CVE-2017-8490

The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka...

CVE-2017-8479

The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka...

CVE-2017-8466

CVE-2017-8466 is a Windows local elevation of privilege vulnerability described as a Windows Cursor Elevation of Privilege Vulnerability affecting Windows 8.1, Windows Server 2012 (Gold/R2), Windows RT 8.1, Windows 10 (1511, 1607) and Windows Server 2016. The connected KLA entry corroborates Wind...

CVE-2017-8524

CVE-2017-8524 is a memory corruption vulnerability in Microsoft’s JavaScript engine affecting multiple Windows versions (Windows 7 SP1, 8.1/RT 8.1, 8, 2012/2012 R2, 10 versions, and Server 2016). The root cause is memory handling in the scripting engine during rendering of objects, enabling remot...

CVE-2017-8533

CVE-2017-8533 is an information‑disclosure vulnerability in Windows graphics handling, specifically the Uniscribe/GDI path, where memory contents can be exposed. The issue affects multiple Windows editions listed in the CVE entry (e.g., Windows 7 SP1, 8.1, various Windows 10 versions, Windows Ser...

CVE-2017-8497

Microsoft Edge in Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8496...

CVE-2017-8465

Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to run processes in an elevated context when the Windows kernel improperly handles objects in memory, aka "Win32k Elevation of Privilege Vulnerability...

CVE-2017-8482

Technical details about CVE-2017-8482 are not publicly provided in the connected documents. The initial description gives general info, but no concrete affected products, versions, root cause, impact, or fix is documented here. Monitor for updates.

CVE-2017-8468

CVE-2017-8468 is a Win32k Elevation of Privilege vulnerability in Microsoft Windows. Public exploits exist and the root cause is improper handling of objects in memory within the Windows kernel’s Win32k subsystem, enabling an attacker to run processes in an elevated context locally. Affected prod...

CVE-2017-8523

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page with malicious content when Microsoft Edge fails to correctly apply Same Origin Policy for HTML elements present in other browser windows, aka "Microso...

CVE-2017-8549

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system when Microsoft Edge improperly handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID...

CVE-2017-0298

A DCOM object in Helppane.exe in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016, when configured to run as the interactive user, allows an authenticated attacker ...

CVE-2017-0219

The CVE concerns Device Guard Code Integrity Policy security feature bypass allowing injection of code into PowerShell on affected Windows versions (Win10 1607, 1511/1607, Windows Server 2016). Root cause described as a security feature bypass in Device Guard; impact includes potential code execu...

CVE-2017-8469

Technical details for CVE-2017-8469 are not publicly available in the provided documents; no affected products, impact or fixes are specified beyond the high-level description. Monitor for updates.

CVE-2017-8522

CVE-2017-8522 affects Microsoft Windows browsers (IE/Edge) and the scripting engine, where memory handling of objects can cause arbitrary code execution. The issue is described as a Scripting Engine Memory Corruption Vulnerability impacting Windows 8.1/RT 8.1, Server 2012/R2, 2016, and Windows 10...

CVE-2017-8474

Technical details about CVE-2017-8474 are not publicly provided in the supplied connected documents. Monitor EUVD entries for updates; no concrete affected products, root cause, impact, or remediation are stated in the available sources.

CVE-2017-8485

Technical details about CVE-2017-8485 are not provided in the connected documents. The available materials do not specify affected versions, root cause, impact, or fixes. Monitor for updates.

CVE-2017-0292

Windows PDF in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows remote code execution if a user opens a specially crafted PDF file, aka "Windows PDF Remote Code Execution Vulnerability". This CVE ID is unique from...

CVE-2017-8527

Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability due to the way it handles objects in memory, aka "Windows Graphics...

CVE-2017-8488

The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka...