Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2018-0798
Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Office Memory Corruption Vulnerability".
Affected Products: Equation Editor
References: [{'name': '102370', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102370'}, {'name': '1040153', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040153'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0798'}, {'tags': ['x_refsource_MISC'], 'url': 'https://0patch.blogspot.com/2018/01/bringing-abandoned-equation-editor-back.html'}]
CVE State: PUBLISHED
Explain CVE-2018-0799
Microsoft Access in Microsoft SharePoint Enterprise Server 2013 and Microsoft SharePoint Enterprise Server 2016 allows a cross-site-scripting (XSS) vulnerability due to the way image field values are handled, aka "Microsoft Access Tampering Vulnerability".
Affected Products: Microsoft Access
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0799'}, {'name': '102411', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102411'}, {'name': '1040157', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040157'}]
CVE State: PUBLISHED
Explain CVE-2018-0800
Microsoft Edge in Microsoft Windows 10 1709 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0767 and CVE-2018-0780.
Affected Products: Microsoft Edge
References: [{'name': '1040100', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040100'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0800'}, {'name': '102392', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102392'}]
CVE State: PUBLISHED
Explain CVE-2018-0801
Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Office Remote Code Execution Vulnerability".
Affected Products: Equation Editor
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0801'}, {'name': '102348', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102348'}, {'name': '1040153', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040153'}]
CVE State: PUBLISHED
Explain CVE-2018-0802
Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE is unique from CVE-2018-0797 and CVE-2018-0812.
Affected Products: Equation Editor
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/rxwx/CVE-2018-0802'}, {'name': '1040153', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040153'}, {'tags': ['x_refsource_MISC'], 'url': 'https://0patch.blogspot.com/2018/01/the-bug-that-killed-equation-editor-how.html'}, {'name': '102347', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102347'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/zldww2011/CVE-2018-0802_POC'}, {'tags': ['x_refsource_MISC'], 'url': 'https://research.checkpoint.com/another-office-equation-rce-vulnerability/'}]
CVE State: PUBLISHED
Explain CVE-2018-0803
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to access information from one domain and inject it into another domain, due to how Microsoft Edge enforces cross-domain policies, aka "Microsoft Edge Elevation of Privilege Vulnerability".
Affected Products: Microsoft Edge
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0803'}, {'name': '1040100', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040100'}, {'name': '102384', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102384'}]
CVE State: PUBLISHED
Explain CVE-2018-0804
Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution Vulnerability". This CVE is unique from CVE-2018-0805, CVE-2018-0806, and CVE-2018-0807.
Affected Products: Equation Editor
References: [{'name': '102457', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102457'}, {'name': '1040153', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040153'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0804'}]
CVE State: PUBLISHED
Explain CVE-2018-0805
Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution Vulnerability". This CVE is unique from CVE-2018-0804, CVE-2018-0806, and CVE-2018-0807
Affected Products: Equation Editor
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0805'}, {'name': '1040153', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040153'}, {'name': '102459', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102459'}]
CVE State: PUBLISHED
Explain CVE-2018-0806
Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution Vulnerability". This CVE is unique from CVE-2018-0804, CVE-2018-0805, and CVE-2018-0807.
Affected Products: Equation Editor
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0806'}, {'name': '1040153', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040153'}, {'name': '102460', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102460'}]
CVE State: PUBLISHED
Explain CVE-2018-0807
Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution Vulnerability". This CVE is unique from CVE-2018-0804, CVE-2018-0805, and CVE-2018-0806.
Affected Products: Equation Editor
References: [{'name': '102461', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102461'}, {'name': '1040153', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040153'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0807'}]
CVE State: PUBLISHED
Explain CVE-2018-0808
ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to how ASP.NET web applications handle web requests, aka "ASP.NET Core Elevation Of Privilege Vulnerability". This CVE is unique from CVE-2018-0784.
Affected Products: ASP.NET Core
References: [{'name': '103226', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/103226'}, {'name': '1040504', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040504'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0808'}]
CVE State: PUBLISHED
Explain CVE-2018-0809
The Windows kernel in Windows 10, versions 1703 and 1709, and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0742, CVE-2018-0756, CVE-2018-0820 and CVE-2018-0843.
Affected Products: Windows
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0809'}, {'name': '1040373', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040373'}, {'name': '102933', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102933'}]
CVE State: PUBLISHED
Explain CVE-2018-0810
The Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2, and Windows Server 2012 allows an information disclosure vulnerability due to the way memory is initialized, aka "Windows Kernel Information Disclosure Vulnerability". This CVE is unique from CVE-2018-0757.
Affected Products: Windows
References: [{'name': '102938', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102938'}, {'name': '1040373', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040373'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0810'}]
CVE State: PUBLISHED
Explain CVE-2018-0811
The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way objects are initialized in memory, aka "Windows Kernel Information Disclosure Vulnerability". This CVE is unique from CVE-2018-0813, CVE-2018-0814, CVE-2018-0894, CVE-2018-0895, CVE-2018-0896, CVE-2018-0897, CVE-2018-0898, CVE-2018-0899, CVE-2018-0900, CVE-2018-0901 and CVE-2018-0926.
Affected Products: Windows kernel
References: [{'name': '1040517', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040517'}, {'name': '103232', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/103232'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0811'}]
CVE State: PUBLISHED
Explain CVE-2018-0812
Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Memory Corruption Vulnerability".
Affected Products: Equation Editor
References: [{'name': '1040153', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040153'}, {'name': '102463', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102463'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0812'}]
CVE State: PUBLISHED
Explain CVE-2018-0813
The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way objects are initialized in memory, aka "Windows Kernel Information Disclosure Vulnerability". This CVE is unique from CVE-2018-0811, CVE-2018-0814, CVE-2018-0894, CVE-2018-0895, CVE-2018-0896, CVE-2018-0897, CVE-2018-0898, CVE-2018-0899, CVE-2018-0900, and CVE-2018-0901 and CVE-2018-0926.
Affected Products: Windows kernel
References: [{'name': '103250', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/103250'}, {'name': '1040517', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040517'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0813'}]
CVE State: PUBLISHED
Explain CVE-2018-0814
The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way objects are initialized in memory, aka "Windows Kernel Information Disclosure Vulnerability". This CVE is unique from CVE-2018-0811, CVE-2018-0813, CVE-2018-0894, CVE-2018-0895, CVE-2018-0896, CVE-2018-0897, CVE-2018-0898, CVE-2018-0899, CVE-2018-0900, and CVE-2018-0901 and CVE-2018-0926.
Affected Products: Windows kernel
References: [{'name': '103251', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/103251'}, {'name': '1040517', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040517'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0814'}]
CVE State: PUBLISHED
Explain CVE-2018-0815
The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1 and Windows 7 SP1 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows GDI Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0816, and CVE-2018-0817.
Affected Products: Windows
References: [{'name': '1040515', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040515'}, {'name': '103234', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/103234'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0815'}]
CVE State: PUBLISHED
Explain CVE-2018-0816
The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows GDI Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0815 and CVE-2018-0817.
Affected Products: Windows
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0816'}, {'name': '1040515', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040515'}, {'name': '103248', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/103248'}]
CVE State: PUBLISHED
Explain CVE-2018-0817
The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows GDI Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0815 and CVE-2018-0816.
Affected Products: Windows
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0817'}, {'name': '1040515', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040515'}, {'name': '103249', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/103249'}]
CVE State: PUBLISHED
Explain CVE-2018-0818
Microsoft ChakraCore allows an attacker to bypass Control Flow Guard (CFG) in conjunction with another vulnerability to run arbitrary code on a target system, due to how the Chakra scripting engine handles accessing memory, aka "Scripting Engine Security Feature Bypass".
Affected Products: ChakraCore
References: [{'name': '102412', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102412'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0818'}]
CVE State: PUBLISHED
Explain CVE-2018-0819
Microsoft Office 2016 for Mac allows an attacker to send a specially crafted email attachment to a user in an attempt to launch a social engineering attack, such as phishing, due to how Outlook for Mac displays encoded email addresses, aka "Spoofing Vulnerability in Microsoft Office for Mac."
Affected Products: Microsoft Office 2016 for Mac
References: [{'name': '102464', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102464'}, {'name': '1040153', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040153'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0819'}]
CVE State: PUBLISHED
Explain CVE-2018-0820
The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Kernel Elevation Of Privilege Vulnerability". This CVE is unique from CVE-2018-0742, CVE-2018-0756, CVE-2018-0809 and CVE-2018-0843.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0820'}, {'name': '102945', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102945'}, {'name': '1040373', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040373'}]
CVE State: PUBLISHED
Explain CVE-2018-0821
AppContainer in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way constrained impersonations are handled, aka "Windows AppContainer Elevation Of Privilege Vulnerability".
Affected Products: AppContainer
References: [{'name': '1040379', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040379'}, {'name': '44149', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/44149/'}, {'name': '102939', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102939'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0821'}]
CVE State: PUBLISHED
Explain CVE-2018-0822
NTFS in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way NTFS handles objects, aka "Windows NTFS Global Reparse Point Elevation of Privilege Vulnerability".
Affected Products: NTFS
References: [{'name': '102942', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102942'}, {'name': '44147', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/44147/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0822'}, {'name': '1040378', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040378'}]
CVE State: PUBLISHED
Explain CVE-2018-0823
The Named Pipe File System in Windows 10 version 1709 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way the Named Pipe File System handles objects, aka "Named Pipe File System Elevation of Privilege Vulnerability".
Affected Products: Named Pipe File System
References: [{'name': '1040379', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040379'}, {'name': '44148', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/44148/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0823'}, {'name': '102919', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102919'}]
CVE State: PUBLISHED
Explain CVE-2018-0824
A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Microsoft COM for Windows Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
Affected Products: n/a
References: [{'name': '1040848', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040848'}, {'name': '44906', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/44906/'}, {'name': '104030', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/104030'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0824'}]
CVE State: PUBLISHED
Explain CVE-2018-0825
StructuredQuery in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows a remote code execution vulnerability due to how objects are handled in memory, aka "StructuredQuery Remote Code Execution Vulnerability".
Affected Products: StructuredQuery
References: [{'name': '102920', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102920'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0825'}, {'name': '1040366', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040366'}]
CVE State: PUBLISHED
Explain CVE-2018-0826
Windows Storage Services in Windows 10 versions 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Storage Services Elevation of Privilege Vulnerability".
Affected Products: Windows Storage Services
References: [{'name': '44152', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/44152/'}, {'name': '102944', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102944'}, {'name': '1040379', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040379'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0826'}]
CVE State: PUBLISHED
Explain CVE-2018-0827
Windows Scripting Host (WSH) in Windows 10 versions 1703 and 1709 and Windows Server, version 1709 allows a Device Guard security feature bypass vulnerability due to the way objects are handled in memory, aka "Windows Security Feature Bypass Vulnerability".
Affected Products: Windows Scripting Host
References: [{'name': '102927', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102927'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0827'}, {'name': '1040373', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040373'}]
CVE State: PUBLISHED
Explain CVE-2018-0828
Windows 10 version 1607 and Windows Server 2016 allow an elevation of privilege vulnerability due to how the MultiPoint management account password is stored, aka "Windows Elevation of Privilege Vulnerability".
Affected Products: Windows
References: [{'name': '1040373', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040373'}, {'name': '102935', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102935'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0828'}]
CVE State: PUBLISHED
Explain CVE-2018-0829
The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to how objects in memory are handled, aka "Windows Information Disclosure Vulnerability". This CVE is unique from CVE-2018-0830 and CVE-2018-0832.
Affected Products: Windows
References: [{'name': '1040373', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040373'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0829'}, {'name': '102948', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102948'}]
CVE State: PUBLISHED
Explain CVE-2018-0830
The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to how objects in memory are handled, aka "Windows Information Disclosure Vulnerability". This CVE is unique from CVE-2018-0829 and CVE-2018-0832.
Affected Products: Windows
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0830'}, {'name': '102949', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102949'}, {'name': '1040373', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040373'}]
CVE State: PUBLISHED
Explain CVE-2018-0831
The Windows kernel in Windows 10 versions 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how objects in memory are handled, aka "Windows Kernel Elevation of Privilege Vulnerability".
Affected Products: Windows
References: [{'name': '1040373', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040373'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0831'}, {'name': '102943', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102943'}]
CVE State: PUBLISHED
Explain CVE-2018-0832
The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to how objects in memory are handled, aka "Windows Information Disclosure Vulnerability". This CVE is unique from CVE-2018-0829 and CVE-2018-0830.
Affected Products: Windows
References: [{'name': '44146', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/44146/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0832'}, {'name': '102923', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102923'}, {'name': '1040373', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040373'}]
CVE State: PUBLISHED
Explain CVE-2018-0833
The Microsoft Server Message Block 2.0 and 3.0 (SMBv2/SMBv3) client in Windows 8.1 and RT 8.1 and Windows Server 2012 R2 allows a denial of service vulnerability due to how specially crafted requests are handled, aka "SMBv2/SMBv3 Null Dereference Denial of Service Vulnerability".
Affected Products: Server Message Block
References: [{'name': '102924', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102924'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0833'}, {'name': '1040375', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040375'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/KINGSABRI/CVE-in-Ruby/tree/master/CVE-2018-0833'}, {'name': '44189', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/44189/'}]
CVE State: PUBLISHED
Explain CVE-2018-0834
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0835, CVE-2018-0836, CVE-2018-0837, CVE-2018-0838, CVE-2018-0840, CVE-2018-0856, CVE-2018-0857, CVE-2018-0858, CVE-2018-0859, CVE-2018-0860, CVE-2018-0861, and CVE-2018-0866.
Affected Products: Microsoft Edge, ChakraCore
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0834'}, {'name': '102859', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102859'}, {'name': '44078', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/44078/'}, {'name': '1040372', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040372'}]
CVE State: PUBLISHED
Explain CVE-2018-0835
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834, CVE-2018-0836, CVE-2018-0837, CVE-2018-0838, CVE-2018-0840, CVE-2018-0856, CVE-2018-0857, CVE-2018-0858, CVE-2018-0859, CVE-2018-0860, CVE-2018-0861, and CVE-2018-0866.
Affected Products: Microsoft Edge, ChakraCore
References: [{'name': '44079', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/44079/'}, {'name': '102874', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102874'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0835'}, {'name': '1040372', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040372'}]
CVE State: PUBLISHED
Explain CVE-2018-0836
Microsoft Edge and ChakraCore in Microsoft Windows 10 1703 and 1709 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834, CVE-2018-0835, CVE-2018-0837, CVE-2018-0838, CVE-2018-0840, CVE-2018-0856, CVE-2018-0857, CVE-2018-0858, CVE-2018-0859, CVE-2018-0860, CVE-2018-0861, and CVE-2018-0866.
Affected Products: Microsoft Edge, ChakraCore
References: [{'name': '102875', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102875'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0836'}, {'name': '1040372', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040372'}]
CVE State: PUBLISHED
Explain CVE-2018-0837
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834, CVE-2018-0835, CVE-2018-0836, CVE-2018-0838, CVE-2018-0840, CVE-2018-0856, CVE-2018-0857, CVE-2018-0858, CVE-2018-0859, CVE-2018-0860, CVE-2018-0861, and CVE-2018-0866.
Affected Products: Microsoft Edge, ChakraCore
References: [{'name': '44081', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/44081/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0837'}, {'name': '102876', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102876'}, {'name': '1040372', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040372'}]
CVE State: PUBLISHED
Explain CVE-2018-0838
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834, CVE-2018-0835, CVE-2018-0836, CVE-2018-0837, CVE-2018-0840, CVE-2018-0856, CVE-2018-0857, CVE-2018-0858, CVE-2018-0859, CVE-2018-0860, CVE-2018-0861, and CVE-2018-0866.
Affected Products: Microsoft Edge, ChakraCore
References: [{'name': '102877', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102877'}, {'name': '44080', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/44080/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0838'}, {'name': '1040372', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040372'}]
CVE State: PUBLISHED
Explain CVE-2018-0839
Microsoft Edge in Microsoft Windows 10 1703 allows information disclosure, due to how Edge handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0763.
Affected Products: Microsoft Edge
References: [{'name': '102860', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102860'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0839'}, {'name': '1040372', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040372'}]
CVE State: PUBLISHED
Explain CVE-2018-0840
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834, CVE-2018-0835, CVE-2018-0836, CVE-2018-0837, CVE-2018-0838, CVE-2018-0856, CVE-2018-0857, CVE-2018-0858, CVE-2018-0859, CVE-2018-0860, CVE-2018-0861, and CVE-2018-0866.
Affected Products: Microsoft Edge, ChakraCore, Internet Explorer
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0840'}, {'name': '44077', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/44077/'}, {'name': '1040372', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040372'}, {'name': '1040369', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040369'}, {'name': '102886', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102886'}]
CVE State: PUBLISHED
Explain CVE-2018-0841
Microsoft Office 2016 Click-to-Run allows a remote code execution vulnerability due to how objects are handled in memory, aka "Office Remote Code Execution Vulnerability"
Affected Products: Microsoft Office
References: [{'name': '1040367', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040367'}, {'name': '102957', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102957'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0841'}]
CVE State: PUBLISHED
Explain CVE-2018-0842
Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allow an elevation of privilege vulnerability due to how objects in memory are handled, aka "Windows Kernel Elevation of Privilege Vulnerability".
Affected Products: Windows
References: [{'name': '102946', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102946'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0842'}, {'name': '1040371', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040371'}]
CVE State: PUBLISHED
Explain CVE-2018-0843
The Windows kernel in Windows 10 version 1709 and Windows Server, version 1709 allows an information disclosure vulnerability due to how objects in memory are handled, aka "Windows Kernel Information Disclosure Vulnerability". This CVE is unique from CVE-2018-0742, CVE-2018-0756, CVE-2018-0809 and CVE-2018-0820.
Affected Products: Windows
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0843'}, {'name': '1040373', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040373'}, {'name': '102951', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102951'}]
CVE State: PUBLISHED
Explain CVE-2018-0844
The Windows Common Log File System (CLFS) driver in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how objects in memory are handled, aka "Windows Common Log File System Driver Elevation Of Privilege Vulnerability". This CVE is unique from CVE-2018-0846.
Affected Products: Windows Common Log File System
References: [{'name': '1040380', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040380'}, {'name': '102929', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102929'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0844'}]
CVE State: PUBLISHED
Explain CVE-2018-0845
Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution Vulnerability". This CVE is unique from CVE-2018-0805, CVE-2018-0806, and CVE-2018-0807.
Affected Products: Equation Editor
References: [{'name': '102746', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102746'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0845'}]
CVE State: PUBLISHED
Explain CVE-2018-0846
The Windows Common Log File System (CLFS) driver in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how objects in memory are handled, aka "Windows Common Log File System Driver Elevation Of Privilege Vulnerability". This CVE is unique from CVE-2018-0844.
Affected Products: Windows Common Log File System
References: [{'name': '1040380', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040380'}, {'name': '102931', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102931'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0846'}]
CVE State: PUBLISHED
Explain CVE-2018-0847
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allow information disclosure, due to how Internet Explorer handles objects in memory, aka "Internet Explorer Information Disclosure Vulnerability".
Affected Products: Internet Explorer
References: [{'name': '102861', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102861'}, {'name': '1040370', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040370'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0847'}]
CVE State: PUBLISHED
Explain CVE-2018-0848
Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution Vulnerability". This CVE is unique from CVE-2018-0805, CVE-2018-0806, and CVE-2018-0807.
Affected Products: Equation Editor
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0848'}, {'name': '102747', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102747'}]
CVE State: PUBLISHED
Explain CVE-2018-0849
Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution Vulnerability". This CVE is unique from CVE-2018-0805, CVE-2018-0806, and CVE-2018-0807.
Affected Products: Equation Editor
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0849'}, {'name': '102748', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102748'}]
CVE State: PUBLISHED
Explain CVE-2018-0850
Microsoft Outlook 2007, Microsoft Outlook 2010, Microsoft Outlook 2013, Microsoft Outlook 2016, and Microsoft Office 2016 Click-to-Run allow an elevation of privilege vulnerability due to how the format of incoming message is validated, aka "Microsoft Outlook Elevation of Privilege Vulnerability".
Affected Products: Microsoft Outlook
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0850'}, {'name': '1040382', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040382'}, {'name': '102866', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102866'}]
CVE State: PUBLISHED
Explain CVE-2018-0851
Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow a remote code execution vulnerability, due to how Office handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE is unique from CVE-2018-0852.
Affected Products: Microsoft Office
References: [{'name': '102870', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102870'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0851'}, {'name': '1040381', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040381'}]
CVE State: PUBLISHED
Explain CVE-2018-0852
Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1 and RT SP1, Microsoft Outlook 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow a remote code execution vulnerability, due to how Outlook handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE is unique from CVE-2018-0851.
Affected Products: Microsoft Office
References: [{'name': '102871', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102871'}, {'name': '1040368', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040368'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0852'}]
CVE State: PUBLISHED
Explain CVE-2018-0853
Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow an information disclosure vulnerability, due to how Office initializes the affected variable, aka "Microsoft Office Information Disclosure Vulnerability".
Affected Products: Microsoft Office
References: [{'name': '102868', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102868'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0853'}, {'name': '1040381', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040381'}]
CVE State: PUBLISHED
Explain CVE-2018-0854
A security feature bypass vulnerability exists in Windows Scripting Host which could allow an attacker to bypass Device Guard, aka "Windows Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0958, CVE-2018-8129, CVE-2018-8132.
Affected Products: Windows Server 2016
References: [{'name': '1040849', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040849'}, {'name': '104029', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/104029'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0854'}]
CVE State: PUBLISHED
Explain CVE-2018-0855
The Microsoft Windows Embedded OpenType (EOT) font engine in Microsoft Windows 7 SP1 and Windows Server 2008 R2 allows information disclosure, due to how the Windows EOT font engine handles embedded fonts, aka "Windows EOT Font Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0755, CVE-2018-0760, and CVE-2018-0761.
Affected Products: Windows Embedded OpenType (EOT) font engine
References: [{'name': '102936', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102936'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0855'}, {'name': '1040374', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040374'}]
CVE State: PUBLISHED