CVE-2017-0174

Windows NetBIOS in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a denial of service vulnerability when it improperly handles NetBIOS packets, aka "Windows NetBIOS...

CVE-2017-8640

CVE-2017-8640 is a Microsoft Edge scripting engine memory corruption vulnerability in Windows 10 (Gold/1511/1607/1703) and Windows Server 2016. The issue arises when rendering objects in memory, allowing an attacker to execute arbitrary code in the context of the current user. The connected advis...

CVE-2017-8644

CVE-2017-8644 concerns an information disclosure vulnerability in Microsoft Edge on Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016, arising from how Edge handles objects in memory. The connected sources confirm the affected component is Edge and describe memory-object handling as the...

CVE-2017-8651

Internet Explorer in Microsoft Windows Server 2008 SP2 and Windows Server 2012 allows an attacker to execute arbitrary code in the context of the current user due to Internet Explorer improperly accessing objects in memory, aka "Internet Explorer Memory Corruption Vulnerability"...

CVE-2017-8623

CVE-2017-8623 affects Microsoft Windows Hyper-V (Windows 10 versions 1607/1703 and Windows Server 2016). The flaw is due to Hyper-V Denial of Service arising from improper validation of input by a privileged user on a guest operating system, enabling a guest VM to cause the host to crash. The pra...

CVE-2017-8661

CVE-2017-8661 is a remote-code-execution vulnerability in the Microsoft Edge scripting engine and related Windows scripting components. The issue arises from memory handling of objects in memory, allowing an attacker to run arbitrary code in the context of the current user if a user visits a spec...

CVE-2017-8669

Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to Microsoft browsers...

CVE-2017-8691

Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow an attacker to execute code remotely on a target system when the Windows font library fails to properly handle specially crafted embedded fonts, aka "Express Compressed Fonts Remote Code Execution Vulnerability."...

CVE-2017-8625

CVE-2017-8625 affects Internet Explorer on Windows 10 (Gold/1511/1607/1703) and Windows Server 2016. Root cause: Internet Explorer fails to validate Device Guard UMCI policies, enabling a UMCI policy bypass. Public references describe a CHM-based PoC and guidance that Microsoft addressed the issu...

CVE-2017-0250

Microsoft JET Database Engine in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability due to buffer overflow, aka "Microsoft JET...

CVE-2017-8661

Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way affected Microsoft scripting engines render when handling objects in memory, aka "Microsoft Edge Memory Corruption Vulnerabilit...

CVE-2017-8639

CVE-2017-8639 refers to a memory corruption flaw in Microsoft Edge’s scripting engine when rendering objects in memory on Windows 10 (1607/1703) and Windows Server 2016. The issue could allow an attacker to execute arbitrary code in the context of the current user, typically via a web Page that t...

CVE-2017-8620

Windows Search in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it improperly handles objects in memory, aka "Windows...

CVE-2017-8633

Windows Error Reporting WER in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability, aka "Windows Error Reporting Elevation of...

CVE-2017-8651

CVE-2017-8651 is an Internet Explorer memory corruption vulnerability affecting Internet Explorer on Windows Server 2008 SP2 and Windows Server 2012. It allows remote code execution by improperly accessing objects in memory; exploitation typically requires a user to view a specially crafted webpa...

CVE-2017-8691

CVE-2017-8691 affects Windows font handling, specifically when the Windows font library processes specially crafted embedded fonts. The vulnerability allows remote code execution on Windows Server 2008 SP2/R2 SP1 and Windows 7 SP1 via a crafted embedded font, with CVSSv3.0 vector AV:N/AC:L/PR:N/U...

CVE-2017-8593

Microsoft Win32k in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, ak...

CVE-2017-8625

Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to bypass Device Guard User Mode Code Integrity UMCI policies due to Internet Explorer failing to validate UMCI policies, aka "Internet Explorer Security Feature Bypass Vulnerability"...

CVE-2017-8503

CVE-2017-8503 affects Microsoft Edge on Windows 10 (versions 1511, 1607, 1703) and Windows Server 2016, where an attacker can escape the AppContainer sandbox, enabling elevation of privilege. The description in the connected documents reiterates this Edge sandbox escape vulnerability and distingu...

CVE-2017-8636

Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to the way that...