Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ts as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11843 - http://www.securitytracker.com/id/1039781 - http://www.securitytracker.com/id/1039780 - http://www.securityfocus.com/bid/1017
//www.securitytracker.com/id/1039781 - http://www.securitytracker.com/id/1039780 - http://www.securityfocus.com/bid/101740
CVE ID: CVE-2017-11844 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-16T22:30:21.582Z Vendors: Microsoft Corporation Products: Microsoft Edge Problem Types: Information Disclosure Description: Microsoft Edge in Microsoft Windows 10 1703, 1709 and Windows Server, version 1709 allows an attacker to obtain information to further compromise the user's system, due to how Microsoft Edge handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11803 and CVE-2017-11833. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101707 - https://portal.msrc.microsoft.com/en
s: - CVE Program Container: References: - http://www.securityfocus.com/bid/101707 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11844 - http://www.securitytracker.com/id/1039797
CVE ID: CVE-2017-11845 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-16T23:36:42.106Z Vendors: Microsoft Corporation Products: Microsoft Edge Problem Types: Remote Code Execution Description: Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how Microsoft Edge handles objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039780 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11845 - http://www.securityfocus.com/bid/101708
CVE ID: CVE-2017-11846 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-16T17:43:15.852Z Vendors: Microsoft Corporation Products: ChakraCore, Microsoft Edge, Internet Explorer Problem Types: Remote Code Execution Description: ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corr
rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11846 - http://www.securitytracker.com/id/1039781 - http://www.securityfocus.com/bid/101741 - http://www.securitytracker.com/id/1
ttp://www.securitytracker.com/id/1039781 - http://www.securityfocus.com/bid/101741 - http://www.securitytracker.com/id/1039780
CVE ID: CVE-2017-11847 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-16T23:01:41.212Z Vendors: Microsoft Corporation Products: Windows kernel Problem Types: Elevation of Privilege Description: Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to run arbitrary code in kernel mode, install programs, view, change or delete data, and create new accounts with full user rights due to improperly handing objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability". Additional
ghts due to improperly handing objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039782 - http://www.securityfocus.com/bid/101729 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11847
CVE ID: CVE-2017-11848 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-16T18:39:19.897Z Vendors: Microsoft Corporation Products: Internet Explorer Problem Types: Information Disclosure Description: Internet Explorer in Microsoft Microsoft Windows 7 SP1, Windows Server 2008 SP2, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to detect the navigation of the user leaving a maliciously crafted page, due to how page content is handled by Internet Explorer, aka "Internet Explorer Information Disclosure Vulnerability". Additional Analyst Notes: - CVE P
ed by Internet Explorer, aka "Internet Explorer Information Disclosure Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039796 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11848 - http://www.securityfocus.com/bid/101709
CVE ID: CVE-2017-11849 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-17T02:36:06.237Z Vendors: Microsoft Corporation Products: Windows Kernel Problem Types: Information Disclosure Description: Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to log in and run a specially crafted application due to the Windows kernel improperly initializing a memory address, aka "Windows Kernel Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11842, CVE-2017-11851, and CVE-2017-11
Kernel Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11842, CVE-2017-11851, and CVE-2017-11853. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101762 - http://www.securitytracker.com/id/1039782 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11849
CVE ID: CVE-2017-11850 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-17T00:57:05.603Z Vendors: Microsoft Corporation Products: Microsoft Graphics Component Problem Types: Information Disclosure Description: Microsoft Graphics Component in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to log on to an affected system and run a specially crafted application due to improper handling of objects in memory, aka "Microsoft Graphics Component Information Disclosure Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www
onent Information Disclosure Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101738 - http://www.securitytracker.com/id/1039782 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11850
CVE ID: CVE-2017-11851 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-17T03:38:37.182Z Vendors: Microsoft Corporation Products: Windows kernel Problem Types: Information Disclosure Description: The Windows kernel component on Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709, allows an information disclosure vulnerability when it improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11842, CVE-2017-11849, and CVE-2017-11853. Additional Analy
sclosure Vulnerability". This CVE ID is unique from CVE-2017-11842, CVE-2017-11849, and CVE-2017-11853. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11851 - http://www.securityfocus.com/bid/101763 - http://www.securitytracker.com/id/1039782
CVE ID: CVE-2017-11852 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-16T18:44:45.261Z Vendors: Microsoft Corporation Products: GDI Problem Types: Information Disclosure Description: Microsoft GDI Component in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an attacker to log on to an affected system and run a specially crafted application to compromise the user's system, due improperly disclosing kernel memory addresses, aka "Windows GDI Information Disclosure Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11852 - http://www.securityfocus.com/bid/
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11852 - http://www.securityfocus.com/bid/101739 - http://www.securitytracker.com/id/1039782
CVE ID: CVE-2017-11853 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-16T22:52:01.266Z Vendors: Microsoft Corporation Products: Windows kernel Problem Types: Information Disclosure Description: Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to log in and run a specially crafted application due to the Windows kernel improperly initializing a memory address, aka "Windows Kernel Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11842, CVE-2017-11849, and CVE-2017-11
Kernel Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11842, CVE-2017-11849, and CVE-2017-11851. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11853 - http://www.securitytracker.com/id/1039782 - http://www.securityfocus.com/bid/101764
CVE ID: CVE-2017-11854 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-16T17:33:33.189Z Vendors: Microsoft Corporation Products: Microsoft Office Problem Types: Remote Code Execution Description: Microsoft Word 2007 Service Pack 3, Microsoft Word 2010 Service Pack 2, Microsoft Office 2010 Service Pack 2, and Microsoft Office Compatibility Pack Service Pack 3 allow an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka "Microsoft Word Memory Corruption Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039795 - http://www.securityfocus.com/
Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039795 - http://www.securityfocus.com/bid/101746 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11854
CVE ID: CVE-2017-11855 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-16T19:01:00.254Z Vendors: Microsoft Corporation Products: Internet Explorer Problem Types: Remote Code Execution Description: Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how Internet Explorer handles objects in memory, aka "Internet Explorer Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11856. Additional Analyst
aka "Internet Explorer Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11856. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43371/ - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11855 - http://www.securityfocus.com/bid/101751
CVE ID: CVE-2017-11856 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-16T19:25:39.109Z Vendors: Microsoft Corporation Products: Internet Explorer Problem Types: Remote Code Execution Description: Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how Internet Explorer handles objects in memory, aka "Internet Explorer Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11855. Additional Analyst Note
"Internet Explorer Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11855. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11856 - http://www.securityfocus.com/bid/101753
CVE ID: CVE-2017-11858 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-17T03:43:59.333Z Vendors: Microsoft Corporation Products: ChakraCore, Microsoft Edge, Internet Explorer Problem Types: Remote Code Execution Description: ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how Microsoft browsers handle objects in memory, aka "Scripting Engine Memory Corrupt
rights as the current user, due to how Microsoft browsers handle objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039781 - http://www.securityfocus.com/bid/101716 - http://www.securitytracker.com/id/1039780 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11
tp://www.securitytracker.com/id/1039780 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11858
CVE ID: CVE-2017-11861 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-17T01:06:16.145Z Vendors: Microsoft Corporation Products: ChakraCore, Microsoft Edge Problem Types: Remote Code Execution Description: Microsoft Edge in Windows 10 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859,
-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43153/ - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11861 - http://www.securitytracker.com/id/1039780 - http://www.securityfocus.com/bid/101723
CVE ID: CVE-2017-11862 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-16T16:42:57.111Z Vendors: Microsoft Corporation Products: ChakraCore, Microsoft Edge Problem Types: Remote Code Execution Description: ChakraCore and Microsoft Edge in Windows 10 1709 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CV
1839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101724 - http://www.securitytracker.com/id/1039780 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11862
CVE ID: CVE-2017-11863 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-17T01:11:11.215Z Vendors: Microsoft Corporation Products: Microsoft Edge Problem Types: Security Feature Bypass Description: Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to trick a user into loading a page containing malicious content, due to how the Edge Content Security Policy (CSP) validates documents, aka "Microsoft Edge Security Feature Bypass Vulnerability". This CVE ID is unique from CVE-2017-11872 and CVE-2017-11874. Additional Analyst Notes: - CVE Program Container: References: - http://www.secur
rom CVE-2017-11872 and CVE-2017-11874. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101748 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11863 - http://www.securitytracker.com/id/1039801
CVE ID: CVE-2017-11866 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-16T19:56:29.820Z Vendors: Microsoft Corporation Products: ChakraCore, Microsoft Edge Problem Types: Remote Code Execution Description: ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2
6, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101732 - http://www.securitytracker.com/id/1039780 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11866
CVE ID: CVE-2017-11869 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-16T23:11:59.812Z Vendors: Microsoft Corporation Products: Internet Explorer Problem Types: Remote Code Execution Description: Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how Microsoft browsers handle objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017
"Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11869 - http://www.securitytracker.com/id/1039781 - http://www.securitytracker.com/id/1039780 - http://www.securityfocus.com/bid/101742
CVE ID: CVE-2017-11870 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-17T03:38:44.176Z Vendors: Microsoft Corporation Products: ChakraCore, Microsoft Edge Problem Types: Remote Code Execution Description: ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11
-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11871, and CVE-2017-11873. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101731 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11870 - https://www.exploit-db.com/exploits/43182/ - http://www.securitytracker.com/id/1039780
CVE ID: CVE-2017-11871 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-16T19:35:28.875Z Vendors: Microsoft Corporation Products: ChakraCore, Microsoft Edge Problem Types: Remote Code Execution Description: ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11
-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, and CVE-2017-11873. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039780 - http://www.securityfocus.com/bid/101730 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11871
CVE ID: CVE-2017-11872 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-17T01:50:59.177Z Vendors: Microsoft Corporation Products: Microsoft Edge Problem Types: Security Feature Bypass Description: Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to force the browser to send data that would otherwise be restricted to a destination website of the attacker's choice, due to how Microsoft Edge handles redirect requests, aka "Microsoft Edge Security Feature Bypass Vulnerability". This CVE ID is unique from CVE-2017-11863 and CVE-2017-11874. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.co