CVE-2017-8650: Origin Validation Error

Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to exploit a security feature bypass due to Microsoft Edge not properly enforcing same-origin policies, aka "Microsoft Edge Security Feature Bypass Vulnerability"...

PT-2017-18454

Name of the Vulnerable Software and Affected Versions Microsoft Edge in Microsoft Windows 10 version 1703 Description A security feature bypass issue exists due to Microsoft Edge not properly enforcing same-origin policies. This could allow an attacker to access information from origins outside t...

Microsoft Internet Explorer Security Feature Bypass (CVE-2017-8625)

A security feature bypass vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to Internet Explorer fails to validate User Mode Code Integrity UMCI policies. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected...

PT-2017-18449

Name of the Vulnerable Software and Affected Versions Microsoft Edge in Microsoft Windows 10 1703 Description A security feature bypass issue exists due to how Microsoft Edge accesses memory in code compiled by the Edge Just-In-Time JIT compiler, allowing Arbitrary Code Guard ACG to be bypassed...

CVE-2017-8625: Incorrect Default Permissions

Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to bypass Device Guard User Mode Code Integrity UMCI policies due to Internet Explorer failing to validate UMCI policies, aka "Internet Explorer Security Feature Bypass Vulnerability"...

Security feature bypass

Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016 as packaged in Microsoft Office allows a security feature bypass vulnerability due to the way that it handles input, aka "Microsoft Office Outlook Security Feature Bypass Vulnerability"...

CVE-2017-8571

CVE-2017-8571 is a security feature bypass affecting Microsoft Outlook included in Office (Outlook 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016). The root cause is improper handling/parsing of input and file formats by Outlook/Office, allowing bypass of built-in security checks. In affected de...

CVE-2017-8571: Improper Input Validation

Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016 as packaged in Microsoft Office allows a security feature bypass vulnerability due to the way that it handles input, aka "Microsoft Office Outlook Security Feature Bypass Vulnerability"...

Microsoft Releases Outlook Patches, Fixes Broken Update

During the heat of Black Hat last week, Microsoft pushed out patches for Outlook that address three newly reported vulnerabilities. Last week’s update also included fixes for six of eight vulnerabilities left unpatched after issues were reported with the June Patch Tuesday update. The most seriou...

Microsoft Office Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists when Microsoft Office improperly handles input. An attacker who successfully exploited the vulnerability could execute arbitrary commands. In a file-sharing attack scenario, an attacker could provide a specially crafted document file designed to...

PT-2017-18418

Name of the Vulnerable Software and Affected Versions Microsoft Outlook versions 2007 SP3 through 2016 Description A security feature bypass issue exists due to improper input handling. This could allow an attacker to execute arbitrary commands. Recommendations For Microsoft Outlook versions 2007...

Kerberos SNAME Security Feature Bypass Vulnerability (KB4022746)

This host is missing an important security update according to Microsoft KB4022746 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Security feature bypass

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page with malicious content when the Edge Content Security Policy CSP fails to properly validate certain specially crafted documents, aka "Microsoft Edge...

Security feature bypass

Microsoft browsers on when Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, and Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow a security feature bypass vulnerability when they improperly handle redirect requests,...

Security feature bypass

Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to bypass Extended Protection for Authentication when Kerberos fails to prevent tampering with...

CVE-2017-8592

CVE-2017-8592 is a browser security feature bypass in Microsoft browsers (Internet Explorer/Edge) caused by improper handling of redirect requests. This leads to bypassing CORS redirect restrictions and following redirects that should be ignored, potentially exposing data to an attacker. In the c...

Microsoft Edge Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of different origins. The vulnerability allows Microsoft Edge to bypass Same-Origin Policy SOP restrictions, and to allow requests that should otherwise be ignored. An attacker who successfully exploite...

Kerberos SNAME Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in Microsoft Windows when Kerberos fails to prevent tampering with the SNAME field during ticket exchange. An attacker who successfully exploited this vulnerability could use it to bypass Extended Protection for Authentication. To exploit this...

CVE-2017-8592: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft browsers on when Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, and Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow a security feature bypass vulnerability when they improperly handle redirect requests,...

PT-2017-18433

Name of the Vulnerable Software and Affected Versions Microsoft browsers on Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 Description A security feature bypass issue exists due to...