Archive
10 October 2018
Vulnerabilities first published on this day (UTC), newest first.
110 results · Feed
-
High 7.5CVE-2018-8510 EPSS 14%
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…
-
High 7.5CVE-2018-8511 EPSS 14%
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…
-
Unscored —
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially …
-
Unscored —CVE-2018-8494 EPSS 22%
A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, ak…
-
Unscored —
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles obj…
-
Critical 9.8CVE-2018-8500 EPSS 18%
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore.
-
Unscored —
A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code in…
-
Unscored —
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input fro…
-
Unscored —CVE-2018-8509 EPSS 13%
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft …
-
Unscored —
An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA) fails to properly handl…
-
High 7.5CVE-2018-8503 EPSS 14%
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…
-
Unscored —CVE-2018-8265 EPSS 19%
A remote code execution vulnerability exists in the way Microsoft Exchange software parses specially crafted email mess…
-
Unscored —CVE-2018-8423 EPSS 32%
A remote code execution vulnerability exists in the Microsoft JET Database Engine, aka "Microsoft JET Database Engine R…
-
Unscored —
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially …
-
Unscored —
An information disclosure vulnerability exists when Windows Media Player improperly discloses file information, aka "Wi…
-
Unscored —
A security feature bypass vulnerability exists in Microsoft Edge when the Edge Content Security Policy (CSP) fails to p…
-
Unscored —
An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets, …
-
High 7.5CVE-2018-8505 EPSS 14%
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…
-
Unscored —CVE-2018-8411 Public exploit
An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vul…
-
Unscored —
An Elevation of Privilege vulnerability exists in Windows Subsystem for Linux when it fails to properly handle objects …
-
Unscored —CVE-2018-8473 EPSS 14%
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft …
-
Unscored —CVE-2018-8504 EPSS 20%
A remote code execution vulnerability exists in Microsoft Word software when the software fails to properly handle obje…
-
Unscored —CVE-2018-8531 EPSS 15%
A remote code execution vulnerability exists in the way that Azure IoT Hub Device Client SDK using MQTT protocol access…
-
Unscored —
An Elevation of Privilege vulnerability exists in Filter Manager when it improperly handles objects in memory, aka "Mic…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Windo…
-
High 7.5
Denial of Service in Bytom
In the client in Bytom before 1.0.6, checkTopicRegister in p2p/discover/net.go does not prevent negative idx values, leading to a crash.
-
Unscored —
The QLogic 4Gb Fibre Channel 5.5.2.6.0 and 4/8Gb SAN 7.10.1.20.0 modules for IBM BladeCenter have an undocumented suppo…
-
Unscored —
tinc 1.0.30 through 1.0.34 has a broken authentication protocol, although there is a partial mitigation. This is fixed …
-
Unscored —
tinc before 1.0.30 has a broken authentication protocol, without even a partial mitigation.
-
Unscored —
Missing message authentication in the meta-protocol in Tinc VPN version 1.0.34 and earlier allows a man-in-the-middle a…