CVE-2017-8627

Windows Subsystem for Linux in Windows 10 1703, allows a denial of service vulnerability due to the way it handles objects in memory, aka "Windows Subsystem for Linux Denial of Service Vulnerability"...

(Pwn2Own) Adobe Flash NetStream Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Vulnerability of Microsoft Office Online Server, Microsoft Excel Viewer, Microsoft Office Compatibility Pack, Microsoft SharePoint Server, Microsoft Office, and Microsoft Excel, allowing a perpetrator to execute arbitrary code

The vulnerabilities of Microsoft Office Online Server, Microsoft Excel Viewer, Microsoft Office Compatibility Pack, Microsoft SharePoint Server, Microsoft Office, and Microsoft Excel are related to object handling in memory. Exploitation of these vulnerabilities can allow a malicious actor to...

The vulnerability of the Microsoft Office software package, which allows a hacker to inject arbitrary code.

The vulnerability of the Microsoft Office suite is related to the handling of objects in memory. Exploiting this vulnerability allows a malicious actor to inject arbitrary code remotely...

The vulnerability of Microsoft Excel editors allows a hacker to inject arbitrary code.

The vulnerability of Microsoft Excel editors relates to the handling of objects in memory. Exploiting this vulnerability allows a malicious actor to inject arbitrary code remotely...

Microsoft Office Remote Code Execution Vulnerability (CNVD-2017-16982)

Microsoft Office is a suite of office software based on the Windows operating system developed by Microsoft. A remote code execution vulnerability exists in Microsoft Office's handling of memory objects, which could allow an attacker to perform an operation in the current user security context vi...

Microsoft Edge Remote Code Execution Vulnerability (CNVD-2017-14640)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge does not properly handle memory objects and has a remote code execution vulnerability in its implementation that could be exploited by an attacker to execute arbitrary code in the current user context...

Microsoft Windows CLFS Local Elevation of Privilege Vulnerability

Microsoft Windows is a popular computer operating system. Microsoft Windows Common Log File System CLFS has a security vulnerability in the handling of memory objects, which allows attackers to exploit the vulnerability to submit special requests for elevated privileges...

CVE-2017-8578

Win32k in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, ak...

CVE-2017-8561

Windows kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to the way it handles objects in memory, aka "Windows Kernel Elevation of Privilege...

CVE-2017-8486

Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an information disclosure due to the way it handles objects in memory, aka "Win32k Information Disclosure...

The vulnerability of the Uniscribe component of the Windows operating system and the Microsoft Office software package allows a perpetrator to execute arbitrary code.

The vulnerability of the Uniscribe component of the Windows operating system and the Microsoft Office suite is related to the handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

PECL YAML parser unsafe object handling

More info at https://www.drupal.org/SA-CORE-2017-003...

Flash Player < 26.0.0.126 Multiple RCE (APSB17-17)

Binary data 700144.prm...

CVE-2017-8506

A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8509, CVE-2017-8510, CVE-2017-8511, CVE-2017-8512, and CVE-2017-0260...

CVE-2017-8511

A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8509, CVE-2017-8510, CVE-2017-8512, CVE-2017-0260, and CVE-2017-8506...

CVE-2017-8513

A remote code execution vulnerability exists in Microsoft PowerPoint when the software fails to properly handle objects in memory, aka "Microsoft PowerPoint Remote Code Execution Vulnerability"...

CVE-2017-8468

Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to run processes in an elevated context when the Windows kernel improperly handles objects in memory, aka "Win32k Elevation of Privilege Vulnerability...

Windows Uniscribe Information Disclosure Vulnerability

An information disclosure vulnerability exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could exploit the...

KLA11051 Multiple vulnerabilities in Microsoft Windows

Multiple serious vulnerabilities have been found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, bypass security restrictions, cause a denial of service, obtain sensitive information and possibly to write local files. Below is a complete list of...