Page 46 of 1742 results (0.008 seconds)

CVSS: 7.6EPSS: 95%CPEs: 16EXPL: 1

CVE-2017-8641 – Microsoft Chakra eval Integer Overflow Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2017-8641

Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, and CVE-2017-8674. Los navegadores Microsoft en Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permiten que un atacante ejecute código arbitrario en el contexto del usuario actual debido a la forma en la que los motores JavaScript de los navegadores Microsoft renderizan cuando gestiona objetos en la memoria. Esto también se conoce como "Scripting Engine Memory Corruption Vulnerability". Este ID CVE es exclusivo de CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, y CVE-2017-8674. • https://www.exploit-db.com/exploits/42465 http://www.securityfocus.com/bid/100057 http://www.securitytracker.com/id/1039095 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8641 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 7.6EPSS: 89%CPEs: 4EXPL: 1

CVE-2017-8594 – Microsoft Internet Explorer 11.0.9600.18617 - 'CMarkup::DestroySplayTree' Memory Corruption

https://notcve.org/view.php?id=CVE-2017-8594

Internet Explorer on Microsoft Windows 8.1 and Windows RT 8.1, and Windows Server 2012 R2 allows an attacker to execute arbitrary code in the context of the current user when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability". Internet Explorer en Microsoft Windows versión 8.1 y Windows RT versión 8.1, y Windows Server 2012 R2, permite que un atacante ejecute código arbitrario en el contexto del usuario actual cuando Internet Explorer accede inapropiadamente a objetos en la memoria, también se conoce como "Internet Explorer Memory Corruption Vulnerability". Microsoft Internet Explorer suffers from a memory corruption vulnerability in CMarkup::DestroySplayTree. The bug was confirmed on IE version 11.0.9600.18617 (Update version 11.0.40) running on Windows 7 64-bit. • https://www.exploit-db.com/exploits/42336 http://www.securityfocus.com/bid/99401 https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8594 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 6.5EPSS: 0%CPEs: 11EXPL: 0

CVE-2017-8602

https://notcve.org/view.php?id=CVE-2017-8602

Microsoft browsers on Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow a spoofing vulnerability in the way they parse HTTP content, aka "Microsoft Browser Spoofing Vulnerability." Los navegadores Microsoft en Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016 permiten una vulnerabilidad de suplantación debido a la forma en la que analizan sintácticamente el contenido HTTP. Esto también se conoce como "Microsoft Browser Spoofing Vulnerability". • http://www.securityfocus.com/bid/99390 http://www.securitytracker.com/id/1038859 http://www.securitytracker.com/id/1038860 https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8602 • CWE-20: Improper Input Validation •

CVSS: 7.6EPSS: 7%CPEs: 16EXPL: 0

CVE-2017-8606

https://notcve.org/view.php?id=CVE-2017-8606

Microsoft browsers in Microsoft Windows 7, Windows Server 2008 and R2, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engines fail to render when handling objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8598, CVE-2017-8596, CVE-2017-8618, CVE-2017-8619, CVE-2017-8610, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8595, CVE-2017-8607, CVE-2017-8608, and CVE-2017-8609 Los navegadores Microsoft en Microsoft Windows 7, Windows Server 2008 and R2, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016 permiten que un atacante ejecute código arbitrario en el contexto del usuario actual cuando los motores JavaScript fracasan a la hora de representarse cuando gestionan objetos en la memoria. Esto también se conoce como "Scripting Engine Memory Corruption Vulnerability". El ID de este CVE es diferente de CVE-2017-8598, CVE-2017-8596, CVE-2017-8618, CVE-2017-8619, CVE-2017-8610, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8595, CVE-2017-8607, CVE-2017-8608 y CVE-2017-8609. • http://www.securityfocus.com/bid/99408 http://www.securitytracker.com/id/1038848 http://www.securitytracker.com/id/1038849 https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8606 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 6.5EPSS: 0%CPEs: 28EXPL: 0

CVE-2017-8592

https://notcve.org/view.php?id=CVE-2017-8592

Microsoft browsers on when Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, and Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow a security feature bypass vulnerability when they improperly handle redirect requests, aka "Microsoft Browser Security Feature Bypass". Los navegadores de Microsoft en Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1 y Windows Server 2012 y R2, Windows 10 versiones Gold, 1511, 1607 y 1703, y Windows Server 2016, permiten una vulnerabilidad de omisión de la característica de seguridad cuando manejan inapropiadamente las peticiones de redireccionamiento, también se conoce como "Microsoft Browser Security Feature Bypass". • http://www.securityfocus.com/bid/99396 http://www.securitytracker.com/id/1038859 http://www.securitytracker.com/id/1038860 https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8592 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •