Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2017-34924)

Microsoft Edge is the web browser built into the Windows 10 version. A memory corruption vulnerability exists in the implementation of the Microsoft Edge scripting engine, which allows an unauthenticated, remote attacker to execute arbitrary code on the target system...

Microsoft Windows Edge ChakraCore Remote Code Execution Vulnerability

Microsoft Windows 10 is a next-generation cross-platform operating system released by Microsoft for PCs and laptops, tablets, and cell phones.Edge is one of the default browsers that comes with the system.ChakraCore is one of the Chakra JavaScript ChakraCore is the core of one of the Chakra...

Microsoft Edge Information Disclosure Vulnerability (CNVD-2017-34925)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge suffers from an information disclosure vulnerability in its implementation, which can be exploited by an unauthenticated, remote attacker to gain access to sensitive information on the target system...

Microsoft Edge Memory Corruption Vulnerability (CNVD-2017-34926)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge is implemented with a memory corruption vulnerability that can be exploited by unauthenticated, remote attackers to execute arbitrary code on the target system and corrupt memory...

CVE-2017-11861

Microsoft Edge in Windows 10 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID i...

CVE-2017-11874

Microsoft Edge in Microsoft Windows 10 1703, 1709, Windows Server, version 1709, and ChakraCore allows an attacker to bypass Control Flow Guard CFG to run arbitrary code on a target system, due to how Microsoft Edge handles accessing memory in code compiled by the Edge Just-In-Time JIT compiler,...

CVE-2017-11850

Microsoft Graphics Component in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to log on to an affected system and run a specially crafted application due to improper handling...

CVE-2017-11833

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to determine the origin of all webpages in the affected browser, due to how Microsoft Edge handles cross-origin requests, aka "Microsoft Edge Information...

CVE-2017-11872

Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to force the browser to send data that would otherwise be restricted to a destination website of the attacker's choice, due to how Microsoft Edge handles redirect requests, aka "Microsoft Edge Security...

CVE-2017-11840

ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption...

CVE-2017-11842

Windows kernel in Windows 8.1 and RT 8.1, Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to log in and run a specially crafted application due to the Windows kernel improperly initializing a memory address,...

CVE-2017-11862

ChakraCore and Microsoft Edge in Windows 10 1709 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from...

CVE-2017-11845

Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how Microsoft Edge handles objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability"...

CVE-2017-11871

ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique fr...

CVE-2017-11870

ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique fr...

CVE-2017-11840

ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption...

Servicing stack update for Windows 10 Version 1607 and Windows Server 2016: November 14, 2017

None None...

Servicing stack update for Windows 10 Version 1703: November 14, 2017

None None...

The vulnerability of the Microsoft Windows PDF Library on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the PDF library in Microsoft Edge browsers for Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user. This vulnerability can be...

Windows 8.1 and Windows 7 SP1 end of free upgrade offer notification

Windows 8.1 and Windows 7 SP1 end of free upgrade offer notification Summary If you have Windows 8.1 or Windows 7 with Service Pack 1 SP1, the following full-screen notification might appear on your computer: Sorry to interrupt, but this is important. Windows 10 free upgrade offer ends July 29...