Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
itional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102865 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0858 - http://www.securitytracker.com/id/1040372
CVE ID: CVE-2018-0859 State: PUBLISHED Published: 2018-02-15T02:00:00Z Last Updated: 2024-09-16T18:38:42.083Z Vendors: Microsoft Corporation Products: Microsoft Edge, ChakraCore Problem Types: Critical Description: Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834, CVE-2018-0835, CVE-2018-0836, CVE-2018-0837, CVE-2018-0838, CVE-2018-0840, CVE-2018-0856, CVE-2018-0857, CVE-2018-0858, CVE-2018-0860, CVE-2018-0861, and CVE-2018-0866. Additional Analyst No
840, CVE-2018-0856, CVE-2018-0857, CVE-2018-0858, CVE-2018-0860, CVE-2018-0861, and CVE-2018-0866. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102882 - http://www.securitytracker.com/id/1040372 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0859
CVE ID: CVE-2018-0860 State: PUBLISHED Published: 2018-02-15T02:00:00Z Last Updated: 2024-09-17T00:02:23.023Z Vendors: Microsoft Corporation Products: Microsoft Edge, ChakraCore Problem Types: Important Description: Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834, CVE-2018-0835, CVE-2018-0836, CVE-2018-0837, CVE-2018-0838, CVE-2018-0840, CVE-2018-0856, CVE-2018-0857, CVE-2018-0858, CVE-2018-0859, CVE-2018-0861, and CVE-2018-0866. Additional Analyst N
0840, CVE-2018-0856, CVE-2018-0857, CVE-2018-0858, CVE-2018-0859, CVE-2018-0861, and CVE-2018-0866. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44076/ - http://www.securityfocus.com/bid/102883 - http://www.securitytracker.com/id/1040372 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0860
CVE ID: CVE-2018-0861 State: PUBLISHED Published: 2018-02-15T02:00:00Z Last Updated: 2024-09-16T17:38:57.971Z Vendors: Microsoft Corporation Products: Microsoft Edge Problem Types: Critical Description: Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834, CVE-2018-0835, CVE-2018-0836, CVE-2018-0837, CVE-2018-0838, CVE-2018-0840, CVE-2018-0856, CVE-2018-0857, CVE-2018-0858, CVE-2018-0859, CVE-2018-0860, and CVE-2018-0866. Additional Analyst Notes: - CVE Program Container: References: - h
858, CVE-2018-0859, CVE-2018-0860, and CVE-2018-0866. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0861 - http://www.securityfocus.com/bid/102884 - http://www.securitytracker.com/id/1040372
CVE ID: CVE-2018-0862 State: PUBLISHED Published: 2018-01-22T23:00:00Z Last Updated: 2024-09-17T02:41:27.879Z Vendors: Microsoft Corporation Products: Equation Editor Problem Types: Remote Code Execution Description: Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution Vulnerability". This CVE is unique from CVE-2018-0805, CVE-2018-0806, and CVE-2018-0807. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/a
tional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0862 - http://www.securityfocus.com/bid/102749
CVE ID: CVE-2018-0864 State: PUBLISHED Published: 2018-02-15T02:00:00 Last Updated: 2024-08-05T03:44:10.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: SharePoint Project Server 2013 and SharePoint Enterprise Server 2016 allow an information disclosure vulnerability due to how web requests are handled, aka "Microsoft SharePoint Information Disclosure Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0864 - http://www.securityfocus.com/bid/102962 - http://www.securitytracker.com/id/1040376
CVE ID: CVE-2018-0866 State: PUBLISHED Published: 2018-02-15T02:00:00Z Last Updated: 2024-09-16T22:15:38.980Z Vendors: Microsoft Corporation Products: Internet Explorer Problem Types: Important Description: Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834, CVE-2018-0835, CVE-2018-0836, CVE-2018-0837, CVE-2018-0838, CVE-2018-0840, CVE-2018-0856, CVE-2018-0857
m CVE-2018-0834, CVE-2018-0835, CVE-2018-0836, CVE-2018-0837, CVE-2018-0838, CVE-2018-0840, CVE-2018-0856, CVE-2018-0857, CVE-2018-0858, CVE-2018-0859, CVE-2018-0860, and CVE-2018-0861. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103032 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0866 - https://www.exploit-db.com/exploits/44153/ - http://www.securitytracker.com/id/1040372 - http://www.securitytracker.com/id/1040369
CVE ID: CVE-2018-0868 State: PUBLISHED Published: 2018-03-14T17:00:00Z Last Updated: 2024-09-16T16:48:40.684Z Vendors: Microsoft Corporation Products: Windows Installer Problem Types: Elevation of Privilege Description: Windows Installer in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how input is sanitized, aka "Windows Installer Elevation of Privilege Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/sec
erability". Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0868 - http://www.securityfocus.com/bid/103236 - http://www.securitytracker.com/id/1040520
CVE ID: CVE-2018-0869 State: PUBLISHED Published: 2018-02-15T02:00:00Z Last Updated: 2024-09-16T22:35:11.143Z Vendors: Microsoft Corporation Products: SharePoint Server Problem Types: Important Description: SharePoint Server 2016 allows an elevation of privilege vulnerability due to how web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0869 - http://www.securitytracker.com/id/1040376 - http://www.securityfocus.com/bid/102963
CVE ID: CVE-2018-0870 State: PUBLISHED Published: 2018-04-12T01:00:00 Last Updated: 2024-08-05T03:44:11.102Z Vendors: Microsoft Products: Internet Explorer 11 Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 11. This CVE ID is unique from CVE-2018-0991, CVE-2018-0997, CVE-2018-1018, CVE-2018-1020. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0870 - http://www.securitytracker.com/id/1040653 - http://www.se
microsoft.com/en-US/security-guidance/advisory/CVE-2018-0870 - http://www.securitytracker.com/id/1040653 - http://www.securityfocus.com/bid/103595
CVE ID: CVE-2018-0871 State: PUBLISHED Published: 2018-06-14T12:00:00 Last Updated: 2024-08-05T03:44:11.016Z Vendors: Microsoft Products: Microsoft Edge Problem Types: Information Disclosure Description: An information disclosure vulnerability exists when Edge improperly marks files, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8234. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0871 - http://www.securityfocus.com/bid/104339 - http://www.securitytracker.com/id/1041097
CVE ID: CVE-2018-0872 State: PUBLISHED Published: 2018-03-14T17:00:00Z Last Updated: 2024-09-17T04:15:12.040Z Vendors: Microsoft Corporation Products: ChakraCore, Microsoft Edge Problem Types: Remote Code Execution Description: ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0873, CVE-2018-0874, CVE-2018-0930, CVE-2018-0931, CVE-2018-0933, CVE-2018-0934, CVE-2018-0936, and CVE-2018-0937. Additional Analyst Notes: - CVE Program Container: Ref
, CVE-2018-0933, CVE-2018-0934, CVE-2018-0936, and CVE-2018-0937. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103267 - http://www.securitytracker.com/id/1040507 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0872
CVE ID: CVE-2018-0873 State: PUBLISHED Published: 2018-03-14T17:00:00Z Last Updated: 2024-09-16T19:31:47.265Z Vendors: Microsoft Corporation Products: ChakraCore, Microsoft Edge Problem Types: Remote Code Execution Description: ChakraCore and Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0872, CVE-2018-0874, CVE-2018-0930, CVE-2018-0931, CVE-2018-0933, CVE-2018-0934, CVE-2018-0936, and CVE-2018-0937. Additional Analyst Notes: - CVE Program Container: Reference
2018-0933, CVE-2018-0934, CVE-2018-0936, and CVE-2018-0937. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103268 - http://www.securitytracker.com/id/1040507 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0873
CVE ID: CVE-2018-0874 State: PUBLISHED Published: 2018-03-14T17:00:00Z Last Updated: 2024-09-16T22:56:59.266Z Vendors: Microsoft Corporation Products: ChakraCore, Microsoft Edge Problem Types: Remote Code Execution Description: ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0872, CVE-2018-0873, CVE-2018-0930, CVE-2018-0931, CVE-2018-0933, CVE-2018-0934, CVE-2018-0936, and CVE-2018-0937. Additional Analyst Notes: - CVE Program Container: Ref
, CVE-2018-0933, CVE-2018-0934, CVE-2018-0936, and CVE-2018-0937. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103269 - http://www.securitytracker.com/id/1040507 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0874
CVE ID: CVE-2018-0875 State: PUBLISHED Published: 2018-03-14T17:00:00Z Last Updated: 2024-09-16T17:33:24.246Z Vendors: Microsoft Corporation Products: .NET Core Problem Types: Denial of Service Description: .NET Core 1.0, .NET Core 1.1, NET Core 2.0 and PowerShell Core 6.0.0 allow a denial of Service vulnerability due to how specially crafted requests are handled, aka ".NET Core Denial of Service Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0875 - http://www.securityfocus.com/bid/103225 - http://www.securitytracker.com/id/1040505 - https://access.redhat.com/errata/RHSA-2018:0522
CVE ID: CVE-2018-0876 State: PUBLISHED Published: 2018-03-14T17:00:00Z Last Updated: 2024-09-17T00:46:15.022Z Vendors: Microsoft Corporation Products: Microsoft Edge Problem Types: Remote Code Execution Description: Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0889, CVE-2018-0893, CVE-2018-0925, and CVE-2018-0935. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0876 - http://www.securi
iner: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0876 - http://www.securityfocus.com/bid/103289 - http://www.securitytracker.com/id/1040507
CVE ID: CVE-2018-0877 State: PUBLISHED Published: 2018-03-14T17:00:00Z Last Updated: 2024-09-16T20:07:26.818Z Vendors: Microsoft Corporation Products: Windows Desktop Bridge Virtual File System Problem Types: Elevation of Privilege Description: The Desktop Bridge Virtual File System (VFS) in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how file paths are managed, aka "Windows Desktop Bridge VFS Elevation of Privilege Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040520 - https://portal.msrc.microsoft.com/en-US/security-guidance/a
r: References: - http://www.securitytracker.com/id/1040520 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0877 - http://www.securityfocus.com/bid/103227 - https://www.exploit-db.com/exploits/44313/
CVE ID: CVE-2018-0878 State: PUBLISHED Published: 2018-03-14T17:00:00.000Z Last Updated: 2025-04-04T20:38:12.885Z Vendors: Microsoft Corporation Products: Windows Remote Assistance Problem Types: Information Disclosure Description: Windows Remote Assistance in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to how XML External Entities (XXE) are processed, aka "Windows Remote Assistance Information Disclosure Vulnerability". Additional Analyst Notes: - CVE Program Container: - CISA
ndows Remote Assistance Information Disclosure Vulnerability". Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1040519 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0878 - https://www.exploit-db.com/exploits/44352/ - http://www.securityfocus.com/bid/103230
CVE ID: CVE-2018-0879 State: PUBLISHED Published: 2018-03-14T17:00:00Z Last Updated: 2024-09-17T02:57:53.163Z Vendors: Microsoft Corporation Products: Microsoft Edge Problem Types: Information Disclosure Description: Microsoft Edge in Windows 10 1709 allows information disclosure, due to how Edge handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103303 - http://www.securitytracker.com/id/1040507 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0879
CVE ID: CVE-2018-0880 State: PUBLISHED Published: 2018-03-14T17:00:00Z Last Updated: 2024-09-17T00:56:49.449Z Vendors: Microsoft Corporation Products: Windows Desktop Bridge Problem Types: Elevation of Privilege Description: The Desktop Bridge in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how the virtual registry is managed, aka "Windows Desktop Bridge Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0882. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0880 - https://www.exploit-db
References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0880 - https://www.exploit-db.com/exploits/44314/ - http://www.securityfocus.com/bid/103239 - http://www.securitytracker.com/id/1040520
CVE ID: CVE-2018-0881 State: PUBLISHED Published: 2018-03-14T17:00:00Z Last Updated: 2024-09-16T23:16:48.039Z Vendors: Microsoft Corporation Products: Windows Problem Types: Elevation of Privilege Description: The Microsoft Video Control in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege due to how objects are handled in memory, aka "Microsoft Video Control Elevation of Privilege Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security
lity". Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0881 - http://www.securityfocus.com/bid/103256 - http://www.securitytracker.com/id/1040520
CVE ID: CVE-2018-0882 State: PUBLISHED Published: 2018-03-14T17:00:00Z Last Updated: 2024-09-16T21:03:47.346Z Vendors: Microsoft Corporation Products: Windows Deskop Bridge Problem Types: Elevation of Privilege Description: The Desktop Bridge in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how the virtual registry is managed, aka "Windows Desktop Bridge Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0880. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0882 - http://www.securityfocu
References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0882 - http://www.securityfocus.com/bid/103257 - http://www.securitytracker.com/id/1040520 - https://www.exploit-db.com/exploits/44315/
CVE ID: CVE-2018-0883 State: PUBLISHED Published: 2018-03-14T17:00:00Z Last Updated: 2024-09-17T01:01:25.661Z Vendors: Microsoft Corporation Products: Windows Shell Problem Types: Remote Code Execution Description: Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, Windows Server 2016 and Windows Server, version 1709 allows a remote code execution vulnerability due to how file copy destinations are validated, aka "Windows Shell Remote Code Execution Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103259 - http://ww
y". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103259 - http://www.securitytracker.com/id/1040502 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0883
CVE ID: CVE-2018-0884 State: PUBLISHED Published: 2018-03-14T17:00:00Z Last Updated: 2024-09-16T19:51:32.651Z Vendors: Microsoft Corporation Products: Windows Scripting Host Problem Types: Security Feature Bypass Description: Windows Scripting Host (WSH) in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows a security feature bypass vulnerability due to how objects are handled in memory, aka "Windows Security Feature Bypass Vulnerability". This CVE is unique from CVE-2018-0902. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040522 - http://www.securityfocus.com/bid/103260 - https://porta
ainer: References: - http://www.securitytracker.com/id/1040522 - http://www.securityfocus.com/bid/103260 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0884
CVE ID: CVE-2018-0885 State: PUBLISHED Published: 2018-03-14T17:00:00Z Last Updated: 2024-09-16T22:45:03.402Z Vendors: Microsoft Corporation Products: Microsoft Hyper-V Network Switch Problem Types: Denial of Service Description: The Microsoft Hyper-V Network Switch in 64-bit versions of Microsoft Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows a denial of service vulnerability due to how input from a privileged user on a guest operating system is validated, aka "Hyper-V Denial of Service Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http
ed, aka "Hyper-V Denial of Service Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0885 - http://www.securitytracker.com/id/1040518 - http://www.securityfocus.com/bid/103261
CVE ID: CVE-2018-0886 State: PUBLISHED Published: 2018-03-14T17:00:00Z Last Updated: 2024-09-17T01:17:03.119Z Vendors: Microsoft Corporation Products: Windows Problem Types: Remote Code Execution Description: The Credential Security Support Provider protocol (CredSSP) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709 Windows Server 2016 and Windows Server, version 1709 allows a remote code execution vulnerability due to how CredSSP validates request during the authentication process, aka "CredSSP Remote Code Execution Vulnerability". Additional Analyst Notes: - CVE Program Container:
ntication process, aka "CredSSP Remote Code Execution Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040506 - http://www.securityfocus.com/bid/103265 - https://ics-cert.us-cert.gov/advisories/ICSA-18-198-03 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0886 - https://blog.preempt.com/security-advisory-credssp - https://www.exploit-db.com/exploits/44453/ - https://github.com/preempt/credssp
CVE ID: CVE-2018-0887 State: PUBLISHED Published: 2018-04-12T01:00:00 Last Updated: 2024-08-05T03:44:10.907Z Vendors: Microsoft Products: Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers Problem Types: Information Disclosure Description: An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Serv
Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0960, CVE-2018-0968, CVE-2018-0969, CVE-2018-0970, CVE-2018-0971, CVE-2018-0972, CVE-2018-0973, CVE-2018-0974, CVE-2018-0975. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040657 - http://www.securityfocus.com/bid/103629 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0887