Severity Rating: Critical
Revision Note: V1.0 (October 13, 2015): Bulletin published.
Summary: This security update resolves vulnerabilities in the VBScript and JScript scripting engines in Microsoft Windows. The more severe of the vulnerabilities could allow remote code execution if an attacker hosts a specially crafted website that is designed to exploit the vulnerabilities through Internet Explorer (or leverages a compromised website or a website that accepts or hosts user-provided content or advertisements) and then convinces a user to view the website. An attacker could also embed an ActiveX control marked "safe for initialization" in an application or Microsoft Office document that uses the IE rendering engine to direct the user to the specially crafted website.
Intelligence View
⚡ tsecurity.de Intelligence
MS15-108 - Critical: Security Update for JScript and VBScript to Address Remote Code Execution (3089659) - Version: 1.0
Severity Rating: CriticalRevision Note: V1.0 (October 13, 2015): Bulletin published.Summary: This security update resolves vulnerabilities in the VBScript and…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
13 Quellen
Elcomsoft iOS Forensic Toolkit supports the entire range of iOS 11 devices with iOS 11.4 and 11.4.1 jailbreak
12 weitere Quellen
EElcomsoft Co.Ltd. Corporate…vor 6 JahreniOS Forensic Toolkit 6.0: jailbreak-free extraction for iOS 11 through 13.4.1 EElcomsoft Co.Ltd. Corporate…vor 4 JahreniOS Forensic Toolkit 8.0 beta 3: forensically sound checkm8 extraction of iPhone 7, iOS 15.2 support EElcomsoft Co.Ltd. Corporate…vor 4 JahreniOS Forensic Toolkit 7.10 adds low-level extraction for iOS 14.4 through 14.8 EElcomsoft Co.Ltd. Corporate…vor 4 JahrenElcomsoft iOS Forensic Toolkit 8.0 beta 5: forensically sound checkm8 extraction of Apple Watch 3 EElcomsoft Co.Ltd. Corporate…vor 4 JahreniOS Forensic Toolkit Update supports iPhone 13 EElcomsoft Co.Ltd. Corporate…vor 3 JahreniOS Forensic Toolkit 8.20 and 7.80 add partial file system extraction for iOS 16.1.2 and older
+6
9 Quellen
ElcomSoft Launches a New Product to Recover Passwords to iPhone and iPod Touch Backups. Become a beta tester of Elcomsoft iPhone Password Breaker and get a reward.
8 weitere Quellen
EElcomsoft Co.Ltd. Corporate…vor 16 JahrenUpdated Elcomsoft iPhone Password Breaker supports iOS 4 EElcomsoft Co.Ltd. Corporate…vor 14 JahrenElcomsoft iOS Forensic Toolkit Update: Acquisition of iPhone 4S and iPad 2 Devices EElcomsoft Co.Ltd. Corporate…vor 9 JahrenElcomsoft Phone Breaker 7.0 Extracts Passwords from iCloud Keychain EElcomsoft Co.Ltd. Corporate…vor 7 JahrenElcomsoft iOS Forensic Toolkit 4.10 Adds Support for DFU/Recovery Modes and New iPhone Models EElcomsoft Co.Ltd. Corporate…vor 6 JahrenElcomsoft iOS Forensic Toolkit 6.40: iPhone 5 and 5c passcode unlock EElcomsoft Co.Ltd. Corporate…vor 5 JahrenElcomsoft iOS Forensic Toolkit 7.0: low-level extraction without a jailbreak for iPhone 12, iOS 14.x
+2
8 Quellen
CVE-2026-21632 | Joomla CMS up to 5.4.3/6.0.3 Article Title cross site scripting
7 weitere Quellen
VVulDB Updatesvor 45 Min.CVE-2026-21631 | Joomla CMS up to 5.4.3/6.0.3 Multilingual Associations cross site scripting VVulDB Updatesvor 5 Std.CVE-2026-5254 | welovemedia FFmate up to 2.0.15 Webhook AppJsonTreeView.vue cross site scripting VVulDB Updatesvor 4 Std.CVE-2026-114130 | Nuxt up to 4.5.99 NuxtLink/no-pages router cross site scripting (EUVD-2026-107413) VVulDB Updatesvor 3 Std.CVE-2026-109209 | plugins360 All-in-One Video Gallery Plugin up to 4.9.7 on WordPress Input Sanitization save_meta_data embedcode cross site scripting (EUVD-2026-111564) VVulDB Updatesvor 3 Std.CVE-2026-111314 | cservit Affiliate-Toolkit Plugin up to 3.9.2 on WordPress AJAX handler atkp_product_producturl cross site scripting (EUVD-2026-111563) VVulDB Updatesvor 3 Std.CVE-2026-97019 | mohammed_kaludi Amp for Wp Plugin up to 1.1.17 on WordPress Shortcode wp_filter_kses headline-* cross site scripting (EUVD-2026-111562)
+1
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/87/it-security-nachrichten/ms15-108-critical-security-update-for-jscript-and-vbscript-to-address-remote-code-execution-3089659-version-10/