CVE-2018-0753

Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allow a denial of service vulnerability due to the way objects are handled in memory, aka "Windows IPSec Denial of Service Vulnerability"...

CVE-2018-0743

Windows Subsystem for Linux in Windows 10 version 1703, Windows 10 version 1709, and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Subsystem for Linux Elevation of Privilege Vulnerability"...

CVE-2018-0769

CVE-2018-0770 affects the Microsoft Edge scripting engine on Windows 10 (various builds) and Windows Server 2016, due to memory handling of in-memory objects in the scripting engine, leading to remote code execution in the context of the current user. A remote, unauthenticated attacker could enti...

CVE-2018-0776

CVE-2018-0776 affects Microsoft Edge scripting engine memory handling in Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016, enabling code execution in the context of the current user. Connected sources indicate exploitation: CIRCL sightings list the CVE-2018-0776 exploit (exploit-...

CVE-2018-0752

CVE-2018-0752 is a Windows Kernel API elevation-of-privilege vulnerability. It affects Windows 8.1/RT 8.1, Windows Server 2012/2012 R2, Windows 10 all listed versions (Gold, 1511, 1607, 1703, 1709), Windows Server 2016, and Windows Server version 1709, due to how the Kernel API enforces permissio...

CVE-2018-0758

CVE-2018-0758 affects Microsoft Edge’s Scripting Engine memory handling on Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016. The vulnerability enables remote code execution in the context of the current user due to how objects are managed in memory. Connected documents corroborat...

CVE-2018-0748

CVE-2018-0748 is a Windows kernel elevation-of-privilege vulnerability affecting multiple Windows platforms (e.g., Windows 7 SP1, 8.1/RT 8.1, server lines, Windows 10 versions up to 1709). The root cause is described as the kernel’s handling of memory addresses enabling elevation of privilege whe...

CVE-2018-0770

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is...

CVE-2018-0803

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to access information from one domain and inject it into another domain, due to how Microsoft Edge enforces cross-domain policies, aka "Microsoft Edge Elevation of Privilege...

EUVD-2018-1558

The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way memory...

CVE-2018-0780

CVE-2018-0780 concerns Microsoft Edge Scripting Engine Information Disclosure in Windows 10 (various builds) where Edge’s JavaScript engine mishandles in-memory objects, enabling an attacker to obtain information and potentially progress to further compromise. The CVE is linked to Edge scripting ...

CVE-2018-0748

The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way memory...

CVE-2018-0749

The Microsoft Server Message Block SMB Server in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability d...

CVE-2018-0752

The Windows Kernel API in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way the Kernel API enforces permissions, aka "Windows Elevation ...

CVE-2018-0766

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how the Microsoft Edge PDF Reader handles objects in memory, aka "Microsoft Edge Information Disclosure...

CVE-2018-0758

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is...

CVE-2018-0767

Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE...

CVE-2018-0743

Windows Subsystem for Linux in Windows 10 version 1703, Windows 10 version 1709, and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Subsystem for Linux Elevation of Privilege Vulnerability"...

CVE-2018-0741

CVE-2018-0741 is an information disclosure vulnerability in the Windows Color Management Module (ICM32.dll) affecting Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1. The issue arises from how objects are handled in memory, enabling an attacker to bypass ASLR and potentially facilitate explo...

CVE-2018-0777

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is...