Microsoft Edge scripting engine memory corruption vulnerability (CNVD-2018-07281)

Microsoft Windows 10 and Windows Server 2016 are both products of Microsoft Corporation USA. The former is an operating system for personal computers and the latter is a server operating system.Edge is one of the default browsers that comes with the system.scripting engine is one of the JavaScrip...

Microsoft Edge and ChakraCore Remote Memory Corruption Vulnerability (CNVD-2018-06697)

Microsoft Windows 10 is a next-generation cross-platform operating system from Microsoft.Edge is one of the browsers that comes with the system.ChakraCore is the core of an open-source JavaScript engine that is used in Edge, and can also be used as a stand-alone JavaScript engine. engine. A memor...

Microsoft Edge and ChakraCore Information Disclosure Vulnerability

Microsoft Windows 10 is a next-generation cross-platform operating system from Microsoft.Edge is one of the default browsers that comes with the system.ChakraCore is the core of an open-source JavaScript engine that is used in Edge, and is also available as a separate JavaScript engine. An...

November 14, 2017—KB4052314 Update for Windows 10 Mobile (OS Build 15254.12)

November 14, 2017—KB4052314 Update for Windows 10 Mobile OS Build 15254.12 Improvements and fixes This update includes quality improvements. No new operating system features are being introduced in this update. This build includes all the improvements from KB4048954. If you installed earlier...

Servicing stack update for Windows 10 Version 1709: March 5, 2018

None None...

NoMachine 'nxfuse' elevation of privilege vulnerability

NoMachine is a remote desktop access tool from NoMachine Luxembourg. open Source DokanFS library is one of the open source file system libraries. nxfuse is one of the components that can expose NX data as a file system. A security vulnerability exists in the nxfuse component of the Open Source...

CVE-2018-6947

An uninitialised stack variable in the nxfuse component that is part of the Open Source DokanFS library shipped with NoMachine 6.0.662 and earlier allows a local low privileged user to gain elevation of privileges on Windows 7 32 and 64bit, and denial of service for Windows 8 and 10...

Microsoft Windows kernel local information disclosure vulnerability (CNVD-2018-05063)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Windows kernel is one of the operating system kernels. An information disclosure vulnerability exists in the Windows kernel in Microsoft Windows 10 version 1709 and Windows Server version 1709, which...

Microsoft Windows kernel elevation of privilege vulnerability (CNVD-2018-05041)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Windows kernel is one of the operating system kernels. A privilege extraction vulnerability exists in the Windows kernel in Microsoft Windows 10 versions 1703, 1709, and Windows Server version 1709,...

Microsoft Named Pipe File System Elevation of Privilege Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Named Pipe File System is one of the named pipe file systems. An elevation vulnerability exists in the Named Pipe File System in Microsoft Windows 10 version 1709 and Windows Server version 1709, whic...

Microsoft Windows Scripting Host Security Bypass Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft.Windows Scripting Host WSH is one of the scripting environments embedded in the system. A security feature bypass vulnerability exists in WSH in Microsoft Windows 10 versions 1703, 1709, and Windows Server version 1709. A...

February 22, 2018—KB4077528 (OS Build 15063.936)

None None...

Application Crashes in Desktop Session When Using a Touchscreen Client

If an ICA Session is started from a Windows 10 client with touchscreen display or iPhone/iPad, Surface a Powerbuilder application crashes. If the Multi-touch screen is disabled in the client device manager the Powerbuilder application runs without errors. Other applications which use Microsoft UI...

CVE-2018-0847

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allow information disclosure, due to how Internet Explorer handles objects in memory, aka...

CVE-2018-0826

Windows Storage Services in Windows 10 versions 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Storage Services Elevation of Privilege Vulnerability"...

CVE-2018-0843

The Windows kernel in Windows 10 version 1709 and Windows Server, version 1709 allows an information disclosure vulnerability due to how objects in memory are handled, aka "Windows Kernel Information Disclosure Vulnerability". This CVE is unique from CVE-2018-0742, CVE-2018-0756, CVE-2018-0809 an...

CVE-2018-0827

Windows Scripting Host WSH in Windows 10 versions 1703 and 1709 and Windows Server, version 1709 allows a Device Guard security feature bypass vulnerability due to the way objects are handled in memory, aka "Windows Security Feature Bypass Vulnerability"...

CVE-2018-0842

Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allow an elevation of privilege vulnerability due to how objects in memory are handled, aka...

CVE-2018-0831

The Windows kernel in Windows 10 versions 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how objects in memory are handled, aka "Windows Kernel Elevation of Privilege Vulnerability"...

CVE-2018-0836

Microsoft Edge and ChakraCore in Microsoft Windows 10 1703 and 1709 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834, CVE-2018-0835, CVE-2018-0837, CVE-2018-083...