Soyeon Park

Processing maliciously crafted web content may lead to an unexpected process crash due to improper memory handling.

The issue is related to type confusion in JavaScript, which can be exploited by a remote attacker to potentially cause heap corruption via a crafted HTML page. This could allow the attacker to gain unauthorized access to confidential data, cause a denial of service, and impact data integrity.

The issue is related to type confusion in JavaScript, which can lead to heap corruption. A remote attacker can potentially exploit this issue via a crafted HTML page, allowing them to access confidential data, compromise data integrity, and cause a denial of service.

The issue is related to a type confusion in JavaScript, which can lead to heap corruption. A remote attacker can potentially exploit this issue via a crafted HTML page, allowing unauthorized access to sensitive information and potentially disrupting its integrity and availability.

Multiple memory corruption issues were addressed with improved memory handling. Processing maliciously crafted web content may lead to arbitrary code execution.

The issue arises from multiple memory corruption problems that have been resolved through enhanced memory handling. Processing maliciously crafted web content may lead to arbitrary code execution.

The issue is related to errors in handling objects in memory by the ChakraCore JavaScript engine. It could allow a remote attacker to execute arbitrary code using a specially crafted web page. The vulnerability can corrupt memory, enabling an attacker to gain the same user rights as the current user. If the current user has administrative rights, the attacker could take control of the affected system, install programs, view, change, or delete data, or create new accounts with full user rights.

The issue is related to memory corruption and use after free, which may lead to arbitrary code execution when processing maliciously crafted web content. This can allow a remote attacker to execute arbitrary code.

The issue is caused by a buffer overflow in memory, which may allow a remote attacker to execute arbitrary code using a specially crafted website. Processing maliciously crafted web content may lead to arbitrary code execution.

An information disclosure issue exists due to the scripting engine's improper handling of objects in memory. This could allow a remote attacker to disclose protected information using a specially crafted web page. The attacker could obtain information to further compromise the user's system.

A remote code execution issue exists due to errors in handling objects in memory by the scripting engine in Microsoft browsers. This could allow a remote attacker to execute arbitrary code in the context of the current user, potentially gaining the same user rights as the current user. If the current user has administrative rights, the attacker could take control of the affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.