Remote code execution

Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability due to the way that Windows Search handles objects in memory, aka "Windo...

Information disclosure

HTTP.sys in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when the component improperly handles objects in...

Spoofing

Microsoft Edge on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows remote attackers to spoof web content via a crafted web site, aka "Microsoft Edge Spoofing Vulnerability."...

Memory corruption

Microsoft Edge in Microsoft Windows 10 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption...

Memory corruption

Microsoft Edge in Microsoft Windows 10 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption...

Memory corruption

Microsoft browsers in Microsoft Windows 7, Windows Server 2008 and R2, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript...

Remote code execution

Microsoft Edge on Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability in the way affected Microsoft scripting engines render when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This CVE ID is unique from...

Remote code execution

Microsoft WordPad in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability due to the way it parses specially crafted files, aka...

Security feature bypass

Microsoft browsers on when Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, and Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow a security feature bypass vulnerability when they improperly handle redirect requests,...

CVE-2017-8599

CVE-2017-8599 - Microsoft Edge Security Feature Bypass is tied to Edge CSP validation failures in affected Windows 10 editions (Gold, 1511, 1607, 1703) and Windows Server 2016. The vulnerability describes an attacker tricking a user into loading a page with malicious content due to improper valid...

CVE-2017-8584

Windows 10 1607 and Windows Server 2016 allow an attacker to execute code remotely via a specially crafted WiFi packet aka "HoloLens Remote Code Execution Vulnerability."...

CVE-2017-8574

CVE-2017-8574 describes a local elevation-of-privilege in the Microsoft Windows Graphics Component. Affected software includes Windows 10 versions 1607 and 1703 (and Windows Server 2016) where the Graphics component fails to properly handle objects in memory, enabling a local attacker to run code...

CVE-2017-8611

CVE-2017-8611 affects Microsoft Edge on Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. The vulnerability allows remote attackers to spoof web content via a crafted website. The NVD lists CVSS v3.0 base score 6.5 (I:H, A:N; UI:R). No remediation details are provided in the connected ...

CVE-2017-8596

CVE-2017-8596 affects Microsoft Edge on Windows 10 1607/1703 and Windows Server 2016. The issue is a remote memory corruption in the Chakra JavaScript engine when rendering objects in memory, enabling code execution in the context of the current user. CVSS data from NVD indicates high risk (AV:N/...

CVE-2017-8463

Windows Shell in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability due to the way it improperly handles executable files and share...

CVE-2017-8595

CVE-2017-8595 is a memory-corruption vulnerability in Microsoft Edge’s scripting engine on Windows 10/Server 2016, where improper handling of in-memory objects can lead to arbitrary code execution with the current user’s privileges. The connected sources indicate Edge’s JavaScript engine memory h...

CVE-2017-8598

Technical details for CVE-2017-8598 are not provided in the connected documents. Monitor for updates from CIRCL/CNVD/Nessus sources for affected products, impacts, and fixes.

CVE-2017-8604

CVE-2017-8604 is a Microsoft Edge scripting engine remote memory corruption vulnerability affecting Windows 10 (versions 1511, 1607, 1703) and Windows Server 2016. The issue arises when the JavaScript engine fails to render or handles memory objects, enabling an attacker to execute arbitrary code...

CVE-2017-8577

Technical details for CVE-2017-8577 are not provided in the supplied documents; no explicit affected product/version, root cause, impact, or fix is disclosed here. Monitor for updates.

CVE-2017-8601

CVE-2017-8601 is a vulnerability in the Microsoft Edge Scripting Engine on Windows 10 (Gold/1511/1607/1703) and Windows Server 2016. The root cause is memory handling during rendering of objects in the JavaScript engine, causing memory corruption that could allow an attacker to execute arbitrary ...