CVE-2017-11853

Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to log in and run a specially crafted application due to the Windo...

CVE-2017-11852

Microsoft GDI Component in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an attacker to log on to an affected system and run a specially crafted application to compromise the user's system, due improperly disclosing kernel memory addresses, aka "Windows GDI Information Disclosure...

CVE-2017-11831

CVE-2017-11831 is a Windows kernel information disclosure vulnerability affecting Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2008 SP2/R2 SP1, 2012/R2, Windows 10 (various builds up to 1709) and Windows Server 2016. Root cause: kernel initializes memory in a way that can expose information;...

CVE-2017-11852

CVE-2017-11852 affects the Windows GDI component in Windows 7 SP1, Windows Server 2008 SP2, and Windows Server 2008 R2 SP1. The vulnerability arises from improper disclosure of kernel memory addresses by the GDI component, enabling a logged-on attacker to execute a specially crafted application t...

CVE-2017-11848

Internet Explorer in Microsoft Microsoft Windows 7 SP1, Windows Server 2008 SP2, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to detect the navigation of the user leavin...

CVE-2017-11847

Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to run arbitrary code in kernel mode, install programs, view,...

CVE-2017-11846

CVE-2017-11846 affects ChakraCore and Edge/IE scripting engine in Windows 7 SP1, Windows Server 2008/2008 R2, 8.1, 10 (various builds), and Windows Server 2012/2012 R2, with memory handling in the scripting engine leading to memory corruption. The vulnerability could allow an attacker to execute ...

CVE-2017-11788: Undefined Security Weakness

Windows Search in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows server, version 1709 allows an unauthenticated attacker to remotely send specially crafted messages...

CVE-2017-11852: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft GDI Component in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an attacker to log on to an affected system and run a specially crafted application to compromise the user's system, due improperly disclosing kernel memory addresses, aka "Windows GDI Information Disclosure...

CVE-2017-11832: Exposure of Sensitive Information to an Unauthorized Actor

The Microsoft Windows embedded OpenType EOT font engine in Windows 7 SP1, Windows Server 2008 SP2 and 2008 R2 SP1, and Windows Server 2012 allows an attacker to potentially read data that was not intended to be disclosed, due to the way that the Microsoft Windows EOT font engine parses specially...

Windows Information Disclosure Vulnerability (KB4049164)

This host is missing an important security update according to Microsoft KB4049164 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Windows Information Disclosure Vulnerability (KB4046184)

This host is missing an important security update according to Microsoft KB4046184 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Windows Search Denial of Service Vulnerability (KB4047211)

This host is missing an important security update according to Microsoft KB4047211 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2017-11835: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft graphics in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an attacker to potentially read data that was not intended to be disclosed due to the way that the Microsoft Windows Embedded OpenType EOT font engine parses specially crafted embedded fonts, aka "Windows EOT Font...

Description of the security update for vulnerabilities in Windows Server 2008: November 14, 2017

Description of the security update for vulnerabilities in Windows Server 2008: November 14, 2017 Summary To learn more about the vulnerabilities, go to the Security Update Guide. More Information Important If you install a language pack after you install this update, you must reinstall this updat...

Description of the security update for the Windows Search denial of service vulnerability in Windows Server 2008: November 14, 2017

Description of the security update for the Windows Search denial of service vulnerability in Windows Server 2008: November 14, 2017 Summary A denial of service vulnerability exists when Windows Search improperly handles objects in memory. An attacker who successfully exploits the vulnerability...

Description of the security update for the Windows Media Player Information Disclosure Vulnerability in Windows Server 2008: December 12, 2017

Description of the security update for the Windows Media Player Information Disclosure Vulnerability in Windows Server 2008: December 12, 2017 Summary An information vulnerability exists when Windows Media Player improperly discloses file information. Successful exploitation of the vulnerability...

Description of the security update for the information disclosure vulnerability in Windows Server 2008: November 14, 2017

Description of the security update for the information disclosure vulnerability in Windows Server 2008: November 14, 2017 Summary An information disclosure vulnerability exists when the Windows kernel fails to correctly initialize a memory address. An attacker who successfully exploits this...

Description of the security update for the information disclosure vulnerability in Windows Server 2008: November 14, 2017

Description of the security update for the information disclosure vulnerability in Windows Server 2008: November 14, 2017 Summary An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. To learn more about the vulnerability, go to...

Microsoft Windows Kernel CVE-2017-11847 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based...