A zip slip vulnerability in XINJE XD/E Series PLC Program Tool up to version v3.5.1 can provide an attacker with arbitrary file write privilege when opening a specially-crafted project file. This vulnerability can be triggered by manually opening an infected project file or by initiating an upload program request from an infected Xinje PLC. This can result in remote code execution information disclosure and denial of service of the system running the XINJE XD/E Series PLC Program Tool.


Certain HP Print devices may be vulnerable to potential information disclosure denial of service or remote code execution.

remote code execution
information disclosure
denial of service


An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT packet can cause an arbitrary out-of-bounds memory read and write potentially resulting in information disclosure denial of service and remote code execution. An attacker needs to send a specially crafted MQTT packet over the network to trigger this vulnerability.


Information

Exposure

vulnerability

in

eXtplorer

makes

the

/usr/

and

system

directories

world-accessible

over

HTTP.

Introduced

in

the

Makefile

patch

file

debian/patches/debian-changes-2.1.0b6+dfsg-1

or

this

can

lead

to

data

leakage

information

disclosure

and

potentially

remote

code

execution

on

the

web

server.

This

issue

affects

all

versions

of

eXtplorer

in

Ubuntu

and

Debian

remote code execution
information disclosure
information exposure


In Delta Industrial Automation DOPSoft Version 4.00.06.15 and prior processing a specially crafted project file may trigger multiple out-of-bounds read vulnerabilities which may allow information disclosure remote code execution or crash of the application.

remote code execution
information disclosure
out of bound read


An issue was discovered in PHOENIX CONTACT PC Worx through 1.86 PC Worx Express through 1.86 and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to an Out-Of-Bounds Read Information Disclosure and remote code execution. The attacker needs to get access to an original PC Worx or Config+ project file to be able to manipulate it. After manipulation the attacker needs to exchange the original file with the manipulated one on the application programming workstation.


Squid through 4.14 and 5.x through 5.0.5 in some configurations allows information disclosure because of an out-of-bounds read in WCCP protocol data. This can be leveraged as part of a chain for remote code execution as nobody.


A Out-Of-Bounds Read/Write Vulnerability in Autodesk FBX Review version 1.4.0 may lead to remote code execution through maliciously crafted DLL files or information disclosure.


Insufficient input validation in the config builder of the Elastic search module could lead to remote code execution in Magento 2.1 prior to 2.1.18 Magento 2.2 prior to 2.2.9 Magento 2.3 prior to 2.3.2. This vulnerability could be abused by an authenticated user with the ability to configure the catalog search.

remote code execution
insufficient input validation


An integer overflow in process_bin_sasl_auth function in Memcached which is responsible for authentication commands of Memcached binary protocol can be abused to cause heap overflow and lead to remote code execution.


An integer overflow in the process_bin_append_prepend function in Memcached which is responsible for processing multiple commands of Memcached binary protocol can be abused to cause heap overflow and lead to remote code execution.


Multiple integer overflows in process_bin_update function in Memcached which is responsible for processing multiple commands of Memcached binary protocol can be abused to cause heap overflow and lead to remote code execution.


In libAACdec there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112663886


In libFDK there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112891546


In libAACdec there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112661742


In libMpegTPDec there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112662270


In libAACdec there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112662995


In libAACdec there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112661610


In libAACdec there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112661835


In libAACdec there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112663384


In libAACdec there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112892194


In libAACdec there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112661893


In libFDK there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112661057


In libmediaextractor there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111921829


In libMpegTPDec there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112661348


In MPEG4Extractor there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution in the media extractor with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111792351


In libAACdec there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112661356


In libAACdec there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112890225


In libAACdec there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112890242


Redis is an open source (BSD licensed) in-memory data structure store used as a database cache and message broker. An integer overflow bug in Redis version 6.0 or newer could be exploited using the `STRALGO LCS` command to corrupt the heap and potentially result with remote code execution. The problem is fixed in version 6.2.3 and 6.0.13. An additional workaround to mitigate the problem without patching the redis-server executable is to use ACL configuration to prevent clients from using the `STRALGO LCS` command.


Redis is an open source (BSD licensed) in-memory data structure store used as a database cache and message broker. An integer overflow bug in Redis 6.2 before 6.2.3 could be exploited to corrupt the heap and potentially result with remote code execution. Redis 6.0 and earlier are not directly affected by this issue. The problem is fixed in version 6.2.3. An additional workaround to mitigate the problem without patching the `redis-server` executable is to prevent users from modifying the `set-max-intset-entries` configuration parameter. This can be done using ACL to restrict unprivileged users from using the `CONFIG SET` command.


Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 contains a remote code execution vulnerability because of an Integer Overflow. An attacker with network access to port 31016 may exploit this issue to execute code with unrestricted privileges on the underlying OS.


In Scanner::LiteralBuffer::NewCapacity of scanner.cc there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if an attacker can supply a malicious PAC file with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-168041375


In osi_malloc and osi_calloc of allocator.cc there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-197868577


In setRange of ABuffer.cpp there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-179046129


Certain D-Link Edimax NETGEAR TP-Link Tenda and Western Digital devices are affected by an integer overflow by an unauthenticated attacker. Remote code execution from the WAN interface (TCP port 20005) cannot be ruled out; however exploitability was judged to be of \rather significant complexity\ but not \impossible.\ The overflow is in SoftwareBus_dispatchNormalEPMsgOut in the KCodes NetUSB kernel module. Affected NETGEAR devices are D7800 before 1.0.1.68 R6400v2 before 1.0.4.122 and R6700v3 before 1.0.4.122.


Due to Manage Engine Asset Explorer Agent 1.0.34 not validating HTTPS certificates an attacker on the network can statically configure their IP address to match the Asset Explorer's Server IP address. This will allow an attacker to send a NEWSCAN request to a listening agent on the network as well as receive the agent's HTTP request verifying its authtoken. In httphandler.cpp the agent reaching out over HTTP is vulnerable to an Integer Overflow which can be turned into a Heap Overflow allowing for remote code execution as NT AUTHORITY/SYSTEM on the agent machine. The Integer Overflow occurs when receiving POST response from the Manage Engine server and the agent calling \HttpQueryInfoW\ in order to get the \Content-Length\ size from the incoming POST request. This size is taken but multiplied to a larger amount. If an attacker specifies a Content-Length size of 1073741823 or larger this integer arithmetic will wrap the value back around to smaller integer then calls \calloc\ with this size to allocate memory. The following API \InternetReadFile\ will copy the POST data into this buffer which will be too small for the contents and cause heap overflow.


Redis is an open source in-memory database that persists on disk. In affected versions an integer overflow bug in Redis can be exploited to corrupt the heap and potentially result with remote code execution. The vulnerability involves changing the default proto-max-bulk-len and client-query-buffer-limit configuration parameters to very large values and constructing specially crafted very large stream elements. The problem is fixed in Redis 6.2.6 6.0.16 and 5.0.14. For users unable to upgrade an additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from modifying the proto-max-bulk-len configuration parameter. This can be done using ACL to restrict unprivileged users from using the CONFIG SET command.


Redis is an open source in-memory database that persists on disk. An integer overflow bug affecting all versions of Redis can be exploited to corrupt the heap and potentially be used to leak arbitrary contents of the heap or trigger remote code execution. The vulnerability involves changing the default set-max-intset-entries configuration parameter to a very large value and constructing specially crafted commands to manipulate sets. The problem is fixed in Redis versions 6.2.6 6.0.16 and 5.0.14. An additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from modifying the set-max-intset-entries configuration parameter. This can be done using ACL to restrict unprivileged users from using the CONFIG SET command.


Redis is an open source (BSD licensed) in-memory data structure store used as a database cache and message broker. An integer overflow bug in Redis version 6.0 or newer could be exploited using the STRALGO LCS command to corrupt the heap and potentially result with remote code execution. This is a result of an incomplete fix by CVE-2021-29477. The problem is fixed in version 6.2.4 and 6.0.14. An additional workaround to mitigate the problem without patching the redis-server executable is to use ACL configuration to prevent clients from using the STRALGO LCS command. On 64 bit systems which have the fixes of CVE-2021-29477 (6.2.3 or 6.0.13) it is sufficient to make sure that the proto-max-bulk-len config parameter is smaller than 2GB (default is 512MB).


Redis is an open source in-memory database that persists on disk. An integer overflow bug in the ziplist data structure used by all versions of Redis can be exploited to corrupt the heap and potentially result with remote code execution. The vulnerability involves modifying the default ziplist configuration parameters (hash-max-ziplist-entries hash-max-ziplist-value zset-max-ziplist-entries or zset-max-ziplist-value) to a very large value and then constructing specially crafted commands to create very large ziplists. The problem is fixed in Redis versions 6.2.6 6.0.16 5.0.14. An additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from modifying the above configuration parameters. This can be done using ACL to restrict unprivileged users from using the CONFIG SET command.


Passing an attacker controlled size when creating an IOBuf could cause integer overflow leading to an out of bounds write on the heap with the possibility of remote code execution. This issue affects versions of folly prior to v2021.07.22.00. This issue affects HHVM versions prior to 4.80.5 all versions between 4.81.0 and 4.102.1 all versions between 4.103.0 and 4.113.0 and versions 4.114.0 4.115.0 4.116.0 4.117.0 4.118.0 and 4.118.1.


The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example this can be triggered by an unrelated self-signed CA certificate sent by an initiator. Remote code execution cannot occur.


The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator but this is not done correctly. Remote code execution might be a slight possibility.


Integer overflow conditions that exist in Trend Micro ServerProtect 6.0/5.8 Information Server could allow a remote attacker to crash the process or achieve remote code execution.


An exploitable integer overflow vulnerability exists in the tiff_image_parse functionality of Gdk-Pixbuf 2.36.6 when compiled with Clang. A specially crafted tiff file can cause a heap-overflow resulting in remote code execution. An attacker can send a file or a URL to trigger this vulnerability.


In SkSampler::Fill of SkSampler.cpp there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-78354855


In AMediaCodecCryptoInfo_new of NdkMediaCodec.cpp there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code execution in external apps with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-111603051


In ihevcd_parse_sei_payload of ihevcd_parse_headers.c there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.0 Android ID: A-65484460


In nDPI through 3.2 Stable the SSH protocol dissector has multiple KEXINIT integer overflows that result in a controlled remote heap overflow in concat_hash_string in ssh.c. Due to the granular nature of the overflow primitive and the ability to control both the contents and layout of the nDPI library's heap memory through remote input this vulnerability may be abused to achieve full Remote Code Execution against any network inspection stack that is linked against nDPI and uses it to perform network traffic analysis.


In libstagefright there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-116718596


In SPDIFEncoder::writeBurstBufferBytes and related methods of SPDIFEncoder.cpp there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-8.0 Android-8.1Android ID: A-160265164


In NewFixedDoubleArray of factory.cc there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-150706594


In ihevcd_parse_slice_header of ihevcd_parse_slice_header.c there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-143826590


In aes_cmac of aes_cmac.cc there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution in the bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-151155194


In exif_entry_get_value of exif-entry.c there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if a third party app used this library to process remote image data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-159625731


Integer overflow in Microsoft Internet Explorer 8 and 9 JScript 5.8 and VBScript 5.8 on 64-bit platforms allows remote attackers to execute arbitrary code by leveraging an incorrect size calculation during object copying aka \JavaScript Integer Overflow Remote Code Execution Vulnerability.\

remote code execution
integer overflow
arbitrary code execution


In Teeworlds 0.7.2 there is an integer overflow in CDataFileReader::Open() in engine/shared/datafile.cpp that can lead to a buffer overflow and possibly remote code execution because size-related multiplications are mishandled.

remote code execution
integer overflow
buffer overflow


The restore_tqb_pixels function in hevc_filter.c in libavcodec as used in libbpg 0.9.8 and other products has an integer overflow that leads to a heap-based buffer overflow and remote code execution.


An issue was discovered in the client side of Zoho ManageEngine Desktop Central 10.0.0.SP-534. An attacker-controlled server can trigger an integer overflow in InternetSendRequestEx and InternetSendRequestByBitrate that leads to a heap-based buffer overflow and Remote Code Execution with SYSTEM privileges.


An issue was discovered in the client side of Zoho ManageEngine Desktop Central 10.0.552.W. An attacker-controlled server can trigger an integer overflow in InternetSendRequestEx and InternetSendRequestByBitrate that leads to a heap-based buffer overflow and Remote Code Execution with SYSTEM privileges. This issue will occur only when untrusted communication is initiated with server. In cloud Agent will always connect with trusted communication.


LAquis SCADA Versions 4.1.0.3870 and prior has several integer overflow to buffer overflow vulnerabilities which may allow remote code execution.


FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function gdi_Bitmap_Decompress() and results in a memory corruption and probably even a remote code execution.

remote code execution
integer overflow
buffer overflow
memory corruption


rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in function process_bitmap_updates() and results in a memory corruption and probably even a remote code execution.


rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in the function rdp_in_unistr() and results in memory corruption and possibly even a remote code execution.


Redis is an in-memory database that persists on disk. A vulnerability involving out-of-bounds read and integer overflow to buffer overflow exists starting with version 2.2 and prior to versions 5.0.13 6.0.15 and 6.2.5. On 32-bit systems Redis `*BIT*` command are vulnerable to integer overflow that can potentially be exploited to corrupt the heap leak arbitrary heap contents or trigger remote code execution. The vulnerability involves changing the default `proto-max-bulk-len` configuration parameter to a very large value and constructing specially crafted commands bit commands. This problem only affects Redis on 32-bit platforms or compiled as a 32-bit binary. Redis versions 5.0.`3m 6.0.15 and 6.2.5 contain patches for this issue. An additional workaround to mitigate the problem without patching the `redis-server` executable is to prevent users from modifying the `proto-max-bulk-len` configuration parameter. This can be done using ACL to restrict unprivileged users from using the CONFIG SET command.

remote code execution
integer overflow
buffer overflow
out of bound read


Avira Antivirus engine versions before 8.3.36.60 allow remote code execution as NT AUTHORITY\\SYSTEM via a section header with a very large relative virtual address in a PE file causing an integer overflow and heap-based buffer underflow.

remote code execution
integer overflow
buffer underflow


In CalculateInstanceSizeForDerivedClass of objects.cc there is possible memory corruption due to an integer overflow. This could lead to remote code execution in the proxy auto-config with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9 Android ID: A-117556220

remote code execution
integer overflow
memory corruption


cmark-gfm is GitHub's extended version of the C reference implementation of CommonMark. Prior to versions 0.29.0.gfm.3 and 0.28.3.gfm.21 an integer overflow in cmark-gfm's table row parsing `table.c:row_from_string` may lead to heap memory corruption when parsing tables who's marker rows contain more than UINT16_MAX columns. The impact of this heap corruption ranges from Information Leak to Arbitrary Code Execution depending on how and where `cmark-gfm` is used. If `cmark-gfm` is used for rendering remote user controlled markdown this vulnerability may lead to Remote Code Execution (RCE) in applications employing affected versions of the `cmark-gfm` library. This vulnerability has been patched in the following cmark-gfm versions 0.29.0.gfm.3 and 0.28.3.gfm.21. A workaround is available. The vulnerability exists in the table markdown extensions of cmark-gfm. Disabling the table extension will prevent this vulnerability from being triggered.


An exploitable integer overflow vulnerability exists in the xls_preparseWorkSheet function of libxls 1.4 when handling a MULRK record. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability.


An exploitable integer overflow vulnerability exists in the xls_appendSST function of libxls 1.4.A specially crafted XLS file can cause memory corruption resulting in remote code execution.


An exploitable integer overflow vulnerability exists in the xls_preparseWorkSheet function of libxls 1.4 when handling a MULBLANK record. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability.


rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to an Out-Of-Bounds Write in function process_bitmap_updates() and results in a memory corruption and possibly even a remote code execution.


An Improper Input Validation vulnerability in the Product Update feature of Bitdefender Endpoint Security Tools for Linux allows a man-in-the-middle attacker to abuse the DownloadFile function of the Product Update to achieve remote code execution. This issue affects: Bitdefender Endpoint Security Tools for Linux versions prior to 6.2.21.155.


The Lenovo Service Framework Android application uses a set of nonsecure credentials when performing integrity verification of downloaded applications and/or data. This exposes the application to man-in-the-middle attacks leading to possible remote code execution.


The Lenovo Service Framework Android application accepts some responses from the server without proper validation. This exposes the application to man-in-the-middle attacks leading to possible remote code execution.


The DuoLingo TinyCards application before 1.0 for Android has one use of unencrypted HTTP which allows remote attackers to spoof content and consequently achieve remote code execution via a man-in-the-middle attack.


Samsung Galaxy Apps before 4.4.01.7 allows modification of the hostname used for load balancing on installations of applications through a man-in-the-middle attack. An attacker may trick Galaxy Apps into using an arbitrary hostname for which the attacker can provide a valid SSL certificate and emulate the API of the app store to modify existing apps at installation time. The specific flaw involves an HTTP method to obtain the load-balanced hostname that enforces SSL only after obtaining a hostname from the load balancer and a missing app signature validation in the application XML. An attacker can exploit this vulnerability to achieve Remote Code Execution on the device. The Samsung ID is SVE-2018-12071.


A design issue was discovered in GetInternetRequestHandle InternetSendRequestEx and InternetSendRequestByBitrate in the client side of Zoho ManageEngine Desktop Central 10.0.552.W and Remote Access Plus before 10.1.2119.1. By exploiting this issue an attacker-controlled server can force the client to skip TLS certificate validation leading to a man-in-the-middle attack against HTTPS and unauthenticated remote code execution.


An off-by-one error in the Zephyr project MQTT packet length decoder can result in memory corruption and possible remote code execution. NCC-ZEP-031 This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions.


FreeRDP prior to version 2.0.0-rc4 contains an Out-Of-Bounds Write of up to 4 bytes in function nsc_rle_decode() that results in a memory corruption and possibly even a remote code execution.


In HAliasAnalyzer.Query of hydrogen-alias-analysis.h there is possible memory corruption due to type confusion. This could lead to remote code execution from a malicious proxy configuration with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-117606285.


In btm_proc_smp_cback of tm_ble.cc there is a possible memory corruption due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-120612744.


The HTTP service in quickweb.exe in Pablo Quick 'n Easy Web Server 3.3.8 allows Remote Unauthenticated Heap Memory Corruption via a large host or domain parameter. It may be possible to achieve remote code execution because of a double free.


FTPGetter Standard v.5.97.0.177 allows remote code execution when a user initiates an FTP connection to an attacker-controlled machine that sends crafted responses. Long responses can also crash the FTP client with memory corruption.


In on_l2cap_data_ind of btif_sock_l2cap.cc there is possible memory corruption due to a use after free. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-175686168


Memory corruption in Gemalto's HASP SRM Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 might cause remote code execution.


An exploitable out-of-bounds vulnerability exists in the xls_addCell function of libxls 1.4. A specially crafted XLS file with a formula record can cause memory corruption resulting in remote code execution. An attacker can send a malicious XLS file to trigger this vulnerability.


A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1. Android ID: A-33864300.


A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process.Product: Android. Versions: 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-34064500.


A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1. Android ID: A-34097866.


A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 7.0 7.1.1. Android ID: A-32589224.


A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1. Android ID: A-33351708.


A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1. Android ID: A-33818500.


A remote code execution vulnerability in libmpeg2 in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-35219737.


A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. This affects the libhevc library. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1. Android ID: A-32915871.


The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 does not properly scan a specially crafted file leading to memory corruption aka \Microsoft Malware Protection Engine Remote Code Execution Vulnerability.\


A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. This affects the libhevc library. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1. Android ID: A-32873375.


A remote code execution vulnerability in FLACExtractor.cpp in libstagefright in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 4.4.4 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-34970788.


A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1. Android ID: A-33641588.


A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1. Android ID: A-33934721.


A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1. Android ID: A-33450635.


A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1. Android ID: A-33816782.


A remote code execution vulnerability in Surfaceflinger could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Surfaceflinger process. Product: Android. Versions: 7.0 7.1.1. Android ID: A-31960359.


A remote code execution vulnerability in id3/ID3.cpp in libstagefright in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 4.4.4 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-34618607.


A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-35039946.


A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1. Android ID: A-33250932.


A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1. Android ID: A-33966031.


A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1. Android ID: A-33982658.


A remote code execution vulnerability in sonivox in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 4.4.4 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1. Android ID: A-34031018.


A remote code execution vulnerability in AOSP Messaging could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as High due to the possibility of remote code execution within the context of an unprivileged process. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1. Android ID: A-33388925.


A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1. Android ID: A-33862021.


A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-34897036.


A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-34097672.


A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1. Android ID: A-33139050.


An exploitable Out-of-bounds Write vulnerability exists in the xls_addCell function of libxls 2.0. A specially crafted xls file can cause a memory corruption resulting in remote code execution. An attacker can send malicious xls file to trigger this vulnerability.


An exploitable out-of-bounds write vulnerability exists in the read_MSAT function of libxls 1.4. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability.


An exploitable out-of-bounds write vulnerability exists in the xls_mergedCells function of libxls 1.4. . A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability.


The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 Microsoft Exchange Server 2013 and 2016 does not properly scan a specially crafted file leading to memory corruption. aka \Microsoft Malware Protection Engine Remote Code Execution Vulnerability\ a different vulnerability than CVE-2017-8540 and CVE-2017-8541.


The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 Microsoft Exchange Server 2013 and 2016 does not properly scan a specially crafted file leading to memory corruption. aka \Microsoft Malware Protection Engine Remote Code Execution Vulnerability\ a different vulnerability than CVE-2017-8538 and CVE-2017-8541.


The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on 32-bit versions of Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 1607 and 1703 does not properly scan a specially crafted file leading to memory corruption. aka \Microsoft Malware Protection Engine Remote Code Execution Vulnerability\.


The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 Microsoft Exchange Server 2013 and 2016 does not properly scan a specially crafted file leading to memory corruption. aka \Microsoft Malware Protection Engine Remote Code Execution Vulnerability\ a different vulnerability than CVE-2017-8538 and CVE-2017-8540.


In smp_br_state_machine_event of smp_br_main.cc there is a possible out of bounds write due to memory corruption. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-80145946.


A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file leading to memory corruption aka \Microsoft Malware Protection Engine Remote Code Execution Vulnerability.\ This affects Windows Defender Windows Intune Endpoint Protection Microsoft Security Essentials Microsoft System Center Endpoint Protection Microsoft Exchange Server Microsoft System Center Microsoft Forefront Endpoint Protection.


WPLSoft in Delta Electronics versions 2.45.0 and prior writes data from a file outside the bounds of the intended buffer space which could cause memory corruption or may allow remote code execution.


In btm_sec_disconnected of btm_sec.cc there is a possible memory corruption due to a use after free. This could lead to remote code execution in the Bluetooth server with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.0 Android-8.1Android ID: A-162497143


In a2dp_aac_decoder_cleanup of a2dp_aac_decoder.cc there is a possible invalid free due to memory corruption. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-9Android ID: A-148107188


In the Zephyr Project MQTT code improper bounds checking can result in memory corruption and possibly remote code execution. NCC-ZEP-031 This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions.


An exploitable out-of-bounds write vulnerability exists in the batch transaction field parsing functionality of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause an out-of-bounds write resulting in memory corruption which can lead to remote code execution. An attacker can simply connect to the port to trigger this vulnerability.


A remote code execution vulnerability in libstagefright in Mediaserver in Android 7.0 before 2016-11-01 could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Android ID: A-31373622.


A remote code execution vulnerability in libskia in Android 7.0 before 2016-11-01 could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as High due to the possibility of remote code execution within the context of the gallery process. Android ID: A-30190637.


A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0639 CVE-2019-0680 CVE-2019-0769 CVE-2019-0770 CVE-2019-0771 CVE-2019-0773 CVE-2019-0783.

remote code execution
memory corruption vulnerability


A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client aka 'Windows DHCP Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0697 CVE-2019-0698.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590 CVE-2019-0591 CVE-2019-0593 CVE-2019-0605 CVE-2019-0607 CVE-2019-0610 CVE-2019-0640 CVE-2019-0644 CVE-2019-0651 CVE-2019-0652 CVE-2019-0655.


A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory aka \Microsoft Edge Memory Corruption Vulnerability.\ This affects Microsoft Edge.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0592.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912 CVE-2019-0913 CVE-2019-0914 CVE-2019-0915 CVE-2019-0916 CVE-2019-0917 CVE-2019-0922 CVE-2019-0923 CVE-2019-0925 CVE-2019-0927 CVE-2019-0933 CVE-2019-0937.


A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory aka 'Microsoft Edge Memory Corruption Vulnerability'.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912 CVE-2019-0913 CVE-2019-0914 CVE-2019-0916 CVE-2019-0917 CVE-2019-0922 CVE-2019-0923 CVE-2019-0924 CVE-2019-0925 CVE-2019-0927 CVE-2019-0933 CVE-2019-0937.


A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory aka 'Microsoft Edge Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0645 CVE-2019-0650.


A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0988 CVE-2019-1005 CVE-2019-1055 CVE-2019-1080.


A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client aka 'Windows DHCP Client Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590 CVE-2019-0591 CVE-2019-0593 CVE-2019-0605 CVE-2019-0607 CVE-2019-0610 CVE-2019-0640 CVE-2019-0642 CVE-2019-0644 CVE-2019-0651 CVE-2019-0655.


A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0911 CVE-2019-0918.


An exploitable memory corruption vulnerability exists in the Websocket protocol implementation of Cesanta Mongoose 6.8. A specially crafted websocket packet can cause an integer overflow leading to a heap buffer overflow and resulting in denial of service and potential remote code execution. An attacker needs to send a specially crafted websocket packet over network to trigger this vulnerability.

remote code execution
memory corruption vulnerability
denial of service
integer overflow
buffer overflow
memory corruption


Memory Corruption Vulnerability in Foxit PDF Toolkit before 2.1 allows an attacker to cause Denial of Service & Remote Code Execution when a victim opens a specially crafted PDF file.

remote code execution
memory corruption vulnerability
denial of service
memory corruption


Memory Corruption Vulnerability in Foxit PDF Toolkit v1.3 allows an attacker to cause Denial of Service and Remote Code Execution when the victim opens the specially crafted PDF file. The Vulnerability has been fixed in v2.0.


Adobe Illustrator version 25.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve remote code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.


Adobe Illustrator version 25.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to remote code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.


iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution


A Memory Corruption Vulnerability in Autodesk FBX Review version 1.5.0 and prior may lead to remote code execution through maliciously crafted DLL files.


A Memory Corruption Vulnerability in Autodesk TrueView 2022 and 2021 may lead to remote code execution through maliciously crafted DWG files.


A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling objects in memory aka \Microsoft Edge Memory Corruption Vulnerability.\ This CVE ID is unique from CVE-2017-0221 and CVE-2017-0227.


Microsoft Word 2007 Office 2010 SP2 Word 2010 SP2 Office Compatibility Pack SP3 Office for Mac 2011 Office for Mac 2016 Microsoft Office Web Apps 2010 SP2 Office Web Apps Server 2013 SP1 Word 2013 RT SP1 Word 2013 SP1 Word Automation Services on Microsoft SharePoint Server 2013 SP1 Office Word Viewer SharePoint Enterprise Server 2016 and Word 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory aka \Microsoft Office Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-0264 and CVE-2017-0265.


Microsoft PowerPoint for Mac 2011 allows a remote code execution vulnerability when the software fails to properly handle objects in memory aka \Microsoft Office Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-0254 and CVE-2017-0264.


A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in memory aka \Scripting Engine Memory Corruption Vulnerability.\ This CVE ID is unique from CVE-2017-0224 CVE-2017-0228 CVE-2017-0229 CVE-2017-0230 CVE-2017-0234 CVE-2017-0235 and CVE-2017-0238.


Microsoft PowerPoint for Mac 2011 allows a remote code execution vulnerability when the software fails to properly handle objects in memory aka \Microsoft Office Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-0254 and CVE-2017-0265.


A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling objects in memory aka \Microsoft Edge Memory Corruption Vulnerability.\ This CVE ID is unique from CVE-2017-0221 and CVE-2017-0240.


A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in memory aka \Scripting Engine Memory Corruption Vulnerability.\ This CVE ID is unique from CVE-2017-0224 CVE-2017-0228 CVE-2017-0229 CVE-2017-0230 CVE-2017-0234 CVE-2017-0236 and CVE-2017-0238.


A remote code execution vulnerability exists in Microsoft Edge in the way JavaScript engines render when handling objects in memory aka \Scripting Engine Memory Corruption Vulnerability.\ This CVE ID is unique from CVE-2017-0224 CVE-2017-0228 CVE-2017-0230 CVE-2017-0234 CVE-2017-0235 CVE-2017-0236 and CVE-2017-0238.


A remote code execution vulnerability exists in the way JavaScript engines render when handling objects in memory in Microsoft Edge aka \Scripting Engine Memory Corruption Vulnerability.\ This CVE ID is unique from CVE-2017-0228 CVE-2017-0229 CVE-2017-0230 CVE-2017-0234 CVE-2017-0235 CVE-2017-0236 and CVE-2017-0238.


A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript scripting engines handle objects in memory aka \Scripting Engine Memory Corruption Vulnerability.\ This CVE ID is unique from CVE-2017-0224 CVE-2017-0228 CVE-2017-0229 CVE-2017-0230 CVE-2017-0234 CVE-2017-0235 and CVE-2017-0236.


A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in memory aka \Scripting Engine Memory Corruption Vulnerability.\ This CVE ID is unique from CVE-2017-0224 CVE-2017-0228 CVE-2017-0229 CVE-2017-0230 CVE-2017-0235 CVE-2017-0236 and CVE-2017-0238.


A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript engines render when handling objects in memory aka \Scripting Engine Memory Corruption Vulnerability.\ This CVE ID is unique from CVE-2017-0224 CVE-2017-0229 CVE-2017-0230 CVE-2017-0234 CVE-2017-0235 CVE-2017-0236 and CVE-2017-0238.


A remote code execution vulnerability exists in Microsoft Edge in the way JavaScript engines render when handling objects in memory aka \Scripting Engine Memory Corruption Vulnerability.\ This CVE ID is unique from CVE-2017-0224 CVE-2017-0228 CVE-2017-0229 CVE-2017-0234 CVE-2017-0235 CVE-2017-0236 and CVE-2017-0238.


An exploitable memory corruption vulnerability exists in the LvVariantUnflatten functionality in 64-bit versions of LabVIEW before 2015 SP1 f7 Patch and 2016 before f2 Patch. A specially crafted VI file can cause a user controlled value to be used as a loop terminator resulting in internal heap corruption. An attacker controlled VI file can be used to trigger this vulnerability exploitation could lead to remote code execution.


An exploitable memory corruption vulnerability exists in the Websocket protocol implementation of Cesanta Mongoose 6.8. A specially crafted websocket packet can cause a buffer to be allocated while leaving stale pointers which leads to a use-after-free vulnerability which can be exploited to achieve remote code execution. An attacker needs to send a specially crafted websocket packet over the network to trigger this vulnerability.


An issue was discovered in Fuji Electric V-Server Version 3.3.22.0 and prior. A memory corruption vulnerability has been identified (aka improper restriction of operations within the bounds of a memory buffer) which may allow remote code execution.


Microsoft Edge allows a remote code execution vulnerability due to the way it accesses objects in memory aka \Scripting Engine Memory Corruption Vulnerability\.


A remote code execution vulnerability exists in Microsoft Excel 2010 Service Pack 2 Microsoft Excel 2013 Service Pack 1 Microsoft Excel 2013 RT Service Pack 1 Microsoft Excel 2016 Microsoft Office Web Apps 2013 Microsoft Excel for Mac 2011 Microsoft Excel 2016 for Mac and Microsoft Office Compatibility Pack Service Pack 3 when they fail to properly handle objects in memory aka \Microsoft Office Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8630 CVE-2017-8631 and CVE-2017-8744.


Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory aka \Microsoft Office Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8502.


Microsoft Office 2016 allows a remote code execution vulnerability when it fails to properly handle objects in memory aka \Microsoft Office Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8631 CVE-2017-8632 and CVE-2017-8744.


Microsoft Edge on Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allows a remote code execution vulnerability in the way affected Microsoft scripting engines render when handling objects in memory aka \Scripting Engine Memory Corruption Vulnerability.\ This CVE ID is unique from CVE-2017-8596 CVE-2017-8610 CVE-2017-8601 CVE-2017-8603 CVE-2017-8604 CVE-2017-8605 CVE-2017-8606 CVE-2017-8607 CVE-2017-8608 CVE-2017-8618 CVE-2017-9598 and CVE-2017-8609.


Microsoft Outlook 2007 SP3 Outlook 2010 SP2 Outlook 2013 SP1 Outlook 2013 RT SP1 and Outlook 2016 as packaged in Microsoft Office allows a remote code execution vulnerability due to the way Microsoft Outlook parses specially crafted email messages aka \Microsoft Office Outlook Memory Corruption Vulnerability\


The Windows Server DHCP service in Windows Server 2012 Gold and R2 and Windows Server 2016 allows an attacker to either run arbitrary code on the DHCP failover server or cause the DHCP service to become nonresponsive due to a memory corruption vulnerability in the Windows Server DHCP service aka \Windows DHCP Server Remote Code Execution Vulnerability\.


A remote code execution vulnerability exists in Excel Services Microsoft Excel 2007 Service Pack 3 Microsoft Excel 2010 Service Pack 2 Microsoft Excel 2013 Service Pack 1 Microsoft Excel 2013 RT Service Pack 1 and Microsoft Excel 2016 when they fail to properly handle objects in memory aka \Microsoft Office Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8630 CVE-2017-8632 and CVE-2017-8731.


Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory aka \Microsoft Office Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8501.


A remote code execution vulnerability exists in Excel Services Microsoft Excel 2007 Service Pack 3 Microsoft Excel 2010 Service Pack 2 Microsoft Excel 2013 Service Pack 1 Microsoft Excel 2013 RT Service Pack 1 Microsoft Excel 2016 Microsoft Office Web Apps 2013 Microsoft Office Compatibility Pack Service Pack 3 Microsoft Excel Web App 2013 Service Pack 1 Microsoft Excel Viewer 2007 Service Pack 3 and Office Online Server when they fail to properly handle objects in memory aka \Microsoft Office Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8630 CVE-2017-8632 and CVE-2017-8744.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-8229.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-8503 CVE-2018-8505 CVE-2018-8510 CVE-2018-8513.


A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers aka \Scripting Engine Memory Corruption Vulnerability.\ This affects ChakraCore Internet Explorer 11 Microsoft Edge. This CVE ID is unique from CVE-2018-8353 CVE-2018-8355 CVE-2018-8359 CVE-2018-8371 CVE-2018-8373 CVE-2018-8385 CVE-2018-8389 CVE-2018-8390.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-8541 CVE-2018-8543 CVE-2018-8551 CVE-2018-8555 CVE-2018-8556 CVE-2018-8557 CVE-2018-8588.


A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory aka \Microsoft Edge Memory Corruption Vulnerability.\ This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8125 CVE-2018-8262 CVE-2018-8275 CVE-2018-8279 CVE-2018-8301.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-8367 CVE-2018-8466 CVE-2018-8467.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge aka \Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-0945 CVE-2018-0946 CVE-2018-0951 CVE-2018-0953 CVE-2018-0954 CVE-2018-0955 CVE-2018-1022 CVE-2018-8114 CVE-2018-8122 CVE-2018-8128 CVE-2018-8137.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer aka \Scripting Engine Memory Corruption Vulnerability.\ This affects Internet Explorer 9 Internet Explorer 11 Internet Explorer 10. This CVE ID is unique from CVE-2018-8355 CVE-2018-8359 CVE-2018-8371 CVE-2018-8372 CVE-2018-8373 CVE-2018-8385 CVE-2018-8389 CVE-2018-8390.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-8583 CVE-2018-8618 CVE-2018-8624 CVE-2018-8629.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-8503 CVE-2018-8510 CVE-2018-8511 CVE-2018-8513.


A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers aka \Scripting Engine Memory Corruption Vulnerability.\ This affects ChakraCore Internet Explorer 11 Microsoft Edge. This CVE ID is unique from CVE-2018-8242 CVE-2018-8283 CVE-2018-8287 CVE-2018-8288 CVE-2018-8296 CVE-2018-8298.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer aka \Scripting Engine Memory Corruption Vulnerability.\ This affects Internet Explorer 11. This CVE ID is unique from CVE-2018-0945 CVE-2018-0946 CVE-2018-0951 CVE-2018-0953 CVE-2018-0954 CVE-2018-0955 CVE-2018-1022 CVE-2018-8122 CVE-2018-8128 CVE-2018-8137 CVE-2018-8139.


A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory aka \Microsoft Edge Memory Corruption Vulnerability.\ This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8262 CVE-2018-8274 CVE-2018-8275 CVE-2018-8279 CVE-2018-8301.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-8541 CVE-2018-8542 CVE-2018-8543 CVE-2018-8551 CVE-2018-8555 CVE-2018-8557 CVE-2018-8588.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-8280 CVE-2018-8286 CVE-2018-8290.


A remote code execution vulnerability exists in the way that Azure IoT Hub Device Client SDK using MQTT protocol accesses objects in memory aka \Azure IoT Device Client SDK Memory Corruption Vulnerability.\ This affects Hub Device Client SDK Azure IoT Edge.


A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory aka \Microsoft Edge Memory Corruption Vulnerability.\ This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8125 CVE-2018-8262 CVE-2018-8274 CVE-2018-8275 CVE-2018-8279.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-8465 CVE-2018-8466 CVE-2018-8467.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-8280 CVE-2018-8286 CVE-2018-8294.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects ChakraCore. This CVE ID is unique from CVE-2018-0943 CVE-2018-8130 CVE-2018-8133 CVE-2018-8145.


A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory aka \Microsoft Edge Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-8125 CVE-2018-8262 CVE-2018-8274 CVE-2018-8275 CVE-2018-8301.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-8541 CVE-2018-8542 CVE-2018-8543 CVE-2018-8551 CVE-2018-8555 CVE-2018-8556 CVE-2018-8588.


A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers aka \Scripting Engine Memory Corruption Vulnerability.\ This affects ChakraCore Internet Explorer 11 Microsoft Edge. This CVE ID is unique from CVE-2018-8242 CVE-2018-8283 CVE-2018-8287 CVE-2018-8291 CVE-2018-8296 CVE-2018-8298.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge aka \Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-0945 CVE-2018-0946 CVE-2018-0951 CVE-2018-0953 CVE-2018-0954 CVE-2018-0955 CVE-2018-1022 CVE-2018-8114 CVE-2018-8122 CVE-2018-8137 CVE-2018-8139.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-8503 CVE-2018-8505 CVE-2018-8511 CVE-2018-8513.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-8617 CVE-2018-8618 CVE-2018-8624 CVE-2018-8629.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer aka \Scripting Engine Memory Corruption Vulnerability.\ This affects Internet Explorer 9 Internet Explorer 11 Internet Explorer 10. This CVE ID is unique from CVE-2018-8353 CVE-2018-8355 CVE-2018-8359 CVE-2018-8371 CVE-2018-8372 CVE-2018-8385 CVE-2018-8389 CVE-2018-8390.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-8541 CVE-2018-8542 CVE-2018-8551 CVE-2018-8555 CVE-2018-8556 CVE-2018-8557 CVE-2018-8588.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-0943 CVE-2018-8133 CVE-2018-8145 CVE-2018-8177.


A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory aka \Microsoft Edge Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-8125 CVE-2018-8262 CVE-2018-8274 CVE-2018-8279 CVE-2018-8301.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-8286 CVE-2018-8290 CVE-2018-8294.


A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-8354 CVE-2018-8391 CVE-2018-8456 CVE-2018-8457.


A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability.\ This affects ChakraCore. This CVE ID is unique from CVE-2018-8242 CVE-2018-8283 CVE-2018-8287 CVE-2018-8288 CVE-2018-8291 CVE-2018-8296.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-8367 CVE-2018-8465 CVE-2018-8467.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer aka \Scripting Engine Memory Corruption Vulnerability.\ This affects Internet Explorer 11. This CVE ID is unique from CVE-2018-8242 CVE-2018-8283 CVE-2018-8287 CVE-2018-8288 CVE-2018-8291 CVE-2018-8298.


A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers aka \Scripting Engine Memory Corruption Vulnerability.\ This affects Internet Explorer 11 Microsoft Edge Internet Explorer 10. This CVE ID is unique from CVE-2018-8354 CVE-2018-8391 CVE-2018-8456 CVE-2018-8459.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer aka \Scripting Engine Memory Corruption Vulnerability.\ This affects Internet Explorer 11. This CVE ID is unique from CVE-2018-0945 CVE-2018-0946 CVE-2018-0951 CVE-2018-0953 CVE-2018-0954 CVE-2018-0955 CVE-2018-1022 CVE-2018-8114 CVE-2018-8128 CVE-2018-8137 CVE-2018-8139.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-8541 CVE-2018-8542 CVE-2018-8543 CVE-2018-8555 CVE-2018-8556 CVE-2018-8557 CVE-2018-8588.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer aka \Scripting Engine Memory Corruption Vulnerability.\ This affects Internet Explorer 9 Internet Explorer 11 Internet Explorer 10. This CVE ID is unique from CVE-2018-8243.


A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-8353 CVE-2018-8355 CVE-2018-8359 CVE-2018-8371 CVE-2018-8372 CVE-2018-8373 CVE-2018-8385 CVE-2018-8389.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge aka \Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-8391 CVE-2018-8456 CVE-2018-8457 CVE-2018-8459.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer aka \Scripting Engine Memory Corruption Vulnerability.\ This affects Internet Explorer 9 Internet Explorer 11 Internet Explorer 10.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-8541 CVE-2018-8542 CVE-2018-8543 CVE-2018-8551 CVE-2018-8556 CVE-2018-8557 CVE-2018-8588.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-8280 CVE-2018-8290 CVE-2018-8294.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer aka \Scripting Engine Memory Corruption Vulnerability.\ This affects Internet Explorer 9 Internet Explorer 11 Internet Explorer 10. This CVE ID is unique from CVE-2018-8353 CVE-2018-8355 CVE-2018-8359 CVE-2018-8372 CVE-2018-8373 CVE-2018-8385 CVE-2018-8389 CVE-2018-8390.


A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory aka \Internet Explorer Memory Corruption Vulnerability.\ This affects Internet Explorer 9 Internet Explorer 11 Internet Explorer 10. This CVE ID is unique from CVE-2018-8461.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-8542 CVE-2018-8543 CVE-2018-8551 CVE-2018-8555 CVE-2018-8556 CVE-2018-8557 CVE-2018-8588.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-8266 CVE-2018-8381 CVE-2018-8384.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-8583 CVE-2018-8617 CVE-2018-8618 CVE-2018-8624.


A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory aka \Microsoft Exchange Memory Corruption Vulnerability.\ This affects Microsoft Exchange Server. This CVE ID is unique from CVE-2018-8151.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-8583 CVE-2018-8617 CVE-2018-8624 CVE-2018-8629.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer aka \Scripting Engine Memory Corruption Vulnerability.\ This affects Internet Explorer 9 Internet Explorer 11 Internet Explorer 10. This CVE ID is unique from CVE-2018-8643.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects ChakraCore. This CVE ID is unique from CVE-2018-8266 CVE-2018-8380 CVE-2018-8381.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer aka \Scripting Engine Memory Corruption Vulnerability.\ This affects Internet Explorer 9 Internet Explorer 11 Internet Explorer 10. This CVE ID is unique from CVE-2018-8283 CVE-2018-8287 CVE-2018-8288 CVE-2018-8291 CVE-2018-8296 CVE-2018-8298.


A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers aka \Scripting Engine Memory Corruption Vulnerability.\ This affects ChakraCore Internet Explorer 11 Microsoft Edge Internet Explorer 10. This CVE ID is unique from CVE-2018-8242 CVE-2018-8283 CVE-2018-8288 CVE-2018-8291 CVE-2018-8296 CVE-2018-8298.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-8503 CVE-2018-8505 CVE-2018-8510 CVE-2018-8511.


A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability.\ This affects ChakraCore. This CVE ID is unique from CVE-2018-8353 CVE-2018-8355 CVE-2018-8371 CVE-2018-8372 CVE-2018-8373 CVE-2018-8385 CVE-2018-8389 CVE-2018-8390.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-0943 CVE-2018-8130 CVE-2018-8145 CVE-2018-8177.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-8266 CVE-2018-8380 CVE-2018-8384.


A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability.\ This affects ChakraCore. This CVE ID is unique from CVE-2018-8242 CVE-2018-8287 CVE-2018-8288 CVE-2018-8291 CVE-2018-8296 CVE-2018-8298.


A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers aka \Scripting Engine Memory Corruption Vulnerability.\ This affects Internet Explorer 9 ChakraCore Internet Explorer 11 Microsoft Edge Internet Explorer 10. This CVE ID is unique from CVE-2018-8353 CVE-2018-8355 CVE-2018-8359 CVE-2018-8371 CVE-2018-8372 CVE-2018-8373 CVE-2018-8389 CVE-2018-8390.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge aka \Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-0945 CVE-2018-0946 CVE-2018-0951 CVE-2018-0953 CVE-2018-0954 CVE-2018-0955 CVE-2018-1022 CVE-2018-8114 CVE-2018-8122 CVE-2018-8128 CVE-2018-8139.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-8505 CVE-2018-8510 CVE-2018-8511 CVE-2018-8513.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-8367 CVE-2018-8465 CVE-2018-8466.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer aka \Scripting Engine Memory Corruption Vulnerability.\ This affects Internet Explorer 9 Internet Explorer 11 Internet Explorer 10. This CVE ID is unique from CVE-2018-8353 CVE-2018-8355 CVE-2018-8359 CVE-2018-8371 CVE-2018-8372 CVE-2018-8373 CVE-2018-8385 CVE-2018-8390.


A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-8354 CVE-2018-8391 CVE-2018-8457 CVE-2018-8459.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-8380 CVE-2018-8381 CVE-2018-8384.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-8583 CVE-2018-8617 CVE-2018-8618 CVE-2018-8629.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-8541 CVE-2018-8542 CVE-2018-8543 CVE-2018-8551 CVE-2018-8555 CVE-2018-8556 CVE-2018-8557.


A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability.\ This affects ChakraCore. This CVE ID is unique from CVE-2018-8354 CVE-2018-8456 CVE-2018-8457 CVE-2018-8459.


A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers aka \Scripting Engine Memory Corruption Vulnerability.\ This affects ChakraCore Internet Explorer 11 Microsoft Edge. This CVE ID is unique from CVE-2018-8353 CVE-2018-8359 CVE-2018-8371 CVE-2018-8372 CVE-2018-8373 CVE-2018-8385 CVE-2018-8389 CVE-2018-8390.


A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory aka \Microsoft Edge Memory Corruption Vulnerability.\ This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8125 CVE-2018-8274 CVE-2018-8275 CVE-2018-8279 CVE-2018-8301.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-8227.


Adobe Photoshop CC 2018 before 19.1.6 and Photoshop CC 2017 before 18.1.6 have a memory corruption vulnerability. Successful exploitation could lead to remote code execution.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge aka \Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-0946 CVE-2018-0951 CVE-2018-0953 CVE-2018-0954 CVE-2018-0955 CVE-2018-1022 CVE-2018-8114 CVE-2018-8122 CVE-2018-8128 CVE-2018-8137 CVE-2018-8139.


ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold 1511 1607 1703 1709 and Windows Server 2016 allows remote code execution due to how the Chakra scripting engine handles objects in memory aka \Chakra Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2018-0873 CVE-2018-0874 CVE-2018-0930 CVE-2018-0931 CVE-2018-0933 CVE-2018-0934 CVE-2018-0936 and CVE-2018-0937.


Microsoft Office 2010 Microsoft Office 2013 and Microsoft Office 2016 allow a remote code execution vulnerability due to the way RTF content is handled aka \Microsoft Word Memory Corruption Vulnerability\.


Microsoft Edge in Windows 10 Gold 1511 1607 1703 1709 and Windows Server 2016 allows remote code execution due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2018-0889 CVE-2018-0893 CVE-2018-0925 and CVE-2018-0935.


Microsoft Edge in Windows 10 Gold 1511 1607 1703 1709 and Windows Server 2016 allows remote code execution due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2018-0876 CVE-2018-0889 CVE-2018-0925 and CVE-2018-0935.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer aka \Scripting Engine Memory Corruption Vulnerability.\ This affects Internet Explorer 9 Internet Explorer 11 Internet Explorer 10. This CVE ID is unique from CVE-2018-0945 CVE-2018-0946 CVE-2018-0951 CVE-2018-0953 CVE-2018-0954 CVE-2018-1022 CVE-2018-8114 CVE-2018-8122 CVE-2018-8128 CVE-2018-8137 CVE-2018-8139.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-0979 CVE-2018-0980 CVE-2018-0990 CVE-2018-0993 CVE-2018-0994 CVE-2018-1019.


ChakraCore and Microsoft Windows 10 1703 and 1709 allow remote code execution due to how the Chakra scripting engine handles objects in memory aka \Chakra Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2018-0872 CVE-2018-0873 CVE-2018-0874 CVE-2018-0930 CVE-2018-0931 CVE-2018-0933 CVE-2018-0934 and CVE-2018-0936.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge aka \Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge. This CVE ID is unique from CVE-2018-0945 CVE-2018-0946 CVE-2018-0953 CVE-2018-0954 CVE-2018-0955 CVE-2018-1022 CVE-2018-8114 CVE-2018-8122 CVE-2018-8128 CVE-2018-8137 CVE-2018-8139.


Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold 1511 1607 1703 1709 and Windows Server 2016 allows remote code execution due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2018-0834 CVE-2018-0836 CVE-2018-0837 CVE-2018-0838 CVE-2018-0840 CVE-2018-0856 CVE-2018-0857 CVE-2018-0858 CVE-2018-0859 CVE-2018-0860 CVE-2018-0861 and CVE-2018-0866.


A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory aka \Internet Explorer Memory Corruption Vulnerability.\ This affects Internet Explorer 11 Internet Explorer 10. This CVE ID is unique from CVE-2018-0870 CVE-2018-0997 CVE-2018-1018 CVE-2018-1020.


A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory aka \Internet Explorer Memory Corruption Vulnerability.\ This affects Internet Explorer 9 Internet Explorer 11 Internet Explorer 10. This CVE ID is unique from CVE-2018-8249.


ChakraCore and Microsoft Windows 10 Gold 1511 1607 1703 1709 and Windows Server 2016 allows remote code execution due to how the Chakra scripting engine handles objects in memory aka \Chakra Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2018-0872 CVE-2018-0873 CVE-2018-0874 CVE-2018-0930 CVE-2018-0931 CVE-2018-0934 CVE-2018-0936 and CVE-2018-0937.


Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold 1511 1607 1703 1709 and Windows Server 2016 allows remote code execution due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2018-0834 CVE-2018-0835 CVE-2018-0836 CVE-2018-0837 CVE-2018-0838 CVE-2018-0840 CVE-2018-0856 CVE-2018-0858 CVE-2018-0859 CVE-2018-0860 CVE-2018-0861 and CVE-2018-0866.


Internet

Explorer

in

Microsoft

Windows

Windows

Server

and

Windows

and

Windows

RT

Windows

Server

and

Windows

Gold

and

Windows

Server

allows

remote

code

execution

due

to

how

the

scripting

engine

handles

objects

in

memory

aka

\Scripting

Engine

Memory

Corruption

Vulnerability\.

This

CVE

ID

is

unique

from

and


A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers aka \Scripting Engine Memory Corruption Vulnerability.\ This affects Internet Explorer 9 ChakraCore Internet Explorer 11 Microsoft Edge Internet Explorer 10. This CVE ID is unique from CVE-2018-0945 CVE-2018-0946 CVE-2018-0951 CVE-2018-0953 CVE-2018-0955 CVE-2018-1022 CVE-2018-8114 CVE-2018-8122 CVE-2018-8128 CVE-2018-8137 CVE-2018-8139.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-0979 CVE-2018-0980 CVE-2018-0990 CVE-2018-0993 CVE-2018-0995 CVE-2018-1019.


ChakraCore and Microsoft Windows 10 1709 allow remote code execution due to how the Chakra scripting engine handles objects in memory aka \Chakra Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2018-0872 CVE-2018-0873 CVE-2018-0874 CVE-2018-0930 CVE-2018-0931 CVE-2018-0933 CVE-2018-0934 and CVE-2018-0937.


Microsoft Outlook 2007 SP3 Microsoft Outlook 2010 SP2 Microsoft Outlook 2013 SP1 and RT SP1 Microsoft Outlook 2016 and Microsoft Office 2016 Click-to-Run (C2R) allow a remote code execution vulnerability due to how Outlook handles objects in memory aka \Microsoft Office Memory Corruption Vulnerability\. This CVE is unique from CVE-2018-0851.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer aka \Scripting Engine Memory Corruption Vulnerability.\ This affects Internet Explorer 9 Internet Explorer 11 Internet Explorer 10. This CVE ID is unique from CVE-2018-0996 CVE-2018-1001.


Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold 1511 1607 1703 1709 and Windows Server 2016 allows remote code execution due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2018-0835 CVE-2018-0836 CVE-2018-0837 CVE-2018-0838 CVE-2018-0840 CVE-2018-0856 CVE-2018-0857 CVE-2018-0858 CVE-2018-0859 CVE-2018-0860 CVE-2018-0861 and CVE-2018-0866.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-0979 CVE-2018-0980 CVE-2018-0993 CVE-2018-0994 CVE-2018-0995 CVE-2018-1019.


Microsoft Edge and ChakraCore in Microsoft Windows 10 1703 and 1709 allows remote code execution due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2018-0834 CVE-2018-0835 CVE-2018-0836 CVE-2018-0837 CVE-2018-0838 CVE-2018-0840 CVE-2018-0857 CVE-2018-0858 CVE-2018-0859 CVE-2018-0860 CVE-2018-0861 and CVE-2018-0866.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-0980 CVE-2018-0990 CVE-2018-0993 CVE-2018-0994 CVE-2018-0995 CVE-2018-1019.


Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold 1511 1607 1703 1709 and Windows Server 2016 allows remote code execution due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2018-0834 CVE-2018-0835 CVE-2018-0836 CVE-2018-0837 CVE-2018-0840 CVE-2018-0856 CVE-2018-0857 CVE-2018-0858 CVE-2018-0859 CVE-2018-0860 CVE-2018-0861 and CVE-2018-0866.


ChakraCore and Microsoft Edge in Microsoft Windows 10 1511 1607 1703 1709 and Windows Server 2016 allows remote code execution due to how the Chakra scripting engine handles objects in memory aka \Chakra Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2018-0872 CVE-2018-0874 CVE-2018-0930 CVE-2018-0931 CVE-2018-0933 CVE-2018-0934 CVE-2018-0936 and CVE-2018-0937.


Microsoft Office 2010 SP2 2013 SP1 and 2016 Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac Microsoft Office Compatibility Pack SP2 Microsoft Office Web Apps 2010 SP2 Microsoft Office Web Apps 2013 SP1 Microsoft Office Word Viewer Microsoft SharePoint Enterprise Server 2013 SP1 Microsoft SharePoint Enterprise Server 2016 Microsoft Office Compatibility Pack SP2 Microsoft Online Server 2016 Microsoft SharePoint Server 2010 SP2 Microsoft Word 2007 SP3 Microsoft Word 2010 SP2 Word 2013 and Microsoft Word 2016 allow a remote code execution vulnerability due to how objects are handled in memory aka \Microsoft Office Memory Corruption Vulnerability\.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-0979 CVE-2018-0990 CVE-2018-0993 CVE-2018-0994 CVE-2018-0995 CVE-2018-1019.


Equation Editor in Microsoft Office 2007 Microsoft Office 2010 Microsoft Office 2013 and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory aka \Microsoft Office Memory Corruption Vulnerability\.


Microsoft Edge in Microsoft Windows 10 1607 1703 and Windows Server 2016 allows remote code execution due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2018-0834 CVE-2018-0835 CVE-2018-0836 CVE-2018-0837 CVE-2018-0838 CVE-2018-0840 CVE-2018-0856 CVE-2018-0857 CVE-2018-0858 CVE-2018-0859 CVE-2018-0860 and CVE-2018-0866.


ChakraCore and Microsoft Windows 10 Gold 1511 1607 1703 1709 and Windows Server 2016 allows remote code execution due to how the Chakra scripting engine handles objects in memory aka \Chakra Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2018-0872 CVE-2018-0873 CVE-2018-0874 CVE-2018-0930 CVE-2018-0931 CVE-2018-0933 CVE-2018-0936 and CVE-2018-0937.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer aka \Scripting Engine Memory Corruption Vulnerability.\ This affects Internet Explorer 9 Internet Explorer 11 Internet Explorer 10. This CVE ID is unique from CVE-2018-0988 CVE-2018-1001.