CVE-2017-8468

Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to run processes in an elevated context when the Windows kernel improperly handles objects in memory, aka "Win32k Elevation of Privilege Vulnerability...

CVE-2017-8472

Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 allow an authenticated attacker to run a specially crafted application when the Windows kernel improperly initializes objects in memory, aka "Win32k Information Disclosure Vulnerability". This CVE ID is unique fr...

Windows kernel information disclosure vulnerability: June 13, 2017 (KB4022883)

None None...

PT-2017-2415

Name of the Vulnerable Software and Affected Versions Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 versions 1511 through 1703 Windows Server 2016 Description The issue is related to the handling of objects in memory by the...

Microsoft Edge Memory Corruption

The vulnerability of Microsoft Edge relates to improper access to objects in memory. Exploiting this vulnerability can allow a remote attacker to cause memory corruption...

CVE-2017-0264

Microsoft PowerPoint for Mac 2011 allows a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-0254 and CVE-2017-0265...

PT-2017-2143 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Internet Explorer affected versions not specified Description: A remote code execution issue exists due to improper memory object access. This could allow a remote attacker to execute arbitrary code or cause memory corruption. The vulnerabili...

CVE-2017-0191

A denial of service vulnerability exists in the way that Windows 7, Windows 8.1, Windows 10, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016 handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system...

CVE-2017-0156: Undefined Security Weakness

An elevation of privilege vulnerability exists in Windows 7, Windows 8.1, Windows RT 8.1, Windows 10, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016 when the Microsoft Graphics Component fails to properly handle objects in memory, aka "Windows Graphic...

Win32k Information Disclosure Vulnerability

An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have to log ...

PT-2017-1868

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description A remote code execution issue exists due to improper memory object access in Microsoft Edge, potentially allowing an attacker to execute arbitrary code in the context of the current...

PT-2017-1873

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description A remote code execution issue exists due to improper memory object access in Microsoft Edge, potentially allowing an attacker to execute arbitrary code in the context of the current...

Microsoft Windows Graphics Local Elevation of Privilege Vulnerability (CNVD-2017-03701)

Microsoft Windows is the popular computer operating system. An elevation of privilege vulnerability exists in the Windows Graphics Device Interface GDI Handling Memory Object, which can be exploited by an attacker to execute arbitrary code in kernel mode...

Microsoft Windows Graphics Local Elevation of Privilege Vulnerability (CNVD-2017-03705)

Microsoft Windows is the popular computer operating system. An elevation of privilege vulnerability exists in the Windows Graphics Device Interface GDI Handling Memory Object, which can be exploited by an attacker to execute arbitrary code in kernel mode...

Microsoft Edge Information Disclosure (MS17-007: CVE-2017-0017)

An information disclosure vulnerability exists in Microsoft Edge. The vulnerability is due to the way Microsoft Edge improperly handles objects in memory. A remote attacker could exploit this vulnerability by enticing the target user to open a specially crafted website...

PT-2017-1578

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description A remote code execution issue exists due to improper memory object access. This could lead to memory corruption, enabling an attacker to execute arbitrary code as the current user. If...

Windows Graphics Component Remote Code Execution Vulnerability

A remote code execution vulnerability exists due to the way the Windows Graphics Component handles objects in memory. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or creat...

Microsoft Windows Local Elevation of Privilege Vulnerability (CNVD-2016-10981)

Microsoft Windows is the popular computer operating system. An elevation of privilege vulnerability exists in the implementation of the Windows Common Log File System CLFS driver that does not properly handle memory objects. Successful exploitation could allow an attacker to run processes with...

Microsoft Windows Local Elevation of Privilege Vulnerability (CNVD-2016-10979)

Microsoft Windows is the popular computer operating system. An elevation of privilege vulnerability exists in the implementation of the Windows Common Log File System CLFS driver that does not properly handle memory objects. Successful exploitation could allow an attacker to run processes with...

Microsoft Windows Universal Log File System Driver Elevation of Privilege Vulnerability (CNVD-2016-11019)

Microsoft Windows is a series of operating systems released by the American company Microsoft Microsoft. CLFS is a high-performance, general-purpose log file subsystem. An elevated privilege vulnerability exists when the Windows Common Log File System CLFS driver fails to properly handle objects ...