CVE-2017-8543

CVE-2017-8543 is a Windows remote code execution vulnerability in the Windows Search service. The root cause is how Windows Search handles objects in memory, allowing an attacker to take control of the affected system. Exploitation can occur by sending specially crafted messages to the Windows Se...

CVE-2017-8464

CVE-2017-8464 affects Windows shells that render .lnk icons. A crafted LNK file can trigger arbitrary code execution due to improper icon handling in Windows Explorer and related parsers. Affected products include Windows client and server releases spanning Windows 7 through Windows 10 and Window...

CVE-2017-8552

Technical details for CVE-2017-8552 are not publicly provided in the connected documents. No concrete product/version/impact details are present beyond the high-level description. Monitor for updates.

CVE-2016-7836

CVE-2016-7836 affects SKYSEA Client View versions 11.221.03 and earlier. The flaw enables remote code execution through improper authentication during TCP processing to the management console. The vulnerability’s impact is high (per CVSS data: critical/remote code execution with network access, n...

CVE-2017-7494

CVE-2017-7494 affects Samba 3.5.0 and later, with vulnerable ranges ending before 4.6.4, and also before 4.5.10 and 4.4.14 in some branches. The flaw enables a malicious client with write access to a writable Samba share to upload a shared library and trigger the server to load and execute it, ac...

CVE-2017-8538

CVE-2017-8538 concerns the Microsoft Malware Protection Engine (MMPE) used by Forefront and Defender on Windows platforms (Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Windows 10 versions 1511–1703, Windows Server 2016, plus Microsoft Ex...

CVE-2017-6862

Netgear WNR2000 series (WNR2000v3 prior to 1.1.2.14, WNR2000v4 prior to 1.0.0.66, WNR2000v5 prior to 1.0.0.42) are affected by a buffer-overflow vulnerability in the administration web interface that allows authentication bypass and remote code execution. The root cause is a buffer overflow trigg...

CVE-2017-8540

CVE-2017-8540 affects Microsoft Malware Protection Engine (MMPE) across Forefront/Defender deployments. The weakness arises from a use-after-free in the garbage collection system managing JavaScript objects during scanning of specially crafted files, enabling memory corruption and potential remot...

CVE-2017-8541

CVE-2017-8541 concerns the Microsoft Malware Protection Engine (MMPE) remote code execution vulnerability. Multiple sources confirm MMPE fails to properly scan a specially crafted file, causing memory corruption and potentially arbitrary code execution. Exploitation indicators include exploits li...

CVE-2017-5173

Geutebrück G-Cam/EFD-2250 (Firmware 1.11.0.12) is affected by two CVEs: CVE-2017-5173 (Improbable neutralization of special elements in OS commands) and CVE-2017-5174 (Authentication bypass). CVE-5174 enables remote authentication bypass; CVE-5173 can allow remote code execution via crafted reque...

CVE-2017-8917

CVE-2017-8917 is a Joomla! SQL injection vulnerability in the com_fields component (affecting Joomla! 3.7.0 introduced, fixed in 3.7.1). The root cause is improper sanitization of the list[fullordering] parameter, enabling an SQL payload that can trigger error-based output (e.g., via UpdateXML) a...

CVE-2017-6079

CVE-2017-6079 affects Edgewater Networks Edgemarc (EdgeMarc) appliances. The HTTP web-management interface exposes a hidden page that allows user-defined commands (such as iptables rules) to be executed via a web shell-like mechanism; the flaw is described as a blind command-injection vulnerabili...

CVE-2016-10372

CVE-2016-10372 affects the Eir D1000 modem. The root cause is improper restriction of the TR-064 protocol, allowing remote attackers to execute arbitrary commands via TCP port 7547. Reported demonstrations include opening WAN access to port 80, retrieving the login password (which defaults to the...

CVE-2017-0224

CVE-2017-0224 describes a remote code execution in Microsoft Edge via the scripting engine memory corruption when handling objects in memory. Connected advisories (GHSA entries) confirm a Chakra/Edge scripting engine memory corruption vulnerability with similar implications, reinforcing that the ...

CVE-2017-0262

CVE-2017-0262 affects Microsoft Office 2010 SP2, 2013 SP1, and 2016. The issue is a remote code execution vulnerability caused by the software not properly handling objects in memory, referred to as the Office Remote Code Execution vulnerability. The vulnerability is tied to Office products loadi...

CVE-2017-0281

CVE-2017-0281 / CVE-2017-0262 describe a remote code execution flaw in Microsoft Office and related components triggered by memory handling errors while processing specially crafted Office files (EPS in particular). Affected products include Office 2010 SP2, Office 2013 SP1, Office 2016, and broa...

CVE-2017-0263

CVE-2017-0263: Windows Win32k local privilege escalation via kernel-mode drivers. The CVE concerns memory-object handling in Win32k.sys that allows a local attacker to gain privileges through a crafted application. Documents identify the affected Windows family (Windows 7 SP1, 8.1, Windows Server...

CVE-2017-0222

CVE-2017-0222 and CVE-2017-0226 describe a remote code execution vulnerability in Microsoft’s Internet Explorer caused by improper access to memory objects. The root cause is memory corruption during object handling, leading to possible code execution in the current user context. CVSS data in the...

CVE-2017-0226

Technical details for CVE-2017-0226 are not publicly provided in the initial description or connected documents. Monitor for updates; no concrete specifics (affected product/version, root cause, or fix) are disclosed here.

CVE-2017-0261

Microsoft Office remote code execution vulnerability (CVE-2017-0261) affects Office 2010 SP2, 2013 SP1, and 2016. Root cause: improper handling of in-memory objects while parsing specially crafted files (EPS/Office formats). Exploitation involves convincing a user to open a crafted file, enabling...