CVE-2017-8702

CVE-2017-8702 is a Windows Elevation of Privilege vulnerability in Windows Error Reporting (WER). Affects Windows 10 Gold/1511/1607 and Windows Server 2016; caused by how WER handles and executes files, enabling a local attacker to gain higher privileges and access sensitive information and syste...

CVE-2017-8711

CVE-2017-8711 describes an information-disclosure vulnerability in the Windows Hyper-V component affecting Windows 10 (version 1607) and Windows Server 2016. The issue occurs when Hyper-V fails to properly validate input from an authenticated user on a guest OS, enabling potential leakage of info...

CVE-2017-8746

The CVE-2017-8746 issue affects Microsoft Windows Device Guard Code Integrity on Windows 10 (1607, 1703) and Windows Server 2016. The root cause is how PowerShell exposes functions and user-supplied code, enabling a security feature bypass where a local attacker could inject malicious code into a...

CVE-2017-8728

CVE-2017-8728 is a Windows PDF Library remote code execution vulnerability affecting Windows 8.1/RT 8.1, Windows Server 2012/2012 R2, Windows 10 (1511–1703) and Windows Server 2016. The issue stems from the Windows PDF Library handling objects in memory, enabling arbitrary code execution in the c...

CVE-2017-8753

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption...

CVE-2017-8660

CVE-2017-8660 affects Microsoft Edge in Windows 10 (versions 1511, 1607, 1703) and Windows Server 2016. Root cause: how the Microsoft Edge JavaScript engine renders objects in memory, leading to memory corruption. Impact: attacker can execute arbitrary code in the context of the current user. The...

CVE-2017-8756

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft Edge accesses objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE I...

CVE-2017-8708

The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it improperly handles objec...

CVE-2017-8723

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page containing malicious content, due to the way that the Edge Content Security Policy CSP validates certain specially crafted documents, aka "Microsoft Edge...

CVE-2017-8735

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to trick a user by redirecting the user to a specially crafted website, due to the way that Microsoft Edge parses HTTP content, aka "Microsoft Edge Spoofing Vulnerability". This CVE ID is...

CVE-2017-8709

The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it improperly handles objec...

CVE-2017-8752

CVE-2017-8752 describes a memory corruption flaw in the Microsoft Edge scripting engine on Windows 10 (versions 1511, 1607, 1703) and Windows Server 2016. The issue arises from how the engine handles objects in memory, allowing an attacker to execute arbitrary code in the context of the current u...

CVE-2017-8738

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption...

CVE-2017-11764

Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". Th...

CVE-2017-8753

CVE-2017-8753 : Microsoft Edge on Windows 10 (Gold/1511/1607/1703) and Windows Server 2016 is affected by a memory corruption issue in the Edge scripting engine when handling objects in memory, allowing an attacker to execute arbitrary code in the user’s context. Connected advisories corroborate ...

Microsoft Edge Security Bypass Vulnerability (CNVD-2017-28648)

Microsoft Windows 10 and Windows Server 2016 are both products of Microsoft Corporation USA. The former is an operating system for personal computers and the latter is a server operating system.Edge is one of the web browsers that comes with the system. Edge in Microsoft Windows suffers from a...

Microsoft Edge Memory Corruption Vulnerability (CNVD-2017-28651)

Microsoft Windows 10 and Windows Server 2016 are both products of Microsoft Corporation USA. The former is an operating system for personal computers and the latter is a server operating system.Edge is one of the web browsers that comes with the system. A memory corruption vulnerability exists in...

Microsoft Edge Memory Corruption Vulnerability (CNVD-2017-28321)

Microsoft Windows 10 and Windows Server 2016 are both products of Microsoft Corporation USA. The former is a set of operating systems for personal computers and the latter is a set of server operating systems.Edge is one of the default browsers that comes with the system.Scripting engine is one o...

Microsoft Exchange Server Cross-Site Scripting Vulnerability (CNVD-2017-32626)

Microsoft Exchange Server is a set of e-mail service programs from Microsoft, which provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A cross-site scripting vulnerability exists in Microsoft Exchange Server 2016. A remote attacker can exploit this...

Microsoft Edge Memory Corruption Vulnerability (CNVD-2017-28646)

Microsoft Windows 10 and Windows Server 2016 are both products of Microsoft Corporation USA. The former is an operating system for personal computers and the latter is a server operating system.Edge is one of the web browsers that comes with the system. A memory corruption vulnerability exists in...