CVE-2017-11835

Microsoft graphics in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an attacker to potentially read data that was not intended to be disclosed due to the way that the Microsoft Windows Embedded OpenType EOT font engine parses specially crafted embedded fonts, aka "Windows EOT Font...

CVE-2017-11839

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to take control of an affected system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID ...

CVE-2017-11827

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gai...

CVE-2017-11830

Device Guard in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to make an unsigned file appear to be signed, due to a security feature bypass, aka "Device Guard Security Feature Bypass Vulnerability"...

Information disclosure

Microsoft graphics in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an attacker to potentially read data that was not intended to be disclosed due to the way that the Microsoft Windows Embedded OpenType EOT font engine parses specially crafted embedded fonts, aka "Windows EOT Font...

CVE-2017-11850

Microsoft Graphics Component in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to log on to an affected system and run a specially crafted application due to improper handling...

CVE-2017-11803

Microsoft Edge in Microsoft Windows 10 1703, 1709 and Windows Server, version 1709 allows an attacker to obtain information to further compromise the user's system, due to how Microsoft Edge handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is uniqu...

CVE-2017-11844

Microsoft Edge in Windows 10 versions 1703, 1709 and Windows Server 1709 has an information-disclosure vulnerability caused by how Edge handles objects in memory. The CVE entry (CVE-2017-11844) specifies that an attacker can obtain information to further compromise the user’s system. The connecte...

CVE-2017-11831

CVE-2017-11831 is a Windows kernel information disclosure vulnerability affecting Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2008 SP2/R2 SP1, 2012/R2, Windows 10 (various builds up to 1709) and Windows Server 2016. Root cause: kernel initializes memory in a way that can expose information;...

CVE-2017-11871

CVE-2017-11871: ChakraCore and Microsoft Edge memory-corruption vulnerability in Windows 10 (1703/1709) and Windows Server 1709 allows an attacker to gain the current user’s rights via scripting engine object handling in memory. Root cause: memory handling in the scripting engine leads to memory ...

CVE-2017-11866

CVE-2017-11866 concerns ChakraCore/Edge on Windows 10 (various editions) where the scripting engine’s memory handling in objects can be abused to execute code with the caller’s privileges. The root cause is memory corruption within the scripting engine, enabling privilege escalation. Connected ad...

CVE-2017-11880

CVE-2017-11880 affects the Windows kernel across multiple OS versions (Windows 7 SP1, Server 2008 SP2/R2 SP1, 8.1, 2012/2012 R2, 10 1511/1607/1703, Server 2016). It enables an attacker to run a specially crafted application to obtain information and further compromise the system due to the kernel...

CVE-2017-11841

ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption...

CVE-2017-11862

ChakraCore and Microsoft Edge in Windows 10 1709 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from...

CVE-2017-11831

Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to log on to an affected system, and run a specially crafted...

CVE-2017-11833

CVE-2017-11833 affects Microsoft Edge in Windows 10 versions (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016/1709. The vulnerability arises from Edge’s handling of cross-origin requests, enabling an attacker to determine the origin of all webpages loaded in the affected browser, i.e., an i...

CVE-2017-11847

Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to run arbitrary code in kernel mode, install programs, view,...

CVE-2017-11830

Device Guard in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to make an unsigned file appear to be signed, due to a security feature bypass, aka "Device Guard Security Feature Bypass Vulnerability"...

CVE-2017-11836

Technical details for CVE-2017-11836 are not publicly available in the provided documents. Monitor for updates from ChakraCore/Microsoft advisories and related CVEs for disclosure status and fixes.

CVE-2017-11855

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the curren...