CVE-2017-8723

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page containing malicious content, due to the way that the Edge Content Security Policy CSP validates certain specially crafted documents, aka "Microsoft Edge...

CVE-2017-8628

CVE-2017-8628 concerns a spoofing vulnerability in Microsoft’s Bluetooth driver stack for Windows platforms. The flaw allows an attacker within physical proximity and with Bluetooth enabled to initiate a Bluetooth connection and perform a man-in-the-middle attack, potentially forcing traffic thro...

CVE-2017-8648

Microsoft Edge in Windows 10 Version 1703 is affected by CVE-2017-8648, an information-disclosure vulnerability arising from how Edge handles objects in memory. An attacker could obtain information that may facilitate further compromise of the user’s system. The connected update (KB4038781) is ci...

CVE-2017-8739

CVE-2017-8739 is a patchable information-disclosure vulnerability affecting Microsoft Edge in Windows 10 (1703). The root cause is improper handling of objects in memory by the Edge scripting engine, allowing an attacker to obtain information that could aid further compromise. Public advisories (...

CVE-2017-8739

Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to obtain information to further compromise the user's system, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability"...

CVE-2017-8628

Microsoft Bluetooth Driver in Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 allows a spoofing vulnerability due to Microsoft's implementation of the Bluetooth stack, aka "Microsoft Bluetooth Driver Spoofing Vulnerability"...

CVE-2017-8756

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft Edge accesses objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE I...

CVE-2017-8729

Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from...

CVE-2017-8751

Microsoft Edge in Microsoft Windows 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft Edge accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8731, CVE-2017-8734, a...

CVE-2017-8753

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption...

CVE-2017-8597

Microsoft Edge in Windows 10 Version 1703 is affected by CVE-2017-8597, an information disclosure vulnerability caused by how Edge handles objects in memory. Exploitation could let an attacker obtain information to further compromise the system. The provided documents do not include specific expl...

CVE-2017-8716

Windows Control Flow Guard in Microsoft Windows 10 Version 1703 allows an attacker to run a specially crafted application to bypass Control Flow Guard, due to the way that Control Flow Guard handles objects in memory, aka "Windows Security Feature Bypass Vulnerability"...

CVE-2017-8724

CVE-2017-8724 describes a spoofing vulnerability in Microsoft Edge on Windows 10 Version 1703, caused by the browser’s handling/parsing of HTTP content. An attacker could trick a user by redirecting to a specially crafted website. The CNVD entry confirms Edge spoofing in Edge on Windows 10 1703; ...

Microsoft Edge Information Disclosure Vulnerability (CNVD-2017-28655)

Microsoft Windows 10 is an operating system released by Microsoft Corporation.Microsoft Edge is a web browser that comes with the system.scripting engine is a JavaScript engine component. An information disclosure vulnerability exists in the scripting engine of Edge in Microsoft Windows 10 versio...

Microsoft Windows Hyper-V Information Disclosure Vulnerability (CNVD-2017-32912)

Microsoft Windows is a family of operating systems from Microsoft Corporation, U.S.A. Hyper-V is one of the virtualization products. An information disclosure vulnerability exists in Hyper-V in Microsoft Windonws Server 2016, Windonws 10 version 1703, and Windonws 10 version 1607, which stems fro...

Microsoft Windows Control Flow Guard Security Bypass Vulnerability

Microsoft Windows 10 is a next-generation cross-platform operating system released by Microsoft for PCs and laptops, tablets, and cell phones.Control Flow Guard is one of the Control Flow Protection components. A security bypass vulnerability exists in Control Flow Guard in Microsoft Windows 10...

Microsoft Edge Memory Corruption Vulnerability (CNVD-2017-28319)

Microsoft Windows 10 is a set of next-generation cross-platform operating systems released by Microsoft Corporation in the U.S. It is available for PCs and laptops, tablets, and cell phones, among other devices.Microsoft Edge is one of the default browsers that comes with the system. A memory...

Microsoft Edge Memory Corruption Vulnerability (CNVD-2017-28650)

Microsoft Windows 10 is an operating system released by Microsoft Corporation.Microsoft Edge is a web browser that comes with the system.scripting engine is a JavaScript engine component. A memory corruption vulnerability exists in the scripting engine of Edge in Microsoft Windows 10 version 1703...

KB4038788: Windows 10 Version 1703 September 2017 Cumulative Update

The remote Windows host is missing security update 4038788. It is, therefore, affected by multiple vulnerabilities : - A race condition that could lead to a remote code execution vulnerability exists in NetBT Session Services when NetBT fails to maintain certain sequencing requirements...

Microsoft Windows 10 Edge JavaScript Remote Code Execution Vulnerability

Microsoft Windows 10 is a next-generation cross-platform operating system from Microsoft.Microsoft Edge is the web browser that comes with the system.JavaScript engines is one of the JavaScript engine components. A remote code execution vulnerability exists in the JavaScript engine of Edge in...