web site. The root cause is an ASLR protection bypass in IE, enabling remote attackers to bypass memory protections. Public exploitation exists, and multiple connected so...
CVE-2016-1109
CVE-2016-1109 affects Adobe Flash Player 21.0.0.213 and earlier (as used in IE/Edge). The vulnerability is described as a use-after-free issue in Flash handling, potentially allowing remote code execution via a specially crafted SWF file. Connected advisories confirm this as part of the Flash sec...
CVE-2016-3375
The CVE-2016-3375 entry describes a memory-corruption vulnerability in the Microsoft OLE Automation mechanism and VBScript Scripting Engine used by Internet Explorer. A remote attacker can craft a website to trigger memory corruption, potentially executing arbitrary code in the context of the log...
CVE-2017-0049
CVE-2017-0049 affects the VBScript engine in Internet Explorer 11 and is an information-disclosure vulnerability that lets a crafted website obtain sensitive data from process memory. The connected CNVD entry (CNVD-2017-03594) notes a Microsoft Internet Explorer Scripting Engine Information Discl...
CVE-2000-0465
Affected software: Internet Explorer 4.x and 5.x. Vulnerability: Frame Domain Verification — IE does not properly verify the domain of a frame within a browser window. Root cause/summary: Inadequate domain verification enables a remote attacker to access client files via the frame. Impact: Confid...
CVE-2004-1166
CVE-2004-1166 describes a CRLF injection vulnerability in Internet Explorer 6.0.2800.1106 and earlier where an ftp:// URL containing a URL-encoded newline ("%0a") before the FTP command can cause the FTP commands to be injected into the session (e.g., via PORT). The connected MS06-042 bulletin do...
CVE-2006-1359
A Remote Code Execution (RCE) and Denial of Service (DoS) vulnerability exists in Microsoft Internet Explorer 6 and 7 Beta 2 . The flaw is caused by a memory corruption issue where processing certain scripts that call methods on invalid HTML elements—specifically a createTextRange call on a check...
CVE-2015-1687
CVE-2015-1687 is a remote memory-corruption vulnerability in Microsoft Internet Explorer (IE) that affects IE 6–11. It can be exploited by convincing a user to view a crafted webpage, potentially allowing remote code execution or denial of service. Public exploit activity is noted for this family...
CVE-2017-0130
The CVE-2017-0130 entry covers a memory corruption vulnerability in the Scripting Engine of Microsoft Internet Explorer versions 9–11. According to the description, a crafted web site could cause memory corruption, enabling remote attackers to execute arbitrary code or cause a denial of service. ...
CVE-2017-11906
Technical details about CVE-2017-11906 (affected products, root cause, impact, remediation) are not publicly provided in the supplied documents. Monitor for vendor advisories and updates.
CVE-2019-1001
Technical details about CVE-2019-1001 are not provided in the connected documents. No specifics on affected products, versions, or fixes are available here; monitor for updates to reveal concrete technical information.
CVE-2019-1390
CVE-2019-1390 describes a remote code execution vulnerability in VBScript where the engine mishandles memory objects. The issue is triggered via memory object handling in VBScript, enabling an attacker to execute arbitrary code on affected systems. CVSSv3 vectors indicate network access with high...