Page 25 of 763 results (0.007 seconds)

CVSS: 8.8EPSS: 29%CPEs: 16EXPL: 0

CVE-2017-0149 – Microsoft Internet Explorer Memory Corruption Vulnerability

https://notcve.org/view.php?id=CVE-2017-0149

17 Mar 2017 — Microsoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." This vulnerability is different from those described in CVE-2017-0018 and CVE-2017-0037. Microsoft Internet Explorer 9 hasta la versión 11 permiten a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria) a través de un sitio web manipulado... • http://www.securityfocus.com/bid/96724 • CWE-787: Out-of-bounds Write •

CVSS: 5.8EPSS: 1%CPEs: 5EXPL: 0

CVE-2017-0154

https://notcve.org/view.php?id=CVE-2017-0154

17 Mar 2017 — Microsoft Internet Explorer 11 on Windows 10, 1511, and 1606 and Windows Server 2016 does not enforce cross-domain policies, allowing attackers to access information from one domain and inject it into another via a crafted application, aka, "Internet Explorer Elevation of Privilege Vulnerability." Microsoft Internet Explorer 11 en Windows 10, 1511 y 1606 y Windows Server 2016 no impone las políticas entre dominios cruzados, permitiendo a atacantes acceder a información de un dominio e inyectarlo en otro a t... • http://www.securityfocus.com/bid/96766 • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') •

CVSS: 8.1EPSS: 87%CPEs: 2EXPL: 7

CVE-2017-0037 – Microsoft Edge and Internet Explorer Type Confusion Vulnerability

https://notcve.org/view.php?id=CVE-2017-0037

24 Feb 2017 — Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilder::HandleColumnBreakOnColumnSpanningElement function in mshtml.dll, which allows remote attackers to execute arbitrary code via vectors involving a crafted Cascading Style Sheets (CSS) token sequence and crafted JavaScript code that operates on a TH element. Microsoft Internet Explorer 10 y 11 y Microsoft Edge tienen un problema de tipo de confusión en la función Layout::MultiColumnBoxBuil... • https://packetstorm.news/files/id/143464 • CWE-704: Incorrect Type Conversion or Cast CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •

CVSS: 7.6EPSS: 84%CPEs: 2EXPL: 2

CVE-2016-7287 – Microsoft Edge - Internationalization Initialization Type Confusion (MS16-144)

https://notcve.org/view.php?id=CVE-2016-7287

20 Dec 2016 — The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability." Los motores de secuencias de comandos en Microsoft Internet Explorer 11 y Microsoft Edge permiten a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria) a través de un sitio web manipulado, vulnerabilidad ... • https://packetstorm.news/files/id/140251 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 5.3EPSS: 30%CPEs: 3EXPL: 0

CVE-2016-7278

https://notcve.org/view.php?id=CVE-2016-7278

20 Dec 2016 — Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Windows Hyperlink Object Library Information Disclosure Vulnerability." Microsoft Internet Explorer 9 hasta la versión 11 permite a atacantes remotos obtener información sensible desde la memoria de proceso a través de un sitio web manipulado, vulnerabilidad también conocida como "Windows Hyperlink Object Library Information Disclosure Vulnerability". • http://www.securityfocus.com/bid/94716 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 7.6EPSS: 66%CPEs: 4EXPL: 0

CVE-2016-7279

https://notcve.org/view.php?id=CVE-2016-7279

20 Dec 2016 — Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability." Microsoft Internet Explorer 9 hasta la versión 11 y Microsoft Edge permiten a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria) a través de un sitio web manipulado, vulnerabilidad también conocida como "Microsoft Bro... • http://www.securityfocus.com/bid/94719 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 5.3EPSS: 34%CPEs: 3EXPL: 0

CVE-2016-7281

https://notcve.org/view.php?id=CVE-2016-7281

20 Dec 2016 — The Web Workers implementation in Microsoft Internet Explorer 10 and 11 and Microsoft Edge allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Microsoft Browser Security Feature Bypass Vulnerability." La implementación Web Workers en Microsoft Internet Explorer 10 y 11 y Microsoft Edge permite a atacantes remotos eludir la Same Origin Policy a través de vectores no especificados, vulnerabilidad también conocida como "Microsoft Browser Security Feature Bypass Vulnerability.... • http://www.securityfocus.com/bid/94723 • CWE-254: 7PK - Security Features •

CVSS: 6.1EPSS: 1%CPEs: 4EXPL: 0

CVE-2016-7282

https://notcve.org/view.php?id=CVE-2016-7282

20 Dec 2016 — Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Microsoft Browser Information Disclosure Vulnerability." Vulnerabilidad de XSS en Microsoft Internet Explorer 9 hasta la versión 11 y Microsoft Edge permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarias a través de vectores no especificados, vulnerabilidad también conocida como "Micros... • http://www.securityfocus.com/bid/94724 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 9.3EPSS: 23%CPEs: 3EXPL: 0

CVE-2016-7283

https://notcve.org/view.php?id=CVE-2016-7283

20 Dec 2016 — Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Microsoft Internet Explorer 9 hasta la versión 11 permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria) a través de un sitio web manipulado, vulnerabilidad también conocida como "Internet Explorer Memory Corruption Vulnerability... • http://www.securityfocus.com/bid/94726 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 4.3EPSS: 41%CPEs: 2EXPL: 0

CVE-2016-7284

https://notcve.org/view.php?id=CVE-2016-7284

20 Dec 2016 — Microsoft Internet Explorer 10 and 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability." Microsoft Internet Explorer 10 y 11 permite a atacantes remotos obtener información sensible desde la memoria de proceso a través de un sitio web manipulado, vulnerabilidad también conocida como "Internet Explorer Information Disclosure Vulnerability". • http://www.securityfocus.com/bid/94725 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •