CVE-2017-0154

Microsoft Internet Explorer 11 on Windows 10, 1511, and 1606 and Windows Server 2016 does not enforce cross-domain policies, allowing attackers to access information from one domain and inject it into another via a crafted application, aka, "Internet Explorer Elevation of Privilege Vulnerability....

CVE-2017-0008

Technical details for CVE-2017-0008 are not publicly available in the provided documents. Monitor for updates from official advisories; referenced items cover related CVEs but do not specify this CVE’s specifics.

CVE-2017-0012

Technical details about CVE-2017-0012 are not publicly provided in the supplied documents. No affected versions, root cause, or remediation are specified here. Monitor for updates from official sources to obtain concrete technical information.

CVE-2017-0033

CVE-2017-0033 affects Microsoft Internet Explorer 11 and Microsoft Edge, enabling remote attackers to spoof web content via a crafted web site (the vulnerability is distinct from CVE-2017-0012 and CVE-2017-0069). Based on the connected documents, the exploit surface is network-propagated and leve...

CVE-2017-0040

CVE-2017-0040 / CVE-2017-0130 describe memory corruption in the Scripting Engine of Internet Explorer 9–11 that can allow remote code execution or denial of service when a user visits a crafted site. The flaw affects the IE scripting engine, and the two CVEs are stated as distinct from one anothe...

CVE-2017-0049

CVE-2017-0049 affects the VBScript engine in Internet Explorer 11 and is an information-disclosure vulnerability that lets a crafted website obtain sensitive data from process memory. The connected CNVD entry (CNVD-2017-03594) notes a Microsoft Internet Explorer Scripting Engine Information Discl...

CVE-2017-0059

CVE-2017-0059 affects Microsoft Internet Explorer 9–11 and is described as an information-disclosure vulnerability that allows remote attackers to obtain sensitive data from process memory via a crafted web site. The CVE has public exploit references (e.g., Exploit-DB entries) and has been observ...

CVE-2017-0130

The CVE-2017-0130 entry covers a memory corruption vulnerability in the Scripting Engine of Microsoft Internet Explorer versions 9–11. According to the description, a crafted web site could cause memory corruption, enabling remote attackers to execute arbitrary code or cause a denial of service. ...

CVE-2017-0149

CVE-2017-0149 concerns Microsoft Internet Explorer (IE) 9–11, described as a memory corruption vulnerability that can allow remote code execution or cause a denial of service when a user visits a crafted website. The connected documents reiterate that this IE memory‑corruption issue is distinct f...

CVE-2017-0154

CVE-2017-0154 is an elevation-of-privilege vulnerability in Internet Explorer 11 on Windows 10 (versions 1511, 1606) and Windows Server 2016 caused by improper enforcement of cross-domain policies. A crafted web page could leverage this to access information from one domain and inject it into ano...

CVE-2017-0059

Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka “Internet Explorer Information Disclosure Vulnerability.” This vulnerability is different from those described in CVE-2017-0008 and CVE-2017-0009. Recent...

CVE-2017-0018

Microsoft Internet Explorer 10 and 11 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka “Internet Explorer Memory Corruption Vulnerability.” This vulnerability is different from those described in CVE-2017-0037 and...

CVE-2017-0149

Microsoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka “Internet Explorer Memory Corruption Vulnerability.” This vulnerability is different from those described in CVE-2017-0018 and...

CVE-2017-0009

Technical details about CVE-2017-0009 are not provided in the connected documents. Public details appear limited to the NVD description; monitor for updates from official advisories.

CVE-2017-0018

Technical details for CVE-2017-0018 are not publicly available in the provided connected documents. Monitor for updates from official advisories and vulnerability catalogs to obtain affected products, impact, and remediation information.

Microsoft IE And Microsoft Edge Multiple Flash Player Vulnerabilities (3202790)

This host is missing a critical security update according to Microsoft Bulletin MS16-141. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2017-0130: Improper Restriction of Operations within the Bounds of a Memory Buffer

The scripting engine in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability." This vulnerability is different from that described in...

CVE-2017-0059: Undefined Security Weakness

Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability." This vulnerability is different from those described in CVE-2017-0008 and CVE-2017-0009...

CVE-2017-0012: Improper Input Validation

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to spoof web content via a crafted web site, aka "Microsoft Browser Spoofing Vulnerability." This vulnerability is different from those described in CVE-2017-0033 and CVE-2017-0069...

CVE-2017-0040: Improper Restriction of Operations within the Bounds of a Memory Buffer

The scripting engine in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability." This vulnerability is different from that described in...