Veille CVE

Mercredi 25 mai 2022

3 CVE sur 34

  1. CVE-2015-0071 6.5 Moyenne Exploitée

    Microsoft internet explorer

    Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulnerability."

  2. CVE-2013-7331 6.5 Moyenne Exploitée

    Microsoft internet explorer

    The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the existence of local pathnames, UNC share pathnames, intranet hostnames, and intranet IP addresses by examining error codes, as demonstrated by a res:// URL, and exploited in the wild in February 2014.

  3. CVE-2013-3896 5.5 Moyenne Exploitée

    Microsoft silverlight

    Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application, aka "Silverlight Vulnerability."