Skip to content
OpenAdvisories

Archive

15 February 2018

Vulnerabilities first published on this day (UTC), newest first.

11 results · Clear filters · Feed

  • High 8.8

    Deserialization of Untrusted Data in Infinispan

    It was found that the Hotrod client in Infinispan before 9.2.0.CR1 would unsafely read deserialized data on information from the cache. An authenticated attacker could inject a malicious object into the data cache and attain deserialization on the client, and…

  • High 7.5
    CVE-2018-0856 EPSS 15%

    ChakraCore RCE Vulnerability

    Microsoft Edge and ChakraCore in Microsoft Windows 10 1703 and 1709 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834, CVE-…

  • High 7.5
    CVE-2018-0834 Public exploit EPSS 55%

    ChakraCore RCE Vulnerability

    Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This C…

  • High 7.5
    CVE-2018-0858 EPSS 15%

    ChakraCore RCE Vulnerability

    ChakraCore allows remote code execution, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834, CVE-2018-0835, CVE-2018-0836, CVE-2018-0837, CVE-2…

  • High 7.5
    CVE-2018-0857 EPSS 15%

    ChakraCore RCE Vulnerability

    Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This C…

  • High 7.5
    CVE-2018-0859 EPSS 18%

    ChakraCore RCE Vulnerability

    Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This C…

  • High 7.5
    CVE-2018-0860 Public exploit EPSS 68%

    ChakraCore RCE Vulnerability

    Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This C…

  • High 7.5
    CVE-2018-0836 EPSS 15%

    ChakraCore RCE Vulnerability

    Microsoft Edge and ChakraCore in Microsoft Windows 10 1703 and 1709 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834, CVE-…

  • High 7.5
    CVE-2018-0838 Public exploit EPSS 65%

    ChakraCore RCE Vulnerability

    Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This C…

  • High 7.5
    CVE-2018-0837 Public exploit EPSS 65%

    ChakraCore RCE Vulnerability

    Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This C…

  • High 7.5
    CVE-2018-0835 Public exploit EPSS 65%

    ChakraCore RCE Vulnerability

    Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This C…