CVE-2017-0145

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka...

CVE-2017-0045

Windows DVD Maker in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows Vista SP2 does not properly parse crafted .msdvd files, which allows attackers to obtain information to compromise a target system, aka "Windows DVD Maker Cross-Site Request Forgery Vulnerability."...

CVE-2017-0023

CVE-2017-0023 is a remote code execution vulnerability in the Microsoft Edge PDF Library, affecting Windows 8.1, Windows Server 2012/2012 R2, Windows RT 8.1, and Windows 10 (variants such as 1511/1607). Public reports describe memory corruption in the PDF rendering library leading to arbitrary co...

CVE-2017-0043

Active Directory Federation Services in Microsoft Windows 10 1607, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 Gold and R2, and Windows Server 2016 allows local users to obtain sensitive information via a crafted application, aka "Microsoft Active Directory Federation Services...

CVE-2017-0101

The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allow local users to gain privileges via a crafted...

CVE-2017-0043

CVE-2017-0043 affects Active Directory Federation Services (ADFS) across Windows Server 2008 R2 SP1, Server 2012/2012 Gold, Server 2016, and Windows 10 1607. The vulnerability involves information disclosure due to processing XML (XML External Entity) handling in ADFS, enabling an authenticated, ...

CVE-2017-0051

CVE-2017-0051 affects Microsoft Windows 10 Version 1607 and Windows Server 2016. The description indicates a remote-denial-of-service via a crafted Office document, referred to as the Microsoft Hyper-V Network Switch Denial of Service Vulnerability. The vulnerability is described as causing an ap...

CVE-2017-0050

Technical details about CVE-2017-0050 are not publicly provided in the connected documents. The sources reference the vulnerability generally; monitor for updates on affected products, root cause, and fixes.

CVE-2017-0148

CVE-2017-0148 is a Microsoft SMBv1 Remote Code Execution vulnerability affecting the SMBv1 server component across multiple Windows versions (Vista SP2; Server 2008 SP2/R2; Windows 7 SP1; Windows 8.1; Server 2012 Gold/R2; Windows RT 8.1; Windows 10 variants; Windows Server 2016). The flaw lets re...

CVE-2017-0055

CVE-2017-0055 refers to a cross-site scripting (XSS) elevation-of-privilege vulnerability in Microsoft Internet Information Services (IIS). The issue affects IIS on multiple Windows platforms (Vista through Windows Server 2016) and allows a remote attacker to craft a request that can execute scri...

CVE-2017-0116

CVE-2017-0116 is an Uniscribe Information Disclosure vulnerability affecting Microsoft Windows with the Uniscribe component (usp10.dll) used via DrawText/UI paths. The flaw, described as a memory disclosure in Uniscribe when handling TrueType/OpenType font data from untrusted sources, is triggere...

Microsoft Windows SMB Information Disclosure Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. SMBv1 server is one of the server protocol components. An information disclosure vulnerability exists in Microsoft Windows SMB, which can be exploited by remote attackers to obtain sensitive informati...

CVE-2017-0116

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091, CVE-2017-0092,...

CVE-2017-0076

Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 and R2; Windows 10, 1511, and 1607; and Windows Server 2016 allows guest OS users, running as virtual machines, to cause a denial of service via a crafted application, aka...

CVE-2017-0021

Technical details about CVE-2017-0021 are not publicly available in the provided connected documents. Monitor for updates; no specific affected builds, root cause, or fixes are described here.

CVE-2017-0144

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka...

Microsoft IE And Microsoft Edge Flash Player Multiple Vulnerabilities (3194343)

This host is missing a critical security update according to Microsoft Bulletin MS16-127. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2017-0005

The Graphics Device Interface GDI in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application, aka “Windows GDI...

Microsoft IE And Microsoft Edge Flash Player RCE Vulnerability (3201860)

This host is missing a critical security update according to Microsoft Bulletin MS16-128. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2017-0104

The iSNS Server service in Microsoft Windows Server 2008 SP2 and R2, Windows Server 2012 Gold and R2, and Windows Server 2016 allows remote attackers to issue malicious requests via an integer overflow, aka "iSNS Server Memory Corruption Vulnerability."...