Multiple vunlerabilities in Microsoft Browsers

Описание

Multiple vulnerabilities were found in Microsoft Browsers. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, gain privileges, bypass security restrictions.

Below is a complete list of vulnerabilities:

1. A memory corruption vulnerability in Scripting Engine can be exploited remotely via specially crafted website to execute arbitrary code.
2. An information disclosure vulnerability in Microsoft Edge can be exploited remotely via specially crafted to obtain sensitive information.
3. A memory corruption vulnerability in Microsoft Edge can be exploited remotely via specially crafted website to obtain sensitive information.
4. A memory corruption vulnerability in Chakra Scripting Engine can be exploited remotely via specially crafted website to obtain sensitive information.
5. An elevation of privilege vulnerability in Microsoft Edge can be exploited remotely via specially crafted content to gain privileges.
6. A security feature bypass vulnerability in Scripting Engine can be exploited remotely to bypass security restrictions.

Первичный источник обнаружения

• CVE-2018-0758
  CVE-2018-0762
  CVE-2018-0766
  CVE-2018-0767
  CVE-2018-0768
  CVE-2018-0769
  CVE-2018-0770
  CVE-2018-0772
  CVE-2018-0773
  CVE-2018-0774
  CVE-2018-0775
  CVE-2018-0776
  CVE-2018-0777
  CVE-2018-0778
  CVE-2018-0780
  CVE-2018-0781
  CVE-2018-0800
  CVE-2018-0803
  CVE-2018-0818
  ADV180002
  

Эксплуатация

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Связанные продукты

• Microsoft-Internet-Explorer
• Microsoft-Edge
• ChakraCore

Список CVE

• CVE-2018-0758
  critical
• CVE-2018-0762
  critical
• CVE-2018-0766
  warning
• CVE-2018-0767
  warning
• CVE-2018-0768
  critical
• CVE-2018-0769
  critical
• CVE-2018-0770
  critical
• CVE-2018-0772
  critical
• CVE-2018-0773
  critical
• CVE-2018-0774
  critical
• CVE-2018-0775
  critical
• CVE-2018-0776
  critical
• CVE-2018-0777
  critical
• CVE-2018-0778
  critical
• CVE-2018-0780
  warning
• CVE-2018-0781
  critical
• CVE-2018-0800
  warning
• CVE-2018-0803
  high
• CVE-2018-0818
  critical

Список KB

• 4056894
• 4056888
• 4056890
• 4056893
• 4056891
• 4056892
• 4056896
• 4056895
• 4056568
• 4088782
• 4088787
• 4088786
• 4088779
• 4089187
• 4088878
• 4088877
• 4088875
• 4088776
• 4088876

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com