Decoder

The issue is related to memory safety bugs that could potentially be exploited to run arbitrary code. These bugs are present in the processing of HTML content and may cause memory corruption. The vulnerability could allow a remote attacker to execute arbitrary code.

The issue is related to the improper handling of data by JavaScript engines in Microsoft browsers, potentially allowing a remote attacker to execute arbitrary code in the context of the current user by corrupting memory when handling objects. If the current user has administrative rights, a successful exploitation could lead to the attacker gaining control of the affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

The issue is caused by a buffer overflow in dynamic memory, allowing remote attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors. This can result in memory corruption and application crash.

The issue is related to multiple unspecified vulnerabilities in the browser engine, which can be exploited by remote attackers to cause a denial of service, resulting in memory corruption and application crash, or possibly execute arbitrary code via unknown vectors.

The issue allows a remote attacker to cause a denial of service, which includes memory corruption and application crash, or possibly execute arbitrary code. The estimated number of potentially affected devices and details about real-world incidents are not specified.

The issue allows a remote attacker to cause a denial of service, which includes memory corruption and application crash, or possibly execute arbitrary code. This is due to multiple unspecified vulnerabilities in the browser engine.

The issue allows remote attackers to cause a denial of service, specifically an X.509 certificate parsing outage, by using a crafted certificate that does not utilize ASCII character encoding in a required context. This can lead to a service disruption.

The issue allows remote attackers to cause a denial of service, resulting in memory corruption and application crash, or possibly execute arbitrary code via unknown vectors.

The issue allows remote attackers to cause a denial of service, specifically an invalid read operation, via unspecified vectors.

The issue is related to improper const lookups in Google V8, which can be exploited by remote attackers via a crafted web site, potentially causing a denial of service (application crash) or having other unspecified impacts.

The issue is related to multiple unspecified vulnerabilities in the browser engine, allowing remote attackers to cause a denial of service, which includes memory corruption and application crash, or possibly execute arbitrary code via unknown vectors.

A buffer overflow issue exists in the JavaScript engine, potentially allowing remote attackers to execute arbitrary code. This issue involves vectors related to non-local JavaScript variables, specifically an "upvarMap" problem.

The issue allows remote attackers to cause a denial of service, resulting in memory corruption and application crash, or possibly execute arbitrary code. This is related to the `TraceRecorder::snapshot` function in `js/src/jstracer.cpp` and other unspecified vectors.