PT-2017-12246

Name of the Vulnerable Software and Affected Versions Internet Explorer versions in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 Description The issue arises from...

Windows Server 2012 October 2017 Security Updates (KRACK)

The remote Windows host is missing security update 4041679 or cumulative update 4041690. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory via the Microsoft Windows Text Services...

CVE-2017-8737

Microsoft Windows PDF Library in Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Windows PDF Library handles object...

CVE-2017-8728

Microsoft Windows PDF Library in Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Windows PDF Library handles object...

CVE-2017-8567

A remote code execution vulnerability exists in Microsoft Excel for Mac 2011 when it fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution"...

CVE-2017-8597

Microsoft Edge in Microsoft Windows 10 Version 1703 allows an attacker to obtain information to further compromise the user's system, due to the way that Microsoft Edge handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8643 a...

Microsoft Windows PDF Library Remote Code Execution Vulnerability (CNVD-2017-33459)

Microsoft Windows 8.1 and so on are the United States Microsoft Microsoft company released the operating system. PDF library is one of the PDF library. A remote code execution vulnerability exists in PDF Library in Microsoft Windows, which stems from the program failing to properly handle objects...

CVE-2017-8708: Exposure of Sensitive Information to an Unauthorized Actor

The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it improperly handles objec...

CVE-2017-8716: Undefined Security Weakness

Windows Control Flow Guard in Microsoft Windows 10 Version 1703 allows an attacker to run a specially crafted application to bypass Control Flow Guard, due to the way that Control Flow Guard handles objects in memory, aka "Windows Security Feature Bypass Vulnerability"...

Security update for the Windows kernel information disclosure vulnerability in Windows Server 2008: September 12, 2017

Security update for the Windows kernel information disclosure vulnerability in Windows Server 2008: September 12, 2017 Summary An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploits this vulnerability coul...

Microsoft Browser Scripting Engine Memory Corruption (CVE-2017-8635)

A memory corruption vulnerability exists in Microsoft Browsers. The vulnerability is due to an error when handling objects in memory. A remote attacker can exploit this vulnerability and execute arbitrary code in the context of the current user...

Microsoft Windows Subsystem for Linux Local Denial of Service Vulnerability

Microsoft Windows is the popular operating system. A security vulnerability in the Microsoft Windows Subsystem for Linux handling of memory objects allows an attacker to exploit the vulnerability to submit a special request, which can be used in a denial-of-service attack...

CVE-2017-8652

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to disclose information due to the way that Microsoft Edge handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8644 and...

CVE-2017-8627

Windows Subsystem for Linux in Windows 10 1703, allows a denial of service vulnerability due to the way it handles objects in memory, aka "Windows Subsystem for Linux Denial of Service Vulnerability"...

(Pwn2Own) Adobe Flash NetStream Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Vulnerability of Microsoft Office Online Server, Microsoft Excel Viewer, Microsoft Office Compatibility Pack, Microsoft SharePoint Server, Microsoft Office, and Microsoft Excel, allowing a perpetrator to execute arbitrary code

The vulnerabilities of Microsoft Office Online Server, Microsoft Excel Viewer, Microsoft Office Compatibility Pack, Microsoft SharePoint Server, Microsoft Office, and Microsoft Excel are related to object handling in memory. Exploitation of these vulnerabilities can allow a malicious actor to...

The vulnerability of Microsoft Excel editors allows a hacker to inject arbitrary code.

The vulnerability of Microsoft Excel editors relates to the handling of objects in memory. Exploiting this vulnerability allows a malicious actor to inject arbitrary code remotely...

The vulnerability of the Microsoft Office software package, which allows a hacker to inject arbitrary code.

The vulnerability of the Microsoft Office suite is related to the handling of objects in memory. Exploiting this vulnerability allows a malicious actor to inject arbitrary code remotely...

Microsoft Edge Remote Code Execution Vulnerability (CNVD-2017-14640)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge does not properly handle memory objects and has a remote code execution vulnerability in its implementation that could be exploited by an attacker to execute arbitrary code in the current user context...

Microsoft Windows CLFS Local Elevation of Privilege Vulnerability

Microsoft Windows is a popular computer operating system. Microsoft Windows Common Log File System CLFS has a security vulnerability in the handling of memory objects, which allows attackers to exploit the vulnerability to submit special requests for elevated privileges...