CVE-2017-8660

CVE-2017-8660 affects Microsoft Edge in Windows 10 (versions 1511, 1607, 1703) and Windows Server 2016. Root cause: how the Microsoft Edge JavaScript engine renders objects in memory, leading to memory corruption. Impact: attacker can execute arbitrary code in the context of the current user. The...

CVE-2017-8628

Microsoft Bluetooth Driver in Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 allows a spoofing vulnerability due to Microsoft's implementation of the Bluetooth stack, aka "Microsoft Bluetooth Driver Spoofing Vulnerability"...

CVE-2017-8660

Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine Memory...

CVE-2017-8755

CVE-2017-8755 is a memory corruption vulnerability in the Microsoft Edge scripting engine on Windows 10 (versions 1511, 1607, 1703) and Windows Server 2016. An attacker could execute arbitrary code in the context of the current user by abusing how Edge handles objects in memory. The NVD metrics l...

CVE-2017-8731

Microsoft Edge Memory Corruption vulnerability (CVE-2017-8731) affects Microsoft Edge on Windows 10 1607 and Windows Server 2016. The issue arises from how Edge accesses objects in memory, allowing an attacker to execute arbitrary code in the context of the current user when a victim opens a spec...

CVE-2017-8711

CVE-2017-8711 describes an information-disclosure vulnerability in the Windows Hyper-V component affecting Windows 10 (version 1607) and Windows Server 2016. The issue occurs when Hyper-V fails to properly validate input from an authenticated user on a guest OS, enabling potential leakage of info...

CVE-2017-8734

CVE-2017-8734 affects Microsoft Edge in Windows 10/Server 2016, where memory handling of Edge objects enables arbitrary code execution in the current user context. The vulnerability stems from how Edge accesses in-memory objects, enabling remote code execution when a user loads a specially crafte...

CVE-2017-8695

Windows Uniscribe in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607, 1703, and Server 2016; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for Mac 2011 and 2016; Skype for Business 2016;...

CVE-2017-8753

CVE-2017-8753 : Microsoft Edge on Windows 10 (Gold/1511/1607/1703) and Windows Server 2016 is affected by a memory corruption issue in the Edge scripting engine when handling objects in memory, allowing an attacker to execute arbitrary code in the user’s context. Connected advisories corroborate ...

CVE-2017-8731

Microsoft Edge in Microsoft Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft Edge accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability". This CVE ID is unique from...

CVE-2017-8738

CVE-2017-8738 : A remote code execution vulnerability in Microsoft Edge’s scripting engine on Windows 10 (Gold, 1511, 1607) and Windows Server 2016. Root cause: memory objects are mishandled by the Edge scripting engine, allowing memory corruption and code execution in the current user context. A...

CVE-2017-8723

CVE-2017-8723 affects Microsoft Edge in Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016.根 The vulnerability is a security feature bypass in Edge CSP where certain crafted documents bypass CSP validation, enabling a user to be tricked into loading malicious content. Connected data corr...

CVE-2017-8678

CVE-2017-8678 is a Win32k information-disclosure vulnerability in the Windows kernel. Affected products include Windows 7 SP1, Windows 8.1, Windows Server 2008/R2 SP1, Windows Server 2012, Windows RT 8.1, Windows 10 (various builds), and Windows Server 2016. The root cause is improper handling of...

CVE-2017-8680

CVE-2017-8680 is a Windows kernel/Win32k information-disclosure vulnerability. The available documents describe memory-object handling flaws in Win32k that could disclose kernel data to user mode. Exploitation details are not fully provided in the initial description, but related sources note pub...

CVE-2017-8686

CVE-2017-8686 affects the Windows Server DHCP service on Windows Server 2012 Gold/R2 and Windows Server 2016. The issue is a memory corruption vulnerability in the DHCP service that can allow an attacker to run arbitrary code on the DHCP failover server or cause the DHCP service to become nonresp...

CVE-2017-8750

CVE-2017-8750 is a memory corruption vulnerability in Microsoft Browsers (Internet Explorer and Edge) that allows remote code execution in the context of the current user when objects in memory are accessed improperly. Affected software includes Internet Explorer on Windows 7 SP1, Windows Server ...

CVE-2017-8752

CVE-2017-8752 describes a memory corruption flaw in the Microsoft Edge scripting engine on Windows 10 (versions 1511, 1607, 1703) and Windows Server 2016. The issue arises from how the engine handles objects in memory, allowing an attacker to execute arbitrary code in the context of the current u...

CVE-2017-8685

Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows information disclosure by the way it discloses kernel memory addresses, aka "Windows GDI+ Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8684 and CVE-2017-8688...

CVE-2017-8709

The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it improperly handles objec...

CVE-2017-11764

Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". Th...