Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-8447 State: PUBLISHED Published: 2017-09-28T19:00:00 Last Updated: 2024-08-05T16:34:23.178Z Vendors: Elastic Products: Elastic X-Pack Security Problem Types: CWE-284 Description: An error was found in the X-Pack Security 5.3.0 to 5.5.2 privilege enforcement. If a user has either 'delete' or 'index' permissions on an index in a cluster, they may be able to issue both delete and index requests against that index. Additional Analyst Notes: - CVE Program Container: References: - https://discuss.elastic.co/t/x-pack-security-5-6-0-and-5-5-3-security-update/100089
CVE ID: CVE-2017-8448 State: PUBLISHED Published: 2017-09-28T19:00:00 Last Updated: 2024-08-05T16:34:22.975Z Vendors: Elastic Products: Elastic X-Pack Alerting Problem Types: CWE-284 Description: An error was found in the permission model used by X-Pack Alerting 5.0.0 to 5.6.0 whereby users mapped to certain built-in roles could create a watch that results in that user gaining elevated privileges. Additional Analyst Notes: - CVE Program Container: References: - https://discuss.elastic.co/t/x-pack-alerting-and-kibana-5-6-1-security-update/101884
CVE ID: CVE-2017-8449 State: PUBLISHED Published: 2017-06-16T21:00:00 Last Updated: 2024-08-05T16:34:23.089Z Vendors: Elastic Products: Elastic X-Pack Security Problem Types: CWE-732 Description: X-Pack Security 5.2.x would allow access to more fields than the user should have seen if the field level security rules used a mix of grant and exclude rules when merging multiple rules with field level security rules for the same index. Additional Analyst Notes: - CVE Program Container: References: - https://www.elastic.co/community/security
CVE ID: CVE-2017-8450 State: PUBLISHED Published: 2017-06-16T21:00:00 Last Updated: 2024-08-05T16:34:23.134Z Vendors: Elastic Products: Elastic X-Pack Security Problem Types: CWE-732 Description: X-Pack 5.1.1 did not properly apply document and field level security to multi-search and multi-get requests so users without access to a document and/or field may have been able to access this information. Additional Analyst Notes: - CVE Program Container: References: - https://www.elastic.co/community/security
CVE ID: CVE-2017-8451 State: PUBLISHED Published: 2017-06-16T21:00:00 Last Updated: 2024-08-05T16:34:23.196Z Vendors: Elastic Products: Elastic X-Pack Security Problem Types: CWE-601 Description: With X-Pack installed, Kibana versions before 5.3.1 have an open redirect vulnerability on the login page that would enable an attacker to craft a link that redirects to an arbitrary website. Additional Analyst Notes: - CVE Program Container: References: - https://www.elastic.co/community/security
CVE ID: CVE-2017-8452 State: PUBLISHED Published: 2017-06-16T21:00:00 Last Updated: 2024-08-05T16:34:23.316Z Vendors: Elastic Products: Kibana Problem Types: CWE-775 Description: Kibana versions prior to 5.2.1 configured for SSL client access, file descriptors will fail to be cleaned up after certain requests and will accumulate over time until the process crashes. Additional Analyst Notes: - CVE Program Container: References: - https://www.elastic.co/community/security
CVE ID: CVE-2017-8453 State: PUBLISHED Published: 2017-05-03T05:13:00 Last Updated: 2024-08-05T16:34:23.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows remote attackers to obtain sensitive information or possibly execute arbitrary code via a crafted font in a PDF document. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98317 - https://www.foxitsoftware.com/support/security-bulletins.php - http://www.zerodayinitiative.com/advisories/ZDI-17-134/
CVE ID: CVE-2017-8454 State: PUBLISHED Published: 2017-05-03T05:13:00 Last Updated: 2024-08-05T16:34:23.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows remote attackers to obtain sensitive information or possibly execute arbitrary code via a crafted font in a PDF document. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - http://www.zerodayinitiative.com/advisories/ZDI-17-135/ - http://www.securityfocus.com/bid/98320
CVE ID: CVE-2017-8455 State: PUBLISHED Published: 2017-05-03T05:13:00 Last Updated: 2024-08-05T16:34:23.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows remote attackers to obtain sensitive information or possibly execute arbitrary code via a crafted font in a PDF document. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98319 - https://www.foxitsoftware.com/support/security-bulletins.php - http://www.zerodayinitiative.com/advisories/ZDI-17-140/
CVE ID: CVE-2017-8458 State: PUBLISHED Published: 2017-05-03T14:00:00 Last Updated: 2024-08-05T16:34:23.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: Brave 0.12.4 has a URI Obfuscation issue in which a string such as https://safe.example.com@unsafe.example.com/ is displayed without a clear UI indication that it is not a resource on the safe.example.com web site. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/brave/browser-laptop/issues/4748 - https://hackerone.com/reports/175529
CVE ID: CVE-2017-8459 State: PUBLISHED Published: 2017-05-03T14:00:00 Last Updated: 2024-08-05T16:34:23.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Brave 0.12.4 has a Status Bar Obfuscation issue in which a redirection target is shown in a possibly unexpected way. NOTE: third parties dispute this issue because it is a behavior that might have legitimate applications in (for example) the display of web-search results Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://hackerone.com/reports/175701
CVE ID: CVE-2017-8460 State: PUBLISHED Published: 2017-06-15T01:00:00 Last Updated: 2024-08-05T16:34:23.330Z Vendors: Microsoft Corporation Products: Windows PDF Problem Types: Information Disclosure Description: Windows PDF in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows information disclosure when a user opens a specially crafted PDF file, aka "Windows PDF Information Disclosure Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98887 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8460 - http://www.securitytracker.c
/98887 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8460 - http://www.securitytracker.com/id/1038678
CVE ID: CVE-2017-8461 State: PUBLISHED Published: 2017-06-15T20:00:00 Last Updated: 2024-08-05T16:34:23.323Z Vendors: Microsoft Corporation Products: Microsoft Windows Problem Types: Remote Code Execution Description: Windows RPC with Routing and Remote Access enabled in Windows XP and Windows Server 2003 allows an attacker to execute code on a targeted RPC server which has Routing and Remote Access enabled via a specially crafted application, aka "Windows RPC Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://support.microsoft.com/en-us/help/4024323/security-update-of-windows-xp-and-windows-server-2003 - http://www.securityfocus.co
ort.microsoft.com/en-us/help/4024323/security-update-of-windows-xp-and-windows-server-2003 - http://www.securityfocus.com/bid/99012 - http://www.securitytracker.com/id/1038701 - http://packetstormsecurity.com/files/161672/Microsoft-Windows-RRAS-Service-MIBEntryGet-Overflow.html
CVE ID: CVE-2017-8462 State: PUBLISHED Published: 2017-06-15T01:00:00 Last Updated: 2024-08-05T16:34:22.970Z Vendors: Microsoft Corporation Products: Microsoft Windows Problem Types: Information Disclosure Description: The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka "Windows Kernel Information Disclosure Vulnerability," a different vulnerability than CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE-2017-8482
lnerability than CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE-2017-8482, CVE-2017-8481, CVE-2017-8480, CVE-2017-8478, CVE-2017-8479, CVE-2017-8476, CVE-2017-8474, CVE-2017-8469, CVE-2017-0300, CVE-2017-0299, and CVE-2017-0297. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42218/ - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8462 - http://www.securityfocus.com/bid/98900
CVE ID: CVE-2017-8463 State: PUBLISHED Published: 2017-07-11T21:00:00Z Last Updated: 2024-09-17T01:32:07.491Z Vendors: Microsoft Corporation Products: Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 Problem Types: Remote Code Execution Description: Windows Shell in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability due to the way it improperly handles executable files and shares during rename operations, ak
de execution vulnerability due to the way it improperly handles executable files and shares during rename operations, aka "Windows Explorer Remote Code Execution Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038850 - http://www.securityfocus.com/bid/99389 - https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8463
CVE ID: CVE-2017-8464 State: PUBLISHED Published: 2017-06-15T01:00:00.000Z Last Updated: 2025-10-21T23:55:39.749Z Vendors: Microsoft Corporation Products: Windows Shell Problem Types: Remote Code Execution Description: Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows local users or remote attackers to execute arbitrary code via a crafted .LNK file, which is not properly handled during icon display in Windows Explorer or any other application that parses the icon of the shortcut. aka "LNK Remote Code Execution Vulnerability." A
Explorer or any other application that parses the icon of the shortcut. aka "LNK Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/42382/ - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8464 - https://www.exploit-db.com/exploits/42429/ - http://www.securitytracker.com/id/1038671 - http://www.securityfocus.com/bid/98818
CVE ID: CVE-2017-8465 State: PUBLISHED Published: 2017-06-15T01:00:00 Last Updated: 2024-08-05T16:34:23.457Z Vendors: Microsoft Corporation Products: Microsoft Windows Problem Types: Elevation of Privilege Description: Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to run processes in an elevated context when the Windows kernel improperly handles objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This CVE ID is unique from CVE-2017-8468. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-201
Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8465 - http://www.securityfocus.com/bid/98843
CVE ID: CVE-2017-8466 State: PUBLISHED Published: 2017-06-15T01:00:00 Last Updated: 2024-08-05T16:34:23.214Z Vendors: Microsoft Corporation Products: Windows Cursor Problem Types: Information Disclosure Description: Windows Cursor in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows improper elevation of privilege, aka "Windows Cursor Elevation of Privilege Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98844 - http://www.securitytracker.com/id/1038671 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8466
CVE ID: CVE-2017-8467 State: PUBLISHED Published: 2017-07-11T21:00:00Z Last Updated: 2024-09-16T23:56:41.946Z Vendors: Microsoft Corporation Products: Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016. Problem Types: Elevation of Privilege Description: Graphics in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to the way it handles objects in memory, aka "Win32k Elevation of Privileg
s an elevation of privilege vulnerability due to the way it handles objects in memory, aka "Win32k Elevation of Privilege Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99409 - http://www.securitytracker.com/id/1038853 - https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8467
CVE ID: CVE-2017-8468 State: PUBLISHED Published: 2017-06-15T01:00:00 Last Updated: 2024-08-05T16:34:23.099Z Vendors: Microsoft Corporation Products: Microsoft Windows Problem Types: Elevation of Privilege Description: Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to run processes in an elevated context when the Windows kernel improperly handles objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This CVE ID is unique from CVE-2017-8465. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-201
Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8468 - http://www.securityfocus.com/bid/98846
CVE ID: CVE-2017-8469 State: PUBLISHED Published: 2017-06-15T01:00:00 Last Updated: 2024-08-05T16:34:22.992Z Vendors: Microsoft Corporation Products: Microsoft Windows Problem Types: Information Disclosure Description: The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka "Windows Kernel Information Disclosure Vulnerability," a different vulnerability than CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE-2017-8482, CVE-
ility than CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE-2017-8482, CVE-2017-8481, CVE-2017-8480, CVE-2017-8478, CVE-2017-8479, CVE-2017-8476, CVE-2017-8474, CVE-2017-8462, CVE-2017-0300, CVE-2017-0299, and CVE-2017-0297. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038659 - https://www.exploit-db.com/exploits/42217/ - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8469 - http://www.securityfocus.com/bid/98842
CVE ID: CVE-2017-8470 State: PUBLISHED Published: 2017-06-15T01:00:00 Last Updated: 2024-08-05T16:34:23.201Z Vendors: Microsoft Corporation Products: Microsoft Windows Problem Types: Information Disclosure Description: Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an authenticated attacker to run a specially crafted application when the Windows kernel improperly initializes objects in memory, aka "Win32k Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8471, CVE-2017-8472, CVE-2017-8473, CVE-2017-8475, CVE-2017-8477, and CVE
rability". This CVE ID is unique from CVE-2017-8471, CVE-2017-8472, CVE-2017-8473, CVE-2017-8475, CVE-2017-8477, and CVE-2017-8484. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8470 - http://www.securityfocus.com/bid/98848 - https://www.exploit-db.com/exploits/42223/
CVE ID: CVE-2017-8471 State: PUBLISHED Published: 2017-06-15T01:00:00 Last Updated: 2024-08-05T16:34:23.059Z Vendors: Microsoft Corporation Products: Microsoft Windows Problem Types: Information Disclosure Description: Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an authenticated attacker to run a specially crafted application when the Windows kernel improperly initializes objects in memory, aka "Win32k Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8470, CVE-2017-8472, CVE-2017-8473, CVE-2017-8475, CVE-2017-8477, and CVE
rability". This CVE ID is unique from CVE-2017-8470, CVE-2017-8472, CVE-2017-8473, CVE-2017-8475, CVE-2017-8477, and CVE-2017-8484. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038659 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8471 - http://www.securityfocus.com/bid/98849 - https://www.exploit-db.com/exploits/42224/
CVE ID: CVE-2017-8472 State: PUBLISHED Published: 2017-06-15T01:00:00 Last Updated: 2024-08-05T16:34:23.202Z Vendors: Microsoft Corporation Products: Microsoft Windows Problem Types: Information Disclosure Description: Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 allow an authenticated attacker to run a specially crafted application when the Windows kernel improperly initializes objects in memory, aka "Win32k Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8470, CVE-2017-8471, CVE-2017-8473, CVE-2017-8475, CVE-2017-8477, and CVE-2017-8484. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.mi
VE-2017-8477, and CVE-2017-8484. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8472 - https://www.exploit-db.com/exploits/42225/ - http://www.securityfocus.com/bid/98851
CVE ID: CVE-2017-8473 State: PUBLISHED Published: 2017-06-15T01:00:00 Last Updated: 2024-08-05T16:34:23.328Z Vendors: Microsoft Corporation Products: Microsoft Windows Problem Types: Information Disclosure Description: Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and Windows Server 2016 allow an authenticated attacker to run a specially crafted application when the Windows kernel improperly initializes objects in memory, aka "Win32k Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8470, CVE-2017-8471, CVE-2017-8472, CVE-2017-8475, CVE-2017-8477, and CVE-2017-8484. Additional Analyst Notes: - CV
2017-8470, CVE-2017-8471, CVE-2017-8472, CVE-2017-8475, CVE-2017-8477, and CVE-2017-8484. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038659 - http://www.securityfocus.com/bid/98852 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8473 - https://www.exploit-db.com/exploits/42226/
CVE ID: CVE-2017-8474 State: PUBLISHED Published: 2017-06-15T01:00:00 Last Updated: 2024-08-05T16:34:23.338Z Vendors: Microsoft Corporation Products: Microsoft Windows Problem Types: Information Disclosure Description: The kernel in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka "Windows Kernel Information Disclosure Vulnerability," a different vulnerability than CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE-2017-8482, CVE-20
ity than CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE-2017-8482, CVE-2017-8481, CVE-2017-8480, CVE-2017-8478, CVE-2017-8479, CVE-2017-8476, CVE-2017-8469, CVE-2017-8462, CVE-2017-0300, CVE-2017-0299, and CVE-2017-0297. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8474 - http://www.securityfocus.com/bid/98902
CVE ID: CVE-2017-8475 State: PUBLISHED Published: 2017-06-15T01:00:00 Last Updated: 2024-08-05T16:34:23.100Z Vendors: Microsoft Corporation Products: Microsoft Windows Problem Types: Information Disclosure Description: Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an authenticated attacker to run a specially crafted application when the Windows kernel improperly initializes objects in memory, aka "Win32k Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8470, CVE-2017-8471, CVE-2017-8472, CVE-2017-8473, CVE-2017-8477, and CVE-2017-8484. Additional Analyst N
from CVE-2017-8470, CVE-2017-8471, CVE-2017-8472, CVE-2017-8473, CVE-2017-8477, and CVE-2017-8484. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038659 - http://www.securityfocus.com/bid/98853 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8475
CVE ID: CVE-2017-8476 State: PUBLISHED Published: 2017-06-15T01:00:00 Last Updated: 2024-08-05T16:34:23.213Z Vendors: Microsoft Corporation Products: Microsoft Windows Problem Types: Information Disclosure Description: The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka "Windows Kernel Information Disclosure Vulnerability," a different vulnerability than CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE-2017-8482
lnerability than CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE-2017-8482, CVE-2017-8481, CVE-2017-8480, CVE-2017-8478, CVE-2017-8479, CVE-2017-8474, CVE-2017-8469, CVE-2017-8462, CVE-2017-0300, CVE-2017-0299, and CVE-2017-0297. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8476 - https://www.exploit-db.com/exploits/42229/ - http://www.securityfocus.com/bid/98903
CVE ID: CVE-2017-8477 State: PUBLISHED Published: 2017-06-15T01:00:00 Last Updated: 2024-08-05T16:34:23.453Z Vendors: Microsoft Corporation Products: Microsoft Windows Problem Types: Information Disclosure Description: Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an authenticated attacker to run a specially crafted application when the Windows kernel improperly initializes objects in memory, aka "Win32k Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8470, CVE-2017-8471, CVE-2017-8472, CVE-2017-8473, CVE-2017-8475, and CVE