CVE-2017-8496

Microsoft Edge in Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8497...

CVE-2017-0282

Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, Windows Server 2016, Microsoft Office 2007 SP3, and Microsoft Office 2010 SP2 allows improper disclosure of memory contents, aka "Window...

CVE-2017-8530

Microsoft Edge in Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016 is affected by CVE-2017-8530: an attacker can trick a user into loading a page with malicious content due to Edge not properly enforcing same-origin policies. This is a vulnerability in Edge’s handling of same-origin co...

CVE-2017-0215

CVE-2017-0215 affects Windows 10 version 1607 and Windows Server 2016, describing a security feature bypass in Device Guard Code Integrity Policy that could allow injection of code into a PowerShell session. Public exploitation exists per related advisories. The issue is addressed in June 2017 se...

CVE-2017-0193

CVE-2017-0193 affects Hyper-V instruction emulation in Microsoft Windows, enabling a local attacker to escalate privileges inside a guest VM due to insufficient enforcement of privilege levels in Hypervisor Code Integrity. Affected scope includes Windows Server 2008 R2/2012, Windows 7/8.1, Window...

CVE-2017-8485

The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka...

CVE-2017-8527

Technical details for CVE-2017-8527 are not publicly available in the provided documents. No specifics on affected products, vulnerable components, root cause, exploits, or fixes are included here. Monitor for updates from official advisories.

CVE-2017-0283

CVE-2017-0283 is described in the connected MSKB as a remote code execution vulnerability in Microsoft Office components that could be triggered by opening a specially crafted Office file. The MSKB describes a security update KB3191937 for Skype for Business 2015 (Lync 2013) that addresses CVE-20...

CVE-2017-0298

Technical details about CVE-2017-0298 are not publicly provided in the supplied documents. No specific affected products/versions or root cause are described here. Monitor official sources for updates.

CVE-2017-8534

The connected KLA11039 entry confirms CVE-2017-8534 as an information-disclosure vulnerability in Windows Uniscribe. It can be exploited remotely via specially crafted documents to disclose memory contents. Microsoft security updates from June 2017 (KB4022714/2717/2718/2719/2724/2725/2726 and rel...

CVE-2017-8553

An information disclosure vulnerability exists in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows Server 2016 when the Windows kernel improperly handles objects in memory, aka "GDI Information Disclosure Vulnerability"...

CVE-2017-8548

CVE-2017-8548 affects Microsoft Edge in Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. It describes improper handling of in-memory objects in Edge’s scripting engine, causing memory corruption and information disclosure that could aid system compromise. A public exploit has been lin...

CVE-2017-0218

Microsoft Windows 10 Gold, Windows 10 1511, Windows 10 1607, and Windows Server 2016 allow an attacker to exploit a security feature bypass vulnerability in Device Guard that could allow the attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Poli...

CVE-2017-0288

CVE-2017-0288 is a Windows graphics information disclosure vulnerability in the Graphics Device Interface (GDI). The Windows GDI component improperly discloses memory contents, enabling information disclosure on affected systems. Connected advisories confirm this issue affecting multiple Windows ...

CVE-2017-8476

The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka...

CVE-2017-0218

CVE-2017-0218 affects Microsoft Windows 10 (Gold/1511/1607) and Windows Server 2016, involving a Device Guard Code Integrity policy security feature bypass. The vulnerability could allow an attacker to inject malicious code into a Windows PowerShell session. The description in the initial documen...

CVE-2017-0297

Technical details (affected products, root cause, impact, remediation) are not publicly available in the provided connected documents. Monitor for updates from official advisories.

CVE-2017-8466

Windows Cursor in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows improper elevation of privilege, aka "Windows Cursor Elevation of Privilege Vulnerability"...

CVE-2017-8498

CVE-2017-8498 affects Microsoft Edge on Windows 10 1607/1703 and Windows Server 2016. When Edge runs JavaScript that uses XML DOM objects to detect installed browser extensions, an attacker can read data not intended to be disclosed. This CVE is separate from CVE-2017-8504. No exploitation, remed...

CVE-2017-8472

CVE-2017-8472 concerns a Win32k information disclosure in Windows kernel object initialization, affecting Windows 7 SP1, Windows Server 2008 SP2/R2 SP1, and Windows Server 2012. The description attributes the issue to improper initialization of memory objects in the kernel, enabling an authentica...