deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-10050
Published: 2018-04-11
Description: iScripts eSwap v2.4 has SQL injection via the "registration_settings.php" ddlFree parameter in the Admin Panel.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://pastebin.com/UDEsFq3u; https://pastebin.com/UDEsFq3u
CVE: CVE-2018-10051
Published: 2018-04-11
Description: iScripts SupportDesk v4.3 has XSS via the staff/inteligentsearchresult.php txtinteligentsearch parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://pastebin.com/aQn3Cr2G; https://pastebin.com/aQn3Cr2G
CVE: CVE-2018-10052
Published: 2018-04-11
Description: iScripts SupportDesk v4.3 has XSS via the admin/inteligentsearchresult.php txtinteligentsearch parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://pastebin.com/aeqYLK9u; https://pastebin.com/aeqYLK9u
CVE: CVE-2018-10054
Published: 2018-04-11
Description: H2 1.4.197, as used in Datomic before 0.9.5697 and other products, allows remote code execution because CREATE ALIAS can execute arbitrary Java code. NOTE: the vendor's position is "h2 is not designed to be run outside of a secure environment."
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://blog.datomic.com/2018/03/important-security-update.html; https://forum.datomic.com/t/important-security-update-0-9-5697/379; https://github.com/h2database/h2database/issues/1225
CVE: CVE-2018-3886
Published: 2018-04-11
Description: A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.53. A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this vulnerability and gain code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0561; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0561
CVE: CVE-2018-3887
Published: 2018-04-11
Description: A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.53. A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this vulnerability and gain code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0562; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0562
CVE: CVE-2018-3888
Published: 2018-04-11
Description: A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.53. A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this vulnerability and gain code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0563; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0563
CVE: CVE-2018-0870
Published: 2018-04-12
Description: A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 11. This CVE ID is unique from CVE-2018-0991, CVE-2018-0997, CVE-2018-1018, CVE-2018-1020.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/103595; http://www.securitytracker.com/id/1040653; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0870
CVE: CVE-2018-0887
Published: 2018-04-12
Description: An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0960, CVE-2018-0968, CVE-2018-0969, CVE-2018-0970, CVE-2018-0971, CVE-2018-0972, CVE-2018-0973, CVE-2018-0974, CVE-2018-0975.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-665
References: http://www.securityfocus.com/bid/103629; http://www.securitytracker.com/id/1040657; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0887
CVE: CVE-2018-0890
Published: 2018-04-12
Description: A security feature bypass vulnerability exists when Active Directory incorrectly applies Network Isolation settings, aka "Active Directory Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.
CVSS Score: 5.3 (MEDIUM)
References: http://www.securityfocus.com/bid/103649; http://www.securitytracker.com/id/1040663; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0890
CVE: CVE-2018-0892
Published: 2018-04-12
Description: An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-0998.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/103636; http://www.securitytracker.com/id/1040650; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0892
CVE: CVE-2018-0920
Published: 2018-04-12
Description: A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Excel. This CVE ID is unique from CVE-2018-1011, CVE-2018-1027, CVE-2018-1029.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/103608; http://www.securitytracker.com/id/1040652; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0920
CVE: CVE-2018-0950
Published: 2018-04-12
Description: An information disclosure vulnerability exists when Office renders Rich Text Format (RTF) email messages containing OLE objects when a message is opened or previewed, aka "Microsoft Office Information Disclosure Vulnerability." This affects Microsoft Word, Microsoft Office. This CVE ID is unique from CVE-2018-1007.
CVSS Score: 6.5 (MEDIUM)
References: http://www.securityfocus.com/bid/103642; http://www.securitytracker.com/id/1040654; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0950
CVE: CVE-2018-0956
Published: 2018-04-12
Description: A denial of service vulnerability exists in the HTTP 2.0 protocol stack (HTTP.sys) when HTTP.sys improperly parses specially crafted HTTP 2.0 requests, aka "HTTP.sys Denial of Service Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/103650; http://www.securitytracker.com/id/1040661; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0956
CVE: CVE-2018-0957
Published: 2018-04-12
Description: An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Information Disclosure Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0964.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/103628; http://www.securitytracker.com/id/1040662; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0957
CVE: CVE-2018-0960
Published: 2018-04-12
Description: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0887, CVE-2018-0968, CVE-2018-0969, CVE-2018-0970, CVE-2018-0971, CVE-2018-0972, CVE-2018-0973, CVE-2018-0974, CVE-2018-0975.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/103663; http://www.securitytracker.com/id/1040657; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0960
CVE: CVE-2018-0963
Published: 2018-04-12
Description: An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/103647; http://www.securitytracker.com/id/1040657; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0963
CVE: CVE-2018-0964
Published: 2018-04-12
Description: An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Information Disclosure Vulnerability." This affects Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0957.
CVSS Score: 6.1 (MEDIUM)
References: http://www.securityfocus.com/bid/103646; http://www.securitytracker.com/id/1040662; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0964
CVE: CVE-2018-0966
Published: 2018-04-12
Description: A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.
CVSS Score: 3.3 (LOW)
CWE: CWE-367
References: http://www.securityfocus.com/bid/103622; http://www.securitytracker.com/id/1040660; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0966
CVE: CVE-2018-0967
Published: 2018-04-12
Description: A denial of service vulnerability exists in the way that Windows SNMP Service handles malformed SNMP traps, aka "Windows SNMP Service Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
CVSS Score: 5.3 (MEDIUM)
References: http://www.securityfocus.com/bid/103652; http://www.securitytracker.com/id/1040659; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0967
CVE: CVE-2018-0968
Published: 2018-04-12
Description: An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0887, CVE-2018-0960, CVE-2018-0969, CVE-2018-0970, CVE-2018-0971, CVE-2018-0972, CVE-2018-0973, CVE-2018-0974, CVE-2018-0975.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/103643; http://www.securitytracker.com/id/1040657; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0968
CVE: CVE-2018-0969
Published: 2018-04-12
Description: An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0887, CVE-2018-0960, CVE-2018-0968, CVE-2018-0970, CVE-2018-0971, CVE-2018-0972, CVE-2018-0973, CVE-2018-0974, CVE-2018-0975.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/103644; http://www.securitytracker.com/id/1040657; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0969
CVE: CVE-2018-0970
Published: 2018-04-12
Description: An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0887, CVE-2018-0960, CVE-2018-0968, CVE-2018-0969, CVE-2018-0971, CVE-2018-0972, CVE-2018-0973, CVE-2018-0974, CVE-2018-0975.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/103645; http://www.securitytracker.com/id/1040657; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0970
CVE: CVE-2018-0971
Published: 2018-04-12
Description: An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0887, CVE-2018-0960, CVE-2018-0968, CVE-2018-0969, CVE-2018-0970, CVE-2018-0972, CVE-2018-0973, CVE-2018-0974, CVE-2018-0975.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/103648; http://www.securitytracker.com/id/1040657; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0971
CVE: CVE-2018-0972
Published: 2018-04-12
Description: An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0887, CVE-2018-0960, CVE-2018-0968, CVE-2018-0969, CVE-2018-0970, CVE-2018-0971, CVE-2018-0973, CVE-2018-0974, CVE-2018-0975.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/103659; http://www.securitytracker.com/id/1040657; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0972
CVE: CVE-2018-0973
Published: 2018-04-12
Description: An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0887, CVE-2018-0960, CVE-2018-0968, CVE-2018-0969, CVE-2018-0970, CVE-2018-0971, CVE-2018-0972, CVE-2018-0974, CVE-2018-0975.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/103660; http://www.securitytracker.com/id/1040657; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0973
CVE: CVE-2018-0974
Published: 2018-04-12
Description: An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0887, CVE-2018-0960, CVE-2018-0968, CVE-2018-0969, CVE-2018-0970, CVE-2018-0971, CVE-2018-0972, CVE-2018-0973, CVE-2018-0975.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/103661; http://www.securitytracker.com/id/1040657; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0974
CVE: CVE-2018-0975
Published: 2018-04-12
Description: An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0887, CVE-2018-0960, CVE-2018-0968, CVE-2018-0969, CVE-2018-0970, CVE-2018-0971, CVE-2018-0972, CVE-2018-0973, CVE-2018-0974.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/103662; http://www.securitytracker.com/id/1040657; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0975
CVE: CVE-2018-0976
Published: 2018-04-12
Description: A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests, aka "Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
CVSS Score: 5.3 (MEDIUM)
References: http://www.securityfocus.com/bid/103651; http://www.securitytracker.com/id/1040658; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0976
CVE: CVE-2018-0979
Published: 2018-04-12
Description: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0980, CVE-2018-0990, CVE-2018-0993, CVE-2018-0994, CVE-2018-0995, CVE-2018-1019.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/103625; http://www.securitytracker.com/id/1040650; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0979
CVE: CVE-2018-0980
Published: 2018-04-12
Description: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0979, CVE-2018-0990, CVE-2018-0993, CVE-2018-0994, CVE-2018-0995, CVE-2018-1019.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/103626; http://www.securitytracker.com/id/1040650; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0980
CVE: CVE-2018-0981
Published: 2018-04-12
Description: An information disclosure vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Information Disclosure Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-0987, CVE-2018-0989, CVE-2018-1000.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-787
References: http://www.securityfocus.com/bid/103621; http://www.securitytracker.com/id/1040653; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0981
CVE: CVE-2018-0987
Published: 2018-04-12
Description: An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Internet Explorer, aka "Scripting Engine Information Disclosure Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-0981, CVE-2018-0989, CVE-2018-1000.
CVSS Score: 4.3 (MEDIUM)
References: http://www.securityfocus.com/bid/103623; http://www.securitytracker.com/id/1040653; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0987
CVE: CVE-2018-0988
Published: 2018-04-12
Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-0996, CVE-2018-1001.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/103615; http://www.securitytracker.com/id/1040653; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0988
CVE: CVE-2018-0989
Published: 2018-04-12
Description: An information disclosure vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Information Disclosure Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-0981, CVE-2018-0987, CVE-2018-1000.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-787
References: http://www.securityfocus.com/bid/103624; http://www.securitytracker.com/id/1040653; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0989
CVE: CVE-2018-0990
Published: 2018-04-12
Description: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0979, CVE-2018-0980, CVE-2018-0993, CVE-2018-0994, CVE-2018-0995, CVE-2018-1019.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/103604; http://www.securitytracker.com/id/1040650; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0990
CVE: CVE-2018-0991
Published: 2018-04-12
Description: A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-0870, CVE-2018-0997, CVE-2018-1018, CVE-2018-1020.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/103614; http://www.securitytracker.com/id/1040653; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0991
CVE: CVE-2018-0993
Published: 2018-04-12
Description: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0979, CVE-2018-0980, CVE-2018-0990, CVE-2018-0994, CVE-2018-0995, CVE-2018-1019.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/103627; http://www.securitytracker.com/id/1040650; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0993
CVE: CVE-2018-0994
Published: 2018-04-12
Description: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0979, CVE-2018-0980, CVE-2018-0990, CVE-2018-0993, CVE-2018-0995, CVE-2018-1019.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/103630; http://www.securitytracker.com/id/1040650; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0994