CVEs

407,806 total · page 6030 of 8,157

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2018-8304	Microsoft Windows Server 2008	Med	0.39	5.9	0.13		Jul 11, 2018	A denial of service vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle DNS responses, aka "Windows DNSAPI Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008,…
CVE-2018-8301	Microsoft Edge	Hig	0.50	7.5	0.14		Jul 11, 2018	A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8125, CVE-2018-8262, CVE-2018-8274, CVE-2018-8275,…
CVE-2018-8300	Microsoft Sharepoint Server	Hig	0.58	8.8	0.14		Jul 11, 2018	A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka "Microsoft SharePoint Remote Code Execution Vulnerability." This affects Microsoft SharePoint.
CVE-2018-8299	Microsoft Sharepoint Server	Med	0.35	5.4	0.03		Jul 11, 2018	An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This…
CVE-2018-8298	Microsoft Chakracore	Hig	0.63	7.5	0.75	KEV	Jul 11, 2018	A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8242, CVE-2018-8283, CVE-2018-8287,…
CVE-2018-8297	Microsoft Edge	Med	0.29	4.3	0.10		Jul 11, 2018	An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8289, CVE-2018-8324, CVE-2018-8325.
CVE-2018-8296	Microsoft Internet Explorer	Hig	0.50	7.5	0.17		Jul 11, 2018	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 11. This CVE ID is unique from CVE-2018-8242, CVE-2018-8283,…
CVE-2018-8294	Microsoft Edge	Hig	0.43	7.5	0.21		Jul 11, 2018	A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8280,…
CVE-2018-8291	Microsoft Internet Explorer	Hig	0.50	7.5	0.69		Jul 11, 2018	A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from…
CVE-2018-8290	Microsoft Edge	Hig	0.43	7.5	0.21		Jul 11, 2018	A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8280,…
CVE-2018-8289	Microsoft Edge	Med	0.29	4.3	0.10		Jul 11, 2018	An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8297, CVE-2018-8324, CVE-2018-8325.
CVE-2018-8288	Microsoft Internet Explorer	Hig	0.50	7.5	0.69		Jul 11, 2018	A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from…
CVE-2018-8287	Microsoft Internet Explorer	Hig	0.43	7.5	0.16		Jul 11, 2018	A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Explorer 10. This CVE ID…
CVE-2018-8286	Microsoft Edge	Hig	0.43	7.5	0.21		Jul 11, 2018	A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8280,…
CVE-2018-8284	Microsoft .net Framework	Hig	0.56	8.1	0.46		Jul 11, 2018	A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".NET Framework Remote Code Injection Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework…
CVE-2018-8283	Microsoft Chakracore	Hig	0.43	7.5	0.15		Jul 11, 2018	A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8242, CVE-2018-8287, CVE-2018-8288,…
CVE-2018-8282	Microsoft Windows Server 2008	Hig	0.51	7.8	0.01		Jul 11, 2018	An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008,…
CVE-2018-8281	Microsoft Office	Hig	0.52	7.8	0.21		Jul 11, 2018	A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability." This affects Microsoft Excel Viewer, Microsoft PowerPoint Viewer, Microsoft Office,…
CVE-2018-8280	Microsoft Edge	Hig	0.43	7.5	0.21		Jul 11, 2018	A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8286,…
CVE-2018-8279	Microsoft Edge	Hig	0.57	7.5	0.71		Jul 11, 2018	A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8125, CVE-2018-8262, CVE-2018-8274,…
CVE-2018-8278	Microsoft Edge	Med	0.40	6.1	0.07		Jul 11, 2018	A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "Microsoft Edge Spoofing Vulnerability." This affects Microsoft Edge.
CVE-2018-8276	Microsoft Edge	Med	0.36	6.5	0.06		Jul 11, 2018	A security feature bypass vulnerability exists in the Microsoft Chakra scripting engine that allows Control Flow Guard (CFG) to be bypassed, aka "Scripting Engine Security Feature Bypass Vulnerability." This affects Microsoft Edge, ChakraCore.
CVE-2018-8275	Microsoft Edge	Hig	0.50	7.5	0.21		Jul 11, 2018	A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8125, CVE-2018-8262, CVE-2018-8274,…
CVE-2018-8274	Microsoft Edge	Hig	0.50	7.5	0.21		Jul 11, 2018	A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8125, CVE-2018-8262, CVE-2018-8275, CVE-2018-8279,…
CVE-2018-8262	Microsoft Edge	Hig	0.50	7.5	0.21		Jul 11, 2018	A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8125, CVE-2018-8274, CVE-2018-8275, CVE-2018-8279,…
CVE-2018-8260	Microsoft .net Framework	Hig	0.58	8.8	0.16		Jul 11, 2018	A Remote Code Execution vulnerability exists in .NET software when the software fails to check the source markup of a file, aka ".NET Framework Remote Code Execution Vulnerability." This affects .NET Framework 4.7.2, Microsoft .NET Framework 4.7.2.
CVE-2018-8242	Microsoft Internet Explorer	Hig	0.50	7.5	0.19		Jul 11, 2018	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is…
CVE-2018-8238	Microsoft Lync	Hig	0.51	7.8	0.06		Jul 11, 2018	A security feature bypass vulnerability exists when Skype for Business or Lync do not properly parse UNC path links shared via messages, aka "Skype for Business and Lync Security Feature Bypass Vulnerability." This affects Skype, Microsoft Lync.
CVE-2018-8232	Microsoft Visual Studio	Hig	0.51	7.8	0.01		Jul 11, 2018	A Tampering vulnerability exists when Microsoft Macro Assembler improperly validates code, aka "Microsoft Macro Assembler Tampering Vulnerability." This affects Microsoft Visual Studio.
CVE-2018-8222	Microsoft Windows Server 2016	Med	0.35	5.3	0.02		Jul 11, 2018	A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10,…
CVE-2018-8206	Microsoft Windows Server 2008	Hig	0.50	7.5	0.12		Jul 11, 2018	A denial of service vulnerability exists when Windows improperly handles File Transfer Protocol (FTP) connections, aka "Windows FTP Server Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012,…
CVE-2018-8202	Microsoft .net Framework	Hig	0.51	7.8	0.01		Jul 11, 2018	An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level, aka ".NET Framework Elevation of Privilege Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET…
CVE-2018-8172	Microsoft Visual Studio	Hig	0.53	7.8	0.34		Jul 11, 2018	A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an unbuilt project, aka "Visual Studio Remote Code Execution Vulnerability." This affects Microsoft Visual Studio, Expression Blend 4.
CVE-2018-8171	Microsoft Asp.net	Hig	0.50	7.5	0.11		Jul 11, 2018	A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka "ASP.NET Security Feature Bypass Vulnerability." This affects ASP.NET, ASP.NET Core 1.1, ASP.NET Core 1.0, ASP.NET Core 2.0, ASP.NET MVC 5.2.
CVE-2018-8125	Microsoft Edge	Hig	0.50	7.5	0.20		Jul 11, 2018	A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8262, CVE-2018-8274, CVE-2018-8275, CVE-2018-8279,…
CVE-2018-0949	Microsoft Internet Explorer	Med	0.43	6.5	0.12		Jul 11, 2018	A security feature bypass vulnerability exists when Microsoft Internet Explorer improperly handles requests involving UNC resources, aka "Internet Explorer Security Feature Bypass Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10.
CVE-2018-3693	Fujitsu M12 1 Firmware	Med	0.37	5.6	0.09		Jul 10, 2018	Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.
CVE-2018-3688	Intel Quartus Prime Programmer And Tools	Hig	0.51	7.8	0.00		Jul 10, 2018	Unquoted service paths in Intel Quartus Prime Programmer and Tools in versions 15.1 - 18.0 allow a local attacker to potentially execute arbitrary code.
CVE-2018-3687	Intel Quartus Ii Programmer And Tools	Hig	0.51	7.8	0.00		Jul 10, 2018	Unquoted service paths in Intel Quartus II Programmer and Tools in versions 11.0 - 15.0 allow a local attacker to potentially execute arbitrary code.
CVE-2018-3684	Intel Quartus Ii	Hig	0.51	7.8	0.00		Jul 10, 2018	Unquoted service paths in Intel Quartus II in versions 11.0 - 15.0 allow a local attacker to potentially execute arbitrary code.
CVE-2018-3683	Intel Quartus Prime	Hig	0.51	7.8	0.00		Jul 10, 2018	Unquoted service paths in Intel Quartus Prime in versions 15.1 - 18.0 allow a local attacker to potentially execute arbitrary code.
CVE-2018-3682	Intel Bmc Firmware	Hig	0.53	8.2	0.00		Jul 10, 2018	BMC Firmware in Intel server boards, compute modules, and systems potentially allow an attacker with administrative privileges to make unauthorized read\writes to the SMBUS.
CVE-2018-3668	Intel Processor Diagnostic Tool	Hig	0.51	7.8	0.00		Jul 10, 2018	Unquoted service paths in Intel Processor Diagnostic Tool (IPDT) before version 4.1.0.27 allows a local attacker to potentially execute arbitrary code.
CVE-2018-3667	Intel Processor Diagnostic Tool	Hig	0.51	7.8	0.00		Jul 10, 2018	Installation tool IPDT (Intel Processor Diagnostic Tool) 4.1.0.24 sets permissions of installed files incorrectly, allowing for execution of arbitrary code and potential privilege escalation.
CVE-2018-3652	Intel Xeon	Hig	0.49	7.6	0.00		Jul 10, 2018	Existing UEFI setting restrictions for DCI (Direct Connect Interface) in 5th and 6th generation Intel Xeon Processor E3 Family, Intel Xeon Scalable processors, and Intel Xeon Processor D Family allows a limited physical presence attacker to potentially access platform secrets…
CVE-2018-3632	Intel Converged Security Manageability Engine Firmware	Med	0.44	6.7	0.00		Jul 10, 2018	Memory corruption in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 6.x / 7.x / 8.x / 9.x / 10.x / 11.0 / 11.5 / 11.6 / 11.7 / 11.10 / 11.20 could be triggered by an attacker with local administrator permission on the system.
CVE-2018-3629	Intel Active Management Technology Firmware	Med	0.42	6.5	0.01		Jul 10, 2018	Buffer overflow in event handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5.x, 6.x, 7.x, 8.x, 9.x, 10.x, and 11.x may allow an attacker to cause a denial of service via the same subnet.
CVE-2018-3628	Intel Active Management Technology Firmware	Hig	0.57	8.8	0.01		Jul 10, 2018	Buffer overflow in HTTP handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5.x, 6.x, 7.x, 8.x, 9.x, 10.x, and 11.x may allow an attacker to execute arbitrary code via the same subnet.
CVE-2018-3627	Intel Converged Security Management Engine	Hig	0.53	8.2	0.01		Jul 10, 2018	Logic bug in Intel Converged Security Management Engine 11.x may allow an attacker to execute arbitrary code via local privileged access.
CVE-2018-3619	Intel Optane Memory	Med	0.30	4.6	0.00		Jul 10, 2018	Information disclosure vulnerability in storage media in systems with Intel Optane memory module with Whole Disk Encryption may allow an attacker to recover data via physical access.

CVE-2018-8304MedJul 11, 2018
Microsoft
Windows Server 2008
risk 0.39cvss 5.9epss 0.13
A denial of service vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle DNS responses, aka "Windows DNSAPI Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008,…
CVE-2018-8301HigJul 11, 2018
Microsoft
Edge
risk 0.50cvss 7.5epss 0.14
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8125, CVE-2018-8262, CVE-2018-8274, CVE-2018-8275,…
CVE-2018-8300HigJul 11, 2018
Microsoft
Sharepoint Server
risk 0.58cvss 8.8epss 0.14
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka "Microsoft SharePoint Remote Code Execution Vulnerability." This affects Microsoft SharePoint.
CVE-2018-8299MedJul 11, 2018
Microsoft
Sharepoint Server
risk 0.35cvss 5.4epss 0.03
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This…
CVE-2018-8298HigKEVJul 11, 2018
Microsoft
Chakracore
risk 0.63cvss 7.5epss 0.75
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8242, CVE-2018-8283, CVE-2018-8287,…
CVE-2018-8297MedJul 11, 2018
Microsoft
Edge
risk 0.29cvss 4.3epss 0.10
An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8289, CVE-2018-8324, CVE-2018-8325.
CVE-2018-8296HigJul 11, 2018
Microsoft
Internet Explorer
risk 0.50cvss 7.5epss 0.17
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 11. This CVE ID is unique from CVE-2018-8242, CVE-2018-8283,…
CVE-2018-8294HigJul 11, 2018
Microsoft
Edge
risk 0.43cvss 7.5epss 0.21
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8280,…
CVE-2018-8291HigJul 11, 2018
Microsoft
Internet Explorer
risk 0.50cvss 7.5epss 0.69
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from…
CVE-2018-8290HigJul 11, 2018
Microsoft
Edge
risk 0.43cvss 7.5epss 0.21
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8280,…
CVE-2018-8289MedJul 11, 2018
Microsoft
Edge
risk 0.29cvss 4.3epss 0.10
An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8297, CVE-2018-8324, CVE-2018-8325.
CVE-2018-8288HigJul 11, 2018
Microsoft
Internet Explorer
risk 0.50cvss 7.5epss 0.69
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from…
CVE-2018-8287HigJul 11, 2018
Microsoft
Internet Explorer
risk 0.43cvss 7.5epss 0.16
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Explorer 10. This CVE ID…
CVE-2018-8286HigJul 11, 2018
Microsoft
Edge
risk 0.43cvss 7.5epss 0.21
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8280,…
CVE-2018-8284HigJul 11, 2018
Microsoft
.net Framework
risk 0.56cvss 8.1epss 0.46
A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".NET Framework Remote Code Injection Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework…
CVE-2018-8283HigJul 11, 2018
Microsoft
Chakracore
risk 0.43cvss 7.5epss 0.15
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8242, CVE-2018-8287, CVE-2018-8288,…
CVE-2018-8282HigJul 11, 2018
Microsoft
Windows Server 2008
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008,…
CVE-2018-8281HigJul 11, 2018
Microsoft
Office
risk 0.52cvss 7.8epss 0.21
A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability." This affects Microsoft Excel Viewer, Microsoft PowerPoint Viewer, Microsoft Office,…
CVE-2018-8280HigJul 11, 2018
Microsoft
Edge
risk 0.43cvss 7.5epss 0.21
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8286,…
CVE-2018-8279HigJul 11, 2018
Microsoft
Edge
risk 0.57cvss 7.5epss 0.71
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8125, CVE-2018-8262, CVE-2018-8274,…
CVE-2018-8278MedJul 11, 2018
Microsoft
Edge
risk 0.40cvss 6.1epss 0.07
A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "Microsoft Edge Spoofing Vulnerability." This affects Microsoft Edge.
CVE-2018-8276MedJul 11, 2018
Microsoft
Edge
risk 0.36cvss 6.5epss 0.06
A security feature bypass vulnerability exists in the Microsoft Chakra scripting engine that allows Control Flow Guard (CFG) to be bypassed, aka "Scripting Engine Security Feature Bypass Vulnerability." This affects Microsoft Edge, ChakraCore.
CVE-2018-8275HigJul 11, 2018
Microsoft
Edge
risk 0.50cvss 7.5epss 0.21
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8125, CVE-2018-8262, CVE-2018-8274,…
CVE-2018-8274HigJul 11, 2018
Microsoft
Edge
risk 0.50cvss 7.5epss 0.21
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8125, CVE-2018-8262, CVE-2018-8275, CVE-2018-8279,…
CVE-2018-8262HigJul 11, 2018
Microsoft
Edge
risk 0.50cvss 7.5epss 0.21
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8125, CVE-2018-8274, CVE-2018-8275, CVE-2018-8279,…
CVE-2018-8260HigJul 11, 2018
Microsoft
.net Framework
risk 0.58cvss 8.8epss 0.16
A Remote Code Execution vulnerability exists in .NET software when the software fails to check the source markup of a file, aka ".NET Framework Remote Code Execution Vulnerability." This affects .NET Framework 4.7.2, Microsoft .NET Framework 4.7.2.
CVE-2018-8242HigJul 11, 2018
Microsoft
Internet Explorer
risk 0.50cvss 7.5epss 0.19
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is…
CVE-2018-8238HigJul 11, 2018
Microsoft
Lync
risk 0.51cvss 7.8epss 0.06
A security feature bypass vulnerability exists when Skype for Business or Lync do not properly parse UNC path links shared via messages, aka "Skype for Business and Lync Security Feature Bypass Vulnerability." This affects Skype, Microsoft Lync.
CVE-2018-8232HigJul 11, 2018
Microsoft
Visual Studio
risk 0.51cvss 7.8epss 0.01
A Tampering vulnerability exists when Microsoft Macro Assembler improperly validates code, aka "Microsoft Macro Assembler Tampering Vulnerability." This affects Microsoft Visual Studio.
CVE-2018-8222MedJul 11, 2018
Microsoft
Windows Server 2016
risk 0.35cvss 5.3epss 0.02
A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10,…
CVE-2018-8206HigJul 11, 2018
Microsoft
Windows Server 2008
risk 0.50cvss 7.5epss 0.12
A denial of service vulnerability exists when Windows improperly handles File Transfer Protocol (FTP) connections, aka "Windows FTP Server Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012,…
CVE-2018-8202HigJul 11, 2018
Microsoft
.net Framework
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level, aka ".NET Framework Elevation of Privilege Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET…
CVE-2018-8172HigJul 11, 2018
Microsoft
Visual Studio
risk 0.53cvss 7.8epss 0.34
A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an unbuilt project, aka "Visual Studio Remote Code Execution Vulnerability." This affects Microsoft Visual Studio, Expression Blend 4.
CVE-2018-8171HigJul 11, 2018
Microsoft
Asp.net
risk 0.50cvss 7.5epss 0.11
A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka "ASP.NET Security Feature Bypass Vulnerability." This affects ASP.NET, ASP.NET Core 1.1, ASP.NET Core 1.0, ASP.NET Core 2.0, ASP.NET MVC 5.2.
CVE-2018-8125HigJul 11, 2018
Microsoft
Edge
risk 0.50cvss 7.5epss 0.20
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8262, CVE-2018-8274, CVE-2018-8275, CVE-2018-8279,…
CVE-2018-0949MedJul 11, 2018
Microsoft
Internet Explorer
risk 0.43cvss 6.5epss 0.12
A security feature bypass vulnerability exists when Microsoft Internet Explorer improperly handles requests involving UNC resources, aka "Internet Explorer Security Feature Bypass Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10.
CVE-2018-3693MedJul 10, 2018
Fujitsu
M12 1 Firmware
risk 0.37cvss 5.6epss 0.09
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.
CVE-2018-3688HigJul 10, 2018
Intel
Quartus Prime Programmer And Tools
risk 0.51cvss 7.8epss 0.00
Unquoted service paths in Intel Quartus Prime Programmer and Tools in versions 15.1 - 18.0 allow a local attacker to potentially execute arbitrary code.
CVE-2018-3687HigJul 10, 2018
Intel
Quartus Ii Programmer And Tools
risk 0.51cvss 7.8epss 0.00
Unquoted service paths in Intel Quartus II Programmer and Tools in versions 11.0 - 15.0 allow a local attacker to potentially execute arbitrary code.
CVE-2018-3684HigJul 10, 2018
Intel
Quartus Ii
risk 0.51cvss 7.8epss 0.00
Unquoted service paths in Intel Quartus II in versions 11.0 - 15.0 allow a local attacker to potentially execute arbitrary code.
CVE-2018-3683HigJul 10, 2018
Intel
Quartus Prime
risk 0.51cvss 7.8epss 0.00
Unquoted service paths in Intel Quartus Prime in versions 15.1 - 18.0 allow a local attacker to potentially execute arbitrary code.
CVE-2018-3682HigJul 10, 2018
Intel
Bmc Firmware
risk 0.53cvss 8.2epss 0.00
BMC Firmware in Intel server boards, compute modules, and systems potentially allow an attacker with administrative privileges to make unauthorized read\writes to the SMBUS.
CVE-2018-3668HigJul 10, 2018
Intel
Processor Diagnostic Tool
risk 0.51cvss 7.8epss 0.00
Unquoted service paths in Intel Processor Diagnostic Tool (IPDT) before version 4.1.0.27 allows a local attacker to potentially execute arbitrary code.
CVE-2018-3667HigJul 10, 2018
Intel
Processor Diagnostic Tool
risk 0.51cvss 7.8epss 0.00
Installation tool IPDT (Intel Processor Diagnostic Tool) 4.1.0.24 sets permissions of installed files incorrectly, allowing for execution of arbitrary code and potential privilege escalation.
CVE-2018-3652HigJul 10, 2018
Intel
Xeon
risk 0.49cvss 7.6epss 0.00
Existing UEFI setting restrictions for DCI (Direct Connect Interface) in 5th and 6th generation Intel Xeon Processor E3 Family, Intel Xeon Scalable processors, and Intel Xeon Processor D Family allows a limited physical presence attacker to potentially access platform secrets…
CVE-2018-3632MedJul 10, 2018
Intel
Converged Security Manageability Engine Firmware
risk 0.44cvss 6.7epss 0.00
Memory corruption in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 6.x / 7.x / 8.x / 9.x / 10.x / 11.0 / 11.5 / 11.6 / 11.7 / 11.10 / 11.20 could be triggered by an attacker with local administrator permission on the system.
CVE-2018-3629MedJul 10, 2018
Intel
Active Management Technology Firmware
risk 0.42cvss 6.5epss 0.01
Buffer overflow in event handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5.x, 6.x, 7.x, 8.x, 9.x, 10.x, and 11.x may allow an attacker to cause a denial of service via the same subnet.
CVE-2018-3628HigJul 10, 2018
Intel
Active Management Technology Firmware
risk 0.57cvss 8.8epss 0.01
Buffer overflow in HTTP handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5.x, 6.x, 7.x, 8.x, 9.x, 10.x, and 11.x may allow an attacker to execute arbitrary code via the same subnet.
CVE-2018-3627HigJul 10, 2018
Intel
Converged Security Management Engine
risk 0.53cvss 8.2epss 0.01
Logic bug in Intel Converged Security Management Engine 11.x may allow an attacker to execute arbitrary code via local privileged access.
CVE-2018-3619MedJul 10, 2018
Intel
Optane Memory
risk 0.30cvss 4.6epss 0.00
Information disclosure vulnerability in storage media in systems with Intel Optane memory module with Whole Disk Encryption may allow an attacker to recover data via physical access.