Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-8404 State: PUBLISHED Published: 2018-08-15T17:00:00 Last Updated: 2024-08-05T06:54:36.317Z Vendors: Microsoft Products: Windows 7, Windows Server 2012 R2, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from C
, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8399. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104999 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8404 - http://www.securitytracker.com/id/1041466
CVE ID: CVE-2018-8405 State: PUBLISHED Published: 2018-08-15T17:00:00.000Z Last Updated: 2025-10-21T23:45:48.793Z Vendors: Microsoft Products: Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8400, CVE-2018-8401, CVE-2018-8406. Additio
ows 8.1, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8400, CVE-2018-8401, CVE-2018-8406. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/105011 - http://www.securitytracker.com/id/1041461 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8405
CVE ID: CVE-2018-8406 State: PUBLISHED Published: 2018-08-15T17:00:00.000Z Last Updated: 2025-10-21T23:45:48.660Z Vendors: Microsoft Products: Windows Server 2016, Windows 10, Windows 10 Servers Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8400, CVE-2018-8401, CVE-2018-8405. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocu
-8405. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/105012 - http://www.securitytracker.com/id/1041461 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8406
CVE ID: CVE-2018-8407 State: PUBLISHED Published: 2018-11-14T01:00:00 Last Updated: 2024-08-05T06:54:36.310Z Vendors: Microsoft Products: Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers Problem Types: Information Disclosure Description: An information disclosure vulnerability exists when "Kernel Remote Procedure Call Provider" driver improperly initializes objects in memory, aka "MSRPC Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Ser
." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1042123 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8407 - http://www.securityfocus.com/bid/105794
CVE ID: CVE-2018-8408 State: PUBLISHED Published: 2018-11-14T01:00:00 Last Updated: 2024-08-05T06:54:36.390Z Vendors: Microsoft Products: Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers Problem Types: Information Disclosure Description: An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 20
r 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105789 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8408 - http://www.securitytracker.com/id/1042127
CVE ID: CVE-2018-8409 State: PUBLISHED Published: 2018-09-13T00:00:00 Last Updated: 2024-08-05T06:54:36.419Z Vendors: Microsoft Products: System.IO.Pipelines, .NET Core, ASP.NET Core Problem Types: Denial of Service Description: A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka "System.IO.Pipelines Denial of Service." This affects .NET Core 2.1, System.IO.Pipelines, ASP.NET Core 2.1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105223 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8409
CVE ID: CVE-2018-8410 State: PUBLISHED Published: 2018-09-13T00:00:00 Last Updated: 2024-08-05T06:54:36.431Z Vendors: Microsoft Products: Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory, aka "Windows Registry Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 S
Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8410 - http://www.securitytracker.com/id/1041635 - https://www.exploit-db.com/exploits/45436/ - http://www.securityfocus.com/bid/105256
CVE ID: CVE-2018-8411 State: PUBLISHED Published: 2018-10-10T13:00:00 Last Updated: 2024-08-05T06:54:36.376Z Vendors: Microsoft Products: Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server
RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8411 - https://www.exploit-db.com/exploits/45624/ - http://www.securitytracker.com/id/1041832 - http://www.securityfocus.com/bid/105508
CVE ID: CVE-2018-8412 State: PUBLISHED Published: 2018-08-15T17:00:00 Last Updated: 2024-08-05T06:54:36.290Z Vendors: Microsoft Products: Microsoft Office Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists when the Microsoft AutoUpdate (MAU) application for Mac improperly validates updates before executing them, aka "Microsoft (MAU) Office Elevation of Privilege Vulnerability." This affects Microsoft Office. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8412 - http://www.securitytracker.com/id/1041484 - http://www.securityfocus.com/bid/105014
CVE ID: CVE-2018-8413 State: PUBLISHED Published: 2018-10-10T13:00:00 Last Updated: 2024-08-05T06:54:36.322Z Vendors: Microsoft Products: Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists when "Windows Theme API" does not properly decompress files, aka "Windows Theme API Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2,
R2, Windows RT 8.1, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041824 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8413 - http://www.securityfocus.com/bid/105448 - http://packetstormsecurity.com/files/156027/Microsoft-Windows-Theme-API-File-Parsing.html
CVE ID: CVE-2018-8414 State: PUBLISHED Published: 2018-08-15T17:00:00.000Z Last Updated: 2025-10-21T23:45:48.521Z Vendors: Microsoft Products: Windows 10 Servers, Windows 10 Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows Shell Remote Code Execution Vulnerability." This affects Windows 10 Servers, Windows 10. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8414 - http://www.securityfocus.com/bid/105016 - http://www.securitytracker.com/id/1041458
CVE ID: CVE-2018-8415 State: PUBLISHED Published: 2018-11-14T01:00:00 Last Updated: 2024-08-05T06:54:36.516Z Vendors: Microsoft Products: Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2019, Windows 8.1, PowerShell Core, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers Problem Types: Tampering Description: A tampering vulnerability exists in PowerShell that could allow an attacker to execute unlogged code, aka "Microsoft PowerShell Tampering Vulnerability." This affects Windows 7, PowerShell Core 6.1, Windows Server 2012 R2, Windows RT 8.1, PowerShell Core 6.0, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Se
s Server 2012 R2, Windows RT 8.1, PowerShell Core 6.0, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1042108 - http://www.securityfocus.com/bid/105792 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8415
CVE ID: CVE-2018-8416 State: PUBLISHED Published: 2018-11-14T01:00:00 Last Updated: 2024-08-05T06:54:36.382Z Vendors: Microsoft Products: .NET Core Problem Types: Tampering Description: A tampering vulnerability exists when .NET Core improperly handles specially crafted files, aka ".NET Core Tampering Vulnerability." This affects .NET Core 2.1. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8416 - http://www.securityfocus.com/bid/105798 - https://access.redhat.com/errata/RHSA-2018:3676 - http://www.securitytracker.com/id/1042128
CVE ID: CVE-2018-8417 State: PUBLISHED Published: 2018-11-14T01:00:00 Last Updated: 2024-08-05T06:54:36.438Z Vendors: Microsoft Products: Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers Problem Types: Security Feature Bypass Description: A security feature bypass vulnerability exists in Microsoft JScript that could allow an attacker to bypass Device Guard, aka "Microsoft JScript Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8417 - http://www.securit
ner: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8417 - http://www.securitytracker.com/id/1042120 - http://www.securityfocus.com/bid/105795
CVE ID: CVE-2018-8419 State: PUBLISHED Published: 2018-09-13T00:00:00 Last Updated: 2024-08-05T06:54:36.365Z Vendors: Microsoft Products: Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers Problem Types: Information Disclosure Description: An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Serv
Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8336, CVE-2018-8442, CVE-2018-8443, CVE-2018-8445, CVE-2018-8446. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105238 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8419 - http://www.securitytracker.com/id/1041635
CVE ID: CVE-2018-8420 State: PUBLISHED Published: 2018-09-13T00:00:00 Last Updated: 2024-08-05T06:54:36.432Z Vendors: Microsoft Products: Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2,
R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041627 - http://www.securityfocus.com/bid/105259 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8420
CVE ID: CVE-2018-8421 State: PUBLISHED Published: 2018-09-13T00:00:00 Last Updated: 2024-08-05T06:54:36.433Z Vendors: Microsoft Products: Microsoft .NET Framework Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists when Microsoft .NET Framework processes untrusted input, aka ".NET Framework Remote Code Execution Vulnerability." This affects Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft .NET Framework 4.7/4.7.1/4.7.2, Microsoft .NET Framework 3.0, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2, Micros
/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .NET Framework 4.7.2, Microsoft .NET Framework 2.0. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8421 - http://www.securitytracker.com/id/1041636 - http://www.securityfocus.com/bid/105222
CVE ID: CVE-2018-8422 State: PUBLISHED Published: 2018-09-13T00:00:00 Last Updated: 2024-08-05T06:54:36.435Z Vendors: Microsoft Products: Windows 7, Windows Server 2008 R2 Problem Types: Information Disclosure Description: An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8424. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105357 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8422
CVE ID: CVE-2018-8423 State: PUBLISHED Published: 2018-10-10T13:00:00 Last Updated: 2024-08-05T06:54:36.446Z Vendors: Microsoft Products: Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists in the Microsoft JET Database Engine, aka "Microsoft JET Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Serve
erver 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. Additional Analyst Notes: - CVE Program Container: References: - https://blog.0patch.com/2018/10/patching-re-patching-and-meta-patching.html - http://www.securitytracker.com/id/1041837 - https://blog.0patch.com/2018/09/outrunning-attackers-on-jet-database.html - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8423
CVE ID: CVE-2018-8424 State: PUBLISHED Published: 2018-09-13T00:00:00 Last Updated: 2024-08-05T06:54:36.442Z Vendors: Microsoft Products: Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers Problem Types: Information Disclosure Description: An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Window
ndows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8422. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8424 - http://www.securityfocus.com/bid/105261
CVE ID: CVE-2018-8425 State: PUBLISHED Published: 2018-09-13T00:00:00 Last Updated: 2024-08-05T06:54:36.420Z Vendors: Microsoft Products: Microsoft Edge Problem Types: Spoofing Description: A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "Microsoft Edge Spoofing Vulnerability." This affects Microsoft Edge. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8425 - http://www.securityfocus.com/bid/105255 - http://www.securitytracker.com/id/1041623
CVE ID: CVE-2018-8426 State: PUBLISHED Published: 2018-09-13T00:00:00 Last Updated: 2024-08-05T06:54:36.341Z Vendors: Microsoft Products: Microsoft SharePoint Server, Microsoft SharePoint Problem Types: Information Disclosure Description: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105208 - https://portal.msrc.microsoft.com/en-US/security-guidance/adv
r: References: - http://www.securityfocus.com/bid/105208 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8426 - http://www.securitytracker.com/id/1041640
CVE ID: CVE-2018-8427 State: PUBLISHED Published: 2018-10-10T13:00:00 Last Updated: 2024-08-05T06:54:36.426Z Vendors: Microsoft Products: Microsoft Office, Microsoft Office Word Viewer, Windows Server 2008, Microsoft PowerPoint Viewer, Office, Microsoft Excel Viewer Problem Types: Information Disclosure Description: An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Information Disclosure Vulnerability." This affects Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Windows Server 2008, Microsoft PowerPoint Viewer, Microsoft Excel Viewer. Additional Analyst Notes: - CVE Pr
65 ProPlus, Windows Server 2008, Microsoft PowerPoint Viewer, Microsoft Excel Viewer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041823 - http://www.securityfocus.com/bid/105453 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8427
CVE ID: CVE-2018-8428 State: PUBLISHED Published: 2018-09-13T00:00:00 Last Updated: 2024-08-05T06:54:36.589Z Vendors: Microsoft Products: Microsoft SharePoint Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique from CVE-2018-8431. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105209 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/C
rences: - http://www.securityfocus.com/bid/105209 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8428
CVE ID: CVE-2018-8429 State: PUBLISHED Published: 2018-09-13T00:00:00 Last Updated: 2024-08-05T06:54:36.356Z Vendors: Microsoft Products: Microsoft Excel Viewer, Microsoft Office, Microsoft Excel Problem Types: Information Disclosure Description: An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Excel Viewer, Microsoft Office, Microsoft Excel. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8429 - http://www.securityfocus.com/bid/105219 - http://www.sec
.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8429 - http://www.securityfocus.com/bid/105219 - http://www.securitytracker.com/id/1041630