CVE-2017-8522

CVE-2017-8522 affects Microsoft Windows browsers (IE/Edge) and the scripting engine, where memory handling of objects can cause arbitrary code execution. The issue is described as a Scripting Engine Memory Corruption Vulnerability impacting Windows 8.1/RT 8.1, Server 2012/R2, 2016, and Windows 10...

CVE-2017-8527

Technical details for CVE-2017-8527 are not publicly available in the provided documents. No specifics on affected products, vulnerable components, root cause, exploits, or fixes are included here. Monitor for updates from official advisories.

CVE-2017-8474

Technical details about CVE-2017-8474 are not publicly provided in the supplied connected documents. Monitor EUVD entries for updates; no concrete affected products, root cause, impact, or remediation are stated in the available sources.

CVE-2017-8530

Microsoft Edge in Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016 is affected by CVE-2017-8530: an attacker can trick a user into loading a page with malicious content due to Edge not properly enforcing same-origin policies. This is a vulnerability in Edge’s handling of same-origin co...

CVE-2017-8482

Technical details about CVE-2017-8482 are not publicly provided in the connected documents. The initial description gives general info, but no concrete affected products, versions, root cause, impact, or fix is documented here. Monitor for updates.

CVE-2017-8485

Technical details about CVE-2017-8485 are not provided in the connected documents. The available materials do not specify affected versions, root cause, impact, or fixes. Monitor for updates.

CVE-2017-0193

CVE-2017-0193 affects Hyper-V instruction emulation in Microsoft Windows, enabling a local attacker to escalate privileges inside a guest VM due to insufficient enforcement of privilege levels in Hypervisor Code Integrity. Affected scope includes Windows Server 2008 R2/2012, Windows 7/8.1, Window...

CVE-2017-8465

Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to run processes in an elevated context when the Windows kernel improperly handles objects in memory, aka "Win32k Elevation of Privilege Vulnerability...

CVE-2017-8553

An information disclosure vulnerability exists in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows Server 2016 when the Windows kernel improperly handles objects in memory, aka "GDI Information Disclosure Vulnerability"...

CVE-2017-8466

Windows Cursor in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows improper elevation of privilege, aka "Windows Cursor Elevation of Privilege Vulnerability"...

CVE-2017-8548

CVE-2017-8548 affects Microsoft Edge in Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. It describes improper handling of in-memory objects in Edge’s scripting engine, causing memory corruption and information disclosure that could aid system compromise. A public exploit has been lin...

CVE-2017-8534

The connected KLA11039 entry confirms CVE-2017-8534 as an information-disclosure vulnerability in Windows Uniscribe. It can be exploited remotely via specially crafted documents to disclose memory contents. Microsoft security updates from June 2017 (KB4022714/2717/2718/2719/2724/2725/2726 and rel...

CVE-2017-8553

Technical details about CVE-2017-8553 (affected products, root cause, impact, fixes) are not provided in the supplied documents. Connected items discuss other updates/CVEs; no explicit details for this CVE are present. Monitor for updates.

CVE-2017-0288

CVE-2017-0288 is a Windows graphics information disclosure vulnerability in the Graphics Device Interface (GDI). The Windows GDI component improperly discloses memory contents, enabling information disclosure on affected systems. Connected advisories confirm this issue affecting multiple Windows ...

CVE-2017-0282

CVE-2017-0282 is an information disclosure vulnerability in the Windows Uniscribe component. It affects Windows and Office products listed in the initial entry, with memory contents disclosure possible via specially crafted documents. Public sources in the connected materials confirm an informati...

CVE-2017-0297

Technical details (affected products, root cause, impact, remediation) are not publicly available in the provided connected documents. Monitor for updates from official advisories.

CVE-2017-8472

CVE-2017-8472 concerns a Win32k information disclosure in Windows kernel object initialization, affecting Windows 7 SP1, Windows Server 2008 SP2/R2 SP1, and Windows Server 2012. The description attributes the issue to improper initialization of memory objects in the kernel, enabling an authentica...

CVE-2017-8473

CVE-2017-8473 affects multiple Windows platforms (Windows 7 SP1, Windows Server 2008 SP2/R2, 2012/R2, Windows 10 1511/1607, 2016). The root cause is an information-disclosure condition arising when the Windows kernel (Win32k) improperly initializes memory objects, enabling an authenticated attack...

CVE-2017-8498

CVE-2017-8498 affects Microsoft Edge on Windows 10 1607/1703 and Windows Server 2016. When Edge runs JavaScript that uses XML DOM objects to detect installed browser extensions, an attacker can read data not intended to be disclosed. This CVE is separate from CVE-2017-8504. No exploitation, remed...

CVE-2017-8490

Technical details about CVE-2017-8490 are not publicly provided in the connected EUVD entries; no affected products, root cause, impact, or remediation details are disclosed here. Monitor for updates.