Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-11820 State: PUBLISHED Published: 2017-10-13T13:00:00Z Last Updated: 2024-09-16T19:31:29.861Z Vendors: Microsoft Corporation Products: Microsoft SharePoint Enterprise Server Problem Types: Elevation of Privilege Description: Microsoft SharePoint Enterprise Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an attacker to exploit a cross-site scripting (XSS) vulnerability by sending a specially crafted request to an affected SharePoint server, due to how SharePoint Server sanitizes web requests, aka "Microsoft Office SharePoint XSS Vulnerability". This CVE ID is unique from CVE-2017-11775 and CVE-2017-11777. Additional Analyst Notes: - CVE Program Container
bility". This CVE ID is unique from CVE-2017-11775 and CVE-2017-11777. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11820 - http://www.securityfocus.com/bid/101097 - http://www.securitytracker.com/id/1039540
CVE ID: CVE-2017-11821 State: PUBLISHED Published: 2017-10-13T13:00:00Z Last Updated: 2024-09-16T16:18:09.555Z Vendors: Microsoft Corporation Products: ChakraCore, Microsoft Edge Problem Types: Remote Code Execution Description: ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-1180
017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, and CVE-2017-11812. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039529 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11821 - http://www.securityfocus.com/bid/101123
CVE ID: CVE-2017-11822 State: PUBLISHED Published: 2017-10-13T13:00:00Z Last Updated: 2024-09-16T20:17:48.733Z Vendors: Microsoft Corporation Products: Internet Explorer Problem Types: Remote Code Execution Description: Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how Internet Explorer handles objects in memory, aka "Internet Explorer Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11813. Additional Analyst Notes: - CVE Program Co
Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11813. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101122 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11822 - http://www.securitytracker.com/id/1039532
CVE ID: CVE-2017-11823 State: PUBLISHED Published: 2017-10-13T13:00:00Z Last Updated: 2024-09-17T03:14:35.829Z Vendors: Microsoft Corporation Products: Device Guard Problem Types: Security Feature Bypass Description: The Microsoft Device Guard on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a security feature bypass by the way it handles Windows PowerShell sessions, aka "Microsoft Windows Security Feature Bypass". Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039526 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11823 - https://www.exploit-db.com/exploits/42997/ - http://ww
c.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11823 - https://www.exploit-db.com/exploits/42997/ - http://www.securityfocus.com/bid/101102
CVE ID: CVE-2017-11824 State: PUBLISHED Published: 2017-10-13T13:00:00Z Last Updated: 2024-09-17T02:27:58.152Z Vendors: Microsoft Corporation Products: Microsoft Graphics Component Problem Types: Elevation of Privilege Description: The Microsoft Graphics Component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability in the way it handles objects in memory, aka "Windows Graphics Component Elevation of Privilege Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfoc
ion of Privilege Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101099 - http://www.securitytracker.com/id/1039536 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11824
CVE ID: CVE-2017-11825 State: PUBLISHED Published: 2017-10-13T13:00:00Z Last Updated: 2024-09-17T04:09:50.646Z Vendors: Microsoft Corporation Products: Microsoft Office 2016, Microsoft Office 2016 for Mac Problem Types: Remote Code Execution Description: Microsoft Office 2016 Click-to-Run (C2R) and Microsoft Office 2016 for Mac allow an attacker to use a specially crafted file to perform actions in the security context of the current user, due to how Microsoft Office handles files in memory, aka "Microsoft Office Remote Code Execution Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039539 - http://www.securityfocus.com/bid/1
s: - CVE Program Container: References: - http://www.securitytracker.com/id/1039539 - http://www.securityfocus.com/bid/101124 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11825
CVE ID: CVE-2017-11826 State: PUBLISHED Published: 2017-10-13T13:00:00.000Z Last Updated: 2025-10-21T23:55:31.281Z Vendors: Microsoft Corporation Products: Microsoft Office Problem Types: Remote Code Execution Description: Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation Services, and Office Online Server allow remote code execution when the software fails to properly handle objects in memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advis
rogram Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11826 - https://0patch.blogspot.com/2017/11/0patching-pretty-nasty-microsoft-word.html - http://www.securityfocus.com/bid/101219 - https://www.tarlogic.com/en/blog/exploiting-word-cve-2017-11826/ - http://www.securitytracker.com/id/1039541 - https://securingtomorrow.mcafee.com/mcafee-labs/analyzing-microsoft-office-zero-day-exploit-cve-2017-11826-memory-corruption-vulnerability/
CVE ID: CVE-2017-11827 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-16T19:10:35.424Z Vendors: Microsoft Corporation Products: Internet Explorer, Microsoft Edge Problem Types: Remote Code Execution Description: Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how Microsoft browsers handle objects in memory, aka "Microsoft Browser Memory Corruption Vulnerability". Additional
to how Microsoft browsers handle objects in memory, aka "Microsoft Browser Memory Corruption Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039781 - http://www.securitytracker.com/id/1039780 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11827 - http://www.securityfocus.com/bid/101703
CVE ID: CVE-2017-11829 State: PUBLISHED Published: 2017-10-13T13:00:00Z Last Updated: 2024-09-16T20:32:07.285Z Vendors: Microsoft Corporation Products: Microsoft Windows 10 Problem Types: Elevation of Privilege Description: Microsoft Windows 10 allows an elevation of privilege vulnerability when the Windows Update Delivery Optimization does not properly enforce file share permissions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039526 - http://www.securityfocus.com/bid/101213 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11829
CVE ID: CVE-2017-11830 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-16T19:05:16.075Z Vendors: Microsoft Corporation Products: Device Guard Problem Types: Security Feature Bypass Description: Device Guard in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to make an unsigned file appear to be signed, due to a security feature bypass, aka "Device Guard Security Feature Bypass Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43162/ - http://www.securitytracker.com/id/1039790 - https://portal.msrc.microsoft.com/en-US/security-guidance
/exploits/43162/ - http://www.securitytracker.com/id/1039790 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11830 - http://www.securityfocus.com/bid/101714
CVE ID: CVE-2017-11831 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-16T23:50:35.157Z Vendors: Microsoft Corporation Products: Windows kernel Problem Types: Information Disclosure Description: Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to log on to an affected system, and run a specially crafted application that can compromise the user's system due to how the Windows kernel initializes memory, aka "Windows Information Disclosure Vulnerability". This CVE ID is unique from CVE-201
indows kernel initializes memory, aka "Windows Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11880. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43165/ - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11831 - http://www.securitytracker.com/id/1039782 - http://www.securityfocus.com/bid/101721
CVE ID: CVE-2017-11832 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-16T19:24:21.916Z Vendors: Microsoft Corporation Products: Microsoft Graphics Component Problem Types: Information Disclosure Description: The Microsoft Windows embedded OpenType (EOT) font engine in Windows 7 SP1, Windows Server 2008 SP2 and 2008 R2 SP1, and Windows Server 2012 allows an attacker to potentially read data that was not intended to be disclosed, due to the way that the Microsoft Windows EOT font engine parses specially crafted embedded fonts, aka "Windows EOT Font Engine Information Disclosure Vulnerability." This CVE ID is unique from CVE-2017-11835. Additional Analyst Notes: - CVE Pr
ine Information Disclosure Vulnerability." This CVE ID is unique from CVE-2017-11835. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11832 - http://www.securitytracker.com/id/1039782 - http://www.securityfocus.com/bid/101726
CVE ID: CVE-2017-11833 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-17T04:10:06.585Z Vendors: Microsoft Corporation Products: Microsoft Edge Problem Types: Information Disclosure Description: Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to determine the origin of all webpages in the affected browser, due to how Microsoft Edge handles cross-origin requests, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11803 and CVE-2017-11844. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com
3 and CVE-2017-11844. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11833 - http://www.securitytracker.com/id/1039797 - http://www.securityfocus.com/bid/101706
CVE ID: CVE-2017-11834 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-16T18:49:21.569Z Vendors: Microsoft Corporation Products: Internet Explorer Problem Types: Information Disclosure Description: Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-1
es objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11791. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039796 - http://www.securityfocus.com/bid/101725 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11834
CVE ID: CVE-2017-11835 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-17T02:06:54.051Z Vendors: Microsoft Corporation Products: Microsoft Graphics Problem Types: Information Disclosure Description: Microsoft graphics in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an attacker to potentially read data that was not intended to be disclosed due to the way that the Microsoft Windows Embedded OpenType (EOT) font engine parses specially crafted embedded fonts, aka "Windows EOT Font Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11832. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.c
unique from CVE-2017-11832. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101736 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11835 - http://www.securitytracker.com/id/1039782
CVE ID: CVE-2017-11836 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-17T03:13:50.820Z Vendors: Microsoft Corporation Products: ChakraCore, Microsoft Edge Problem Types: Remote Code Execution Description: ChakraCore, and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to take control of an affected system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2
7, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039780 - http://www.securityfocus.com/bid/101727 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11836
CVE ID: CVE-2017-11837 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-16T22:50:33.796Z Vendors: Microsoft Corporation Products: ChakraCore, Microsoft Edge, Internet Explorer Problem Types: Remote Code Execution Description: ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption V
s the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039781 - http://www.securitytracker.com/id/1039780 - http://www.securityfocus.com/bid/101722 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11837
CVE ID: CVE-2017-11838 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-16T20:13:10.323Z Vendors: Microsoft Corporation Products: ChakraCore, Microsoft Edge, Internet Explorer Problem Types: Remote Code Execution Description: ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption V
s the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039781 - http://www.securitytracker.com/id/1039780 - http://www.securityfocus.com/bid/101737 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11838
CVE ID: CVE-2017-11839 State: PUBLISHED Published: 2017-11-15T03:00:00 Last Updated: 2024-08-05T18:19:39.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to take control of an affected system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11
-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11839 - http://www.securitytracker.com/id/1039780 - http://www.securityfocus.com/bid/101735 - https://www.exploit-db.com/exploits/43180/
CVE ID: CVE-2017-11840 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-17T03:22:26.684Z Vendors: Microsoft Corporation Products: ChakraCore, Microsoft Edge Problem Types: Remote Code Execution Description: ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2
6, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101734 - http://www.securitytracker.com/id/1039780 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11840 - https://www.exploit-db.com/exploits/43183/
CVE ID: CVE-2017-11841 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-17T03:22:57.383Z Vendors: Microsoft Corporation Products: ChakraCore, Microsoft Edge Problem Types: Remote Code Execution Description: ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2
6, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43181/ - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11841 - http://www.securitytracker.com/id/1039780 - http://www.securityfocus.com/bid/101733
CVE ID: CVE-2017-11842 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-16T22:39:56.131Z Vendors: Microsoft Corporation Products: Windows Kernel Problem Types: Information Disclosure Description: Windows kernel in Windows 8.1 and RT 8.1, Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to log in and run a specially crafted application due to the Windows kernel improperly initializing a memory address, aka "Windows Kernel Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11849, CVE-2017-11851, and CVE-2017-11853. Additional Analyst Notes: - CVE Program Contai
CVE ID is unique from CVE-2017-11849, CVE-2017-11851, and CVE-2017-11853. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11842 - http://www.securityfocus.com/bid/101719 - http://www.securitytracker.com/id/1039782
CVE ID: CVE-2017-11843 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-16T17:32:54.249Z Vendors: Microsoft Corporation Products: ChakraCore, Microsoft Edge, Internet Explorer Problem Types: Remote Code Execution Description: ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corrupti