CVE-2017-11806

CVE-2017-11806 affects ChakraCore and Microsoft Edge in Windows 10 version 1703, where the scripting engine’s in-memory object handling can lead to memory corruption and arbitrary code execution in the current user context. The vulnerability is described as a memory corruption flaw in ChakraCore’...

CVE-2017-11809

CVE-2017-11809 affects ChakraCore and Microsoft Edge on Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. The issue is a memory-handling vulnerability in the scripting engine that can allow arbitrary code execution in the context of the current user. There are public exploit references...

CVE-2017-11769

The Microsoft Windows TRIE component on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability in the way it handles loading dll files, aka "TRIE Remote Code Execution Vulnerability"...

CVE-2017-11808

CVE-2017-11808 affects ChakraCore (and Microsoft Edge) on Windows 10 versions (Gold/1511/1607/1703) and Windows Server 2016. The root cause is memory handling in the ChakraCore scripting engine, described as a memory corruption/information disclosure vulnerability that could allow an attacker to ...

CVE-2017-11790

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how...

CVE-2017-11780

The Server Message Block 1.0 SMBv1 on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows a remote code execution vulnerability when it fails to properly...

CVE-2017-11810

Technical details for CVE-2017-11810 are not provided in the connected documents. The Initial description lacks product/vendor/version/root-cause specifics here; monitor for updates.

CVE-2017-11771

The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properl...

CVE-2017-11771

CVE-2017-11771 is a remote code execution vulnerability in the Microsoft Windows Search component. The issue arises from improper handling of DNS responses by the Windows Search service, allowing an unauthenticated, remote attacker to execute code on affected systems. The CVE is referenced alongs...

CVE-2017-11793

CVE-2017-11793 affects Internet Explorer on multiple Windows editions where the scripting engine’s memory handling of objects can be abused to execute arbitrary code in the user context. Root cause: memory corruption in the scripting engine. Impact: remote code execution with high severity (per C...

CVE-2017-11811

CVE-2017-11811 affects ChakraCore and Microsoft Edge on Windows 10 (versions 1511, 1607, 1703) and Windows Server 2016. The vulnerability stems from how the Chakra scripting engine handles in-memory objects, enabling an attacker to execute arbitrary code in the context of the current user. The is...

Microsoft Windows Shell Remote Code Execution Vulnerability

Microsoft Windows is a popular operating system. A remote code execution vulnerability exists in the Microsoft Windows Shell, which can be exploited by a remote attacker to submit a special request to execute arbitrary code or crash the application in the application context...

Microsoft Windows Multiple Vulnerabilities (KB4041676)

This host is missing a critical security update according to Microsoft KB4041676 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4041671)

This host is missing an important security update according to Microsoft KB4041671. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

Microsoft Jet Database Engine Buffer Overflow Vulnerability (CNVD-2017-30580)

Microsoft Windows is the popular computer operating system. A buffer overflow vulnerability exists in the implementation of the Microsoft JET Database Engine, which, if successfully exploited, could allow an attacker to take control of an affected system...

Microsoft SMB Server Denial of Service Vulnerability

Microsoft Windows is a popular operating system. A security vulnerability exists in Microsoft Windows SMB Server's handling of certain requests, allowing remote attackers to exploit the vulnerability to submit special requests and crash the system...

Microsoft Windows Kernel Information Disclosure Vulnerability (CNVD-2017-30126)

Microsoft Windows Server 2012 R2 and others are operating systems released by Microsoft Corporation in the United States. kernel is one of the kernels. An information disclosure vulnerability exists in the kernel in Microsoft Windows. A local attacker can exploit this vulnerability to retrieve...

Microsoft Windows Multiple Vulnerabilities (KB4042067)

This host is missing a critical security update according to Microsoft KB4042067. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4041681)

This host is missing a critical security update according to Microsoft KB4041681 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Server 2012 Multiple Vulnerabilities (KB4041690)

This host is missing a critical security update according to Microsoft KB4041690 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...