Microsoft Edge Information Disclosure (MS17-007: CVE-2017-0017)

An information disclosure vulnerability exists in Microsoft Edge. The vulnerability is due to the way Microsoft Edge improperly handles objects in memory. A remote attacker could exploit this vulnerability by enticing the target user to open a specially crafted website...

Microsoft Edge Scripting Engine Memory Corruption (MS17-007: CVE-2017-0015)

A memory corruption vulnerability exists in Microsoft Edge. The vulnerability is due to the way JavaScript engine renders when handling objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...

Microsoft Edge Memory Corruption (MS17-007: CVE-2017-0035)

A remote code execution vulnerability exists in Microsoft Edge. The vulnerability is due to a memory corruption when handling of objects in memory. A remote attacker could exploit the vulnerability by enticing the target user to open a specially crafted js file. Successful exploitation could caus...

Microsoft Win32k Elevation of Privilege (MS17-018: CVE-2017-0082)

Multiple elevation of privilege vulnerabilities have been reported in Microsoft Windows. The vulnerability is due to the way Windows kernel-mode driver handles objects in memory. A remote attacker can exploit this vulnerability to execute arbitrary code...

Microsoft Windows Kernel Elevation of Privilege (MS17-017: CVE-2017-0050)

An elevation of privilege vulnerability exists in Microsoft Windows. The vulnerability is due to the way Windows kernel API enforces permissions. A remote attacker can exploit this vulnerability by enticing a user to run a specially crafted executable...

Microsoft Scripting Engine Memory Corruption (MS17-007: CVE-2017-0032)

An integer overflow vulnerability exists in Microsoft Edge. The vulnerability is due to an error in Microsoft Edge while handling a specially crafted HTML file. Successful exploitation of this issue can lead to arbitrary memory write...

Microsoft Edge Scripting Engine Memory Corruption (MS17-007: CVE-2017-0133)

A Memory Corruption Vulnerability exists in Microsoft Edge. The vulnerability is due to the way JavaScript engine renders when handling objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafted file...

Microsoft Windows GDI Elevation of Privilege (MS17-013: CVE-2017-0047)

Elevation of privilege vulnerabilities exists in Windows Graphics Device Interface. The vulnerability is due to the way Windows Graphics Device Interface handles objects in memory. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

Microsoft Edge Scripting Engine Memory Corruption (MS17-007: CVE-2017-0141)

A remote code execution vulnerability exists in Microsoft Edge. The vulnerability is due to a heap overflow when handling objects in memory. A remote attacker can exploit this vulnerability and execute arbitrary code in the context of the current user...

Microsoft Office Memory Corruption (MS17-014: CVE-2017-0006)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to the way Microsoft Office improperly handles objects in memory. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

Microsoft Browser Memory Corruption (MS17-006: CVE-2017-0009)

A Use-After-Free vulnerability exists in Microsoft Internet Explorer and Microsoft Edge. The vulnerability is due to an error in Microsoft Internet Explorer and Microsoft Edge while handling a specially crafted HTML file. A remote attacker can exploit this vulnerability by enticing a target user ...

Microsoft Internet Explorer Information Disclosure (MS17-006: CVE-2017-0059)

Information disclosure vulnerabilities exists in Microsoft Internet Explorer. This vulnerability is due to improper handling of objects in memory. A successful exploitation could result in an out-of-bounds read and access to private user data...

Microsoft Edge Spoofing (MS17-007: CVE-2017-0069)

A spoofing vulnerability exists in Microsoft Edge. The vulnerability is due to improper parsing of HTTP content. A remote attacker could trick a user by redirecting them to a specially crafted website which could spoof content or be used as a pivot to chain an attack with other vulnerabilities in...

Repetitive MySQL Login Failures

An attacker may attempt to gain access to MySQL server accounts by repeatedly trying to log in using various passwords, eventually finding the correct one, a technique known as "Brute Force". Successful exploitation may result in an unauthorized access to a MySQL server...

Microsoft Edge Security Feature Bypass (MS17-007: CVE-2017-0140)

Security feature bypass exists in Microsoft Edge. The vulnerability is due to a breach in the way Microsoft Edge implements SOP Same Origin Policy for HTML elements present in other browser windows. A remote attacker could exploit this vulnerability by enticing a user to visit a maliciously craft...

Microsoft Edge Memory Corruption (MS17-007: CVE-2017-0131)

A remote code execution vulnerability exists in Microsoft Edge. The vulnerability is due to an out of bounds read when Microsoft Edge improperly accesses objects in memory. A remote attacker can exploit this vulnerability and execute arbitrary code in the context of the current user...

Microsoft IIS Server XSS Elevation of Privilege (MS17-016: CVE-2017-0055)

A cross-site scripting vulnerability exists in Microsoft IIS, due to improper input validation. A remote attacker can exploit this issue by enticing an affected user to open a specially crafted web page. Successful exploitation could allow an attacker to spoof content, disclose information, or ta...

Microsoft Windows Graphics Component Remote Code Execution (MS17-013: CVE-2017-0108)

A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to the way the Windows Uniscribe handles objects in memory. A remote attacker could exploit this vulnerability by enticing the target user to open a specially crafted website...

Microsoft Office Memory Corruption (MS17-014: CVE-2017-0019)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

Microsoft Windows Uniscribe Remote Code Execution (MS17-011: CVE-2017-0090)

A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to the way the Windows Uniscribe handles objects in memory. A remote attacker could exploit this vulnerability by enticing the target user to open a specially crafted website...

Microsoft Internet Explorer Memory Corruption (MS17-006: CVE-2017-0130)

A type confusion vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to an error in Microsoft Internet Explorer while handling a specially crafted HTML file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted HTML file...

Microsoft Windows GDI Elevation of Privilege (MS17-013: CVE-2017-0025)

An elevation of privilege vulnerability exists in Windows Graphics Device Interface GDI. The vulnerability is caused when the Windows Graphics Device Interface fails to properly handle objects in memory. A remote attacker can exploit this vulnerability by running a specially crafted application...

Microsoft Windows Win32k Elevation of Privilege (MS17-018: CVE-2017-0056)

A use after free vulnerability exists in Microsoft Windows Win32k. A remote attacker can bypass a security check in win32k to load a custom font from an arbitrary file on disk. Successful exploitation could allow an attacker to run arbitrary code with elevated privileges...

Microsoft Windows Uniscribe Remote Code Execution (MS17-011: CVE-2017-0087)

A remote code execution vulnerability exists in Microsoft Windows. The vulnerability is due to the way Windows Uniscribe handles objects in the memory. A remote attacker can exploit this vulnerability by enticing the target user to open a specially crafted file...

Microsoft Windows SMB Remote Code Execution (MS17-010: CVE-2017-0145)

A remote code execution vulnerability exist in Microsoft Server Message Block 1.0 SMBv1. The vulnerability is due to the way SMBv1 service handles certain requests. An attacker who successfully exploited the vulnerability could gain code execution on the target server...

Microsoft Windows Win32k Elevation of Privilege (MS17-018: CVE-2017-0081)

An elevation of privilege vulnerability exists in Microsoft Windows Win32k. The vulnerability is caused when the Windows kernel-mode driver fails to properly handle objects in memory. A remote attacker can exploit this vulnerability by running a specially crafted application...

Microsoft Windows Graphics Component Remote Code Execution (MS17-013: CVE-2017-0014)

A remote code execution vulnerability exists in Windows Graphics Component. The vulnerability is due to the way Windows Graphics Component handles objects in memory. A remote attacker can exploit this vulnerability by enticing the target user to open a specially crafted file...

Microsoft Office Memory Corruption (MS17-014: CVE-2017-0020)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...

Microsoft Windows GDI+ Information Disclosure (MS17-013; CVE-2017-0060; CVE-2017-0062)

An information disclosure vulnerability has been reported in Microsoft Windows. The vulnerability is due to the way Windows Graphics Device Interface handles objects in memory. A remote attacker can exploit this vulnerability by enticing the target user to open a specially crafted file...

Microsoft Browser Information Disclosure (MS17-007: CVE-2017-0065)

An information disclosure vulnerability exists in Microsoft Edge. This vulnerability is due to a design weakness in the affected software. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected version of Microsoft Edge...

Microsoft Internet Explorer Elevation of Privilege (MS17-006: CVE-2017-0154)

An elevation of privilege vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page...

Microsoft Internet Explorer Memory Corruption (MS17-006: CVE-2017-0018)

An elevation of Privilege vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page...

Microsoft Office Information Disclosure (MS17-014: CVE-2017-0105)

An information disclosure vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly discloses the contents of its memory. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

Microsoft Office Memory Corruption (MS17-014: CVE-2017-0030)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

Microsoft Win32k Elevation of Privilege (MS17-018: CVE-2017-0024)

An elevation of privilege vulnerability exists in Microsoft Windows. The vulnerability is caused when the Windows kernel-mode driver fails to properly handle objects in memory. A remote attacker could exploit this vulnerability by running a specially crafted application...

Microsoft Office Memory Corruption (MS17-014: CVE-2017-0052)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

Microsoft Office Memory Corruption (MS17-014: CVE-2017-0031)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

Microsoft Windows SMB Remote Code Execution (MS17-010: CVE-2017-0143)

A remote code execution vulnerability exist in Microsoft Server Message Block 1.0 SMBv1. The vulnerability is due to the way SMBv1 service handles certain requests. An attacker who successfully exploited the vulnerability could gain code execution on the target server...

Microsoft Win32k Elevation of Privilege (MS17-018: CVE-2017-0079; CVE-2017-0078)

An elevation of privilege vulnerability exists in the Windows kernel-mode driver. The vulnerability is due to the way the driver fails to properly handle objects in memory. An attacker can exploit this vulnerability by logging on to the system and running a specially crafted application...

Microsoft Edge Scripting Engine Memory Corruption (MS17-007: CVE-2017-0071; CVE-2017-8548)

A use after free vulnerability exists in Microsoft Edge. The vulnerability is due to the way JavaScript engine renders when handling objects in memory. A remote unauthenticated attacker can exploit this vulnerability by enticing the target user to open a specially crafted web page...

Microsoft Edge Information Disclosure (MS17-007: CVE-2017-0011)

An information disclosure vulnerability has been reported in Microsoft Edge. The vulnerability is due to the way that Microsoft Edge improperly handles the referrer policy. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected version of...

Microsoft Internet Explorer Memory Corruption (MS17-006: CVE-2017-0149)

An out-of-bounds-read vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page...

Microsoft Edge Memory Corruption (MS17-007: CVE-2017-0034)

A memory corruption vulnerability has been reported in Microsoft Edge. The vulnerability is due to improper handling of objects in memory. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page that could cause memory corruption in a way that wou...

Microsoft Windows DLL Loading Remote Code Execution (MS17-012: CVE-2017-0039)

A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to the way Windows improperly validates input before loading certain libraries. A remote attacker could exploit this vulnerability by enticing a target user to open a specially crafted file...

Microsoft Windows Uniscribe Remote Code Execution (MS17-011: CVE-2017-0088)

A remote code execution vulnerability exists in Microsoft Windows. The vulnerability is due to the way Windows Uniscribe handles objects in the memory. A remote attacker can exploit this vulnerability by enticing the target user to open a specially crafted file...

Microsoft Windows Uniscribe Remote Code Execution (MS17-011: CVE-2017-0072)

A remote code execution vulnerability exists in Microsoft Windows. The vulnerability is due to the way Windows Uniscribe handles objects in the memory. A remote attacker can exploit this vulnerability by enticing the target user to open a specially crafted file...

Microsoft Windows SMB Remote Code Execution (MS17-010: CVE-2017-0144)

A remote code execution vulnerability exist in Microsoft Server Message Block 1.0 SMBv1. The vulnerability is due to the way SMBv1 service handles certain requests. An attacker who successfully exploited the vulnerability could gain code execution on the target server...

Microsoft Windows Uniscribe Remote Code Execution (MS17-011: CVE-2017-0086)

A remote code execution vulnerability exists in Microsoft Windows. The vulnerability is due to the way Windows Uniscribe handles objects in the memory. A remote attacker can exploit this vulnerability by enticing the target user to open a specially crafted file...

Adobe Flash Player Use After Free Code Execution (APSB17-07: CVE-2017-3002)

A remote code execution vulnerability exists in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...

Microsoft PDF Memory Corruption (MS17-007: CVE-2017-0023)

A vulnerability exists in Microsoft EDGE and Windows PDF Library that could lead to an out of bound memory access. The issue is caused by mishandling of preblending parameters in sub mask images of certain crafted PDF files. A remote attacker can exploit this vulnerability by enticing a user to...