Vulnerability & Exploit Database

Displaying entries 221 - 230 of 125504 in total

Microsoft CVE-2018-0741: Microsoft Color Management Information Disclosure Vulnerability Vulnerability

  • Severity: 3
  • Published: January 02, 2018

An information disclosure vulnerability exists in the way that the Color Management Module (ICM32.dll) handles objects in memory. This vulnerability allows an attacker to retrieve information to bypass usermode ASLR (Address Space Layout Randomization) on a targeted system. By itself, the information disclosure does not allow arbitrary c...

Microsoft CVE-2018-0748: Windows Elevation of Privilege Vulnerability Vulnerability

  • Severity: 5
  • Published: January 02, 2018

An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions. An attacker who successfully exploited the vulnerability could impersonate processes, interject cross-process communication, or interrupt system functionality. To exploit the vulnerability, a locally authenticated attacker could ru...

Microsoft CVE-2018-0754: OpenType Font Driver Information Disclosure Vulnerability Vulnerability

  • Severity: 2
  • Published: January 02, 2018

An information disclosure vulnerability exists in Windows Adobe Type Manager Font Driver (ATMFD.dll) when it fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could potentially read data that was not intended to be disclosed. Note that this vulnerability would not allow an attacker to ...

Microsoft CVE-2018-0753: Windows IPSec Denial of Service Vulnerability Vulnerability

  • Severity: 7
  • Published: January 02, 2018

A denial of service vulnerability exists in the way that Windows handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system to stop responding. Note that the denial of service condition would not allow an attacker to execute code or to elevate user privileges. However, the denial of se...

Microsoft CVE-2018-0803: Microsoft Edge Elevation of Privilege Vulnerability Vulnerability

  • Severity: 6
  • Published: January 02, 2018

An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain. In a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability. I...

Microsoft CVE-2018-0767: Scripting Engine Information Disclosure Vulnerability Vulnerability

  • Severity: 3
  • Published: January 02, 2018

An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. In a web-based attack scenario, an attacker could host a website in an attempt to...

Microsoft CVE-2018-0778: Scripting Engine Memory Corruption Vulnerability Vulnerability

  • Severity: 8
  • Published: January 02, 2018

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same ...

Microsoft CVE-2018-0769: Scripting Engine Memory Corruption Vulnerability Vulnerability

  • Severity: 8
  • Published: January 02, 2018

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same ...