Archive
12 December 2018
Vulnerabilities first published on this day (UTC), newest first.
81 results · Feed
-
Unscored —
The userfaultfd implementation in the Linux kernel before 4.19.7 mishandles access control for certain UFFDIO_ ioctl ca…
-
Unscored —
An information disclosure vulnerability exists in Windows kernel that could allow an attacker to retrieve information t…
-
Unscored —
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle …
-
High 7.5CVE-2018-8618 EPSS 11%
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…
-
Unscored —CVE-2018-8634 EPSS 15%
A remote code execution vulnerability exists in Windows where Microsoft text-to-speech fails to properly handle objects…
-
High 7.5CVE-2018-8583 EPSS 11%
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…
-
Unscored —
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially …
-
Unscored —CVE-2018-8636 EPSS 16%
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obj…
-
Unscored —
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Window…
-
Unscored —
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, ak…
-
Unscored —
A Denial Of Service vulnerability exists when Connected User Experiences and Telemetry Service fails to validate certai…
-
High 8.4
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…
KEV Mar 3, 2025 -
High 7.5CVE-2018-8624 EPSS 13%
ChakraCore Remote code execution Vulnerability
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…
-
Unscored —
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windo…
-
Unscored —
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersona…
-
Unscored —
A cross site scripting vulnerability exists when Microsoft Dynamics NAV does not properly sanitize a specially crafted …
-
Unscored —CVE-2018-8540 EPSS 22%
A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".…
-
Unscored —
A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in …
-
Unscored —
An information disclosure vulnerability exists when Remote Procedure Call runtime improperly initializes objects in mem…
-
Unscored —
A denial of service vulnerability exists when .NET Framework improperly handles special web requests, aka ".NET Framewo…
-
Unscored —
A remote code execution vulnerability exists when the Internet Explorer VBScript execution policy does not properly res…
-
Unscored —
A denial of service vulnerability exists when Windows improperly handles objects in memory, aka "Windows Denial of Serv…
-
High 7.8
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka …
KEV May 24, 2022 -
Unscored —
An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Serve…
-
Unscored —
An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Informat…
-
Unscored —CVE-2018-8597 EPSS 16%
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obj…
-
Unscored —
An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to an uninit…
-
Unscored —
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Interne…
-
Unscored —
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its …
-
Unscored —CVE-2018-8626 EPSS 21%
A remote code execution vulnerability exists in Windows Domain Name System (DNS) servers when they fail to properly han…
-
Unscored —
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its …
-
High 7.5
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…
-
Unscored —
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windo…
-
Unscored —
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windo…
-
Unscored —CVE-2018-8628 EPSS 16%
A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handl…
-
Unscored —
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…
-
Unscored —
A Cross-site Scripting (XSS) vulnerability exists when Windows Azure Pack does not properly sanitize user-provided inpu…
-
Unscored —
A tampering vulnerability exists when Microsoft Exchange Server fails to properly handle profile data, aka "Microsoft E…
-
High 7.5CVE-2018-8629 EPSS 23%
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…
-
Unscored —CVE-2018-10143 EPSS 25%
The Palo Alto Networks Expedition Migration tool 1.0.107 and earlier may allow an unauthenticated attacker with remote …