CVE-2017-11768

Windows Media Player in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows remote attackers to test for the presence of files on disk via a...

CVE-2017-11870

CVE-2017-11870 affects ChakraCore and Microsoft Edge on Windows 10 (1703/1709) and Windows Server 1709, arising from how the scripting engine handles objects in memory. The vulnerability is described as a memory corruption issue in the scripting engine that can let an attacker execute code with t...

CVE-2017-11873

Technical details for CVE-2017-11873 are not publicly provided in the supplied documents; related advisories discuss ChakraCore memory corruption broadly. Monitor for updates from Microsoft/Edge security advisories for affected versions and fixes.

CVE-2017-11874

Microsoft Edge in Windows 10 (1703, 1709), Windows Server (1709) and ChakraCore is affected by a CFG bypass that allows arbitrary code execution due to how memory is accessed by code produced by the Edge JIT compiler. The vulnerability impacts Edge/CSP handling and CFG enforcement; CVE-2017-11874...

CVE-2017-11862

CVE-2017-11862 affects ChakraCore and Microsoft Edge on Windows 10 version 1709 and Windows Server 1709. The vulnerability is a Scripting Engine Memory Corruption in the in-memory handling of objects, allowing an attacker to gain the same user rights as the current user (privilege escalation). Th...

CVE-2017-11856

Technical details about CVE-2017-11856 are not provided in the connected documents; the initial description is the only public detail available here. Monitor for vendor advisories and security updates.

CVE-2017-11848

CVE-2017-11848 affects Internet Explorer in multiple Windows versions (Windows 7 SP1, Server 2008 SP2, 8.1/RT 8.1, Server 2012/R2, Windows 10 variants, and Windows Server 2016+). The vulnerability is an information-disclosure flaw caused by how IE handles page content, allowing an attacker to det...

CVE-2017-11846

CVE-2017-11846 affects ChakraCore and Edge/IE scripting engine in Windows 7 SP1, Windows Server 2008/2008 R2, 8.1, 10 (various builds), and Windows Server 2012/2012 R2, with memory handling in the scripting engine leading to memory corruption. The vulnerability could allow an attacker to execute ...

CVE-2017-11841

CVE-2017-11841 : ChakraCore and Microsoft Edge on Windows 10 (versions 1703/1709, earlier 1511–1709, and Windows Server 2016/1709) are affected by a memory-corruption vulnerability in the scripting engine that can allow an attacker to acquire the current user’s privileges. Connected advisories co...

CVE-2017-11872

Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to force the browser to send data that would otherwise be restricted to a destination website of the attacker's choice, due to how Microsoft Edge handles redirect requests, aka "Microsoft Edge Security...

CVE-2017-11833

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to determine the origin of all webpages in the affected browser, due to how Microsoft Edge handles cross-origin requests, aka "Microsoft Edge Information...

CVE-2017-11836

ChakraCore, and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to take control of an affected system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption...

Ulterius Server Directory Traversal

Exploit Title: Ulterius Server 1.9.5.0 Directory Traversal Arbitrary File Access Date: 11/13/2017 Exploit Author: Rick Osgood Vendor Homepage: https://ulterius.io/ Software Link: https://github.com/Ulterius/server/tree/0e4f2113da287aac88a8b4c5f8364a03685d393d Version: 1.9.5.0 Tested on: Windows...

Microsoft Windows Server 2012 Multiple Vulnerabilities (KB4048959)

This host is missing an important security update according to Microsoft KB4048959 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Windows Multiple Vulnerabilities (KB4048958)

This host is missing a critical security update according to Microsoft KB4041693 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Windows Search Denial of Service Vulnerability (KB4047211)

This host is missing an important security update according to Microsoft KB4047211 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

SYS.1.2.2 Windows Server 2012

Zielsetzung dieses Bausteins ist der Schutz von Informationen und Prozessen, die durch Serversysteme auf Basis von Windows Server 2012 R2 im Regelbetrieb verarbeitet bzw. gesteuert werden. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced source...

Microsoft IE And Microsoft Edge Multiple Flash Player Vulnerabilities (4048951)

This host is missing a critical security update according to Microsoft KB4048951. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

2017-11 Security Update for Adobe Flash Player for Windows Server 2012 for x64-based Systems (KB4048951)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2017-11 Security Update for Adobe Flash Player for Windows Server 2012 R2 for x64-based Systems (KB4048951)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...