1635 matches found
CVE-2020-1058
CVE-2020-1058 is a VBScript Engine Remote Code Execution vulnerability. Connected CNVD-2021-24007 ties this to Microsoft Internet Explorer, stating that the VBScript engine in IE versions 9 and 11 can be exploited via memory object handling to execute arbitrary code. The CVE entry references IE/V...
CVE-2008-3014
CVE-2008-3014 is the GDI+ WMF Buffer Overrun vulnerability. A buffer overflow in gdiplus.dll (GDI+) allows remote code execution when processing a malformed WMF image, affecting multiple Windows and Office components listed in the description (e.g., Internet Explorer 6 SP1 on various Windows vers...
CVE-2017-11858
CVE-2017-11858 is related to ChakraCore/Edge memory corruption via the scripting engine, enabling a user-rights gain by manipulating in-memory objects. Affected components include ChakraCore and Microsoft Edge on Windows 10 versions 1703/1709 and Windows Server equivalents, tied to how memory obj...
CVE-2017-11894
CVE-2017-11894 affects ChakraCore and certain Windows components (including Internet Explorer and Edge on Windows 7/8.1/Server 2008/2012 and Windows 10 releases) due to how the scripting engine handles in-memory objects. The vulnerability allows an attacker to gain the same user rights as the cur...
CVE-2020-0847
Technical details (affected products/versions/root cause/fix) for CVE-2020-0847 are not provided in connected documents; monitor for updates. The initial description confirms a VBScript RCE in the VBScript engine but lacks actionable specifics in the supplied materials.
CVE-2010-0805
CVE-2010-0805 is an actively discussed vulnerability affecting the Internet Explorer Tabular Data Control ActiveX. The issue arises when a long DataURL parameter triggers a memory corruption inside CTDCCtl::SecurityCHeckDataURL, enabling remote code execution. Public material in connected docs co...
CVE-2018-0954
CVE-2018-0954 describes a remote code execution vulnerability in the scripting engine’s handling of in-memory objects that affects Microsoft browsers. Affected products include Internet Explorer 9/10/11, Edge, and ChakraCore. Root cause: memory/object handling flaw in the scripting engine leading...
CVE-2018-0981
Technical details for CVE-2018-0981 are not provided in the supplied documents. Monitoring for updates is recommended; the connected items do not illuminate affected products, root cause, or remediation in this set.
CVE-2019-1193
CVE-2019-1193 is a remote code execution vulnerability in Microsoft browsers caused by memory corruption when handling objects in memory. Exploitation requires a user to browse a malicious website or open crafted content; an attacker could gain the user’s privileges and potentially take control o...
CVE-2020-0824
Technical details for CVE-2020-0824 are not publicly provided in the connected documents. No vendor/version/exploit information is present here. Monitor for updates from official advisories to reveal affected components, impact, and fixes.
CVE-2009-2504
CVE-2009-2504 corresponds to MS09-062: multiple remote code execution vulnerabilities in Windows GDI+ exposed via GDI+ APIs used by .NET Framework and Office components. The issue stems from integer overflows/buffer handling in GDI+, enabling remote code execution when rendering crafted images in...
CVE-2016-7153
CVE-2016-7153 describes a vulnerability in the HTTP/2 protocol where the TCP congestion window is not considered when determining content length, potentially enabling an attacker to obtain cleartext data by leveraging a web browser configuration that sends third‑party cookies (HEIST). The connect...
CVE-2018-8631
CVE-2018-8631 is a remote code execution vulnerability in Microsoft Internet Explorer caused by improper access to objects in memory. Affects Internet Explorer 9, 10, and 11. The issue enables an attacker to execute arbitrary code on a vulnerable system, with attack vector over network and user i...
CVE-2019-1221
CVE-2019-1221 is a remote code execution in the Internet Explorer scripting engine memory handling, leading to arbitrary code execution when an attacker can cause memory corruption. Affected software includes Internet Explorer 11 and related scripting components (including Chakra/VBScript-based p...
CVE-2020-1092
Technical details for CVE-2020-1092 are not publicly provided in the connected documents. The initial description covers memory corruption in IE, but no affected versions, vectors, or fixes are given here. Monitor for updates.
CVE-2006-1359
CVE-2006-1359 affects Microsoft Internet Explorer 6/7 Beta 2 and relates to a vulnerability in createTextRange() on checkbox objects, which can lead to remote denial of service and potentially arbitrary code execution via dereferencing an invalid table pointer. Multiple sources tie this to MS06-0...
CVE-2015-6146
The provided connected sources confirm a memory corruption vulnerability in Microsoft Internet Explorer versions 7 and 8. The root cause is memory access issues that allow remote attackers to execute arbitrary code or cause a denial of service when visiting a crafted webpage. CNVD-2015-08067 and ...
CVE-2017-0049
CVE-2017-0049 affects the VBScript engine in Internet Explorer 11 and is an information-disclosure vulnerability that lets a crafted website obtain sensitive data from process memory. The connected CNVD entry (CNVD-2017-03594) notes a Microsoft Internet Explorer Scripting Engine Information Discl...
CVE-2019-1220
Technical details for CVE-2019-1220 are not publicly available in the provided documents. No explicit affected products, versions, impact, or remediation are provided here. Monitor for updates from official sources.
CVE-2020-1012
CVE-2020-1012 is a Windows vulnerability tied to the WinINet API (listed in KB articles) with Elevation of Privilege impact. Publicly available connected docs confirm the affected component as WinINet API and indicate a security update is included in September 2020 rollups (e.g., KB4577015 and re...
CVE-2009-2503
CVE-2009-2503 is a GDI+ memory corruption vulnerability in Microsoft components that can be triggered by a crafted TIFF image file, enabling remote code execution. The weakness resides in how GDI+ allocates memory when processing TIFFs, affecting a wide range of Windows and Office products listed...
CVE-2016-1097
CVE-2016-1097 is a use-after-free vulnerability in Adobe Flash Player (affecting 21.0.0.213 and earlier) that, per connected sources, could lead to arbitrary code execution. Affected platforms include Windows, OS X, and Linux before the indicated patched builds (e.g., Linux before 11.2.202.621 an...
CVE-2016-7241
CVE-2016-7241 concerns memory corruption in Microsoft Internet Explorer 11 and Microsoft Edge triggered by visiting a crafted website, leading to remote code execution or memory corruption-induced denial of service. The issue is attributed to memory corruption in the browser’s handling of certain...
CVE-2017-11903
CVE-2017-11930 is linked to ChakraCore/Edge memory-corruption issues described as a remote code execution risk when handling objects in memory. Affected software includes ChakraCore and Windows/Microsoft Edge across multiple Windows versions; the vulnerability arises from scripting engine object ...
CVE-2017-11906
Technical details about CVE-2017-11906 (affected products, root cause, impact, remediation) are not publicly provided in the supplied documents. Monitor for vendor advisories and updates.
CVE-2018-0772
Technical details for CVE-2018-0772 are not provided in the supplied Connected documents. Public details (affected products, exploit specifics, impact, or fixes) are not available here. Monitor for updates and new disclosures.
CVE-2019-0940
CVE-2019-0940 is a remote code‑execution vulnerability in Microsoft browsers caused by improper memory handling (memory buffer/ boundary validation) in Edge/Internet Explorer. The issue enables an attacker to execute arbitrary code by sending crafted content over the network, with user interactio...
CVE-2020-1432
CVE-2020-1432 is an information-disclosure vulnerability affecting Skype for Business when accessed through Internet Explorer. The CNVD entry describes IE11 as the affected component and notes exploitation could enable an attacker to obtain user information via a specially crafted URL (e.g., a ph...
CVE-2007-1765
CVE-2007-1765 refers to a remote code execution/DoS vulnerability in Microsoft Windows (Windows 2000 SP4 through Vista) via a malformed ANI file that corrupts memory while processing cursors/animated cursors/icons in LoadAniIcon() of USER32.dll. Connected sources identify this as MS07-017 (RIFF/A...
CVE-2010-3971
CVE-2010-3971 stems from a use-after-free in the mshtml.dll CSS parser (CSharedStyleSheet::Notify) when encountering a recursive CSS @import. The vulnerability affects Internet Explorer versions that used mshtml (notably IE6–IE8) and can allow remote code execution or a crash via memory corruptio...
CVE-2016-0192
CVE-2016-0192 affects Microsoft Internet Explorer 9–11 and Microsoft Edge. It is a remote code-execution/memory-corruption vulnerability that could allow an attacker to run arbitrary code on a vulnerable system by convincing a user to visit a crafted website. The root cause involves memory handli...
CVE-2016-3204
CVE-2016-3204 involves a memory corruption vulnerability in Microsoft JScript 5.8/9 and VBScript 5.7/5.8 engines used by Internet Explorer 9–11 and related components. The flaw could allow remote code execution or a denial-of-service condition when a user visits a crafted website. Public details ...
CVE-2016-3211
CVE-2016-3211 and related entries describe memory corruption vulnerabilities in Microsoft Internet Explorer 9–11 that allow remote code execution or denial of service via crafted web sites. Connected sources tie CVE-2016-0199 (IE9–11) and CVE-2016-0200 to an IE11 garbage collector/attribute type ...
CVE-2016-3375
The CVE-2016-3375 entry describes a memory-corruption vulnerability in the Microsoft OLE Automation mechanism and VBScript Scripting Engine used by Internet Explorer. A remote attacker can craft a website to trigger memory corruption, potentially executing arbitrary code in the context of the log...
CVE-2017-8606
CVE-2017-8606 is described as a remote code execution vulnerability in Microsoft browsers (JavaScript engine) where memory objects mishandled during rendering could allow code execution in the context of the current user. The initial CVE entry lists multiple Windows versions affected. Connected d...
CVE-2019-1133
CVE-2019-1133 is a remote code execution vulnerability in the Internet Explorer scripting engine caused by memory handling flaws. An attacker could craft a web page or content that leverages the scripting engine to corrupt memory and run arbitrary code with the current user’s privileges, potentia...
CVE-2000-0465
Affected software: Internet Explorer 4.x and 5.x. Vulnerability: Frame Domain Verification — IE does not properly verify the domain of a frame within a browser window. Root cause/summary: Inadequate domain verification enables a remote attacker to access client files via the frame. Impact: Confid...
CVE-2016-1109
CVE-2016-1109 affects Adobe Flash Player 21.0.0.213 and earlier (as used in IE/Edge). The vulnerability is described as a use-after-free issue in Flash handling, potentially allowing remote code execution via a specially crafted SWF file. Connected advisories confirm this as part of the Flash sec...
CVE-2017-8547
CVE-2017-8547 affects Internet Explorer across Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1/RT 8.1, and Windows Server 2012/2012 R2. The vulnerability stems from Internet Explorer improperly accessing objects in memory, allowing an attacker to execute arbitrary code in the context of th...
CVE-2018-0955
CVE-2018-0955 is a remote code execution vulnerability in the Internet Explorer scripting engine related to how objects are handled in memory. Affected products: Internet Explorer 9, 10, and 11. Root cause described as memory corruption within the scripting engine. Exploit details are not provide...
CVE-2018-8145
The CVE-2018-8145 entry describes an information-disclosure vulnerability in the Chakra Scripting Engine memory handling, affecting ChakraCore, Internet Explorer 11, Microsoft Edge, and IE10. The root cause is improper disclosure of memory contents, enabling an attacker to obtain sensitive data t...
CVE-2020-0706
Technical details for CVE-2020-0706 are not publicly provided in the connected documents; monitor for updates and rely on the NVD description for a general overview.
CVE-2010-1262
CVE-2010-1262 affects Microsoft Internet Explorer 6 SP1/SP2, 7, and 8, allowing remote code execution through memory corruption involving the CStyleSheet object and a free of the root container. The issue was addressed by MS10-035, a cumulative security update for Internet Explorer, which resolve...
CVE-2012-1875
CVE-2012-1875 affects Internet Explorer 8. The issue is a memory corruption vulnerability in IE8 when handling objects with the same ID property, allowing a remote attacker to execute arbitrary code by accessing a deleted object. Public exploit activity exists (e.g., Metasploit module for MS12-03...
CVE-2016-1102
CVE-2016-1102 is described as an unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Flash libraries in Internet Explorer 10/11 and Microsoft Edge, with unknown impact and attack vectors. It is noted as a different vulnerability than other CVEs listed in MS16-06...
CVE-2016-3384
CVE-2016-3384 affects Microsoft Internet Explorer 9–11 and corresponds to memory-corruption when rendering a crafted webpage, leading to remote code execution or memory exhaustion as described by the connected records. The vulnerability is tied to IE memory-corruption behavior disclosed in MS16-1...
CVE-2017-8517
CVE-2017-8517 affects Microsoft browsers in Windows platforms (Windows 7/8.1/10, Windows Server 2008R2-2016, etc.) where the JavaScript engine memory handling can trigger arbitrary code execution. The root cause is memory handling in the scripting engine failing to render objects in memory, enabl...
CVE-2004-1050
CVE-2004-1050 affects Internet Explorer 6. A heap-based buffer overflow occurs when parsing long NAME or SRC attributes in IFRAME/FRAME/EMBED elements, allowing remote code execution. Exploitation typically involves loading a crafted page; CVSS notes high risk (network exploit, no user interactio...
CVE-2015-2486
CVE-2015-2486 affects Microsoft Internet Explorer 7–11 and Microsoft Edge. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service through a crafted web site, via memory corruption. Connected documents corroborate a MS15-095-related fix in Edge/IE and refe...