KLA11900 Multiple vulnerabilities in Microsoft Products (ESU)

🗓️ 11 Jul 2017 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 55 Views

Multiple vulnerabilities in Microsoft Products. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, bypass security restrictions, cause denial of service

Reporter	Title	Published	Views	Family All 321
0day.today	Microsoft Windows Kernel - IOCTL 0x120007 (NsiGetParameter) nsiproxy/netio Pool Memory Disclosure	19 Jul 201700:00	–	zdt
GithubExploit	Exploit for CVE-2017-8464	7 Aug 201711:56	–	githubexploit
GithubExploit	Exploit for CVE-2017-8464	7 Aug 201711:56	–	githubexploit
BDU FSTEC	The vulnerability of the Win32k component of the Windows operating system, which allows a hacker to increase their privileges	20 Jul 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows Search component of the Windows operating system, allowing a hacker to execute arbitrary code	20 Jul 201700:00	–	bdu_fstec
BDU FSTEC	Vulnerability of Internet Explorer browser scripting handlers on the Windows operating system, allowing a hacker to execute arbitrary code	3 Aug 201700:00	–	bdu_fstec
BDU FSTEC	Vulnerability of JavaScript handlers in Microsoft Edge and Internet Explorer browsers of the Windows operating system, allowing a perpetrator to execute arbitrary code	3 Aug 201700:00	–	bdu_fstec
BDU FSTEC	Vulnerability of JavaScript handlers in Microsoft Edge and Internet Explorer browsers of the Windows operating system, allowing a perpetrator to execute arbitrary code	3 Aug 201700:00	–	bdu_fstec
BDU FSTEC	Vulnerability of JavaScript handlers in Microsoft Edge and Internet Explorer browsers of the Windows operating system, allowing a perpetrator to execute arbitrary code	3 Aug 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the WordPad text editor on the Windows operating system allows a hacker to execute arbitrary code.	3 Aug 201700:00	–	bdu_fstec

Source	Link
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2017-8486
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2017-8608
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2017-8467
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2017-8606
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2017-8463
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2017-8563
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2017-8590
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2017-8564
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2017-8565
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2017-8607

25 Jan 2024 00:00Current

9.6High risk

Vulners AI Score9.6

CVSS 210

CVSS 39.8

EPSS0.58333