Page 366 of 2398 results (0.015 seconds)

CVSS: 6.5EPSS: 0%CPEs: 28EXPL: 0

CVE-2017-8592

https://notcve.org/view.php?id=CVE-2017-8592

Microsoft browsers on when Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, and Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow a security feature bypass vulnerability when they improperly handle redirect requests, aka "Microsoft Browser Security Feature Bypass". Los navegadores de Microsoft en Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1 y Windows Server 2012 y R2, Windows 10 versiones Gold, 1511, 1607 y 1703, y Windows Server 2016, permiten una vulnerabilidad de omisión de la característica de seguridad cuando manejan inapropiadamente las peticiones de redireccionamiento, también se conoce como "Microsoft Browser Security Feature Bypass". • http://www.securityfocus.com/bid/99396 http://www.securitytracker.com/id/1038859 http://www.securitytracker.com/id/1038860 https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8592 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 5.5EPSS: 0%CPEs: 13EXPL: 1

CVE-2017-8564 – Microsoft Windows Kernel - 'IOCTL 0x120007 NsiGetParameter' nsiproxy/netio Pool Memory Disclosure

https://notcve.org/view.php?id=CVE-2017-8564

Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it fails to properly initialize a memory address, aka "Windows Kernel Information Disclosure Vulnerability". El Kernel de Windows en Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows versión 8.1, Windows Server 2012 Gold y R2, Windows RT versión 8.1, Windows 10 Gold, 1511, 1607 y 1703, y Windows Server 2016 permite una vulnerabilidad de divulgación de información cuando no se puede inicializar correctamente una dirección de memoria, también se conoce como "Windows Kernel Information Disclosure Vulnerability". The Microsoft Windows kernel suffers from a nsiproxy/netio pool memory disclosure vulnerability in the handling of IOCTL 0x120007 (NsiGetParameter). • https://www.exploit-db.com/exploits/42338 http://www.securityfocus.com/bid/99428 http://www.securitytracker.com/id/1038853 https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8564 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 7.6EPSS: 89%CPEs: 4EXPL: 1

CVE-2017-8594 – Microsoft Internet Explorer 11.0.9600.18617 - 'CMarkup::DestroySplayTree' Memory Corruption

https://notcve.org/view.php?id=CVE-2017-8594

Internet Explorer on Microsoft Windows 8.1 and Windows RT 8.1, and Windows Server 2012 R2 allows an attacker to execute arbitrary code in the context of the current user when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability". Internet Explorer en Microsoft Windows versión 8.1 y Windows RT versión 8.1, y Windows Server 2012 R2, permite que un atacante ejecute código arbitrario en el contexto del usuario actual cuando Internet Explorer accede inapropiadamente a objetos en la memoria, también se conoce como "Internet Explorer Memory Corruption Vulnerability". Microsoft Internet Explorer suffers from a memory corruption vulnerability in CMarkup::DestroySplayTree. The bug was confirmed on IE version 11.0.9600.18617 (Update version 11.0.40) running on Windows 7 64-bit. • https://www.exploit-db.com/exploits/42336 http://www.securityfocus.com/bid/99401 https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8594 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 7.6EPSS: 7%CPEs: 16EXPL: 0

CVE-2017-8606

https://notcve.org/view.php?id=CVE-2017-8606

Microsoft browsers in Microsoft Windows 7, Windows Server 2008 and R2, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engines fail to render when handling objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8598, CVE-2017-8596, CVE-2017-8618, CVE-2017-8619, CVE-2017-8610, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8595, CVE-2017-8607, CVE-2017-8608, and CVE-2017-8609 Los navegadores Microsoft en Microsoft Windows 7, Windows Server 2008 and R2, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607 y 1703 y Windows Server 2016 permiten que un atacante ejecute código arbitrario en el contexto del usuario actual cuando los motores JavaScript fracasan a la hora de representarse cuando gestionan objetos en la memoria. Esto también se conoce como "Scripting Engine Memory Corruption Vulnerability". El ID de este CVE es diferente de CVE-2017-8598, CVE-2017-8596, CVE-2017-8618, CVE-2017-8619, CVE-2017-8610, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8595, CVE-2017-8607, CVE-2017-8608 y CVE-2017-8609. • http://www.securityfocus.com/bid/99408 http://www.securitytracker.com/id/1038848 http://www.securitytracker.com/id/1038849 https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8606 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 7.0EPSS: 0%CPEs: 12EXPL: 0

CVE-2017-8561

https://notcve.org/view.php?id=CVE-2017-8561

Windows kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to the way it handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability". El kernel de Windows en Microsoft Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permite una vulnerabilidad de elevación de privilegios debido a la forma en la que gestiona objetos en la memoria. Esto también se conoce como "Windows Kernel Elevation of Privilege Vulnerability". • http://www.securityfocus.com/bid/99426 https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8561 • CWE-281: Improper Preservation of Permissions •