Multiple vulnerabilities in Microsoft Browsers

Description

Multiple serious vulnerabilities were found in Microsoft Browsers Malicious users can exploit these vulnerabilities to execute arbitrary code.

Below is a complete list of vulnerabilities:

1. A memory corruption vulnerability in Chakra Scripting Engine can be exploited remotely via specially crafted website to execute arbitrary code.
2. A memory corruption vulnerability in Chakra Scripting Engine can be exploited remotely via specially crafted website to execute arbitrary code.
3. A memory corruption vulnerability in Scripting Engine can be exploited remotely via specially crafted website to execute arbitrary code.
4. A memory corruption vulnerability in Chakra Scripting Engine can be exploited remotely via specially crafted website to execute arbitrary code.
5. A memory corruption vulnerability in Internet Explorer can be exploited remotely via specially crafted website to execute arbitrary code.
6. A remote code execution vulnerability in Windows VBScript Engine can be exploited remotely via specially crafted website to execute arbitrary code.
7. A memory corruption vulnerability in Chakra Scripting Engine can be exploited remotely via specially crafted website to execute arbitrary code.
8. A remote code execution vulnerability in Internet Explorer can be exploited remotely via specially crafted content to execute arbitrary code.
9. A memory corruption vulnerability in Chakra Scripting Engine can be exploited remotely via specially crafted website to execute arbitrary code.

Original advisories

• CVE-2018-8583

• CVE-2018-8624
• CVE-2018-8643
• CVE-2018-8617
• CVE-2018-8631
• CVE-2018-8625
• CVE-2018-8629
• CVE-2018-8619
• CVE-2018-8618

Exploitation

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

• Microsoft-Internet-Explorer
• Microsoft-Edge

CVE list

• CVE-2018-8583
  critical
• CVE-2018-8624
  critical
• CVE-2018-8629
  critical
• CVE-2018-8617
  critical
• CVE-2018-8618
  critical
• CVE-2018-8643
  critical
• CVE-2018-8631
  critical
• CVE-2018-8625
  critical
• CVE-2018-8619
  critical

KB list

• 4471329
• 4471323
• 4471324
• 4471327
• 4471321
• 4471332
• 4471320
• 4471330
• 4471318
• 4470199

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com