Archive
May 2018
Vulnerabilities first published in this month (UTC), newest first.
1,164 results · Feed
-
Critical 9.8
In the MMM::Agent::Helpers::Network::send_arp function in MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1…
-
High 7.5
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018…
-
High 7.5CVE-2018-0954 EPSS 15%
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, ChakraCore, Internet Explorer 11, Microsoft…
-
Unscored —
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsof…
-
High 7.5CVE-2018-0943 EPSS 16%
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…
-
Unscored —CVE-2018-0959 Public exploit
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input fro…
-
Unscored —
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate vSMB pack…
-
Unscored —
A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Wi…
-
High 7.5CVE-2018-0945 EPSS 16%
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018…
-
Unscored —CVE-2018-0955 EPSS 16%
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…
-
High 7.5
Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents
A denial of service vulnerability exists when .NET and .NET Core improperly process XML documents, aka ".NET and .NET Core Denial of Service Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.7.…
-
Unscored —CVE-2018-0951 EPSS 16%
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsof…
-
Unscored —
A security feature bypass vulnerability exists in Windows Scripting Host which could allow an attacker to bypass Device…
-
High 7.5
A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized…
KEV Aug 5, 2024 -
Unscored —
An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft…
-
High 7.5CVE-2018-1022 EPSS 15%
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is…
-
Unscored —
A security feature bypass vulnerability exists in .Net Framework which could allow an attacker to bypass Device Guard, …
-
Unscored —
An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory, ak…
-
Unscored —
A spoofing vulnerability exists when the Azure IoT Device Provisioning AMQP Transport library improperly validates cert…
-
Unscored —CVE-2018-8136 EPSS 23%
A remote code execution vulnerability exists in the way that Windows handles objects in memory, aka "Windows Remote Cod…
-
Unscored —CVE-2018-8147 EPSS 24%
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obj…
-
Unscored —
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…
-
Unscored —
In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker on an adjacent network could perform command injection.
-
High 7.5
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018…
-
Unscored —
An information disclosure vulnerability exists when Microsoft Exchange improperly handles objects in memory, aka "Micro…
-
Unscored —
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles obj…
-
Unscored —CVE-2018-8158 EPSS 24%
A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle ob…
-
High 7.5CVE-2018-8130 EPSS 16%
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…
-
High 7.5
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Window…
KEV Feb 15, 2022 -
Unscored —
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially …
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows kernel image handles objects in memory, aka …
-
Unscored —
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…
-
Unscored —CVE-2018-8179 EPSS 14%
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft …
-
Unscored —CVE-2018-8154 EPSS 24%
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle …
-
Unscored —CVE-2018-8157 EPSS 24%
A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle ob…
-
High 7.5CVE-2018-8137 EPSS 16%
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018…
-
Unscored —
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially …
-
Unscored —CVE-2018-8173 EPSS 20%
A remote code execution vulnerability exists in Microsoft InfoPath when the software fails to properly handle objects i…
-
High 7.5
ChakraCore information disclosure vulnerability
An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user's computer or data, aka "Chakra Scripting Engine Memory Corruption Vuln…
-
Unscored —
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially …