Archive
13 September 2018
Vulnerabilities first published on this day (UTC), newest first.
104 results · Feed
-
Unscored —
An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppCon…
-
Unscored —
An information disclosure vulnerability exists when the Microsoft Edge Fetch API incorrectly handles a filtered respons…
-
Medium 4.3
ChakraCore information disclosure vulnerability
An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft browsers, aka "Scripting Engine Information Disclosure Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Ed…
-
Unscored —
A security feature bypass vulnerability exists when Windows Subsystem for Linux improperly handles case sensitivity, ak…
-
Unscored —CVE-2018-8393 EPSS 22%
A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on a…
-
Unscored —CVE-2018-8332 EPSS 19%
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedde…
-
Unscored —CVE-2018-8421 EPSS 29%
A remote code execution vulnerability exists when Microsoft .NET Framework processes untrusted input, aka ".NET Framewo…
-
High 7.5
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…
-
Unscored —
A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly valid…
-
High 7.5CVE-2018-8456 EPSS 15%
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8354, …
-
Unscored —CVE-2018-8392 EPSS 23%
A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on a…
-
Unscored —
An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka "Windows …
-
Unscored —
A denial of service vulnerability exists in the Microsoft Server Block Message (SMB) when an attacker sends specially c…
-
Unscored —CVE-2018-8475 EPSS 16%
A remote code execution vulnerability exists when Windows does not properly handle specially crafted image files, aka "…
-
Unscored —
An elevation of privilege vulnerability exists when Windows, allowing a sandbox escape, aka "Windows Elevation of Privi…
-
High 7.5
Denial of service in ASP.NET Core
A denial of service vulnerability exists when OData Library improperly handles web requests, aka "OData Denial of Service Vulnerability." This affects Microsoft.Data.OData.
-
Medium 4.2
ChakraCore information disclosure vulnerability
An information disclosure vulnerability exists when the browser scripting engine improperly handle object types, aka "Microsoft Scripting Engine Information Disclosure Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Exp…
-
Unscored —CVE-2018-8461 EPSS 13%
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Interne…
-
High 7.5
Denial of service vulnerability exists when System.IO.Pipelines improperly handles requests
A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka "System.IO.Pipelines Denial of Service." This affects .NET Core 2.1, System.IO.Pipelines, ASP.NET Core 2.1.
-
Unscored —CVE-2018-8430 EPSS 23%
A remote code execution vulnerability exists in Microsoft Word if a user opens a specially crafted PDF file, aka "Word …
-
Unscored —
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially …
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Windo…
-
Unscored —CVE-2018-8410 Public exploit
An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memor…
-
Unscored —CVE-2018-8464 EPSS 43%
An remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka …