CVE-2017-0275: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Server Message Block 1.0 SMBv1 allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 handles...

CVE-2017-0274: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Server Message Block 1.0 SMBv1 allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 handles...

CVE-2017-0276: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Server Message Block 1.0 SMBv1 allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 handles...

Security update for Adobe Flash Player: May 9, 2017

None None...

CVE-2017-0290

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 does not...

KLA11012 Remote code execution vulnerability in the Microsoft Malware Protection Engine

An improper way of scanning files was found in the Microsoft Malware Protection. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed file. Technical details To exploit this vulnerability, a malformed fi...

PT-2017-10473

Name of the Vulnerable Software and Affected Versions Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 versions 1511 and 1607 Windows Server 2016 Description The issue allows local users to gain privileges via a crafted...

PT-2017-2136

Name of the Vulnerable Software and Affected Versions Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 versions 1511 through 1703 Windows Server 2016 Description The issue is related to insufficient access restrictions in...

Information disclosure

A Win32k information disclosure vulnerability exists in Windows 8.1, Windows RT 8.1, Windows Server 2012, Windows Server 2012 R2, Windows 10, and Windows Server 2016 when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could...

CVE-2017-0188

A Win32k information disclosure vulnerability exists in Windows 8.1, Windows RT 8.1, Windows Server 2012, Windows Server 2012 R2, Windows 10, and Windows Server 2016 when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could...

CVE-2017-0158

CVE-2017-0158 is a Windows scripting engine memory corruption vulnerability. The issue arises from improper handling/sanitization of in-memory handles in the Scripting Engine, enabling remote code execution when a user visits a malicious site or opens a crafted document. Affected platforms includ...

CVE-2017-0188

CVE-2017-0188 concerns a Win32k information-disclosure vulnerability in Windows 8.1/RT 8.1, Windows Server 2012/2012 R2, Windows 10, and Windows Server 2016. The win32k component improperly provides kernel information, enabling an attacker who can exploit the issue to obtain information that coul...

CVE-2017-0167: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability exists in Windows 8.1, Windows RT 8.1, Windows Server 2012 R2, Windows 10, and Windows Server 2016 when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further...

Microsoft Windows OLE CVE-2017-0211 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code within the context of the application. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 16...

PT-2017-10435

Name of the Vulnerable Software and Affected Versions Windows 8.1 Windows RT 8.1 Windows Server 2012 R2 Windows 10 Windows Server 2016 Description The issue arises from the Windows kernel's improper handling of objects in memory, allowing an attacker to obtain information that could be used to...

PT-2017-2011

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Windows 10 Windows 10 1511 Windows 8.1 Windows RT 8.1 Windows Server 2012 R2 Description The issue is related to insufficient access control in the operating system, which can be exploited ...

Microsoft Windows ATMFD.dll CVE-2017-0192 Information Disclosure Vulnerability

Description Microsoft Windows is prone to an information-disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607...

PT-2017-10431

Name of the Vulnerable Software and Affected Versions Windows 7 Windows 8.1 Windows RT 8.1 Windows 10 Windows Server 2008 R2 Windows Server 2012 Windows Server 2012 R2 Windows Server 2016 Description An issue exists when the Microsoft Graphics Component fails to properly handle objects in memory...

PT-2017-10450

Name of the Vulnerable Software and Affected Versions Windows 8.1 Windows RT 8.1 Windows Server 2012 Windows Server 2012 R2 Windows 10 Windows Server 2016 Description A Win32k information disclosure issue exists when the win32k component improperly provides kernel information. An attacker who...

CVE-2017-0042

Windows Media Player in Microsoft Windows 8.1; Windows Server 2012 R2; Windows RT 8.1; Windows 7 SP1; Windows 2008 SP2 and R2 SP1, Windows Server 2016; Windows Vista SP2; and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information via a crafted web site, aka "Windo...