CVE ID | Published | Description | Score | Severity |
---|---|---|---|---|
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability | 7.3 |
HIGH |
||
A flaw was found in CryptoPro Secure Disk bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code in the pre-boot stage, an attacker simply needs to replace the existing signed bootloader currently in use with this bootloader. Access to the EFI System Partition is required for booting using external media. | 6.7 |
MEDIUM |
||
A flaw was found in New Horizon Datasys bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code in the pre-boot stage, an attacker simply needs to replace the existing signed bootloader currently in use with this bootloader. Access to the EFI System Partition is required for booting using external media. | 6.7 |
MEDIUM |
||
A flaw was found in Eurosoft bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code in the pre-boot stage, an attacker simply needs to replace the existing signed bootloader currently in use with this bootloader. Access to the EFI System Partition is required for booting using external media. | 6.7 |
MEDIUM |
||
Windows Defender Credential Guard Security Feature Bypass Vulnerability | 7.1 |
HIGH |
||
Windows Defender Credential Guard Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Bluetooth Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Error Reporting Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
Windows Print Spooler Elevation of Privilege Vulnerability | 7.3 |
HIGH |
||
Storage Spaces Direct Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Defender Credential Guard Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability | 7.5 |
HIGH |
||
Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
Storage Spaces Direct Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Storage Spaces Direct Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Storage Spaces Direct Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Storage Spaces Direct Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Microsoft ATA Port Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
Windows Defender Credential Guard Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Defender Credential Guard Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Defender Credential Guard Security Feature Bypass Vulnerability | 6 |
MEDIUM |
||
Windows Kernel Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Defender Credential Guard Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Partition Management Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability | 7.5 |
HIGH |
||
Windows Win32k Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Hyper-V Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Active Directory Domain Services Elevation of Privilege Vulnerability | 8.8 |
HIGH |
||
Windows Fax Service Elevation of Privilege Vulnerability | 7.1 |
HIGH |
||
Windows Partition Management Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Kernel Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows WebBrowser Control Remote Code Execution Vulnerability | 7.5 |
HIGH |
||
Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
Windows Defender Credential Guard Information Disclosure Vulnerability | 4.7 |
MEDIUM |
||
Windows Print Spooler Elevation of Privilege Vulnerability | 7.1 |
HIGH |
||
Windows Media Player Network Sharing Service Elevation of Privilege Vulnerability | 7.1 |
HIGH |
||
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | 7 |
HIGH |
||
Windows Hyper-V Information Disclosure Vulnerability | 5.7 |
MEDIUM |
||
Windows Shell Remote Code Execution Vulnerability | 8.4 |
HIGH |
||
Windows Graphics Component Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Common Log File System Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Server Service Tampering Vulnerability | 8.8 |
HIGH |
||
Active Directory Federation Services Elevation of Privilege Vulnerability | 7.5 |
HIGH |
||
Windows DNS Server Remote Code Execution Vulnerability | 6.6 |
MEDIUM |
||
Windows GDI+ Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Connected Devices Platform Service Information Disclosure Vulnerability | 4.7 |
MEDIUM |
||
Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability | 7.5 |
HIGH |
||
Windows IIS Server Elevation of Privilege Vulnerability | 7.4 |
HIGH |
||
Windows Security Account Manager (SAM) Denial of Service Vulnerability | 6.5 |
MEDIUM |
||
Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Group Policy Elevation of Privilege Vulnerability | 6.6 |
MEDIUM |
||
Windows Boot Manager Security Feature Bypass Vulnerability | 7.4 |
HIGH |
||
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | 7 |
HIGH |
||
Windows BitLocker Information Disclosure Vulnerability | 5.7 |
MEDIUM |
||
Windows Fax Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
BitLocker Security Feature Bypass Vulnerability | 6.1 |
MEDIUM |
||
Windows.Devices.Picker.dll Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Fast FAT File System Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Hyper-V Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
Windows Print Spooler Elevation of Privilege Vulnerability | 6.8 |
MEDIUM |
||
Internet Information Services Dynamic Compression Module Denial of Service Vulnerability | 7.3 |
HIGH |
||
Windows Network File System Remote Code Execution Vulnerability | 7.5 |
HIGH |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | 7.5 |
HIGH |
||
Performance Counters for Windows Elevation of Privilege Vulnerability | 7 |
HIGH |
||
Windows Graphics Component Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Credential Guard Domain-joined Public Key Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Network File System Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
Windows Network File System Information Disclosure Vulnerability | 5.9 |
MEDIUM |
||
Windows Fax Service Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability | 8.8 |
HIGH |
||
Local Security Authority Subsystem Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Kerberos Elevation of Privilege Vulnerability | 8.8 |
HIGH |
||
Kerberos AppContainer Security Feature Bypass Vulnerability | 7.8 |
HIGH |
||
Windows Hyper-V Remote Code Execution Vulnerability | 8.5 |
HIGH |
||
Windows Kernel Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Kernel Denial of Service Vulnerability | 5.5 |
MEDIUM |
||
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Network Address Translation (NAT) Denial of Service Vulnerability | 7.5 |
HIGH |
||
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | 7 |
HIGH |
||
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability | 7.5 |
HIGH |
||
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability | 7.5 |
HIGH |
||
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability | 7.5 |
HIGH |
||
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
Windows iSCSI Discovery Service Remote Code Execution Vulnerability | 7.5 |
HIGH |
||
Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Graphics Component Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
Windows Graphics Component Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
Windows Fax Compose Form Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Windows Fax Compose Form Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Windows Fax Compose Form Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Windows Secure Channel Denial of Service Vulnerability | 7.5 |
HIGH |
||
Win32k Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Graphics Component Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
.NET Framework Denial of Service Vulnerability | 7.5 |
HIGH |
||
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability | 7.5 |
HIGH |
||
Windows DNS Server Remote Code Execution Vulnerability | 6.6 |
MEDIUM |
||
Windows Bluetooth Driver Elevation of Privilege Vulnerability | 7 |
HIGH |
||
Windows File Server Resource Management Service Elevation of Privilege Vulnerability | 7 |
HIGH |
||
Windows DNS Server Remote Code Execution Vulnerability | 7.2 |
HIGH |
||
Windows DNS Server Remote Code Execution Vulnerability | 7.2 |
HIGH |
||
Windows DNS Server Remote Code Execution Vulnerability | 7.2 |
HIGH |
||
Windows DNS Server Remote Code Execution Vulnerability | 7.2 |
HIGH |
||
Windows DNS Server Remote Code Execution Vulnerability | 6.6 |
MEDIUM |
||
Windows DNS Server Remote Code Execution Vulnerability | 6.6 |
MEDIUM |
||
Windows DNS Server Remote Code Execution Vulnerability | 6.6 |
MEDIUM |
||
Windows DNS Server Remote Code Execution Vulnerability | 6.6 |
MEDIUM |
||
Windows DNS Server Remote Code Execution Vulnerability | 6.6 |
MEDIUM |
||
Windows DNS Server Remote Code Execution Vulnerability | 6.6 |
MEDIUM |
||
Windows DNS Server Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
Windows DNS Server Remote Code Execution Vulnerability | 7.2 |
HIGH |
||
Windows DNS Server Remote Code Execution Vulnerability | 6.6 |
MEDIUM |
||
Windows DNS Server Remote Code Execution Vulnerability | 7.2 |
HIGH |
||
Windows DNS Server Remote Code Execution Vulnerability | 7.2 |
HIGH |
||
Windows DNS Server Remote Code Execution Vulnerability | 7.2 |
HIGH |
||
Windows File Server Resource Management Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
Windows File Explorer Elevation of Privilege Vulnerability | 7 |
HIGH |
||
Windows Work Folder Service Elevation of Privilege Vulnerability | 7 |
HIGH |
||
Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
PowerShell Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability | 6.5 |
MEDIUM |
||
Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
Windows Telephony Server Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows AppX Package Manager Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Digital Media Receiver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows DWM Core Library Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Kerberos Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
Windows Kerberos Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Win32k Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Server Service Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows ALPC Elevation of Privilege Vulnerability | 7 |
HIGH |
||
Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability | 8.1 |
HIGH |
||
Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability | 6.5 |
MEDIUM |
||
Windows DNS Server Remote Code Execution Vulnerability | 7.2 |
HIGH |
||
Win32 Stream Enumeration Remote Code Execution Vulnerability | 7.5 |
HIGH |
||
Remote Desktop Protocol Remote Code Execution Vulnerability | 8 |
HIGH |
||
Windows Installer Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows SMB Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Installer Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows iSCSI Target Service Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
Windows Network File System Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Direct Show - Remote Code Execution Vulnerability | 7.5 |
HIGH |
||
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Network File System Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability | 8.1 |
HIGH |
||
Cluster Client Failover (CCF) Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Desktop Bridge Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Local Security Authority (LSA) Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Kerberos Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Win32 File Enumeration Remote Code Execution Vulnerability | 7.5 |
HIGH |
||
Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability | 5.5 |
MEDIUM |
||
Windows Kernel Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows ALPC Elevation of Privilege Vulnerability | 7 |
HIGH |
||
Windows Common Log File System Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Connected User Experiences and Telemetry Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Win32k Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Hyper-V Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Hyper-V Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Windows Hyper-V Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Win32 Stream Enumeration Remote Code Execution Vulnerability | 7.5 |
HIGH |
||
Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Hello Security Feature Bypass Vulnerability | 6.1 |
MEDIUM |
||
Windows Feedback Hub Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Chakra Scripting Engine Memory Corruption Vulnerability | 7.5 |
HIGH |
||
Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Microsoft Windows Media Foundation Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Microsoft COM for Windows Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability | 6.8 |
MEDIUM |
||
Windows NTFS Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Fast FAT File System Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | 4.4 |
MEDIUM |
||
NTFS Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
NTFS Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Denial of Service Vulnerability | 7.5 |
HIGH |
||
Remote Desktop Client Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | 4.4 |
MEDIUM |
||
Windows Desktop Bridge Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability | 9 |
CRITICAL |
||
Active Directory Federation Server Spoofing Vulnerability | 5.4 |
MEDIUM |
||
Windows AppX Deployment Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Console Window Host Security Feature Bypass Vulnerability | 7.8 |
HIGH |
||
Storage Spaces Controller Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Fast FAT File System Driver Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Graphics Component Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Microsoft DWM Core Library Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability | 5.5 |
MEDIUM |
||
Active Directory Security Feature Bypass Vulnerability | 4.9 |
MEDIUM |
||
Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Desktop Bridge Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Print Spooler Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
Windows Media Audio Decoder Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Microsoft Windows Media Foundation Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Storage Spaces Controller Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Storage Spaces Controller Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Storage Spaces Controller Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Event Tracing Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows AppContainer Elevation Of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
DirectX Graphics Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows DNS Server Remote Code Execution Vulnerability | 7.2 |
HIGH |
||
Windows Bind Filter Driver Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Common Log File System Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Common Log File System Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Network Address Translation (NAT) Denial of Service Vulnerability | 7.7 |
HIGH |
||
Windows HTTP.sys Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Win32k Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Storage Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Microsoft Windows Update Client Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Common Log File System Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
BitLocker Security Feature Bypass Vulnerability | 5.7 |
MEDIUM |
||
Windows Event Tracing Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Key Storage Provider Security Feature Bypass Vulnerability | 6.5 |
MEDIUM |
||
Win32k Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows SMB Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows SMB Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Subsystem for Linux Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability | 8.8 |
HIGH |
||
Windows WLAN AutoConfig Service Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
Windows Event Tracing Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Common Log File System Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Installer Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Installer Denial of Service Vulnerability | 6.1 |
MEDIUM |
||
Windows SMB Information Disclosure Vulnerability | 7.5 |
HIGH |
||
Windows Authenticode Spoofing Vulnerability | 5.5 |
MEDIUM |
||
Windows Bind Filter Driver Elevation of Privilege Vulnerability | 8.8 |
HIGH |
||
Windows Scripting Engine Memory Corruption Vulnerability | 8.1 |
HIGH |
||
Windows Print Spooler Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Media MPEG-4 Video Decoder Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Windows Print Spooler Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability | 7.5 |
HIGH |
||
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability | 7.5 |
HIGH |
||
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability | 7.5 |
HIGH |
||
Windows Bluetooth Driver Elevation of Privilege Vulnerability | 8 |
HIGH |
||
Storage Spaces Controller Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Graphics Component Font Parsing Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Windows Graphics Component Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Windows Event Tracing Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability | 7.5 |
HIGH |
||
Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
Windows Recovery Environment Agent Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows User Account Profile Picture Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Event Tracing Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows TCP/IP Remote Code Execution Vulnerability | 9.9 |
CRITICAL |
||
Windows AppX Deployment Extensions Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Storage Spaces Controller Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows AppContainer Elevation Of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Kernel Remote Code Execution Vulnerability | 9.9 |
CRITICAL |
||
Windows Remote Access Connection Manager Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Remote Access Connection Manager Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows File History Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Hyper-V Remote Code Execution Vulnerability | 9.9 |
CRITICAL |
||
Win32k Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows DNS Server Denial of Service Vulnerability | 6.5 |
MEDIUM |
||
Microsoft Windows Media Foundation Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Windows DNS Server Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
GDI+ Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Font Driver Host Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Windows DNS Server Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Raw Image Extension Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Win32k Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Storage Spaces Controller Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Storage Spaces Controller Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Installer Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Storage Spaces Controller Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Storage Spaces Controller Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Kernel Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Remote Assistance Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
Windows Address Book Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Windows Kernel Memory Information Disclosure Vulnerability | 7.7 |
HIGH |
||
Windows DNS Server Denial of Service Vulnerability | 6.5 |
MEDIUM |
||
Windows GDI Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows MSHTML Platform Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows GDI Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows DNS Server Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Partition Management Driver Elevation of Privilege Vulnerability | 6.7 |
MEDIUM |
||
Windows Certificate Spoofing Vulnerability | 8.1 |
HIGH |
||
Win32k Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows TCP/IP Driver Denial of Service Vulnerability | 7.5 |
HIGH |
||
DirectWrite Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Windows Console Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Bowser.sys Denial of Service Vulnerability | 7.5 |
HIGH |
||
Windows LSA Denial of Service Vulnerability | 7.5 |
HIGH |
||
Windows LSA Security Feature Bypass Vulnerability | 8.8 |
HIGH |
||
Windows AF_UNIX Socket Provider Denial of Service Vulnerability | 7.5 |
HIGH |
||
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows SMB Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
Windows Authenticode Spoofing Vulnerability | 5.5 |
MEDIUM |
||
Azure AD Security Feature Bypass Vulnerability | 8.1 |
HIGH |
||
Windows DNS Server Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows AD FS Security Feature Bypass Vulnerability | 8.1 |
HIGH |
||
Windows Event Tracing Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows TCP/IP Driver Denial of Service Vulnerability | 7.5 |
HIGH |
||
Windows Installer Spoofing Vulnerability | 6.2 |
MEDIUM |
||
Windows Key Distribution Center Information Disclosure Vulnerability | 5.9 |
MEDIUM |
||
Windows Remote Access Connection Manager Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Desktop Bridge Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability | 9.8 |
CRITICAL |
||
Windows DNS Snap-in Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Hyper-V Denial of Service Vulnerability | 8.6 |
HIGH |
||
Windows DNS Server Remote Code Execution Vulnerability | 8 |
HIGH |
||
Windows DNS Snap-in Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Storage Spaces Controller Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows DNS Snap-in Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows DNS Snap-in Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows DNS Server Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows DNS Server Denial of Service Vulnerability | 6.5 |
MEDIUM |
||
Windows Secure Kernel Mode Security Feature Bypass Vulnerability | 6.7 |
MEDIUM |
||
Windows Projected File System Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows InstallService Elevation of Privilege Vulnerability | 6.1 |
MEDIUM |
||
Windows TCP/IP Driver Denial of Service Vulnerability | 7.5 |
HIGH |
||
Server for NFS Information Disclosure Vulnerability | 7.5 |
HIGH |
||
Windows Hyper-V Denial of Service Vulnerability | 8.6 |
HIGH |
||
Server for NFS Information Disclosure Vulnerability | 7.5 |
HIGH |
||
Windows GPSVC Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Server for NFS Denial of Service Vulnerability | 7.5 |
HIGH |
||
Event Tracing for Windows Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows TCP/IP Driver Security Feature Bypass Vulnerability | 5.5 |
MEDIUM |
||
Windows Remote Desktop Services Denial of Service Vulnerability | 7.5 |
HIGH |
||
Kerberos AppContainer Security Feature Bypass Vulnerability | 9.8 |
CRITICAL |
||
Windows Bind Filter Driver Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows NTLM Elevation of Privilege Vulnerability | 8.8 |
HIGH |
||
Windows Common Log File System Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Container Manager Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows SMB Client Security Feature Bypass Vulnerability | 6.5 |
MEDIUM |
||
OLE Automation Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows SSDP Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Projected File System FS Filter Driver Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Graphics Component Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Desktop Bridge Denial of Service Vulnerability | 5.5 |
MEDIUM |
||
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | 7.4 |
HIGH |
||
Microsoft Windows Infrared Data Association (IrDA) Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Microsoft Bluetooth Driver Spoofing Vulnerability | 7.1 |
HIGH |
||
Windows Container Manager Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Graphics Component Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Container Manager Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Container Manager Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Container Manager Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows CSC Service Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Hyper-V Remote Code Execution Vulnerability | 9.9 |
CRITICAL |
||
Microsoft Jet Red Database Engine and Access Connectivity Engine Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability | 4.4 |
MEDIUM |
||
Windows Portmapping Information Disclosure Vulnerability | 7.1 |
HIGH |
||
Windows Hyper-V Security Feature Bypass Vulnerability | 6.5 |
MEDIUM |
||
Windows Network File System Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Console Driver Denial of Service Vulnerability | 5.5 |
MEDIUM |
||
Windows Hyper-V Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
Windows TCP/IP Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
Windows Installer Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Console Driver Denial of Service Vulnerability | 5.5 |
MEDIUM |
||
Windows TCP/IP Driver Denial of Service Vulnerability | 7.5 |
HIGH |
||
Windows Installer Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Event Tracing Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Speech Runtime Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Speech Runtime Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows GDI+ Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Windows GDI+ Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Windows Speech Runtime Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows GDI+ Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows DNS Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
Windows AppX Deployment Server Denial of Service Vulnerability | 6.1 |
MEDIUM |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows SMB Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
Windows SMB Information Disclosure Vulnerability | 7.5 |
HIGH |
||
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows DNS Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows TCP/IP Driver Denial of Service Vulnerability | 7.5 |
HIGH |
||
Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows GDI+ Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Microsoft Windows Codecs Library Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Media Video Decoder Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability | 4.6 |
MEDIUM |
||
Windows Hyper-V Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows NTFS Denial of Service Vulnerability | 6.5 |
MEDIUM |
||
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Application Compatibility Cache Denial of Service Vulnerability | 6.5 |
MEDIUM |
||
NTFS Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Kernel Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Media Video Decoder Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability | 4.4 |
MEDIUM |
||
Windows Kernel Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Azure AD Web Sign-in Security Feature Bypass Vulnerability | 9.8 |
CRITICAL |
||
Windows Secure Kernel Mode Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Event Tracing Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Microsoft Internet Messaging API Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Windows Services and Controller App Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Media Photo Codec Information Disclosure Vulnerability | 5.7 |
MEDIUM |
||
Win32k Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Overlay Filter Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Installer Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Hyper-V Denial of Service Vulnerability | 7.7 |
HIGH |
||
Windows Installer Spoofing Vulnerability | 6.2 |
MEDIUM |
||
Windows Win32k Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows 10 Update Assistant Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows DNS Server Denial of Service Vulnerability | 7.5 |
HIGH |
||
Windows Event Tracing Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Win32k Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows UPnP Device Host Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Event Tracing Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows DNS Server Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
Windows DNS Server Denial of Service Vulnerability | 7.5 |
HIGH |
||
Windows DNS Server Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
Windows DNS Server Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
Windows DNS Server Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
Windows Extensible Firmware Interface Security Feature Bypass Vulnerability | 6.2 |
MEDIUM |
||
Windows Container Execution Agent Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Application Virtualization Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Windows Update Stack Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
An elevation of privilege vulnerability exists in Microsoft Windows when Folder redirection has been enabled via Group Policy. When folder redirection file server is co-located with Terminal server, an attacker who successfully exploited the vulnerability would be able to begin redirecting another user's personal data to a created folder. To exploit the vulnerability, an attacker can create a new folder under the Folder Redirection root path and create a junction on a newly created User folder. When the new user logs in, Folder Redirection would start redirecting to the folder and copying personal data. This elevation of privilege vulnerability can only be addressed by reconfiguring Folder Redirection with Offline files and restricting permissions, and NOT via a security update for affected Windows Servers. See the FAQ section of this CVE for configuration guidance. |
7.8 |
HIGH |
||
User Profile Service Denial of Service Vulnerability | 6.1 |
MEDIUM |
||
Windows Media Photo Codec Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Remote Access API Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Microsoft Windows Media Foundation Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Storage Spaces Controller Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Network Address Translation (NAT) Denial of Service Vulnerability | 7.5 |
HIGH |
||
Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows DNS Server Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
OpenType Font Parsing Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Overlay Filter Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows User Profile Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Event Tracing Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Projected File System Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows ActiveX Installer Service Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Graphics Component Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Hyper-V Remote Code Execution Vulnerability | 9.9 |
CRITICAL |
||
Windows Update Service Elevation of Privilege Vulnerability | 7.1 |
HIGH |
||
Windows Container Execution Agent Elevation of Privilege Vulnerability | 8.8 |
HIGH |
||
Windows Virtual Registry Provider Elevation of Privilege Vulnerability | 8.4 |
HIGH |
||
Windows Win32k Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Installer Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Graphics Component Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Windows App-V Overlay Filter Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Event Tracing Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
DirectX Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Error Reporting Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Update Stack Setup Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows PKU2U Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
.NET Framework Denial of Service Vulnerability | 7.5 |
HIGH |
||
Windows DirectX Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Event Tracing Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Event Tracing Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Console Driver Denial of Service Vulnerability | 5.5 |
MEDIUM |
||
Windows TCP/IP Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Graphics Component Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Microsoft Defender Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Local Spooler Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Camera Codec Pack Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows TCP/IP Denial of Service Vulnerability | 7.5 |
HIGH |
||
Windows Address Book Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Windows Mobile Device Management Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Microsoft.PowerShell.Utility Module WDAC Security Feature Bypass Vulnerability | 6.5 |
MEDIUM |
||
Windows Trust Verification API Denial of Service Vulnerability | 6.5 |
MEDIUM |
||
Microsoft Windows Codecs Library Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Windows Backup Engine Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Fax Service Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
Windows DNS Server Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
Microsoft Windows VMSwitch Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Microsoft Windows VMSwitch Denial of Service Vulnerability | 6.8 |
MEDIUM |
||
Windows Remote Procedure Call Information Disclosure Vulnerability | 7.5 |
HIGH |
||
PFX Encryption Security Feature Bypass Vulnerability | 5.5 |
MEDIUM |
||
Microsoft SharePoint Server Spoofing Vulnerability | 8 |
HIGH |
||
Windows Installer Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Fax Service Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
Windows Win32k Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Microsoft Windows Media Foundation Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Windows GDI+ Information Disclosure Vulnerability | 5.7 |
MEDIUM |
||
Windows Win32k Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows LUAFV Elevation of Privilege Vulnerability | 8.8 |
HIGH |
||
Windows Event Logging Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Hyper-V Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Remote Procedure Call Runtime Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows (modem.sys) Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Graphics Component Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows InstallService Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Update Stack Elevation of Privilege Vulnerability | 9.8 |
CRITICAL |
||
Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows CSC Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Hyper-V Denial of Service Vulnerability | 7.7 |
HIGH |
||
Windows CSC Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Multipoint Management Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows AppX Deployment Extensions Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Bluetooth Security Feature Bypass Vulnerability | 5.5 |
MEDIUM |
||
Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Bluetooth Security Feature Bypass Vulnerability | 5.5 |
MEDIUM |
||
Windows CryptoAPI Denial of Service Vulnerability | 6.5 |
MEDIUM |
||
Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Print Spooler Spoofing Vulnerability | 8.8 |
HIGH |
||
Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Remote Desktop Protocol Core Security Feature Bypass Vulnerability | 8.8 |
HIGH |
||
Windows Projected File System FS Filter Driver Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Projected File System FS Filter Driver Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Remote Desktop Security Feature Bypass Vulnerability | 8.8 |
HIGH |
||
Microsoft DTV-DVD Video Decoder Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
GDI+ Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Windows Projected File System FS Filter Driver Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Event Tracing Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Installer Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows CSC Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Fax Compose Form Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Windows CSC Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
TPM Device Driver Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows CSC Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows CSC Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows CSC Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Active Template Library Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Runtime C++ Template Library Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Microsoft splwow64 Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows WLAN Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Docker Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows AppX Deployment Extensions Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Bluetooth Security Feature Bypass Vulnerability | 7.7 |
HIGH |
||
Windows DNS Query Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows SMB Information Disclosure Vulnerability | 8.1 |
HIGH |
||
Windows Overlay Filter Security Feature Bypass Vulnerability | 7.8 |
HIGH |
||
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
DirectX Graphics Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows NTFS Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Digital Media Receiver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows GDI+ Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Error Reporting Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Hyper-V Remote Code Execution Vulnerability | 9.9 |
CRITICAL |
||
Windows Network Connections Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Kerberos Security Feature Bypass Vulnerability | 6.5 |
MEDIUM |
||
Windows Backup Engine Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Backup Engine Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Backup Engine Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Backup Engine Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Backup Engine Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Backup Engine Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Backup Engine Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Spoofing Vulnerability | 5.5 |
MEDIUM |
||
Windows Common Log File System Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Microsoft Defender for Endpoint Security Feature Bypass Vulnerability | 9.8 |
CRITICAL |
||
Windows Kernel Local Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Update Orchestrator Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Update Stack Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Update Orchestrator Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows USO Core Worker Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Delivery Optimization Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Update Orchestrator Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows NDIS Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Update Medic Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows GDI+ Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Windows Win32k Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Remote Access Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Network File System Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Network File System Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
Windows Network File System Denial of Service Vulnerability | 7.5 |
HIGH |
||
Windows KernelStream Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Error Reporting Denial of Service Vulnerability | 5.5 |
MEDIUM |
||
Windows Print Spooler Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Remote Access Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Remote Access Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Hyper-V Security Feature Bypass Vulnerability | 9.8 |
CRITICAL |
||
Windows Print Configuration Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Win32k Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Function Discovery SSDP Provider Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Remote Access Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Remote Access Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Remote Access Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Remote Access Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Remote Access Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Canonical Display Driver Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows MSCTF Server Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Remote Access Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Remote Access Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Client Side Rendering Print Provider Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Remote Access Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Win32k Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Port Class Library Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Error Reporting Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Win32k Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Graphics Component Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
DirectX Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Remote Desktop Protocol Server Information Disclosure Vulnerability | 7.7 |
HIGH |
||
A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket can be used for delegation via Kerberos Constrained Delegation (KCD). To exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service ticket that is not valid for delegation to force the KDC to accept it. The update addresses this vulnerability by changing how the KDC validates service tickets used with KCD. |
7.2 |
HIGH |
||
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked "safe for initialization" in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability. The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory. | 7.5 |
HIGH |
||
A remote code execution vulnerability exists in the way that the MSHTML engine improperly validates input. An attacker could execute arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. In a HTML editing attack scenario, an attacker could trick a user into editing a specially crafted file that is designed to exploit the vulnerability. The security update addresses the vulnerability by modifying how MSHTML engine validates input. | 7.5 |
HIGH |
||
A remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit the vulnerability, in a web-based attack scenario, an attacker could host a website that contains malicious PDF content. In addition, compromised websites and websites that accept or host user-provided content could contain specially crafted PDF content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action. For example, an attacker could trick a user into clicking a link that takes the user to the attacker's site. The security update addresses the vulnerability by modifying how Microsoft Edge PDF Reader handles objects in memory. | 7.5 |
HIGH |
||
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file. The update addresses the vulnerability by correcting the way the Windows Jet Database Engine handles objects in memory. | 7.8 |
HIGH |
||
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system. To exploit the vulnerability, a user would have to open a specially crafted file. The security update addresses the vulnerability by correcting how Microsoft Graphics Components handle objects in memory. | 8.8 |
HIGH |
||
A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests, aka '.NET Core & .NET Framework Denial of Service Vulnerability'. | 7.5 |
HIGH |
||
An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing (CORS) configurations, aka ".NET Framework Information Disclosure Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.7/4.7.1/4.7.2, .NET Core 2.1, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, .NET Core 2.2, Microsoft .NET Framework 4.7.2. | 7.5 |
HIGH |
||
A remote code execution vulnerability exists when Microsoft .NET Framework processes untrusted input, aka ".NET Framework Remote Code Execution Vulnerability." This affects Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft .NET Framework 4.7/4.7.1/4.7.2, Microsoft .NET Framework 3.0, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .NET Framework 4.7.2, Microsoft .NET Framework 2.0. | 9.8 |
CRITICAL |
||
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8422. | 6.5 |
MEDIUM |
||
An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. | 5.4 |
MEDIUM |
||
An information disclosure vulnerability exists in Microsoft .NET Framework that could allow an attacker to access information in multi-tenant environments, aka ".NET Framework Information Disclosure Vulnerability." This affects Microsoft .NET Framework 4.7/4.7.1/4.7.2, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.0, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .NET Framework 4.7.2, Microsoft .NET Framework 2.0, Microsoft .NET Framework 4.6/4.6.1/4.6.2. | 7.5 |
HIGH |
||
An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level, aka ".NET Framework Elevation of Privilege Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2, Microsoft .NET Framework 4.7.2. | 7.8 |
HIGH |
||
A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".NET Framework Remote Code Injection Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2, Microsoft .NET Framework 4.7.2. | 8.1 |
HIGH |
||
A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET Framework Security Feature Bypass Vulnerability." This affects .NET Framework 4.7.2, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, ASP.NET Core 1.1, Microsoft .NET Framework 4.5.2, ASP.NET Core 2.0, ASP.NET Core 1.0, .NET Core 1.1, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, .NET Core 1.0, .NET Core 2.0, Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2, Microsoft .NET Framework 4.7.2. | 5.5 |
MEDIUM |
||
An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Windows Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. | 7 |
HIGH |
||
A security feature bypass exists when Windows incorrectly validates kernel driver signatures, aka "Windows Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-1035. | 5.3 |
MEDIUM |
||
A security feature bypass vulnerability exists in .Net Framework which could allow an attacker to bypass Device Guard, aka ".NET Framework Device Guard Security Feature Bypass Vulnerability." This affects Microsoft .NET Framework 4.7.1, Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft .NET Framework 4.7/4.7.1, Microsoft .NET Framework 3.0, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6.2/4.7/4.7.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1, Microsoft .NET Framework 2.0, Microsoft .NET Framework 4.6/4.6.1/4.6.2. | 7.8 |
HIGH |
||
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8141. | 5.5 |
MEDIUM |
||
A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Windows Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0854, CVE-2018-0958, CVE-2018-8132. | 5.3 |
MEDIUM |
||
A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Windows Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0854, CVE-2018-0958, CVE-2018-8129. | 5.3 |
MEDIUM |
||
An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Windows Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. | 7 |
HIGH |
||
A remote code execution vulnerability exists in the way that Windows handles objects in memory, aka "Windows Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. | 7.8 |
HIGH |
||
An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0960, CVE-2018-0968, CVE-2018-0969, CVE-2018-0970, CVE-2018-0971, CVE-2018-0972, CVE-2018-0973, CVE-2018-0974, CVE-2018-0975. | 5.5 |
MEDIUM |
||
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0887, CVE-2018-0968, CVE-2018-0969, CVE-2018-0970, CVE-2018-0971, CVE-2018-0972, CVE-2018-0973, CVE-2018-0974, CVE-2018-0975. | 5.5 |
MEDIUM |
||
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0887, CVE-2018-0960, CVE-2018-0969, CVE-2018-0970, CVE-2018-0971, CVE-2018-0972, CVE-2018-0973, CVE-2018-0974, CVE-2018-0975. | 5.5 |
MEDIUM |
||
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0887, CVE-2018-0960, CVE-2018-0968, CVE-2018-0970, CVE-2018-0971, CVE-2018-0972, CVE-2018-0973, CVE-2018-0974, CVE-2018-0975. | 5.5 |
MEDIUM |
||
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0887, CVE-2018-0960, CVE-2018-0968, CVE-2018-0969, CVE-2018-0971, CVE-2018-0972, CVE-2018-0973, CVE-2018-0974, CVE-2018-0975. | 5.5 |
MEDIUM |
||
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0887, CVE-2018-0960, CVE-2018-0968, CVE-2018-0969, CVE-2018-0970, CVE-2018-0972, CVE-2018-0973, CVE-2018-0974, CVE-2018-0975. | 5.5 |
MEDIUM |
||
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0887, CVE-2018-0960, CVE-2018-0968, CVE-2018-0969, CVE-2018-0970, CVE-2018-0971, CVE-2018-0973, CVE-2018-0974, CVE-2018-0975. | 5.5 |
MEDIUM |
||
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0887, CVE-2018-0960, CVE-2018-0968, CVE-2018-0969, CVE-2018-0970, CVE-2018-0971, CVE-2018-0972, CVE-2018-0974, CVE-2018-0975. | 5.5 |
MEDIUM |
||
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0887, CVE-2018-0960, CVE-2018-0968, CVE-2018-0969, CVE-2018-0970, CVE-2018-0971, CVE-2018-0972, CVE-2018-0973, CVE-2018-0975. | 5.5 |
MEDIUM |
||
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0887, CVE-2018-0960, CVE-2018-0968, CVE-2018-0969, CVE-2018-0970, CVE-2018-0971, CVE-2018-0972, CVE-2018-0973, CVE-2018-0974. | 5.5 |
MEDIUM |
||
An information disclosure vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Information Disclosure Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-0987, CVE-2018-0989, CVE-2018-1000. | 5.3 |
MEDIUM |
||
An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Internet Explorer, aka "Scripting Engine Information Disclosure Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-0981, CVE-2018-0989, CVE-2018-1000. | 4.3 |
MEDIUM |
||
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-0996, CVE-2018-1001. | 7.5 |
HIGH |
||
An information disclosure vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Information Disclosure Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-0981, CVE-2018-0987, CVE-2018-1000. | 4.3 |
MEDIUM |
||
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-0870, CVE-2018-0997, CVE-2018-1018, CVE-2018-1020. | 7.5 |
HIGH |
||
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-0988, CVE-2018-1001. | 7.5 |
HIGH |
||
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 11. This CVE ID is unique from CVE-2018-0870, CVE-2018-0991, CVE-2018-1018, CVE-2018-1020. | 7.5 |
HIGH |
||
An information disclosure vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-0892. | 4.3 |
MEDIUM |
||
An information disclosure vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Information Disclosure Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-0981, CVE-2018-0987, CVE-2018-0989. | 5.3 |
MEDIUM |
||
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-0988, CVE-2018-0996. | 7.5 |
HIGH |
||
An elevation of privilege vulnerability exists in Windows Adobe Type Manager Font Driver (ATMFD.dll) when it fails to properly handle objects in memory, aka "OpenType Font Driver Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. | 7 |
HIGH |
||
An elevation of privilege vulnerability exists when Windows improperly handles objects in memory and incorrectly maps kernel memory, aka "Microsoft DirectX Graphics Kernel Subsystem Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. | 7.8 |
HIGH |
||
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 11. This CVE ID is unique from CVE-2018-0870, CVE-2018-0991, CVE-2018-0997, CVE-2018-1020. | 7.5 |
HIGH |
||
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-0870, CVE-2018-0991, CVE-2018-0997, CVE-2018-1018. | 7.5 |
HIGH |
||
A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption, aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability." This affects Windows Defender, Windows Intune Endpoint Protection, Microsoft Security Essentials, Microsoft System Center Endpoint Protection, Microsoft Exchange Server, Microsoft System Center, Microsoft Forefront Endpoint Protection. | 8.8 |
HIGH |
||
ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0873, CVE-2018-0874, CVE-2018-0930, CVE-2018-0931, CVE-2018-0933, CVE-2018-0934, CVE-2018-0936, and CVE-2018-0937. | 7.5 |
HIGH |
||
ChakraCore and Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0872, CVE-2018-0874, CVE-2018-0930, CVE-2018-0931, CVE-2018-0933, CVE-2018-0934, CVE-2018-0936, and CVE-2018-0937. | 7.5 |
HIGH |
||
ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0872, CVE-2018-0873, CVE-2018-0930, CVE-2018-0931, CVE-2018-0933, CVE-2018-0934, CVE-2018-0936, and CVE-2018-0937. | 7.5 |
HIGH |
||
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0876, CVE-2018-0893, CVE-2018-0925, and CVE-2018-0935. | 7.5 |
HIGH |
||
ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allow information disclosure, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0939. | 4.3 |
MEDIUM |
||
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0876, CVE-2018-0889, CVE-2018-0925, and CVE-2018-0935. | 7.5 |
HIGH |
||
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows information disclosure, due to how Microsoft browsers handle objects in memory, aka "Microsoft Browser Information Disclosure Vulnerability". | 4.3 |
MEDIUM |
||
ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0872, CVE-2018-0873, CVE-2018-0874, CVE-2018-0930, CVE-2018-0933, CVE-2018-0934, CVE-2018-0936, and CVE-2018-0937. | 7.5 |
HIGH |
||
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows information disclosure, due to how Microsoft browsers handle objects in memory, aka "Microsoft Browser Information Disclosure Vulnerability". | 4.3 |
MEDIUM |
||
The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Kernel Elevation Of Privilege Vulnerability". This CVE is unique from CVE-2018-0742, CVE-2018-0756, CVE-2018-0809 and CVE-2018-0843. | 7.8 |
HIGH |
||
Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows a security feature bypass, due to how Edge handles different-origin requests, aka "Microsoft Edge Security Feature Bypass". | 4.3 |
MEDIUM |
||
StructuredQuery in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows a remote code execution vulnerability due to how objects are handled in memory, aka "StructuredQuery Remote Code Execution Vulnerability". | 7.5 |
HIGH |
||
The Windows Common Log File System (CLFS) driver in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how objects in memory are handled, aka "Windows Common Log File System Driver Elevation Of Privilege Vulnerability". This CVE is unique from CVE-2018-0846. | 7.8 |
HIGH |
||
The Windows Common Log File System (CLFS) driver in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how objects in memory are handled, aka "Windows Common Log File System Driver Elevation Of Privilege Vulnerability". This CVE is unique from CVE-2018-0844. | 7.8 |
HIGH |
||
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how Internet Explorer handle objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11906 and CVE-2017-11919. | 5.3 |
MEDIUM |
||
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how Internet Explorer handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11887 and CVE-2017-11919. | 5.3 |
MEDIUM |
||
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to take control of an affected system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873. | 7.5 |
HIGH |
||
Windows Search in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows server, version 1709 allows an unauthenticated attacker to remotely send specially crafted messages that could cause a denial of service against the system due to improperly handing objects in memory, aka "Windows Search Denial of Service Vulnerability". | 7.5 |
HIGH |
||
ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11834. | 3.1 |
LOW |
||
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to determine the origin of all webpages in the affected browser, due to how Microsoft Edge handles cross-origin requests, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11803 and CVE-2017-11844. | 3.1 |
LOW |
||
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11791. | 5.3 |
MEDIUM |
||
ChakraCore, and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to take control of an affected system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873. | 7.5 |
HIGH |
||
ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873. | 7.5 |
HIGH |
||
ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873. | 7.5 |
HIGH |
||
ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873. | 7.5 |
HIGH |
||
ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873. | 7.5 |
HIGH |
||
ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873. | 7.5 |
HIGH |
||
ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873. | 7.5 |
HIGH |
||
Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to run arbitrary code in kernel mode, install programs, view, change or delete data, and create new accounts with full user rights due to improperly handing objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability". | 7.8 |
HIGH |
||
Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to log in and run a specially crafted application due to the Windows kernel improperly initializing a memory address, aka "Windows Kernel Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11842, CVE-2017-11851, and CVE-2017-11853. | 4.7 |
MEDIUM |
||
The Windows kernel component on Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709, allows an information disclosure vulnerability when it improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11842, CVE-2017-11849, and CVE-2017-11853. | 4.7 |
MEDIUM |
||
Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to log in and run a specially crafted application due to the Windows kernel improperly initializing a memory address, aka "Windows Kernel Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11842, CVE-2017-11849, and CVE-2017-11851. | 5.5 |
MEDIUM |
||
ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how Microsoft browsers handle objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873. | 7.5 |
HIGH |
||
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to trick a user into loading a page containing malicious content, due to how the Edge Content Security Policy (CSP) validates documents, aka "Microsoft Edge Security Feature Bypass Vulnerability". This CVE ID is unique from CVE-2017-11872 and CVE-2017-11874. | 6.1 |
MEDIUM |
||
ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873. | 7.5 |
HIGH |
||
Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to force the browser to send data that would otherwise be restricted to a destination website of the attacker's choice, due to how Microsoft Edge handles redirect requests, aka "Microsoft Edge Security Feature Bypass Vulnerability". This CVE ID is unique from CVE-2017-11863 and CVE-2017-11874. | 6.5 |
MEDIUM |
||
ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11812, and CVE-2017-11821. | 7.5 |
HIGH |
||
The Microsoft Graphics Component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability in the way it handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-11763. | 8.8 |
HIGH |
||
The Microsoft Graphics Component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability in the way it handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-11763. | 8.8 |
HIGH |
||
The Microsoft Windows TRIE component on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability in the way it handles loading dll files, aka "TRIE Remote Code Execution Vulnerability". | 7.8 |
HIGH |
||
The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly handle DNS responses, aka "Windows Search Remote Code Execution Vulnerability". | 9.8 |
CRITICAL |
||
The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure when it fails to properly handle objects in memory, aka "Microsoft Search Information Disclosure Vulnerability". | 7.5 |
HIGH |
||
The Microsoft Windows Domain Name System (DNS) DNSAPI.dll on Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly handle DNS responses, aka "Windows DNSAPI Remote Code Execution Vulnerability". | 8.1 |
HIGH |
||
The Microsoft Server Block Message (SMB) on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows a denial of service vulnerability when an attacker sends specially crafted requests to the server, aka "Windows SMB Denial of Service Vulnerability". | 7.5 |
HIGH |
||
The Microsoft Server Block Message (SMB) on Microsoft Windows 10 1607 and Windows Server 2016, allows an elevation of privilege vulnerability when an attacker sends specially crafted requests to the server, aka "Windows SMB Elevation of Privilege Vulnerability". | 7.8 |
HIGH |
||
Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability in the way it handles calls to Advanced Local Procedure Call (ALPC), aka "Windows Elevation of Privilege Vulnerability". | 7 |
HIGH |
||
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812, and CVE-2017-11821. | 7.5 |
HIGH |
||
ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812, and CVE-2017-11821. | 7.5 |
HIGH |
||
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812, and CVE-2017-11821. | 7.5 |
HIGH |
||
ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812, and CVE-2017-11821. | 7.5 |
HIGH |
||
ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812, and CVE-2017-11821. | 7.5 |
HIGH |
||
ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812, and CVE-2017-11821. | 7.5 |
HIGH |
||
ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812, and CVE-2017-11821. | 7.5 |
HIGH |
||
ChakraCore and Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11812, and CVE-2017-11821. | 7.5 |
HIGH |
||
The Microsoft Device Guard on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a security feature bypass by the way it handles Windows PowerShell sessions, aka "Microsoft Windows Security Feature Bypass". | 6.7 |
MEDIUM |
||
The Microsoft Graphics Component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability in the way it handles objects in memory, aka "Windows Graphics Component Elevation of Privilege Vulnerability". | 7 |
HIGH |
||
Microsoft Windows 10 allows an elevation of privilege vulnerability when the Windows Update Delivery Optimization does not properly enforce file share permissions. | 5.5 |
MEDIUM |
||
The Microsoft Windows Kernel Mode Driver on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2017-8694. | 7 |
HIGH |
||
The Microsoft Graphics Component on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability in the way it handles objects in memory, aka "Microsoft Graphics Information Disclosure Vulnerability". | 5.5 |
MEDIUM |
||
The Microsoft Windows Kernel Mode Driver on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2017-8689. | 7 |
HIGH |
||
The Microsoft Device Guard on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a security feature bypass by the way it handles Windows PowerShell sessions, aka "Windows Security Feature Bypass". | 5.3 |
MEDIUM |
||
The Microsoft JET Database Engine in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to take control of an affected system, due to how it handles objects in memory, aka "Microsoft JET Database Engine Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8718. | 7.8 |
HIGH |
||
The Microsoft JET Database Engine in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to take control of an affected system, due to how it handles objects in memory, aka "Microsoft JET Database Engine Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8717. | 7.8 |
HIGH |
||
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how affected Microsoft scripting engines handle objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11794 and CVE-2017-11803. | 4.3 |
MEDIUM |
||
Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user, due to how Microsoft Windows Text Services Framework handles objects in memory, aka "Windows Shell Memory Corruption Vulnerability". | 7.5 |
HIGH |
||
The Windows Server DHCP service in Windows Server 2012 Gold and R2, and Windows Server 2016 allows an attacker to either run arbitrary code on the DHCP failover server or cause the DHCP service to become nonresponsive, due to a memory corruption vulnerability in the Windows Server DHCP service, aka "Windows DHCP Server Remote Code Execution Vulnerability". | 9.8 |
CRITICAL |
||
Microsoft Edge in Microsoft Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft Edge accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8734, CVE-2017-8751, and CVE-2017-11766. | 7.5 |
HIGH |
||
The Windows NetBT Session Services component on Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to maintain certain sequencing requirements, aka "NetBIOS Remote Code Execution Vulnerability". | 8.1 |
HIGH |
||
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft Edge accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8731, CVE-2017-8734, and CVE-2017-8751. | 7.5 |
HIGH |
||
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to leave a malicious website open during user clipboard activities, due to the way that Microsoft Edge handles clipboard events, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8597 and CVE-2017-8648. | 4.3 |
MEDIUM |
||
Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8660, CVE-2017-8729, CVE-2017-8738, CVE-2017-8740, CVE-2017-8741, CVE-2017-8748, CVE-2017-8752, CVE-2017-8753, CVE-2017-8755, CVE-2017-8756, and CVE-2017-11764. | 7.5 |
HIGH |
||
Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8649, CVE-2017-8729, CVE-2017-8738, CVE-2017-8740, CVE-2017-8741, CVE-2017-8748, CVE-2017-8752, CVE-2017-8753, CVE-2017-8755, CVE-2017-8756, and CVE-2017-11764. | 8.8 |
HIGH |
||
The Windows Kernel-Mode Drivers component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability".. This CVE ID is unique from CVE-2017-8720. | 7 |
HIGH |
||
The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607, 1703, and Server 2016; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for Mac 2011 and 2016; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010 Attendee; and Live Meeting 2007 Add-in and Console allows an authenticated attacker to retrieve information from a targeted system via a specially crafted application, aka "Windows GDI+ Information Disclosure Vulnerability." | 3.3 |
LOW |
||
The Windows GDI+ component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it improperly discloses kernel memory addresses, aka "Win32k Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8678, CVE-2017-8680, CVE-2017-8681, and CVE-2017-8687. | 5.5 |
MEDIUM |
||
The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it improperly handles objects in memory, aka "Win32k Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8677, CVE-2017-8680, CVE-2017-8681, and CVE-2017-8687. | 5.5 |
MEDIUM |
||
The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8708, CVE-2017-8709, and CVE-2017-8719. | 5.5 |
MEDIUM |
||
The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it improperly handles objects in memory, aka "Win32k Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8678, CVE-2017-8680, CVE-2017-8677, and CVE-2017-8687. | 5.5 |
MEDIUM |
||
The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it improperly handles objects in memory, aka "Win32k Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8678, CVE-2017-8680, CVE-2017-8677, and CVE-2017-8681. | 5.5 |
MEDIUM |
||
Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows information disclosure by the way it discloses kernel memory addresses, aka "Windows GDI+ Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8684 and CVE-2017-8685. | 5.5 |
MEDIUM |
||
Windows Uniscribe in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607, 1703, and Server 2016; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for Mac 2011 and 2016; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010 Attendee; and Live Meeting 2007 Add-in and Console allows an attacker to obtain information to further compromise a user's system via a specially crafted document or an untrusted webpage, aka "Graphics Component Information Disclosure Vulnerability." | 5.3 |
MEDIUM |
||
Windows Shell in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to run arbitrary code in the context of the current user, due to the way that Windows Shell validates file copy destinations, aka "Windows Shell Remote Code Execution Vulnerability". | 7 |
HIGH |
||
Windows Error Reporting (WER) in Microsoft Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows an attacker to gain greater access to sensitive information and system functionality, due to the way that WER handles and executes files, aka "Windows Elevation of Privilege Vulnerability". | 7 |
HIGH |
||
The Windows Hyper-V component on Microsoft Windows 10 1607 and Windows Server 2016 allows a denial of service vulnerability when it fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Denial of Service Vulnerability". | 5.3 |
MEDIUM |
||
The Windows Hyper-V component on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8707, CVE-2017-8711, CVE-2017-8712, and CVE-2017-8713. | 5.3 |
MEDIUM |
||
The Windows Hyper-V component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it fails to properly validate input from an authenticated user on a guest operating system, aka Hyper-V Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8706, CVE-2017-8711, CVE-2017-8712, and CVE-2017-8713. | 5.3 |
MEDIUM |
||
The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8679, CVE-2017-8709, and CVE-2017-8719. | 4.7 |
MEDIUM |
||
The Windows Hyper-V component on Microsoft Windows 10 1607 and Windows Server 2016 allows an information disclosure vulnerability when it fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8707, CVE-2017-8706, CVE-2017-8712, and CVE-2017-8713. | 5.3 |
MEDIUM |
||
The Windows Hyper-V component on Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an information disclosure vulnerability when it fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8707, CVE-2017-8711, CVE-2017-8706, and CVE-2017-8713. | 5.3 |
MEDIUM |
||
The Windows Hyper-V component on Microsoft Windows Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8707, CVE-2017-8711, CVE-2017-8712, and CVE-2017-8706. | 5.3 |
MEDIUM |
||
The Windows Hyper-V component on Microsoft Windows 8.1, Windows Server 2012 Gold and R2,, Windows 10 1607, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly validate input from an authenticated user on a guest operating system, aka "Remote Desktop Virtual Host Remote Code Execution Vulnerability". | 7.8 |
HIGH |
||
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page containing malicious content, due to the way that the Edge Content Security Policy (CSP) validates certain specially crafted documents, aka "Microsoft Edge Security Feature Bypass Vulnerability". This CVE ID is unique from CVE-2017-8754. | 4.3 |
MEDIUM |
||
Microsoft Windows PDF Library in Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Windows PDF Library handles objects in memory, aka "Windows PDF Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8737. | 7.5 |
HIGH |
||
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft Edge accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8731, CVE-2017-8751, and CVE-2017-11766. | 7.5 |
HIGH |
||
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to trick a user by redirecting the user to a specially crafted website, due to the way that Microsoft Edge parses HTTP content, aka "Microsoft Edge Spoofing Vulnerability". This CVE ID is unique from CVE-2017-8724. | 4.3 |
MEDIUM |
||
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to obtain specific information used in the parent domain, due to Microsoft browser parent domain verification in certain functionality, aka "Microsoft Browser Information Disclosure Vulnerability". | 4.3 |
MEDIUM |
||
Microsoft Windows PDF Library in Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Windows PDF Library handles objects in memory, aka "Windows PDF Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8728. | 7.5 |
HIGH |
||
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8649, CVE-2017-8660, CVE-2017-8729, CVE-2017-8740, CVE-2017-8741, CVE-2017-8748, CVE-2017-8752, CVE-2017-8753, CVE-2017-8755, CVE-2017-8756, and CVE-2017-11764. | 7.5 |
HIGH |
||
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8649, CVE-2017-8660, CVE-2017-8729, CVE-2017-8738, CVE-2017-8740, CVE-2017-8741, CVE-2017-8748, CVE-2017-8752, CVE-2017-8753, CVE-2017-8755, CVE-2017-8756, and CVE-2017-11764. | 7.5 |
HIGH |
||
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8649, CVE-2017-8660, CVE-2017-8729, CVE-2017-8738, CVE-2017-8740, CVE-2017-8741, CVE-2017-8752, CVE-2017-8753, CVE-2017-8755, CVE-2017-8756, and CVE-2017-11764. | 7.5 |
HIGH |
||
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browsers access objects in memory, aka "Microsoft Browser Memory Corruption Vulnerability". | 7.5 |
HIGH |
||
Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8649, CVE-2017-8660, CVE-2017-8729, CVE-2017-8738, CVE-2017-8740, CVE-2017-8741, CVE-2017-8748, CVE-2017-8753, CVE-2017-8755, CVE-2017-8756, and CVE-2017-11764. | 7.5 |
HIGH |
||
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8649, CVE-2017-8660, CVE-2017-8729, CVE-2017-8738, CVE-2017-8740, CVE-2017-8741, CVE-2017-8748, CVE-2017-8752, CVE-2017-8755, CVE-2017-8756, and CVE-2017-11764. | 7.5 |
HIGH |
||
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page containing malicious content, due to the way that the Edge Content Security Policy (CSP) validates certain specially crafted documents, aka "Microsoft Edge Security Feature Bypass Vulnerability". This CVE ID is unique from CVE-2017-8723. | 4.2 |
MEDIUM |
||
Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8649, CVE-2017-8649, CVE-2017-8660, CVE-2017-8729, CVE-2017-8738, CVE-2017-8740, CVE-2017-8741, CVE-2017-8748, CVE-2017-8752, CVE-2017-8753, CVE-2017-8756, and CVE-2017-11764. | 7.5 |
HIGH |
||
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft Edge accesses objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8649, CVE-2017-8660, CVE-2017-8729, CVE-2017-8738, CVE-2017-8740, CVE-2017-8741, CVE-2017-8748, CVE-2017-8752, CVE-2017-8753, CVE-2017-8755, and CVE-2017-11764. | 7.5 |
HIGH |
||
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way Microsoft Edge handles objects in memory, aka "Microsoft Edge Remote Code Execution Vulnerability". | 7.5 |
HIGH |
||
Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8672, and CVE-2017-8674. | 7.5 |
HIGH |
||
Windows NetBIOS in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a denial of service vulnerability when it improperly handles NetBIOS packets, aka "Windows NetBIOS Denial of Service Vulnerability". | 6.5 |
MEDIUM |
||
Microsoft JET Database Engine in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability due to buffer overflow, aka "Microsoft JET Database Engine Remote Code Execution Vulnerability". | 7.8 |
HIGH |
||
Microsoft Windows PDF Library in Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability when it improperly handles objects in memory, aka "Windows PDF Remote Code Execution Vulnerability". | 7.5 |
HIGH |
||
Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to escape from the AppContainer sandbox, aka "Microsoft Edge Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2017-8642. | 8.8 |
HIGH |
||
Windows Input Method Editor (IME) in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an remote code execution vulnerability when it fails to properly handle objects in memory, aka "Windows IME Remote Code Execution Vulnerability". | 7.8 |
HIGH |
||
Microsoft Win32k in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability". | 7 |
HIGH |
||
Windows Hyper-V in Windows 10 1607, 1703, and Windows Server 2016 allows a denial of service vulnerability when it fails to properly validate input from a privileged user on a guest operating system, aka "Windows Hyper-V Denial of Service Vulnerability". | 6.8 |
MEDIUM |
||
CLFS in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to the way it handles objects in memory, aka "Windows CLFS Elevation of Privilege Vulnerability". | 7.8 |
HIGH |
||
Windows Error Reporting (WER) in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability, aka "Windows Error Reporting Elevation of Privilege Vulnerability". | 7.5 |
HIGH |
||
Microsoft Edge in Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, and CVE-2017-8674. | 7.5 |
HIGH |
||
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, and CVE-2017-8674. | 7.5 |
HIGH |
||
Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, and CVE-2017-8674. | 7.5 |
HIGH |
||
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to disclose information due to the way that Microsoft Edge handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8652 and CVE-2017-8662. | 4.3 |
MEDIUM |
||
Microsoft Edge in Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, and CVE-2017-8674. | 7.5 |
HIGH |
||
Microsoft Edge in Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, and CVE-2017-8674. | 7.5 |
HIGH |
||
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to disclose information due to the way that Microsoft Edge handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8644 and CVE-2017-8662. | 6.5 |
MEDIUM |
||
Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to Microsoft browsers improperly accessing objects in memory, aka "Microsoft Browser Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8669. | 7.5 |
HIGH |
||
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, and CVE-2017-8674. | 7.5 |
HIGH |
||
Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, and CVE-2017-8674. | 7.5 |
HIGH |
||
Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, and CVE-2017-8674. | 7.5 |
HIGH |
||
Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way affected Microsoft scripting engines render when handling objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability". | 7.5 |
HIGH |
||
Windows Hyper-V in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly validate input from a privileged user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability". | 8.8 |
HIGH |
||
Microsoft Win32k in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it fails to properly handle objects in memory, aka "Win32k Information Disclosure Vulnerability". | 5.5 |
MEDIUM |
||
Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to Microsoft browsers improperly handling objects in memory while rendering content, aka "Microsoft Browser Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8653. | 7.5 |
HIGH |
||
Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8671, CVE-2017-8672, and CVE-2017-8674. | 7.5 |
HIGH |
||
Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, and CVE-2017-8674. | 7.5 |
HIGH |
||
Microsoft Edge allows a remote code execution vulnerability due to the way it accesses objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". | 7.5 |
HIGH |
||
Windows Performance Monitor in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an information disclosure vulnerability due to the way it parses XML input, aka "Windows Performance Monitor Information Disclosure Vulnerability". | 6.5 |
MEDIUM |
||
Windows Shell in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability due to the way it improperly handles executable files and shares during rename operations, aka "Windows Explorer Remote Code Execution Vulnerability". | 7.8 |
HIGH |
||
Graphics in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to the way it handles objects in memory, aka "Win32k Elevation of Privilege Vulnerability". | 7 |
HIGH |
||
Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an information disclosure due to the way it handles objects in memory, aka "Win32k Information Disclosure Vulnerability". | 4.7 |
MEDIUM |
||
Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to bypass Extended Protection for Authentication when Kerberos fails to prevent tampering with the SNAME field during ticket exchange, aka "Kerberos SNAME Security Feature Bypass Vulnerability" or Orpheus' Lyre. | 7.5 |
HIGH |
||
Graphics in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, aka "Microsoft Graphics Component Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2017-8573 and CVE-2017-8574. | 7 |
HIGH |
||
Windows kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to the way it handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability". | 7 |
HIGH |
||
Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to Windows improperly handling calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Elevation of Privilege Vulnerability". | 7 |
HIGH |
||
Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to Kerberos falling back to NT LAN Manager (NTLM) Authentication Protocol as the default authentication protocol, aka "Windows Elevation of Privilege Vulnerability". | 8.1 |
HIGH |
||
Windows PowerShell in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability when PSObject wraps a CIM Instance, aka "Windows PowerShell Remote Code Execution Vulnerability". | 8.1 |
HIGH |
||
Microsoft Windows 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to Windows Input Method Editor (IME) improperly handling parameters in a method of a DCOM class, aka "Windows IME Elevation of Privilege Vulnerability". | 7 |
HIGH |
||
Graphics in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, aka "Microsoft Graphics Component Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2017-8574 and CVE-2017-8556. | 7 |
HIGH |
||
Graphics in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, aka "Microsoft Graphics Component Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2017-8573 and CVE-2017-8556. | 7 |
HIGH |
||
Win32k in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2017-8578, CVE-2017-8580, CVE-2017-8581, and CVE-2017-8467. | 7 |
HIGH |
||
Win32k in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2017-8577, CVE-2017-8580, CVE-2017-8581, and CVE-2017-8467. | 7.8 |
HIGH |
||
Win32k in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2017-8577, CVE-2017-8578, CVE-2017-8581, and CVE-2017-8467. | 7 |
HIGH |
||
Win32k in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2017-8578, CVE-2017-8580, CVE-2017-8577, and CVE-2017-8467. | 7 |
HIGH |
||
HTTP.sys in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when the component improperly handles objects in memory, aka "Https.sys Information Disclosure Vulnerability". | 5.9 |
MEDIUM |
||
Windows 10 1607 and Windows Server 2016 allow an attacker to execute code remotely via a specially crafted WiFi packet aka "HoloLens Remote Code Execution Vulnerability." | 7.5 |
HIGH |
||
Microsoft WordPad in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability due to the way it parses specially crafted files, aka "WordPad Remote Code Execution Vulnerability". | 7 |
HIGH |
||
Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability due to the way that Windows Search handles objects in memory, aka "Windows Search Remote Code Execution Vulnerability". | 9.8 |
CRITICAL |
||
Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to the way that the Windows Common Log File System (CLFS) driver handles objects in memory, aka "Windows CLFS Elevation of Privilege Vulnerability". | 8.8 |
HIGH |
||
Microsoft browsers on when Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, and Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow a security feature bypass vulnerability when they improperly handle redirect requests, aka "Microsoft Browser Security Feature Bypass". | 6.5 |
MEDIUM |
||
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8596, CVE-2017-8601,CVE-2017-8618, CVE-2017-8619, CVE-2017-8610, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8606, CVE-2017-8607, CVE-2017-8608, and CVE-2017-8609. | 7.5 |
HIGH |
||
Microsoft Edge in Microsoft Windows 10 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8598, CVE-2017-8610, CVE-2017-8595, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8606, CVE-2017-8607, CVE-2017-8608, and CVE-2017-8609. | 7.5 |
HIGH |
||
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8596, CVE-2017-8610, CVE-2017-8618, CVE-2017-8619, CVE-2017-8595, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8606, CVE-2017-8607, CVE-2017-8608, and CVE-2017-8609. | 7.5 |
HIGH |
||
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page with malicious content when the Edge Content Security Policy (CSP) fails to properly validate certain specially crafted documents, aka "Microsoft Edge Security Feature Bypass Vulnerability". | 6.5 |
MEDIUM |
||
Microsoft browsers on Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow a spoofing vulnerability in the way they parse HTTP content, aka "Microsoft Browser Spoofing Vulnerability." | 6.5 |
MEDIUM |
||
Microsoft Edge in Microsoft Windows 10 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8596, CVE-2017-8610, CVE-2017-8598, CVE-2017-8618, CVE-2017-8619, CVE-2017-8595, CVE-2017-8601, CVE-2017-8604, CVE-2017-8605, CVE-2017-8606, CVE-2017-8607, CVE-2017-8608, and CVE-2017-8609. | 7.5 |
HIGH |
||
Microsoft Edge in Microsoft Windows 10 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8596, CVE-2017-8618, CVE-2017-8619, CVE-2017-8601, CVE-2017-8610, CVE-2017-8603, CVE-2017-8598, CVE-2017-8601, CVE-2017-8605, CVE-2017-8606, CVE-2017-8607, CVE-2017-8608, and CVE-2017-8609. | 7.5 |
HIGH |
||
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8596, CVE-2017-8601, CVE-2017-8618, CVE-2017-8619, CVE-2017-8610, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8598, CVE-2017-8606, CVE-2017-8607, CVE-2017-8608, and CVE-2017-8609. | 7.5 |
HIGH |
||
Microsoft browsers in Microsoft Windows 7, Windows Server 2008 and R2, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engines fail to render when handling objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8598, CVE-2017-8596, CVE-2017-8618, CVE-2017-8619, CVE-2017-8610, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8595, CVE-2017-8607, CVE-2017-8608, and CVE-2017-8609 | 7.5 |
HIGH |
||
Microsoft browsers in Microsoft Windows 7, Windows Server 2008 and R2, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engines fail to render when handling objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8598, CVE-2017-8596, CVE-2017-8618, CVE-2017-8619, CVE-2017-8610, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8595, CVE-2017-8606, CVE-2017-8608, and CVE-2017-8609 | 7.5 |
HIGH |
||
Microsoft browsers in Microsoft Windows Server 2008 and R2, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engines fail to render when handling objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8598, CVE-2017-8596, CVE-2017-8610, CVE-2017-8601, CVE-2017-8618, CVE-2017-8619, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8595, CVE-2017-8606, CVE-2017-8607, and CVE-2017-8609 | 7.5 |
HIGH |
||
Microsoft Internet Explorer in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8596, CVE-2017-8610, CVE-2017-8618, CVE-2017-8619, CVE-2017-8595, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8606, CVE-2017-8607, CVE-2017-8608, and CVE-2017-8609. | 7.5 |
HIGH |
||
Microsoft Edge on Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability in the way affected Microsoft scripting engines render when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-8596, CVE-2017-8610, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8606, CVE-2017-8607, CVE-2017-8608, CVE-2017-8618, CVE-2017-9598 and CVE-2017-8609. | 7.5 |
HIGH |
||
The kernel in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an authenticated attacker to obtain memory contents via a specially crafted application. | 4.7 |
MEDIUM |
||
The kernel in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application, aka "Microsoft Graphics Component Information Disclosure Vulnerability." | 5.5 |
MEDIUM |
||
The graphics component in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to run arbitrary code in kernel mode via a specially crafted application, aka "Microsoft Graphics Component Elevation of Privilege Vulnerability." | 7 |
HIGH |
||
The DirectX component in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to run arbitrary code in kernel mode via a specially crafted application, aka "DirectX Elevation of Privilege Vulnerability." | 7 |
HIGH |
||
Windows PDF in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows remote code execution if a user opens a specially crafted PDF file, aka "Windows PDF Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0292. | 7.8 |
HIGH |
||
Windows PDF in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows remote code execution if a user opens a specially crafted PDF file, aka "Windows PDF Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0291. | 7.8 |
HIGH |
||
Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute remote code when Windows fails to properly handle cabinet files, aka "Windows Remote Code Execution Vulnerability". | 7.8 |
HIGH |
||
Microsoft Windows 10 1607 and 1703, and Windows Server 2016 allow an authenticated attacker to modify the C:\Users\DEFAULT folder structure, aka "Windows Default Folder Tampering Vulnerability". | 5.5 |
MEDIUM |
||
Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to elevate privilege when tdx.sys fails to check the length of a buffer prior to copying memory to it, aka "Windows TDX Elevation of Privilege Vulnerability". | 7.8 |
HIGH |
||
The kernel in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka "Windows Kernel Information Disclosure Vulnerability," a different vulnerability than CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE-2017-8482, CVE-2017-8481, CVE-2017-8480, CVE-2017-8478, CVE-2017-8479, CVE-2017-8476, CVE-2017-8474, CVE-2017-8469, CVE-2017-8462, CVE-2017-0299, CVE-2017-0300. | 5 |
MEDIUM |
||
A DCOM object in Helppane.exe in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016, when configured to run as the interactive user, allows an authenticated attacker to run arbitrary code in another user's session, aka "Windows COM Session Elevation of Privilege Vulnerability." | 7.3 |
HIGH |
||
The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka "Windows Kernel Information Disclosure Vulnerability," a different vulnerability than CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE-2017-8482, CVE-2017-8481, CVE-2017-8480, CVE-2017-8478, CVE-2017-8479, CVE-2017-8476, CVE-2017-8474, CVE-2017-8469, CVE-2017-8462, CVE-2017-0300, and CVE-2017-0297. | 5 |
MEDIUM |
||
The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka "Windows Kernel Information Disclosure Vulnerability," a different vulnerability than CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE-2017-8482, CVE-2017-8481, CVE-2017-8480, CVE-2017-8478, CVE-2017-8479, CVE-2017-8476, CVE-2017-8474, CVE-2017-8469, CVE-2017-8462, CVE-2017-0299, and CVE-2017-0297. | 5 |
MEDIUM |
||
The kernel in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka "Windows Kernel Information Disclosure Vulnerability," a different vulnerability than CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE-2017-8482, CVE-2017-8481, CVE-2017-8480, CVE-2017-8478, CVE-2017-8479, CVE-2017-8476, CVE-2017-8469, CVE-2017-8462, CVE-2017-0300, CVE-2017-0299, and CVE-2017-0297. | 5 |
MEDIUM |
||
Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow a locally-authenticated attacker to run a specially crafted application on a targeted system when Windows Secure Kernel Mode fails to properly handle objects in memory, aka "Windows Elevation of Privilege Vulnerability". | 7.3 |
HIGH |
||
Microsoft Edge in Windows 10 1607 and 1703, and Windows Server 2016 allows an attacker to read data not intended to be disclosed when Edge allows JavaScript XML DOM objects to detect installed browser extensions, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8504. | 4.3 |
MEDIUM |
||
Microsoft Edge in Windows 10 1607 and 1703, and Windows Server 2016 allows an attacker to read the URL of a cross-origin request when the Microsoft Edge Fetch API incorrectly handles a filtered response type, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8498. | 4.3 |
MEDIUM |
||
Microsoft Windows 10 1511, 1607, and 1703, and Windows Server 2016 allow an unauthenticated attacker to send a specially crafted kernel mode request to cause a denial of service on the target system, aka "Windows VAD Cloning Denial of Service Vulnerability". | 5.5 |
MEDIUM |
||
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page with malicious content when Microsoft Edge fails to correctly apply Same Origin Policy for HTML elements present in other browser windows, aka "Microsoft Edge Security Feature Bypass Vulnerability". This CVE ID is unique from CVE-2017-8530 and CVE-2017-8555. | 4.3 |
MEDIUM |
||
Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, Windows Server 2016, Microsoft Office 2007 Service Pack 3, and Microsoft Office 2010 Service Pack 2 allows improper disclosure of memory contents, aka "Graphics Uniscribe Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-0286, CVE-2017-0287, CVE-2017-0288, CVE-2017-0289, CVE-2017-8532, and CVE-2017-8533. | 6.5 |
MEDIUM |
||
Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows improper disclosure of memory contents, aka "Graphics Uniscribe Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-0286, CVE-2017-0287, CVE-2017-0288, CVE-2017-0289, CVE-2017-8531, and CVE-2017-8532. | 6.5 |
MEDIUM |
||
Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to obtain information to further compromise the user's system when Windows Search fails to handle objects in memory, aka "Windows Search Information Disclosure Vulnerability". | 5.5 |
MEDIUM |
||
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 and R2 allow an attacker to execute arbitrary code in the context of the current user when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8519. | 7.5 |
HIGH |
||
The GDI component in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "GDI Information Disclosure Vulnerability." | 4.4 |
MEDIUM |
||
Windows Hyper-V allows an elevation of privilege vulnerability when Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 fail to properly validate vSMB packet data, aka "Windows Hyper-V vSMB Elevation of Privilege Vulnerability". | 7.6 |
HIGH |
||
Windows COM in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerability when Windows fails to properly validate input before loading type libraries, aka "Windows COM Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2017-0213. | 7 |
HIGH |
||
The Graphics Component in the kernel-mode drivers in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted application or in Windows 7 for x64-based Systems and later, cause denial of service, aka "Win32k Elevation of Privilege Vulnerability." | 7 |
HIGH |
||
The Microsoft Server Message Block 1.0 (SMBv1) allows denial of service when an attacker sends specially crafted requests to the server, aka "Windows SMB Denial of Service Vulnerability". This CVE ID is unique from CVE-2017-0273 and CVE-2017-0280. | 5.9 |
MEDIUM |
||
The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to execute remote code by the way it handles certain requests, aka "Windows SMB Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0277, CVE-2017-0278, and CVE-2017-0279. | 8.1 |
HIGH |
||
Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 handles certain requests, aka "Windows SMB Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-0267, CVE-2017-0268, CVE-2017-0270, CVE-2017-0271, CVE-2017-0274, and CVE-2017-0276. | 5.9 |
MEDIUM |
||
Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 handles certain requests, aka "Windows SMB Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-0267, CVE-2017-0268, CVE-2017-0270, CVE-2017-0271, CVE-2017-0274, and CVE-2017-0275. | 5.9 |
MEDIUM |
||
The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to execute remote code by the way it handles certain requests, aka "Windows SMB Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0272, CVE-2017-0278, and CVE-2017-0279. | 7 |
HIGH |
||
A Win32k information disclosure vulnerability exists in Microsoft Windows when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user's system, aka "Win32k Information Disclosure Vulnerability." | 4.7 |
MEDIUM |
||
An elevation of privilege vulnerability exists in Windows 7, Windows 8.1, Windows RT 8.1, Windows 10, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016 when the Microsoft Graphics Component fails to properly handle objects in memory, aka "Windows Graphics Component Elevation of Privilege Vulnerability." | 7 |
HIGH |
||
An elevation of privilege vulnerability exists when Microsoft Windows running on Windows 10, Windows 10 1511, Windows 8.1 Windows RT 8.1, and Windows Server 2012 R2 fails to properly sanitize handles in memory, aka "Scripting Engine Memory Corruption Vulnerability." | 7.5 |
HIGH |
||
A security feature bypass vulnerability exists in Windows 10 1607, Windows Server 2012 R2, and Windows 2016 when ADFS incorrectly treats requests coming from Extranet clients as Intranet requests, aka "ADFS Security Feature Bypass Vulnerability." | 3.7 |
LOW |
||
A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a Windows 10, Windows 8.1, Windows Server 2012 R2, or Windows Server 2016 host server fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Remote Code Execution Vulnerability." This CVE ID is unique from CVE-2017-0163, CVE-2017-0180, and CVE-2017-0181. | 7.6 |
HIGH |
||
A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Remote Code Execution Vulnerability." This CVE ID is unique from CVE-2017-0162, CVE-2017-0180, and CVE-2017-0181. | 7.6 |
HIGH |
||
A denial of service vulnerability exists in Windows 10 1607 and Windows Server 2016 Active Directory when an authenticated attacker sends malicious search queries, aka "Active Directory Denial of Service Vulnerability." | 4.4 |
MEDIUM |
||
An elevation of privilege vulnerability exists in Windows when LDAP request buffer lengths are improperly calculated. In a remote attack scenario, an attacker could exploit this vulnerability by running a specially crafted application to send malicious traffic to a Domain Controller, aka "LDAP Elevation of Privilege Vulnerability." | 8.1 |
HIGH |
||
An information disclosure vulnerability exists in Windows 8.1, Windows RT 8.1, Windows Server 2012 R2, Windows 10, and Windows Server 2016 when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user's system, a.k.a. "Windows Kernel Information Disclosure Vulnerability." | 5.5 |
MEDIUM |
||
A denial of service vulnerability exists when Microsoft Hyper-V running on Windows 10, Windows 10 1511, Windows 10 1607, Windows 8.1, Windows Server 2012 R2, and Windows Server 2016 host server fails to properly validate input from a privileged user on a guest operating system, aka "Hyper-V Denial of Service Vulnerability." This CVE ID is unique from CVE-2017-0179, CVE-2017-0182, CVE-2017-0183, CVE-2017-0184, CVE-2017-0185, and CVE-2017-0186. | 5.4 |
MEDIUM |
||
A denial of service vulnerability exists when Microsoft Hyper-V running on a Windows 10, Windows 8.1, Windows Server 2012 R2, or Windows Server 2016 host server fails to properly validate input from a privileged user on a guest operating system, aka "Hyper-V Denial of Service Vulnerability." This CVE ID is unique from CVE-2017-0178, CVE-2017-0182, CVE-2017-0183, CVE-2017-0184, CVE-2017-0185, and CVE-2017-0186. | 5.8 |
MEDIUM |
||
A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Remote Code Execution Vulnerability." This CVE ID is unique from CVE-2017-0162, CVE-2017-0163, and CVE-2017-0181. | 7.6 |
HIGH |
||
A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a Windows 10 or Windows Server 2016 host server fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Remote Code Execution Vulnerability." This CVE ID is unique from CVE-2017-0162, CVE-2017-0163, and CVE-2017-0180. | 7.6 |
HIGH |
||
A denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a Windows 10, Windows Server 2008 R2, Windows 8.1, Windows Server 2012 R2, or Windows Server 2016 host server fails to properly validate input from a privileged user on a guest operating system, aka "Hyper-V Denial of Service Vulnerability." This CVE ID is unique from CVE-2017-0178, CVE-2017-0179, CVE-2017-0183, CVE-2017-0184, CVE-2017-0185, and CVE-2017-0186. | 5.8 |
MEDIUM |
||
A denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a Windows 10, Windows Server 2008 R2, Windows 8.1, Windows Server 2012 R2, or Windows Server 2016 host server fails to properly validate input from a privileged user on a guest operating system, aka "Hyper-V Denial of Service Vulnerability." This CVE ID is unique from CVE-2017-0178, CVE-2017-0179, CVE-2017-0182, CVE-2017-0184, CVE-2017-0185, and CVE-2017-0186. | 5.8 |
MEDIUM |
||
A denial of service vulnerability exists when Microsoft Hyper-V running on a host server fails to properly validate input from a privileged user on a guest operating system, aka "Hyper-V Denial of Service Vulnerability." This CVE ID is unique from CVE-2017-0178, CVE-2017-0179, CVE-2017-0182, CVE-2017-0183, CVE-2017-0185, and CVE-2017-0186. | 5.4 |
MEDIUM |
||
A denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a Windows 10, Windows 8.1, Windows Server 2012, Windows Server 2012 R2, or Windows Server 2016 host server fails to properly validate input from a privileged user on a guest operating system, aka "Hyper-V Denial of Service Vulnerability." This CVE ID is unique from CVE-2017-0178, CVE-2017-0179, CVE-2017-0182, CVE-2017-0183, CVE-2017-0184, and CVE-2017-0186. | 5.8 |
MEDIUM |
||
A denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a Windows 10, Windows 8.1, Windows Server 2012, Windows Server 2012 R2, or Windows Server 2016 host server fails to properly validate input from a privileged user on a guest operating system, aka "Hyper-V Denial of Service Vulnerability." This CVE ID is unique from CVE-2017-0178, CVE-2017-0179, CVE-2017-0182, CVE-2017-0183, CVE-2017-0184, and CVE-2017-0185. | 5.8 |
MEDIUM |
||
A Win32k information disclosure vulnerability exists in Windows 8.1, Windows RT 8.1, Windows Server 2012, Windows Server 2012 R2, Windows 10, and Windows Server 2016 when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user's system, aka "Win32k Information Disclosure Vulnerability." This CVE ID is unique from CVE-2017-0189. | 3.3 |
LOW |
||
An elevation of privilege vulnerability exists in Windows 10 when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode, aka "Win32k Elevation of Privilege Vulnerability." This CVE ID is unique from CVE-2017-0188. | 7.8 |
HIGH |
||
A denial of service vulnerability exists in the way that Windows 7, Windows 8.1, Windows 10, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016 handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system to stop responding, aka "Windows Denial of Service Vulnerability." | 5.8 |
MEDIUM |
||
The Adobe Type Manager Font Driver (ATMFD.dll) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold , 1511, 1607, and 1703 allows an attacker to gain sensitive information via a specially crafted document or an untrusted website, aka "ATMFD.dll Information Disclosure Vulnerability." | 4.3 |
MEDIUM |
||
An elevation of privilege vulnerability exists in Windows 10, Windows 8.1, Windows RT 8.1, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016 versions of Microsoft Windows OLE when it fails an integrity-level check, aka "Windows OLE Elevation of Privilege Vulnerability." | 5.5 |
MEDIUM |
||
Device Guard in Microsoft Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows remote attackers to modify PowerShell script without invalidating associated signatures, aka "PowerShell Security Feature Bypass Vulnerability." | 5.5 |
MEDIUM |
||
The Windows Graphics Component in Microsoft Office 2010 SP2; Windows Server 2008 R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site, aka "Windows Graphics Component Remote Code Execution Vulnerability." This vulnerability is different from that described in CVE-2017-0108. | 7.5 |
HIGH |
||
Microsoft Windows 10 Gold, 1511, and 1607; Windows 8.1; Windows RT 8.1; Windows Server 2012 R2, and Windows Server 2016 do not properly handle certain requests in SMBv2 and SMBv3 packets, which allows remote attackers to execute arbitrary code via a crafted SMBv2 or SMBv3 packet to the Server service, aka "SMBv2/SMBv3 Null Dereference Denial of Service Vulnerability." | 5.9 |
MEDIUM |
||
Hyper-V in Microsoft Windows 10 1607 and Windows Server 2016 does not properly validate vSMB packet data, which allows attackers to execute arbitrary code on a target OS, aka "Hyper-V System Data Structure Vulnerability." This vulnerability is different from that described in CVE-2017-0095. | 9 |
CRITICAL |
||
The kernel-mode drivers in Microsoft Windows 10 1607 and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0026, CVE-2017-0056, CVE-2017-0078, CVE-2017-0079, CVE-2017-0080, CVE-2017-0081, and CVE-2017-0082. | 7.8 |
HIGH |
||
The kernel-mode drivers in Microsoft Windows Vista; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0001, CVE-2017-0005, and CVE-2017-0047. | 7.8 |
HIGH |
||
The kernel-mode drivers in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0024, CVE-2017-0056, CVE-2017-0078, CVE-2017-0079, CVE-2017-0080, CVE-2017-0081, and CVE-2017-0082. | 7.8 |
HIGH |
||
Windows Media Player in Microsoft Windows 8.1; Windows Server 2012 R2; Windows RT 8.1; Windows 7 SP1; Windows 2008 SP2 and R2 SP1, Windows Server 2016; Windows Vista SP2; and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information via a crafted web site, aka "Windows Media Player Information Disclosure Vulnerability." | 3.1 |
LOW |
||
Active Directory Federation Services in Microsoft Windows 10 1607, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 Gold and R2, and Windows Server 2016 allows local users to obtain sensitive information via a crafted application, aka "Microsoft Active Directory Federation Services Information Disclosure Vulnerability." | 5.3 |
MEDIUM |
||
The kernel API in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7; Windows 8; Windows 10 Gold, 1511, and 1607; Windows RT 8.1; Windows Server 2012 Gold and R2; and Windows Server 2016 does not properly enforce permissions, which allows local users to spoof processes, spoof inter-process communication, or cause a denial of service via a crafted application, aka "Windows Kernel Elevation of Privilege Vulnerability." | 7.8 |
HIGH |
||
Microsoft Windows 10 1607 and Windows Server 2016 allow remote attackers to cause a denial of service (application hang) via a crafted Office document, aka "Microsoft Hyper-V Network Switch Denial of Service Vulnerability." This vulnerability is different from those described in CVE-2017-0074, CVE-2017-0076, CVE-2017-0097, CVE-2017-0098, and CVE-2017-0099. | 5.4 |
MEDIUM |
||
Microsoft Internet Information Server (IIS) in Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to perform cross-site scripting and run script with local user privileges via a crafted request, aka "Microsoft IIS Server XSS Elevation of Privilege Vulnerability." | 6.1 |
MEDIUM |
||
The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0024, CVE-2017-0026, CVE-2017-0078, CVE-2017-0079, CVE-2017-0080, CVE-2017-0081, CVE-2017-0082. | 7.8 |
HIGH |
||
DNS client in Microsoft Windows 8.1; Windows Server 2012 R2, Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 fails to properly process DNS queries, which allows remote attackers to obtain sensitive information via (1) convincing a workstation user to visit an untrusted webpage or (2) tricking a server into sending a DNS query to a malicious DNS server, aka "Windows DNS Query Information Disclosure Vulnerability." | 4.3 |
MEDIUM |
||
The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2; Windows Server 2008 SP2 and R2; and Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to bypass ASLR and execute code in combination with another vulnerability through a crafted website, aka "Microsoft Color Management Information Disclosure Vulnerability." This vulnerability is different from that described in CVE-2017-0061. | 6.5 |
MEDIUM |
||
Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 and R2; Windows 10, 1511, and 1607; and Windows Server 2016 allows guest OS users, running as virtual machines, to cause a denial of service via a crafted application, aka "Hyper-V Denial of Service Vulnerability." This vulnerability is different from those described in CVE-2017-0098, CVE-2017-0076, CVE-2017-0097, and CVE-2017-0099. | 5.4 |
MEDIUM |
||
Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows guest OS users to execute arbitrary code on the host OS via a crafted application, aka "Hyper-V Remote Code Execution Vulnerability." This vulnerability is different from that described in CVE-2017-0109. | 7.6 |
HIGH |
||
Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 and R2; Windows 10, 1511, and 1607; and Windows Server 2016 allows guest OS users, running as virtual machines, to cause a denial of service via a crafted application, aka "Hyper-V Denial of Service Vulnerability." This vulnerability is different from those described in CVE-2017-0098, CVE-2017-0074, CVE-2017-0097, and CVE-2017-0099. | 5.4 |
MEDIUM |
||
The kernel-mode drivers in Microsoft Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0024, CVE-2017-0026, CVE-2017-0056, CVE-2017-0079, CVE-2017-0080, CVE-2017-0081, CVE-2017-0082. | 7.8 |
HIGH |
||
The kernel-mode drivers in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0024, CVE-2017-0026, CVE-2017-0056, CVE-2017-0078, CVE-2017-0079, CVE-2017-0081, and CVE-2017-0082. | 7.8 |
HIGH |
||
The kernel-mode drivers in Microsoft Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0024, CVE-2017-0026, CVE-2017-0056, CVE-2017-0078, CVE-2017-0079, CVE-2017-0080, CVE-2017-0082. | 7.8 |
HIGH |
||
Hyper-V in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 does not properly validate vSMB packet data, which allows attackers to execute arbitrary code on a target OS, aka "Hyper-V vSMB Remote Code Execution Vulnerability." This vulnerability is different from that described in CVE-2017-0021. | 7.6 |
HIGH |
||
Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Server 2012 Gold and R2; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows guest OS users to obtain sensitive information from host OS memory via a crafted application, aka "Hyper-V Information Disclosure Vulnerability." | 2.6 |
LOW |
||
Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 and R2; Windows 10, 1511, and 1607; and Windows Server 2016 allows guest OS users, running as virtual machines, to cause a denial of service via a crafted application, aka "Hyper-V Denial of Service Vulnerability." This vulnerability is different from those described in CVE-2017-0098, CVE-2017-0074, CVE-2017-0076, and CVE-2017-0099. | 5.4 |
MEDIUM |
||
Hyper-V in Microsoft Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows guest OS users, running as virtual machines, to cause a denial of service via a crafted application, aka "Hyper-V Denial of Service Vulnerability." This vulnerability is different from those described in CVE-2017-0074, CVE-2017-0076, CVE-2017-0097, and CVE-2017-0099. | 5.4 |
MEDIUM |
||
Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows guest OS users, running as virtual machines, to cause a denial of service via a crafted application, aka "Hyper-V Denial of Service Vulnerability." This vulnerability is different from those described in CVE-2017-0098, CVE-2017-0074, CVE-2017-0076, and CVE-2017-0097. | 5.4 |
MEDIUM |
||
Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows guest OS users to execute arbitrary code on the host OS via a crafted application, aka "Hyper-V Remote Code Execution Vulnerability." This vulnerability is different from that described in CVE-2017-0075. | 7.6 |
HIGH |
||
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111, CVE-2017-0112, CVE-2017-0113, CVE-2017-0114, CVE-2017-0115, CVE-2017-0116, CVE-2017-0117, CVE-2017-0119, CVE-2017-0120, CVE-2017-0121, CVE-2017-0122, CVE-2017-0123, CVE-2017-0124, CVE-2017-0125, CVE-2017-0126, CVE-2017-0127, and CVE-2017-0128. | 4.3 |
MEDIUM |
||
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091, CVE-2017-0092, CVE-2017-0111, CVE-2017-0112, CVE-2017-0113, CVE-2017-0114, CVE-2017-0115, CVE-2017-0116, CVE-2017-0117, CVE-2017-0118, CVE-2017-0119, CVE-2017-0120, CVE-2017-0122, CVE-2017-0123, CVE-2017-0124, CVE-2017-0125, CVE-2017-0126, CVE-2017-0127, and CVE-2017-0128. | 4.3 |
MEDIUM |
||
gdi32.dll in Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information from process heap memory via a crafted EMF file, as demonstrated by an EMR_SETDIBITSTODEVICE record with modified Device Independent Bitmap (DIB) dimensions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-3216, CVE-2016-3219, and/or CVE-2016-3220. | 5.5 |
MEDIUM |
||
The Crypto driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to obtain sensitive information via a crafted application, aka "Windows Crypto Driver Information Disclosure Vulnerability." | 5.5 |
MEDIUM |
||
The kernel in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 mishandles page-fault system calls, which allows local users to obtain sensitive information from arbitrary processes via a crafted application, aka "Windows Kernel Memory Address Information Disclosure Vulnerability." | 5.5 |
MEDIUM |
||
The Graphics Component in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." | 7.8 |
HIGH |
||
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." | 7.8 |
HIGH |
||
The Secure Kernel Mode implementation in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allows local users to bypass the virtual trust level (VTL) protection mechanism via a crafted application, aka "Secure Kernel Mode Elevation of Privilege Vulnerability." | 7.8 |
HIGH |
||
The Graphics component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site, aka "Windows Graphics Remote Code Execution Vulnerability." | 8.8 |
HIGH |
||
The Graphics component in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site, aka "Windows Graphics Remote Code Execution Vulnerability." | 8.8 |
HIGH |
||
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site, aka "Windows Uniscribe Remote Code Execution Vulnerability." | 8.8 |
HIGH |
||
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow remote attackers to execute arbitrary code via a crafted image file, aka "Windows Remote Code Execution Vulnerability." | 7.8 |
HIGH |
||
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to bypass the ASLR protection mechanism via a crafted application, aka "Win32k Information Disclosure Vulnerability." | 3.3 |
LOW |
||
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." | 7.8 |
HIGH |
||
Media Foundation in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site, aka "Media Foundation Memory Corruption Vulnerability." | 8.8 |
HIGH |
||
Input Method Editor (IME) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 mishandles DLL loading, which allows local users to gain privileges via unspecified vectors, aka "Windows IME Elevation of Privilege Vulnerability." | 7.8 |
HIGH |
||
Local Security Authority Subsystem Service (LSASS) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote authenticated users to cause a denial of service (system hang) via a crafted request, aka "Local Security Authority Subsystem Service Denial of Service Vulnerability." | 6.5 |
MEDIUM |
||
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 mishandle caching for NTLM password-change requests, which allows local users to gain privileges via a crafted application, aka "Windows NTLM Elevation of Privilege Vulnerability." | 7.8 |
HIGH |
||
The kernel-mode drivers in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." | 7.8 |
HIGH |
||
Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow physically proximate attackers to bypass the Secure Boot protection mechanism via a crafted boot policy, aka "Secure Boot Component Vulnerability." | 7.5 |
HIGH |