CVE Vulnerability Catalog

Internet Explorer in Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012 and R2, Windows 10, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to how Internet Explorer handles objects in memory.

A vulnerability in the ChakraCore scripting engine and Internet Explorer and Microsoft Edge in various versions of Windows allows an attacker to gain the same user rights as the current user. The issue arises from improper handling of objects in memory by the scripting engine.

ChakraCore and Windows 10 versions 1511, 1607, 1703, 1709, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability'.

ChakraCore and Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016 have a vulnerability that allows an attacker to execute arbitrary code in the context of the current user due to improper handling of objects in memory by the scripting engine.

ChakraCore and Windows 10 (versions 1511, 1607, 1703, 1709) and Windows Server 2016 have a vulnerability that allows an attacker to execute arbitrary code in the context of the current user. The issue arises from how the scripting engine handles objects in memory.

ChakraCore and Windows 10 version 1709 allow an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability'.

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, as well as Windows 10 and Windows Server 2016, allows an attacker to gain the same user rights as the current user due to improper handling of objects in memory. This is known as 'Scripting Engine Memory Corruption Vulnerability'.

ChakraCore and Microsoft Edge in Windows 10 (1511, 1607, 1703, 1709) and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability'.

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user due to how Internet Explorer handles objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability'.

Internet Explorer in Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012 and R2, Windows 10, and Windows Server 2016 has a vulnerability that allows an attacker to gain the same user rights as the current user. The issue arises from how Internet Explorer handles objects in memory.

ChakraCore and Internet Explorer in Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012 R2, and Microsoft Edge in Windows 10 allow an attacker to gain the same user rights as the current user due to how the scripting engine handles objects in memory.

ChakraCore and Internet Explorer in various versions of Windows have a vulnerability that allows an attacker to gain the same user rights as the current user. The issue arises from improper handling of objects in memory by the scripting engine.

ChakraCore and Microsoft Edge in Windows 10 (1511, 1607, 1703, 1709) and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability'.

A vulnerability in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012 and R2, Windows 10, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user. The issue arises from how Internet Explorer handles objects in memory.

ChakraCore and Microsoft Edge in Windows 10 and Windows Server 2016 have a vulnerability that allows an attacker to execute arbitrary code in the context of the current user. The issue arises from improper handling of objects in memory by the scripting engine.

A vulnerability in Microsoft Edge allows an attacker to execute arbitrary code in the context of the current user due to improper handling of objects in memory.

A vulnerability in Microsoft Windows allows an attacker to execute arbitrary code in the context of the current user due to how Internet Explorer handles objects in memory. This affects multiple versions of Windows, including Windows 7, 8.1, and 10.

A 'Type Confusion' vulnerability in the Content Protection HECI Service in Intel Graphics Driver allows an unprivileged user to elevate privileges via local access.

SeaCMS version 6.56 allows remote authenticated administrators to execute arbitrary PHP code via a crafted token field to admin/admin_ping.php, which interacts with data/admin/ping.php.