April 11, 2017—KB4015583 (OS Build 15063.138)

April 11, 2017—KB4015583 OS Build 15063.138 Improvements and fixes This security update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Addressed issues with updated time zone information. Security updates to Scripting...

April 11, 2017—KB4015551 (Monthly Rollup)

April 11, 2017—KB4015551 Monthly Rollup Improvements and fixes This security update includes improvements and fixes that were a part of update KB4012220 released March 21, 2017 and also resolves security vulnerabilities in Internet Explorer, Scripting Engine, Hyper-V, Win32K, Adobe Type Manager...

April 11, 2017—KB4015548 (Security-only update)

April 11, 2017—KB4015548 Security-only update Improvements and fixes This security update resolves security vulnerabilities in Scripting Engine, Hyper-V, Win32K, Adobe Type Manager Font Driver, Microsoft Outlook, Graphics component, Lightweight Directory Access Protocol and Windows OLE. For more...

Scripting Engine Information Disclosure Vulnerability

An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. In a web-based attack scenario, an...

KLA11835 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information, gain privileges. Below is a complete list of vulnerabilities: 1. A memory corrupti...

CVE-2017-0130

The scripting engine in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability." This vulnerability is different from that described in...

CVE-2017-0040

The scripting engine in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability." This vulnerability is different from that described in...

CVE-2017-0040

The scripting engine in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability." This vulnerability is different from that described in...

Information disclosure

The VBScript engine in Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Scripting Engine Information Disclosure Vulnerability." This vulnerability is different from those described in CVE-2017-0018, and...

Memory corruption

The scripting engine in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability." This vulnerability is different from that described in...

CVE-2017-0040

The scripting engine in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability." This vulnerability is different from that described in...

CVE-2017-0130

The CVE-2017-0130 entry covers a memory corruption vulnerability in the Scripting Engine of Microsoft Internet Explorer versions 9–11. According to the description, a crafted web site could cause memory corruption, enabling remote attackers to execute arbitrary code or cause a denial of service. ...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2017-03518)

Microsoft Internet Explorer IE is a web browser developed by Microsoft and is the default browser that comes with the Windows operating system.Scripting Engine is one of the JavaScript engine components. A memory corruption vulnerability exists in Scripting Engine in Microsoft IE versions 9 throu...

CVE-2017-0040

CVE-2017-0040 / CVE-2017-0130 describe memory corruption in the Scripting Engine of Internet Explorer 9–11 that can allow remote code execution or denial of service when a user visits a crafted site. The flaw affects the IE scripting engine, and the two CVEs are stated as distinct from one anothe...

Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2017-03374)

Microsoft Edge is a web browser developed by Microsoft and is the default browser that comes with the Windows 10 operating system.Scripting Engine is one of the JavaScript engine components. A memory corruption vulnerability exists in the Scripting Engine component in Microsoft Edge. A remote...

Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2017-03367)

Microsoft Edge is a web browser developed by Microsoft and is the default browser that comes with the Windows 10 operating system.Scripting Engine is one of the JavaScript engine components. A memory corruption vulnerability exists in the Scripting Engine component in Microsoft Edge. A remote...

Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2017-03370)

Microsoft Edge is a web browser developed by Microsoft and is the default browser that comes with the Windows 10 operating system.Scripting Engine is one of the JavaScript engine components. A memory corruption vulnerability exists in the Scripting Engine component in Microsoft Edge. A remote...

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (CNVD-2017-03591)

Microsoft Internet Explorer is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. Microsoft Internet Explorer suffers from a cz scripting engine memory corruption vulnerability. An attacker exploiting this vulnerabili...

Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2017-03368)

Microsoft Edge is a web browser developed by Microsoft and is the default browser that comes with the Windows 10 operating system.Scripting Engine is one of the JavaScript engine components. A memory corruption vulnerability exists in the Scripting Engine component in Microsoft Edge. A remote...

Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2017-03376)

Microsoft Edge is a web browser developed by Microsoft and is the default browser that comes with the Windows 10 operating system.Scripting Engine is one of the JavaScript engine components. A memory corruption vulnerability exists in the Scripting Engine component in Microsoft Edge. A remote...