Scott Bell

The issue is related to improper handling of objects in memory by DirectX, which can lead to information disclosure. This can be exploited by an attacker using a specially crafted application to reveal protected information.

A remote code execution issue exists due to improper memory object access in Internet Explorer.

The issue is related to the handling of objects in memory, which could allow a remote attacker to obtain confidential information from a process's memory using a specially crafted website. This could potentially be used to further compromise a target system.

The issue is caused by a buffer overflow in memory, allowing a remote attacker to execute arbitrary code in the context of the current user.

The issue is caused by a buffer overflow in the Chakra JavaScript engine of Microsoft Edge, allowing a remote attacker to execute arbitrary code or cause a denial of service by accessing a specially crafted website. The vulnerability can also corrupt memory when handling objects, enabling an attacker to execute arbitrary code in the context of the current user. If the user has administrative rights, the attacker could gain control of the system, install programs, view or modify data, or create new accounts with full user rights.

The issue allows remote attackers to execute arbitrary code or cause a denial of service due to heap memory corruption. This can be achieved via a document containing crafted text in conjunction with a Cascading Style Sheets (CSS) token sequence containing properties related to vertical text. The vulnerability is related to the SetBreaks function.

A remote code execution issue exists in the way affected components handle specially crafted font files. Exploitation of this issue allows remote code execution if a user opens a specially crafted file or webpage, enabling an attacker to gain complete control of the system. This control allows the attacker to install programs, view, change, or delete data, and create new accounts with full administrative rights.

The issue is related to memory handling errors in Internet Explorer, which can be exploited by an attacker to remotely execute arbitrary code in the context of the current user.

The issue is related to improper handling of user input data, specifically with CSS objects and memory access. This allows remote attackers to execute arbitrary code or cause a denial of service via a specially crafted website. The vulnerability is also described as a use-after-free error when accessing the ClayoutBlock object, which can lead to memory corruption and arbitrary code execution.

The issue is related to memory corruption, allowing remote attackers to execute arbitrary code or cause a denial of service. This is due to improper access to objects in memory, which could lead to memory corruption and allow an attacker to execute arbitrary code in the context of the current user. The vulnerability is also associated with a lack of input validation, which can be exploited by a remote attacker.

The issue is related to memory corruption, allowing remote attackers to execute arbitrary code or cause a denial of service via a crafted web site. This is due to improper access to objects in memory, which could corrupt memory and enable an attacker to execute arbitrary code in the context of the current user.

The issue is related to improper memory access, which could lead to memory corruption. This allows an attacker to potentially execute arbitrary code in the context of the current user by exploiting the vulnerability through a specially crafted website. The vulnerability is also related to insufficient input validation.

A remote code execution issue exists due to improper memory object access, potentially leading to memory corruption. This could allow an attacker to execute arbitrary code in the context of the current user by visiting a crafted web site.

The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via a crafted web site. This occurs because Internet Explorer improperly accesses an object in memory, potentially corrupting it in a way that enables an attacker to execute arbitrary code in the context of the current user.

A remote code execution issue exists due to improper memory object access, potentially leading to memory corruption. This could allow an attacker to execute arbitrary code in the context of the current user. The issue can be triggered via a crafted web site.

A use-after-free issue allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object. This vulnerability may corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user.

The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via unspecified vectors in the str unescape function of the JavaScript engine.

The issue allows remote attackers to cause a denial of service or possibly execute arbitrary code via vectors involving use of the file-open dialog in a child window, related to the `IUnknown QueryService` function in the Windows shlwapi.dll library.

The issue is related to a stack-based buffer overflow in the SetActiveXGUID method within the VersionInfo ActiveX control. This can be exploited by remote attackers to execute arbitrary code by providing a long string in the argument.