CVE-2017-8460

CVE-2017-8460 is a Windows PDF information disclosure vulnerability affecting Windows 8.1, Windows Server 2012 R2/2016 and related Windows 10 versions. Connected sources confirm a Windows PDF vulnerability surface and indicate that June 2017 security updates (e.g., KB4022724/KB4022725/KB4022717/K...

CVE-2017-8522

CVE-2017-8522 affects Microsoft Windows browsers (IE/Edge) and the scripting engine, where memory handling of objects can cause arbitrary code execution. The issue is described as a Scripting Engine Memory Corruption Vulnerability impacting Windows 8.1/RT 8.1, Server 2012/R2, 2016, and Windows 10...

CVE-2017-8485

The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka...

CVE-2017-8465

Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to run processes in an elevated context when the Windows kernel improperly handles objects in memory, aka "Win32k Elevation of Privilege Vulnerability...

CVE-2017-8527

Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability due to the way it handles objects in memory, aka "Windows Graphics...

CVE-2017-0291

CVE-2017-0291 is a Windows PDF remote-code-execution vulnerability tied to the JPEG2000 parsing path in the Microsoft Windows PDF library. The KLA/Kaspersky entry explicitly lists a Windows PDF remote-code-execution vulnerability with CVE-2017-0291 and describes exploitation via specially crafted...

CVE-2017-8493

CVE-2017-8493 affects Windows 8.1/RT 8.1, Windows Server 2012 R2, Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. The issue is a Windows security feature bypass where an attacker can set variables that are read‑only or require authentication due to a failure to enforce case sensitivi...

CVE-2017-8468

CVE-2017-8468 is a Win32k Elevation of Privilege vulnerability in Microsoft Windows. Public exploits exist and the root cause is improper handling of objects in memory within the Windows kernel’s Win32k subsystem, enabling an attacker to run processes in an elevated context locally. Affected prod...

CVE-2017-8466

CVE-2017-8466 is a Windows local elevation of privilege vulnerability described as a Windows Cursor Elevation of Privilege Vulnerability affecting Windows 8.1, Windows Server 2012 (Gold/R2), Windows RT 8.1, Windows 10 (1511, 1607) and Windows Server 2016. The connected KLA entry corroborates Wind...

CVE-2017-8466

Windows Cursor in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows improper elevation of privilege, aka "Windows Cursor Elevation of Privilege Vulnerability"...

CVE-2017-0288

CVE-2017-0288 is a Windows graphics information disclosure vulnerability in the Graphics Device Interface (GDI). The Windows GDI component improperly discloses memory contents, enabling information disclosure on affected systems. Connected advisories confirm this issue affecting multiple Windows ...

CVE-2017-0296

Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to elevate privilege when tdx.sys fails to check the length of a buffer prior to copying memory...

CVE-2017-0292

Windows PDF in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows remote code execution if a user opens a specially crafted PDF file, aka "Windows PDF Remote Code Execution Vulnerability". This CVE ID is unique from...

CVE-2017-8543

CVE-2017-8543 is a Windows remote code execution vulnerability in the Windows Search service. The root cause is how Windows Search handles objects in memory, allowing an attacker to take control of the affected system. Exploitation can occur by sending specially crafted messages to the Windows Se...

CVE-2017-0297

Technical details (affected products, root cause, impact, remediation) are not publicly available in the provided connected documents. Monitor for updates from official advisories.

PT-2017-18388 · Microsoft · Windows 8.1 +6

Name of the Vulnerable Software and Affected Versions: Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 and R2 Description: An information disclosure issue exists due to affected Microsoft scripting engines not...

Microsoft Windows Kernel CVE-2017-8483 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. A local attacker can leverage this issue to disclose sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Versi...

Microsoft Windows Uniscribe CVE-2017-8528 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting user to open a malicious file or webpage. An attacker can exploit this issue to execute arbitrary code in the context of an affected system. Failed explo...

Microsoft Windows Kernel CVE-2017-8490 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. A local attacker can leverage this issue to disclose sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Versi...

KLA11052 Multiple vulnerabilities in Windows Uniscribe

Multiple serious vulnerabilities have been found in Microsoft Windows Uniscribe. Malicious users can exploit these vulnerabilities to execute arbitrary code and obtain sensitive information. Below is a complete list of vulnerabilities: 1. An improper handling of objects in memory can be exploited...