CVE-2017-0062

The Graphics Device Interface GDI in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information from process memory via a...

CVE-2017-0042

Windows Media Player in Microsoft Windows 8.1; Windows Server 2012 R2; Windows RT 8.1; Windows 7 SP1; Windows 2008 SP2 and R2 SP1, Windows Server 2016; Windows Vista SP2; and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information via a crafted web site, aka "Windo...

CVE-2017-0063

The Color Management Module ICM32.dll memory handling functionality in Windows Vista SP2; Windows Server 2008 SP2 and R2; and Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to bypass ASL...

CVE-2017-0061

The Color Management Module ICM32.dll memory handling functionality in Windows Vista SP2, Windows Server 2008 SP2 and R2, and Windows 7 SP1 allows remote attackers to bypass ASLR and execute code in combination with another vulnerability through a crafted website, aka "Microsoft Color Management...

CVE-2017-0059

Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability." This vulnerability is different from those described in CVE-2017-0008 and CVE-2017-0009...

CVE-2017-0011

Microsoft Edge allows remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Edge Information Disclosure Vulnerability." This vulnerability is different from those described in CVE-2017-0009, CVE-2017-0017, CVE-2017-0065, and CVE-2017-0068...

CVE-2017-0014

The Windows Graphics Component in Microsoft Office 2010 SP2; Windows Server 2008 R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site,...

Information disclosure

Microsoft Edge allows remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Edge Information Disclosure Vulnerability." This vulnerability is different from those described in CVE-2017-0009, CVE-2017-0017, CVE-2017-0065, and CVE-2017-0068...

Memory corruption

Microsoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." This vulnerability is different from those described in CVE-2017-0018 and...

CVE-2017-0063

The Color Management Module ICM32.dll memory handling functionality in Windows Vista SP2; Windows Server 2008 SP2 and R2; and Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to bypass ASL...

Microsoft Windows Uniscribe Information Disclosure Vulnerability (CNVD-2017-03361)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Uniscribe also known as Unicode Script Processor is one of the components that enables the Windows operating system to correctly present Unicode text. An information disclosure vulnerability exists in...

Microsoft Windows Uniscribe Information Disclosure Vulnerability (CNVD-2017-03356)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Uniscribe also known as Unicode Script Processor is one of the components that enables the Windows operating system to correctly present Unicode text. An information disclosure vulnerability exists in...

Microsoft Windows Uniscribe Information Disclosure Vulnerability (CNVD-2017-03348)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Uniscribe also known as Unicode Script Processor is one of the components that enables the Windows operating system to correctly present Unicode text. An information disclosure vulnerability exists in...

Microsoft Windows Uniscribe Information Disclosure Vulnerability (CNVD-2017-03359)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Uniscribe also known as Unicode Script Processor is one of the components that enables the Windows operating system to correctly present Unicode text. An information disclosure vulnerability exists in...

Microsoft Windows Uniscribe Information Disclosure Vulnerability (CNVD-2017-03349)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Uniscribe also known as Unicode Script Processor is one of the components that enables the Windows operating system to correctly present Unicode text. An information disclosure vulnerability exists in...

Microsoft Windows SMB Information Disclosure Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. SMBv1 server is one of the server protocol components. An information disclosure vulnerability exists in Microsoft Windows SMB, which can be exploited by remote attackers to obtain sensitive informati...

Microsoft Windows Uniscribe Information Disclosure Vulnerability (CNVD-2017-03350)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Uniscribe also known as Unicode Script Processor is one of the components that enables the Windows operating system to correctly present Unicode text. An information disclosure vulnerability exists in...

Microsoft Windows Uniscribe Information Disclosure Vulnerability (CNVD-2017-03347)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Uniscribe also known as Unicode Script Processor is one of the components that enables the Windows operating system to correctly present Unicode text. An information disclosure vulnerability exists in...

Microsoft Edge Information Disclosure Vulnerability (CNVD-2017-03537)

Microsoft Edge is a web browser developed by Microsoft USA and is the default browser that comes with the Windows 10 operating system. An information disclosure vulnerability exists in Microsoft Edge. A remote attacker can exploit this vulnerability to obtain sensitive information in process memo...

Microsoft Edge Information Disclosure Vulnerability (CNVD-2017-03536)

Microsoft Edge is a web browser developed by Microsoft USA and is the default browser that comes with the Windows 10 operating system. An information disclosure vulnerability exists in Microsoft Edge. A remote attacker can exploit this vulnerability to obtain sensitive information in process memo...