Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-11768 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-17T00:00:58.242Z Vendors: Microsoft Corporation Products: Windows Media Player Problem Types: Information Disclosure Description: Windows Media Player in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows remote attackers to test for the presence of files on disk via a specially crafted application. due to the way Windows Media Player discloses file information, aka "Windows Media Player Information Disclosure Vulnerability." Additional Analyst
a Player discloses file information, aka "Windows Media Player Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039794 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11768 - http://www.securityfocus.com/bid/101705
CVE ID: CVE-2017-11769 State: PUBLISHED Published: 2017-10-13T13:00:00Z Last Updated: 2024-09-16T21:08:58.639Z Vendors: Microsoft Corporation Products: Microsoft Windows TRIE Problem Types: Remote Code Execution Description: The Microsoft Windows TRIE component on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability in the way it handles loading dll files, aka "TRIE Remote Code Execution Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11769 - http://www.securitytracker.com/id/1039535 - http://www.securityfocus.com/bid/10
urity-guidance/advisory/CVE-2017-11769 - http://www.securitytracker.com/id/1039535 - http://www.securityfocus.com/bid/101112
CVE ID: CVE-2017-11770 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-16T22:41:39.922Z Vendors: Microsoft Corporation Products: .NET Core Problem Types: Denial of Service Description: .NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly parsing certificate data. A denial of service vulnerability exists when .NET Core improperly handles parsing certificate data, aka ".NET CORE Denial Of Service Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039787 - https://portal.msrc.microsoft.com/en-US/security-g
Container: References: - http://www.securitytracker.com/id/1039787 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11770 - https://access.redhat.com/errata/RHSA-2017:3248 - http://www.securityfocus.com/bid/101710
CVE ID: CVE-2017-11771 State: PUBLISHED Published: 2017-10-13T13:00:00Z Last Updated: 2024-09-16T20:17:44.891Z Vendors: Microsoft Corporation Products: Windows Search Problem Types: Remote Code Execution Description: The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly handle DNS responses, aka "Windows Search Remote Code Execution Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US
Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11771 - http://www.securityfocus.com/bid/101114 - http://www.securitytracker.com/id/1039538
CVE ID: CVE-2017-11772 State: PUBLISHED Published: 2017-10-13T13:00:00Z Last Updated: 2024-09-17T00:51:30.674Z Vendors: Microsoft Corporation Products: Windows Search Problem Types: Information Disclosure Description: The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure when it fails to properly handle objects in memory, aka "Microsoft Search Information Disclosure Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/sec
erability". Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11772 - http://www.securityfocus.com/bid/101116 - http://www.securitytracker.com/id/1039538
CVE ID: CVE-2017-11774 State: PUBLISHED Published: 2017-10-13T13:00:00.000Z Last Updated: 2025-10-21T23:55:31.465Z Vendors: Microsoft Corporation Products: Microsoft Outlook Problem Types: Security Feature Bypass Description: Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Microsoft Office handles objects in memory, aka "Microsoft Outlook Security Feature Bypass Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11774 - http://www.securityfocus.com/bid/101098 - http://www.securi
rosoft.com/en-US/security-guidance/advisory/CVE-2017-11774 - http://www.securityfocus.com/bid/101098 - http://www.securitytracker.com/id/1039542 - https://sensepost.com/blog/2017/outlook-home-page-another-ruler-vector/
CVE ID: CVE-2017-11775 State: PUBLISHED Published: 2017-10-13T13:00:00Z Last Updated: 2024-09-17T01:12:19.437Z Vendors: Microsoft Corporation Products: Microsoft SharePoint Enterprise Server Problem Types: Elevation of Privilege Description: Microsoft SharePoint Enterprise Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an attacker to exploit a cross-site scripting (XSS) vulnerability by sending a specially crafted request to an affected SharePoint server, due to how SharePoint Server sanitizes web requests, aka "Microsoft Office SharePoint XSS Vulnerability". This CVE ID is unique from CVE-2017-11777 and CVE-2017-11820. Additional Analyst Notes: - CVE Program Container
bility". This CVE ID is unique from CVE-2017-11777 and CVE-2017-11820. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101105 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11775 - http://www.securitytracker.com/id/1039540
CVE ID: CVE-2017-11776 State: PUBLISHED Published: 2017-10-13T13:00:00Z Last Updated: 2024-09-16T23:36:35.139Z Vendors: Microsoft Corporation Products: Microsoft Outlook Problem Types: Information Disclosure Description: Microsoft Outlook 2016 allows an attacker to obtain the email content of a user, due to how Outlook 2016 discloses user email content, aka "Microsoft Outlook Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11776 - http://www.securityfocus.com/bid/101106 - http://www.securitytracker.com/id/1039542
CVE ID: CVE-2017-11777 State: PUBLISHED Published: 2017-10-13T13:00:00Z Last Updated: 2024-09-16T22:09:16.022Z Vendors: Microsoft Corporation Products: Microsoft SharePoint Enterprise Server Problem Types: Elevation of Privilege Description: Microsoft SharePoint Enterprise Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an attacker to exploit a cross-site scripting (XSS) vulnerability by sending a specially crafted request to an affected SharePoint server, due to how SharePoint Server sanitizes web requests, aka "Microsoft Office SharePoint XSS Vulnerability". This CVE ID is unique from CVE-2017-11775 and CVE-2017-11820. Additional Analyst Notes: - CVE Program Container
bility". This CVE ID is unique from CVE-2017-11775 and CVE-2017-11820. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101155 - http://www.securitytracker.com/id/1039540 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11777
CVE ID: CVE-2017-11779 State: PUBLISHED Published: 2017-10-13T13:00:00Z Last Updated: 2024-09-17T00:11:44.799Z Vendors: Microsoft Corporation Products: Windows Domain Name System (DNS) Problem Types: Remote Code Execution Description: The Microsoft Windows Domain Name System (DNS) DNSAPI.dll on Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly handle DNS responses, aka "Windows DNSAPI Remote Code Execution Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101166 - https://portal.msrc.
nal Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101166 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11779 - http://www.securitytracker.com/id/1039533
CVE ID: CVE-2017-11780 State: PUBLISHED Published: 2017-10-13T13:00:00Z Last Updated: 2024-09-16T20:46:49.165Z Vendors: Microsoft Corporation Products: Server Message Block 1.0 (SMBv1) Problem Types: Remote Code Execution Description: The Server Message Block 1.0 (SMBv1) on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows a remote code execution vulnerability when it fails to properly handle certain requests, aka "Windows SMB Remote Code Execution Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfoc
e Code Execution Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101110 - http://www.securitytracker.com/id/1039528 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11780
CVE ID: CVE-2017-11781 State: PUBLISHED Published: 2017-10-13T13:00:00Z Last Updated: 2024-09-16T20:37:41.847Z Vendors: Microsoft Corporation Products: Server Block Message (SMB) Problem Types: Denial of Service Description: The Microsoft Server Block Message (SMB) on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows a denial of service vulnerability when an attacker sends specially crafted requests to the server, aka "Windows SMB Denial of Service Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.mi
enial of Service Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11781 - http://www.securitytracker.com/id/1039528 - http://www.securityfocus.com/bid/101140
CVE ID: CVE-2017-11782 State: PUBLISHED Published: 2017-10-13T13:00:00Z Last Updated: 2024-09-16T19:25:46.010Z Vendors: Microsoft Corporation Products: Server Block Message (SMB) Problem Types: Elevation of Privilege Description: The Microsoft Server Block Message (SMB) on Microsoft Windows 10 1607 and Windows Server 2016, allows an elevation of privilege vulnerability when an attacker sends specially crafted requests to the server, aka "Windows SMB Elevation of Privilege Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039528 - http://www.securityfocus.com/bid/101143 - https://portal.msrc.microsoft.com/en-US/security-guidanc
cker.com/id/1039528 - http://www.securityfocus.com/bid/101143 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11782
CVE ID: CVE-2017-11783 State: PUBLISHED Published: 2017-10-13T13:00:00Z Last Updated: 2024-09-16T16:17:50.973Z Vendors: Microsoft Corporation Products: Windows Problem Types: Elevation of Privilege Description: Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability in the way it handles calls to Advanced Local Procedure Call (ALPC), aka "Windows Elevation of Privilege Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039526 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11783 - ht
.securitytracker.com/id/1039526 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11783 - http://www.securityfocus.com/bid/101144
CVE ID: CVE-2017-11784 State: PUBLISHED Published: 2017-10-13T13:00:00Z Last Updated: 2024-09-16T20:53:16.594Z Vendors: Microsoft Corporation Products: Windows Kernel Problem Types: Information Disclosure Description: The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, allows an information disclosure vulnerability when it improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11765, CVE-2017-11785, and CVE-2017-11814. Additional Analyst Notes: - CVE Program Container: References: -
om CVE-2017-11765, CVE-2017-11785, and CVE-2017-11814. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039526 - http://www.securityfocus.com/bid/101147 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11784
CVE ID: CVE-2017-11785 State: PUBLISHED Published: 2017-10-13T13:00:00Z Last Updated: 2024-09-17T02:32:26.341Z Vendors: Microsoft Corporation Products: Windows Kernel Problem Types: Information Disclosure Description: The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows an information disclosure vulnerability when it improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11765, CVE-2017-11784, and CVE-2017-11814. Additional Analyst Not
re Vulnerability". This CVE ID is unique from CVE-2017-11765, CVE-2017-11784, and CVE-2017-11814. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039526 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11785 - https://www.exploit-db.com/exploits/43001/ - http://www.securityfocus.com/bid/101149
CVE ID: CVE-2017-11786 State: PUBLISHED Published: 2017-10-13T13:00:00Z Last Updated: 2024-09-16T18:03:43.734Z Vendors: Microsoft Corporation Products: Skype for Business Problem Types: Elevation of Privilege Description: Skype for Business in Microsoft Lync 2013 SP1 and Skype for Business 2016 allows an attacker to steal an authentication hash that can be reused elsewhere, due to how Skype for Business handles authentication requests, aka "Skype for Business Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101156 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11786 - http:/
ecurityfocus.com/bid/101156 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11786 - http://www.securitytracker.com/id/1039530
CVE ID: CVE-2017-11788 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-17T01:25:29.227Z Vendors: Microsoft Corporation Products: Windows search Problem Types: Denial of Service Description: Windows Search in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows server, version 1709 allows an unauthenticated attacker to remotely send specially crafted messages that could cause a denial of service against the system due to improperly handing objects in memory, aka "Windows Search Denial of Service Vulnerability". Additional Analyst Notes: - CVE Pro
rly handing objects in memory, aka "Windows Search Denial of Service Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11788 - http://www.securitytracker.com/id/1039792 - http://www.securityfocus.com/bid/101711
CVE ID: CVE-2017-11790 State: PUBLISHED Published: 2017-10-13T13:00:00Z Last Updated: 2024-09-16T17:28:58.809Z Vendors: Microsoft Corporation Products: Internet Explorer Problem Types: Information Disclosure Description: Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how Internet Explorer handles objects in memory, aka "Internet Explorer Information Disclosure Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - https://porta
er Information Disclosure Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11790 - http://www.securityfocus.com/bid/101077 - http://www.securitytracker.com/id/1039532
CVE ID: CVE-2017-11791 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-16T22:09:29.354Z Vendors: Microsoft Corporation Products: ChakraCore, Microsoft Edge, Internet Explorer Problem Types: Information Disclosure Description: ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting
tion to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11834. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039796 - http://www.securityfocus.com/bid/101715 - http://www.securitytracker.com/id/1039797 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11791
CVE ID: CVE-2017-11792 State: PUBLISHED Published: 2017-10-13T13:00:00Z Last Updated: 2024-09-17T00:46:43.581Z Vendors: Microsoft Corporation Products: ChakraCore, Microsoft Edge Problem Types: Remote Code Execution Description: ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allow an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11793, CVE-2017-11796, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808
17-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812, and CVE-2017-11821. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039529 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11792 - http://www.securityfocus.com/bid/101078
CVE ID: CVE-2017-11793 State: PUBLISHED Published: 2017-10-13T13:00:00Z Last Updated: 2024-09-16T17:14:05.215Z Vendors: Microsoft Corporation Products: Internet Explorer Problem Types: Remote Code Execution Description: Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11792, CVE-2017-11796, CVE-2017-11798, CVE-2017
ne Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11792, CVE-2017-11796, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812, and CVE-2017-11821. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11793 - http://www.securitytracker.com/id/1039532 - https://www.exploit-db.com/exploits/43368/ - http://www.securityfocus.com/bid/101141
CVE ID: CVE-2017-11794 State: PUBLISHED Published: 2017-10-13T13:00:00Z Last Updated: 2024-09-16T20:07:46.636Z Vendors: Microsoft Corporation Products: Microsoft Edge Problem Types: Information Disclosure Description: Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to obtain information to further compromise the user's system, due to how Microsoft Edge handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8726 and CVE-2017-11803. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039529 - http://www.securityfocus.com/bid/101079 - https://portal.msrc.microsoft.co
- http://www.securitytracker.com/id/1039529 - http://www.securityfocus.com/bid/101079 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11794
CVE ID: CVE-2017-11796 State: PUBLISHED Published: 2017-10-13T13:00:00Z Last Updated: 2024-09-16T21:57:18.283Z Vendors: Microsoft Corporation Products: ChakraCore, Microsoft Edge Problem Types: Remote Code Execution Description: ChakraCore and Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-201
CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812, and CVE-2017-11821. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039529 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11796 - http://www.securityfocus.com/bid/101080
CVE ID: CVE-2017-11797 State: PUBLISHED Published: 2017-10-13T13:00:00Z Last Updated: 2024-09-16T20:53:21.514Z Vendors: Microsoft Corporation Products: ChakraCore Problem Types: Remote Code Execution Description: ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-1181