CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Windows VBScript Engine Remote Code Execution Vulnerability (CVE-2018-8174) Technical Advisory
[Affected Scope] Internet Explorer and Microsoft Office applications utilizing the VBScript engine on Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016
[Impact] Remote attackers can execute arbitrary code with the privileges of the current user via malicious web pages or crafted Office documents
[Mitigation] Apply the official Microsoft cumulative security updates or disable VBScript execution via registry modifications
Internet Explorer JScript and VBScript Engines Remote Code Execution Vulnerability (CVE-2016-0189)
[Affected Scope] Microsoft JScript 5.8 and VBScript 5.7/5.8 engines utilized in Internet Explorer 9 through 11
[Impact] Remote attackers can execute arbitrary code or cause a denial of service (memory corruption) via a specially crafted website
[Mitigation] Apply official Microsoft security updates (MS16-051, MS16-053) or restrict VBScript/JScript execution via registry configurations