CVSS: 5.5EPSS: 0%CPEs: 8EXPL: 0CVE-2017-11784
https://notcve.org/view.php?id=CVE-2017-11784
The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, allows an information disclosure vulnerability when it improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11765, CVE-2017-11785, and CVE-2017-11814. El componente kernel de Microsoft Windows en Microsoft Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1 y Windows 10 Gold permite una vulnerabilidad de divulgación de información cuando no gestiona correctamente los objetos en la memoria, lo que también se conoce como "Windows Kernel Information Disclosure Vulnerability". El ID de este CVE es diferente de CVE-2017-11765, CVE-2017-11785 y CVE-2017-11814. • http://www.securityfocus.com/bid/101147 http://www.securitytracker.com/id/1039526 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11784 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 7.6EPSS: 90%CPEs: 15EXPL: 1CVE-2017-11810 – Microsoft Internet Explorer 11 - 'jscript!JsErrorToString' Use-After-Free
https://notcve.org/view.php?id=CVE-2017-11810
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11811, CVE-2017-11812, and CVE-2017-11821. Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permite que un atacante ejecute código arbitrario en el contexto del usuario actual debido a cómo gestiona el motor de scripting gestiona objetos en la memoria, lo que también se conoce como "Scripting Engine Memory Corruption Vulnerability". Este ID CVE es exclusivo de CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11811, CVE-2017-11812 y CVE-2017-11821. Microsoft Internet Explorer 11 suffers from a use-after-free vulnerability in jscript! • https://www.exploit-db.com/exploits/43131 http://www.securityfocus.com/bid/101081 http://www.securitytracker.com/id/1039532 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11810 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 14%CPEs: 12EXPL: 0CVE-2017-11771
https://notcve.org/view.php?id=CVE-2017-11771
The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly handle DNS responses, aka "Windows Search Remote Code Execution Vulnerability". El componente Microsoft Windows Search en Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, y 1703 y Windows Server 2016 permite una vulnerabilidad de ejecución remota de código cuando no gestiona correctamente respuestas DNS. Esto también se conoce como "Windows Search Remote Code Execution Vulnerability". • http://www.securityfocus.com/bid/101114 http://www.securitytracker.com/id/1039538 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11771 • CWE-20: Improper Input Validation •
CVSS: 4.3EPSS: 0%CPEs: 15EXPL: 0CVE-2017-11790 – Microsoft Office Excel xls File Out-Of-Bounds Read Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2017-11790
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how Internet Explorer handles objects in memory, aka "Internet Explorer Information Disclosure Vulnerability". Internet Explorer en Microsoft Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permite que un atacante obtenga información para comprometer aun más el sistema del usuario debido a cómo gestiona Internet Explorer los objetos en la memoria, lo que también se conoce como "Internet Explorer Information Disclosure Vulnerability". This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Microsoft Office Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of Excel workbook files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. • http://www.securityfocus.com/bid/101077 http://www.securitytracker.com/id/1039532 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11790 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 9.3EPSS: 22%CPEs: 12EXPL: 0CVE-2017-8718 – Microsoft Windows XLS File Heap-based Buffer Overflow Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2017-8718
The Microsoft JET Database Engine in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to take control of an affected system, due to how it handles objects in memory, aka "Microsoft JET Database Engine Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8717. Microsoft JET Database Engine en Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1 y RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703, y Windows Server 2016 permite que un atacante tome el control de un sistema afectado debido a cómo gestiona objetos en la memoria, lo que también se conoce como"Microsoft JET Database Engine Remote Code Execution Vulnerability". El ID de este CVE es diferente de CVE-2017-8717. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. • http://www.securityfocus.com/bid/101162 http://www.securitytracker.com/id/1039527 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8718 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •