CVE-2017-8596

CVE-2017-8596 affects Microsoft Edge on Windows 10 1607/1703 and Windows Server 2016. The issue is a remote memory corruption in the Chakra JavaScript engine when rendering objects in memory, enabling code execution in the context of the current user. CVSS data from NVD indicates high risk (AV:N/...

CVE-2017-8606

CVE-2017-8606 is described as a remote code execution vulnerability in Microsoft browsers (JavaScript engine) where memory objects mishandled during rendering could allow code execution in the context of the current user. The initial CVE entry lists multiple Windows versions affected. Connected d...

CVE-2017-8584

CVE-2017-8584 affects Windows 10 version 1607 and Windows Server 2016 via remote code execution in the HoloLens Broadcom BCM43xx wireless chipset. The root cause is improper handling of memory objects by the Broadcom chipset when processing WiFi packets, allowing an unauthenticated attacker withi...

CVE-2017-8604

CVE-2017-8604 is a Microsoft Edge scripting engine remote memory corruption vulnerability affecting Windows 10 (versions 1511, 1607, 1703) and Windows Server 2016. The issue arises when the JavaScript engine fails to render or handles memory objects, enabling an attacker to execute arbitrary code...

CVE-2017-8595

CVE-2017-8595 is a memory-corruption vulnerability in Microsoft Edge’s scripting engine on Windows 10/Server 2016, where improper handling of in-memory objects can lead to arbitrary code execution with the current user’s privileges. The connected sources indicate Edge’s JavaScript engine memory h...

CVE-2017-8486

CVE-2017-8486 is a local information-disclosure vulnerability in Windows due to how Win32k handles objects in memory. Affected products include Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 (various builds), and Windows S...

CVE-2017-8594

CVE-2017-8594 affects Internet Explorer on Windows 8.1/Windows RT 8.1 and Windows Server 2012 R2. The root cause is a memory handling issue where Internet Explorer accesses objects in memory (via Windows Text Services Framework, per MS sources), enabling remote code execution with the current use...

CVE-2017-8611

CVE-2017-8611 affects Microsoft Edge on Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. The vulnerability allows remote attackers to spoof web content via a crafted website. The NVD lists CVSS v3.0 base score 6.5 (I:H, A:N; UI:R). No remediation details are provided in the connected ...

CVE-2017-8603

CVE-2017-8603: A use-after-free in Microsoft Edge’s AsmJsInterpreter during HTML/script processing allows remote code execution in the current user context. Credited source (CPAI-2017-0656) notes Edge memory handling object processing as the root cause. Attack requires a user to open a crafted pa...

CVE-2017-8619

Microsoft Edge on Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability in the way affected Microsoft scripting engines render when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This CVE ID is unique from...

CVE-2017-8556

Graphics in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory,...

CVE-2017-8609

CVE-2017-8609 affects Microsoft Internet Explorer on Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. The root cause is a memory-corruption vulnerability in the JavaScript engine’s handling of objects in memory, leading to remote code execution. Exploitation can occur when a user visi...

CVE-2017-8574

CVE-2017-8574 describes a local elevation-of-privilege in the Microsoft Windows Graphics Component. Affected software includes Windows 10 versions 1607 and 1703 (and Windows Server 2016) where the Graphics component fails to properly handle objects in memory, enabling a local attacker to run code...

CVE-2017-8594

Internet Explorer on Microsoft Windows 8.1 and Windows RT 8.1, and Windows Server 2012 R2 allows an attacker to execute arbitrary code in the context of the current user when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability"...

CVE-2017-8588

Microsoft WordPad in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability due to the way it parses specially crafted files, aka...

CVE-2017-8599

CVE-2017-8599 - Microsoft Edge Security Feature Bypass is tied to Edge CSP validation failures in affected Windows 10 editions (Gold, 1511, 1607, 1703) and Windows Server 2016. The vulnerability describes an attacker tricking a user into loading a page with malicious content due to improper valid...

CVE-2017-8592

Microsoft browsers on when Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, and Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow a security feature bypass vulnerability when they improperly handle redirect requests,...

CVE-2017-8601

CVE-2017-8601 is a vulnerability in the Microsoft Edge Scripting Engine on Windows 10 (Gold/1511/1607/1703) and Windows Server 2016. The root cause is memory handling during rendering of objects in the JavaScript engine, causing memory corruption that could allow an attacker to execute arbitrary ...

CVE-2017-8565

CVE-2017-8565 is a Windows PowerShell remote code execution vulnerability triggered when PSObject wraps a CIM Instance. Connected sources describe in detail that deserialization via PSObject, LosFormatter, ObjectStateFormatter (and related gadget chains) can enable remote code execution in PowerS...

CVE-2017-8588

CVE-2017-8588 is a WordPad remote code execution vulnerability in Windows where parsing specially crafted WordPad files can execute code. Connected sources identify WordPad vulnerability (KB4026061) affecting WordPad across affected Windows versions and indicate the CVE entry is linked to a mitig...