Multiple vunlerabilities in Microsoft Browsers

Description

Multiple vulnerabilities were found in Microsoft Browsers. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, gain privileges, bypass security restrictions.

Below is a complete list of vulnerabilities:

1. A memory corruption vulnerability in Scripting Engine can be exploited remotely via specially crafted website to execute arbitrary code.
2. An information disclosure vulnerability in Microsoft Edge can be exploited remotely via specially crafted to obtain sensitive information.
3. A memory corruption vulnerability in Microsoft Edge can be exploited remotely via specially crafted website to obtain sensitive information.
4. A memory corruption vulnerability in Chakra Scripting Engine can be exploited remotely via specially crafted website to obtain sensitive information.
5. An elevation of privilege vulnerability in Microsoft Edge can be exploited remotely via specially crafted content to gain privileges.
6. A security feature bypass vulnerability in Scripting Engine can be exploited remotely to bypass security restrictions.

Original advisories

• CVE-2018-0758

• CVE-2018-0762
• CVE-2018-0766
• CVE-2018-0767
• CVE-2018-0768
• CVE-2018-0769
• CVE-2018-0770
• CVE-2018-0772
• CVE-2018-0773
• CVE-2018-0774
• CVE-2018-0775
• CVE-2018-0776
• CVE-2018-0777
• CVE-2018-0778
• CVE-2018-0780
• CVE-2018-0781
• CVE-2018-0800
• CVE-2018-0803
• CVE-2018-0818
• ADV180002

Exploitation

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

• Microsoft-Internet-Explorer
• Microsoft-Edge
• ChakraCore

CVE list

• CVE-2018-0758
  critical
• CVE-2018-0762
  critical
• CVE-2018-0766
  warning
• CVE-2018-0767
  warning
• CVE-2018-0768
  critical
• CVE-2018-0769
  critical
• CVE-2018-0770
  critical
• CVE-2018-0772
  critical
• CVE-2018-0773
  critical
• CVE-2018-0774
  critical
• CVE-2018-0775
  critical
• CVE-2018-0776
  critical
• CVE-2018-0777
  critical
• CVE-2018-0778
  critical
• CVE-2018-0780
  warning
• CVE-2018-0781
  critical
• CVE-2018-0800
  warning
• CVE-2018-0803
  high
• CVE-2018-0818
  critical

KB list

• 4056894
• 4056888
• 4056890
• 4056893
• 4056891
• 4056892
• 4056896
• 4056895
• 4056568
• 4088782
• 4088787
• 4088786
• 4088779
• 4089187
• 4088878
• 4088877
• 4088875
• 4088776
• 4088876

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com