CVE-2017-11790

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how...

CVE-2017-11810

Technical details for CVE-2017-11810 are not provided in the connected documents. The Initial description lacks product/vendor/version/root-cause specifics here; monitor for updates.

CVE-2017-11780

The Server Message Block 1.0 SMBv1 on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows a remote code execution vulnerability when it fails to properly...

CVE-2017-11771

The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properl...

CVE-2017-11771

CVE-2017-11771 is a remote code execution vulnerability in the Microsoft Windows Search component. The issue arises from improper handling of DNS responses by the Windows Search service, allowing an unauthenticated, remote attacker to execute code on affected systems. The CVE is referenced alongs...

CVE-2017-11811

CVE-2017-11811 affects ChakraCore and Microsoft Edge on Windows 10 (versions 1511, 1607, 1703) and Windows Server 2016. The vulnerability stems from how the Chakra scripting engine handles in-memory objects, enabling an attacker to execute arbitrary code in the context of the current user. The is...

CVE-2017-11793

CVE-2017-11793 affects Internet Explorer on multiple Windows editions where the scripting engine’s memory handling of objects can be abused to execute arbitrary code in the user context. Root cause: memory corruption in the scripting engine. Impact: remote code execution with high severity (per C...

Microsoft Windows Shell Remote Code Execution Vulnerability

Microsoft Windows is a popular operating system. A remote code execution vulnerability exists in the Microsoft Windows Shell, which can be exploited by a remote attacker to submit a special request to execute arbitrary code or crash the application in the application context...

Microsoft Windows Multiple Vulnerabilities (KB4041671)

This host is missing an important security update according to Microsoft KB4041671. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

Microsoft Windows Multiple Vulnerabilities (KB4041676)

This host is missing a critical security update according to Microsoft KB4041676 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Jet Database Engine Buffer Overflow Vulnerability (CNVD-2017-30580)

Microsoft Windows is the popular computer operating system. A buffer overflow vulnerability exists in the implementation of the Microsoft JET Database Engine, which, if successfully exploited, could allow an attacker to take control of an affected system...

Microsoft Windows Kernel Information Disclosure Vulnerability (CNVD-2017-30126)

Microsoft Windows Server 2012 R2 and others are operating systems released by Microsoft Corporation in the United States. kernel is one of the kernels. An information disclosure vulnerability exists in the kernel in Microsoft Windows. A local attacker can exploit this vulnerability to retrieve...

Microsoft SMB Server Denial of Service Vulnerability

Microsoft Windows is a popular operating system. A security vulnerability exists in Microsoft Windows SMB Server's handling of certain requests, allowing remote attackers to exploit the vulnerability to submit special requests and crash the system...

Microsoft Windows Multiple Vulnerabilities (KB4041681)

This host is missing a critical security update according to Microsoft KB4041681 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4042120)

This host is missing an important security update according to Microsoft KB4042120 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Windows Server 2012 Multiple Vulnerabilities (KB4041690)

This host is missing a critical security update according to Microsoft KB4041690 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4042895)

This host is missing a critical security update according to Microsoft KB4042895 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4042067)

This host is missing a critical security update according to Microsoft KB4042067. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

September 12, 2017—KB4038793 (Security-only update)

None None...

Microsoft JET Database Engine Remote Code Execution Vulnerability

A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system. An attacker who successfully exploited this vulnerability could take control of an affected system. An attacker could then install programs; view, change, or...