Skylined

Name of the Vulnerable Software and Affected Versions: Internet Explorer versions in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 Description: An information disclosure issue exists due to how Internet Explorer handles objects in memory. This could allow an attacker to obtain information to further compromise the user's system. Recommendations: For Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

An out-of-bounds read occurs when applying style rules to pseudo-elements, such as `::first-line`, using cached style data. This issue can be exploited by a remote attacker to cause a denial of service.

The issue is related to the handling of objects in memory, which can lead to information disclosure. An attacker could exploit this by using a specially crafted web site to obtain sensitive information. This could potentially allow the attacker to further compromise a target system.

The issue is related to memory corruption and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site. Multiple remote code execution vulnerabilities exist in the way that Internet Explorer and Microsoft Edge access and handle objects in memory, which could corrupt memory and allow an attacker to execute arbitrary code in the context of the current user. If the current user has administrative user rights, the attacker could take control of an affected system, install programs, view, change, or delete data, or create new accounts with full user rights.

The issue is related to memory corruption and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site. Multiple remote code execution vulnerabilities exist in the way that Internet Explorer accesses objects in memory, which could corrupt memory and allow an attacker to execute arbitrary code in the context of the current user. If the current user has administrative user rights, the attacker could take control of the affected system, install programs, view, change, or delete data, or create new accounts with full user rights.

The issue is caused by a buffer overflow. It allows a remote attacker to execute arbitrary code or cause a denial of service (memory corruption) by using a specially crafted website. The vulnerability exists due to improper access to objects in memory, which could corrupt memory and allow an attacker to execute arbitrary code in the context of the current user. If the user has administrative rights, the attacker could take control of the system, install programs, view or modify data, or create new accounts with full rights.

The issue is caused by a buffer overflow. It may allow a remote attacker to execute arbitrary code or cause a denial of service (memory corruption) by using a specially crafted web site.

The issue is caused by a buffer overflow. It allows a remote attacker to execute arbitrary code or cause a denial of service (memory corruption) by using a specially crafted website. The vulnerability occurs when Internet Explorer improperly accesses objects in memory, potentially corrupting memory and allowing an attacker to execute arbitrary code in the context of the current user. If the user has administrative rights, the attacker could take control of the system, install programs, view or modify data, or create new accounts with full user rights.

The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via a crafted web site. This is caused by improper access to objects in memory, potentially leading to memory corruption that enables an attacker to execute arbitrary code in the context of the current user. If the user has administrative rights, a successful exploitation could grant the attacker control over the affected system, allowing them to install programs, view, change, or delete data, or create new accounts with full user rights.

A remote code execution issue exists due to a memory corruption flaw in the VBScript and JScript engines. This allows attackers to execute arbitrary code or cause a denial of service via a crafted replace operation with a JavaScript regular expression. An attacker who successfully exploits this issue could gain the same user rights as the current user, potentially taking control of an affected system if the user has administrative rights.

The issue is related to a use-after-free vulnerability in the MediaStream playback feature. This vulnerability allows remote attackers to execute arbitrary code via unspecified use of the Web Audio API. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.

The issue is related to a use-after-free vulnerability in the accessibility implementation. This vulnerability can be exploited by remote attackers to cause a denial of service or possibly have other unspecified impacts. The exploitation is possible due to the lack of certain validity checks for accessibility-tree data structures.

The issue is related to memory management errors. It could allow a remote attacker to execute arbitrary code or cause a denial of service by using a specially crafted website. This vulnerability could corrupt memory, enabling an attacker to execute arbitrary code in the context of the current user. If the user has administrative rights, a successful exploitation could grant the attacker complete control over the affected system, allowing them to install programs, view, change, or delete data, or create new accounts with full user rights.

The issue is related to a name conflict in the `getHiddenProperty` function, which can be exploited by remote attackers to cause a denial of service or possibly have other unspecified impacts. This can be achieved through JavaScript code that adds an `AudioContext` event listener and triggers "type confusion." The estimated number of potentially affected devices worldwide is not specified.

Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-8967 and CVE-2015-0044.

The issue is related to a use-after-free condition in the CMapElement, which can lead to remote code execution.

A remote code execution issue exists in the way the VBScript engine handles objects in memory when rendered in Internet Explorer. This issue may corrupt memory, allowing an attacker to execute arbitrary code in the context of the current user. If the current user has administrative rights, an attacker could take complete control of the affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via a crafted web site. This is caused by improper access to objects in memory, which could corrupt memory and allow an attacker to execute arbitrary code in the context of the current user.

Remote code execution vulnerabilities exist due to improper access to objects in memory. These vulnerabilities could corrupt memory, allowing an attacker to execute arbitrary code in the context of the current user.

The issue is related to incorrect access to objects in memory, which can cause a memory error and allow an attacker to execute arbitrary code in the context of the current user. This can be achieved via a crafted web site, potentially leading to memory corruption or denial of service.