Page 352 of 2398 results (0.011 seconds)

CVSS: 7.6EPSS: 90%CPEs: 15EXPL: 1

CVE-2017-11793 – Microsoft Internet Explorer 11 - 'jscript!JSONStringifyObject' Use-After-Free

https://notcve.org/view.php?id=CVE-2017-11793

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11792, CVE-2017-11796, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812, and CVE-2017-11821. Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permite que un atacante ejecute código arbitrario en el contexto del usuario actual debido a cómo gestiona el motor de scripting gestiona objetos en la memoria, lo que también se conoce como "Scripting Engine Memory Corruption Vulnerability". Este ID CVE es exclusivo de CVE-2017-11792, CVE-2017-11796, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812 y CVE-2017-11821. • https://www.exploit-db.com/exploits/43368 http://www.securityfocus.com/bid/101141 http://www.securitytracker.com/id/1039532 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11793 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 7.0EPSS: 0%CPEs: 12EXPL: 0

CVE-2017-8694

https://notcve.org/view.php?id=CVE-2017-8694

The Microsoft Windows Kernel Mode Driver on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2017-8689. Microsoft Windows Kernel Mode Driver en Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607 y 1703; y Windows Server 2016 permite que se produzca una vulnerabilidad de elevación de privilegios cuando gestiona incorrectamente objetos en la memoria, lo que también se conoce como "Win32k Elevation of Privilege Vulnerability". El ID de este CVE es diferente de CVE-2017-8689. • http://www.securityfocus.com/bid/101100 http://www.securitytracker.com/id/1039526 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8694 •

CVSS: 7.0EPSS: 0%CPEs: 8EXPL: 1

CVE-2017-11783

https://notcve.org/view.php?id=CVE-2017-11783

Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability in the way it handles calls to Advanced Local Procedure Call (ALPC), aka "Windows Elevation of Privilege Vulnerability". Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016 permiten una vulnerabilidad de elevación de privilegios por la forma en la que gestionan llamadas a Advanced Local Procedure Call (ALPC), lo que también se conoce como "Windows Elevation of Privilege Vulnerability". • https://github.com/Sheisback/CVE-2017-11783 http://www.securityfocus.com/bid/101144 http://www.securitytracker.com/id/1039526 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11783 •

CVSS: 4.7EPSS: 0%CPEs: 13EXPL: 0

CVE-2017-11817

https://notcve.org/view.php?id=CVE-2017-11817

The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows an information disclosure vulnerability when it improperly validates objects in memory, aka "Windows Information Disclosure Vulnerability". El componente kernel de Microsoft Windows en Microsoft Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607 y 1703; y Windows Server 2016 permite una vulnerabilidad de divulgación de información cuando no valida correctamente los objetos en la memoria, lo que también se conoce como "Windows Information Disclosure Vulnerability". • http://www.securityfocus.com/bid/101095 http://www.securitytracker.com/id/1039526 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11817 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 7.0EPSS: 7%CPEs: 12EXPL: 0

CVE-2017-11780

https://notcve.org/view.php?id=CVE-2017-11780

The Server Message Block 1.0 (SMBv1) on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows a remote code execution vulnerability when it fails to properly handle certain requests, aka "Windows SMB Remote Code Execution Vulnerability". Server Message Block 1.0 (SMBv1) en Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, y 1703, y Windows Server 2016 permite una vulnerabilidad de ejecución remota de código cuando no gestiona correctamente determinadas peticiones. Esto también se conoce como "Windows SMB Remote Code Execution Vulnerability". • http://www.securityfocus.com/bid/101110 http://www.securitytracker.com/id/1039528 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11780 •