Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-0143 State: PUBLISHED Published: 2017-03-17T00:00:00.000Z Last Updated: 2025-10-21T23:55:44.821Z Vendors: Microsoft Corporation Products: Windows SMB Problem Types: Remote Code Execution Description: The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148. Additional Ana
lity is different from those described in CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/41891/ - http://www.securityfocus.com/bid/96703 - http://www.securitytracker.com/id/1037991 - https://cert-portal.siemens.com/productcert/pdf/ssa-701903.pdf - https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0143 - https://www.exploit-db.com/exploits/41987/ - https://cert-portal.siemens.com/productcert/pdf/ssa-966341.pdf - https://www.exploit-db.com/exploits/43970/ - http://packet
ps://cert-portal.siemens.com/productcert/pdf/ssa-966341.pdf - https://www.exploit-db.com/exploits/43970/ - http://packetstormsecurity.com/files/154690/DOUBLEPULSAR-Payload-Execution-Neutralization.html - http://packetstormsecurity.com/files/156196/SMB-DOUBLEPULSAR-Remote-Code-Execution.html
CVE ID: CVE-2017-0144 State: PUBLISHED Published: 2017-03-17T00:00:00.000Z Last Updated: 2025-10-21T23:55:44.676Z Vendors: Microsoft Corporation Products: Windows SMB Problem Types: Remote Code Execution Description: The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148. Additional Ana
lity is different from those described in CVE-2017-0143, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/42031/ - https://www.exploit-db.com/exploits/42030/ - https://www.exploit-db.com/exploits/41891/ - http://www.securitytracker.com/id/1037991 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0144 - https://cert-portal.siemens.com/productcert/pdf/ssa-701903.pdf - https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02 - https://www.exploit-db.com/exploits/41987/ - http://www.securityfocus.com/bid/96704 - https://cert-portal.siemens.com/p
https://www.exploit-db.com/exploits/41987/ - http://www.securityfocus.com/bid/96704 - https://cert-portal.siemens.com/productcert/pdf/ssa-966341.pdf - http://packetstormsecurity.com/files/154690/DOUBLEPULSAR-Payload-Execution-Neutralization.html - http://packetstormsecurity.com/files/156196/SMB-DOUBLEPULSAR-Remote-Code-Execution.html
CVE ID: CVE-2017-0145 State: PUBLISHED Published: 2017-03-17T00:00:00.000Z Last Updated: 2025-10-21T23:55:44.516Z Vendors: Microsoft Corporation Products: Windows SMB Problem Types: Remote Code Execution Description: The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0144, CVE-2017-0146, and CVE-2017-0148. Additional Ana
lity is different from those described in CVE-2017-0143, CVE-2017-0144, CVE-2017-0146, and CVE-2017-0148. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0145 - https://www.exploit-db.com/exploits/41891/ - http://www.securitytracker.com/id/1037991 - http://www.securityfocus.com/bid/96705 - https://cert-portal.siemens.com/productcert/pdf/ssa-701903.pdf - https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02 - https://www.exploit-db.com/exploits/41987/ - https://cert-portal.siemens.com/productcert/pdf/ssa-966341.pdf - http://packetstormsecurity.com/files/154690/DOUBLEPULSAR-P
ps://cert-portal.siemens.com/productcert/pdf/ssa-966341.pdf - http://packetstormsecurity.com/files/154690/DOUBLEPULSAR-Payload-Execution-Neutralization.html - http://packetstormsecurity.com/files/156196/SMB-DOUBLEPULSAR-Remote-Code-Execution.html
CVE ID: CVE-2017-0146 State: PUBLISHED Published: 2017-03-17T00:00:00.000Z Last Updated: 2025-10-21T23:55:44.319Z Vendors: Microsoft Corporation Products: Windows SMB Problem Types: Remote Code Execution Description: The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, and CVE-2017-0148. Additional Ana
lity is different from those described in CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, and CVE-2017-0148. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/96707 - https://www.exploit-db.com/exploits/41891/ - http://www.securitytracker.com/id/1037991 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0146 - https://cert-portal.siemens.com/productcert/pdf/ssa-701903.pdf - https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02 - https://www.exploit-db.com/exploits/41987/ - https://cert-portal.siemens.com/productcert/pdf/ssa-966341.pdf - https://www.exploit-db.com/exploits/43970/ - http://packet
CVE ID: CVE-2017-0147 State: PUBLISHED Published: 2017-03-17T00:00:00.000Z Last Updated: 2025-10-21T23:55:44.104Z Vendors: Microsoft Corporation Products: Windows SMB Problem Types: Information Disclosure Description: The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to obtain sensitive information from process memory via a crafted packets, aka "Windows SMB Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ex
Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/41891/ - http://www.securitytracker.com/id/1037991 - http://www.securityfocus.com/bid/96709 - https://cert-portal.siemens.com/productcert/pdf/ssa-701903.pdf - https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02 - https://www.exploit-db.com/exploits/41987/ - https://cert-portal.siemens.com/productcert/pdf/ssa-966341.pdf - https://www.exploit-db.com/exploits/43970/ - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0147 - http://packetstormsecurity.com/files/154690/DOUBLEPULSAR-Payload-Execution-Neutralization.html - http:/
/CVE-2017-0147 - http://packetstormsecurity.com/files/154690/DOUBLEPULSAR-Payload-Execution-Neutralization.html - http://packetstormsecurity.com/files/156196/SMB-DOUBLEPULSAR-Remote-Code-Execution.html
CVE ID: CVE-2017-0148 State: PUBLISHED Published: 2017-03-17T00:00:00.000Z Last Updated: 2025-10-21T23:55:43.849Z Vendors: Microsoft Corporation Products: Windows SMB Problem Types: Remote Code Execution Description: The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, and CVE-2017-0146. Additional Ana
lity is different from those described in CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, and CVE-2017-0146. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/41891/ - http://www.securitytracker.com/id/1037991 - http://www.securityfocus.com/bid/96706 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0148 - https://cert-portal.siemens.com/productcert/pdf/ssa-701903.pdf - https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02 - https://www.exploit-db.com/exploits/41987/ - https://cert-portal.siemens.com/productcert/pdf/ssa-966341.pdf - http://packetstormsecurity.com/files/154690/DOUBLEPULSAR-P
CVE ID: CVE-2017-0149 State: PUBLISHED Published: 2017-03-17T00:00:00.000Z Last Updated: 2025-10-21T23:55:43.703Z Vendors: Microsoft Corporation Products: Internet Explorer Problem Types: Remote Code Execution Description: Microsoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." This vulnerability is different from those described in CVE-2017-0018 and CVE-2017-0037. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-01
r: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0149 - http://www.securityfocus.com/bid/96724 - http://www.securitytracker.com/id/1038008
CVE ID: CVE-2017-0150 State: PUBLISHED Published: 2017-03-17T00:00:00 Last Updated: 2024-08-05T12:55:18.862Z Vendors: Microsoft Corporation Products: Browser Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who succes
ser rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, and CVE-2017-0151. Additional Analyst Notes: - CVE Program Container: References: - http:/
CVE-2017-0138, CVE-2017-0141, and CVE-2017-0151. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038006 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0150 - http://www.securityfocus.com/bid/96725
CVE ID: CVE-2017-0151 State: PUBLISHED Published: 2017-03-17T00:00:00 Last Updated: 2024-08-05T12:55:18.679Z Vendors: Microsoft Corporation Products: Browser Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who succes
ser rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, and CVE-2017-0150. Additional Analyst Notes: - CVE Program Container: References: - http:/
CVE-2017-0138, CVE-2017-0141, and CVE-2017-0150. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96727 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0151 - http://www.securitytracker.com/id/1038006
CVE ID: CVE-2017-0152 State: PUBLISHED Published: 2017-07-14T18:00:00Z Last Updated: 2024-09-16T18:39:13.084Z Vendors: Microsoft Corporation Products: Microsoft ChakraCore Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists in the way affected Microsoft scripting engine render when handling objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user, aka "Scripting Engine Memory Corruption Vulnerability." Additional Analyst Note
he same user rights as the current user, aka "Scripting Engine Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Microsoft/ChakraCore/commit/9da019424601325a6e95e6be0fa03d7d21d0b517
CVE ID: CVE-2017-0154 State: PUBLISHED Published: 2017-03-17T00:00:00 Last Updated: 2024-08-05T12:55:19.259Z Vendors: Microsoft Corporation Products: Internet Explorer Problem Types: Elevation of Privilege Description: Microsoft Internet Explorer 11 on Windows 10, 1511, and 1606 and Windows Server 2016 does not enforce cross-domain policies, allowing attackers to access information from one domain and inject it into another via a crafted application, aka, "Internet Explorer Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0154 - http://www.securityfocus.com/bid/9
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0154 - http://www.securityfocus.com/bid/96766 - http://www.securitytracker.com/id/1038008
CVE ID: CVE-2017-0155 State: PUBLISHED Published: 2017-04-12T14:00:00 Last Updated: 2024-08-05T12:55:19.127Z Vendors: Microsoft Corporation Products: Windows Graphics Component Problem Types: Elevation of Privilege Description: The Graphics component in the kernel in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; and Windows 7 SP1 allows local users to gain privileges via a crafted application, aka "Windows Graphics Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038237 - http://www.securityfocus.com/bid/97471 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-20
237 - http://www.securityfocus.com/bid/97471 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0155
CVE ID: CVE-2017-0156 State: PUBLISHED Published: 2017-04-12T14:00:00 Last Updated: 2024-08-05T12:55:19.121Z Vendors: Microsoft Corporation Products: Windows Graphics Component Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists in Windows 7, Windows 8.1, Windows RT 8.1, Windows 10, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016 when the Microsoft Graphics Component fails to properly handle objects in memory, aka "Windows Graphics Component Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038237 - http://www.secu
tional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038237 - http://www.securityfocus.com/bid/97507 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0156
CVE ID: CVE-2017-0158 State: PUBLISHED Published: 2017-04-12T14:00:00 Last Updated: 2024-08-05T12:55:19.108Z Vendors: Microsoft Corporation Products: Windows Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists when Microsoft Windows running on Windows 10, Windows 10 1511, Windows 8.1 Windows RT 8.1, and Windows Server 2012 R2 fails to properly sanitize handles in memory, aka "Scripting Engine Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97455 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0158 - http://www.securitytracker.com/id/1
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0158 - http://www.securitytracker.com/id/1038238
CVE ID: CVE-2017-0159 State: PUBLISHED Published: 2017-04-12T14:00:00 Last Updated: 2024-08-05T12:55:19.249Z Vendors: Microsoft Corporation Products: Windows Problem Types: Security Feature Bypass Description: A security feature bypass vulnerability exists in Windows 10 1607, Windows Server 2012 R2, and Windows 2016 when ADFS incorrectly treats requests coming from Extranet clients as Intranet requests, aka "ADFS Security Feature Bypass Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97449 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0159 - http://www.securitytracker.com/id/1038243
CVE ID: CVE-2017-0160 State: PUBLISHED Published: 2017-04-12T14:00:00 Last Updated: 2024-08-05T12:55:19.118Z Vendors: Microsoft Corporation Products: .NET Framework Problem Types: Remote Code Execution Description: Microsoft .NET Framework 2.0, 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allows an attacker with access to the local system to execute malicious code, aka ".NET Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0160 - http://www.securityfocus.com/bid/97447 - https://www.exploit-db.com/exploits/41903/ - http://www.securitytracker.com/id/1038236
CVE ID: CVE-2017-0161 State: PUBLISHED Published: 2017-09-13T01:00:00Z Last Updated: 2024-09-16T19:36:27.956Z Vendors: Microsoft Corporation Products: Windows NetBT Session Services Problem Types: Remote Code Execution Description: The Windows NetBT Session Services component on Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to maintain certain sequencing requirements, aka "NetBIOS Remote Code Execution Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfoc
e Code Execution Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100728 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0161 - http://www.securitytracker.com/id/1039318
CVE ID: CVE-2017-0162 State: PUBLISHED Published: 2017-04-12T14:00:00 Last Updated: 2024-08-05T12:55:19.279Z Vendors: Microsoft Corporation Products: Windows Hyper-V Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a Windows 10, Windows 8.1, Windows Server 2012 R2, or Windows Server 2016 host server fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Remote Code Execution Vulnerability." This CVE ID is unique from CVE-2017-0163, CVE-2017-0180, and CVE-2017-0181. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.micro
2017-0180, and CVE-2017-0181. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0162 - http://www.securityfocus.com/bid/97461 - http://www.securitytracker.com/id/1038233
CVE ID: CVE-2017-0163 State: PUBLISHED Published: 2017-04-12T14:00:00 Last Updated: 2024-08-05T12:55:19.110Z Vendors: Microsoft Corporation Products: Windows Hyper-V Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Remote Code Execution Vulnerability." This CVE ID is unique from CVE-2017-0162, CVE-2017-0180, and CVE-2017-0181. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0163 - http://www.sec
ntainer: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0163 - http://www.securityfocus.com/bid/97465 - http://www.securitytracker.com/id/1038233
CVE ID: CVE-2017-0164 State: PUBLISHED Published: 2017-04-12T14:00:00 Last Updated: 2024-08-05T12:55:19.275Z Vendors: Microsoft Corporation Products: Active Directory Problem Types: Denial of Service Description: A denial of service vulnerability exists in Windows 10 1607 and Windows Server 2016 Active Directory when an authenticated attacker sends malicious search queries, aka "Active Directory Denial of Service Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97448 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0164 - http://www.securitytracker.com/id/1038235
CVE ID: CVE-2017-0165 State: PUBLISHED Published: 2017-04-12T14:00:00 Last Updated: 2024-08-05T12:55:19.145Z Vendors: Microsoft Corporation Products: Windows Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists when Microsoft Windows running on Windows 10, Windows 10 1511, Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2 fails to properly sanitize handles in memory, aka "Windows Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/41901/ - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0165 - http://www.securitytracker.com/id/
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0165 - http://www.securitytracker.com/id/1038239 - http://www.securityfocus.com/bid/97467