Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-8609 State: PUBLISHED Published: 2017-07-11T21:00:00Z Last Updated: 2024-09-17T01:56:59.738Z Vendors: Microsoft Corporation Products: Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 Problem Types: Remote Code Execution Description: Microsoft Internet Explorer in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8596, CVE-2017-8610, CVE-2017-8618, CVE-2017-8619, CVE
ry Corruption Vulnerability". This CVE ID is unique from CVE-2017-8596, CVE-2017-8610, CVE-2017-8618, CVE-2017-8619, CVE-2017-8595, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8606, CVE-2017-8607, CVE-2017-8608, and CVE-2017-8609. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8609 - http://www.securitytracker.com/id/1038849 - http://www.securityfocus.com/bid/99418
CVE ID: CVE-2017-8610 State: PUBLISHED Published: 2017-07-11T21:00:00Z Last Updated: 2024-09-17T00:26:08.938Z Vendors: Microsoft Corporation Products: Windows 10 1703 Problem Types: Remote Code Execution Description: Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8598, CVE-2017-8596, CVE-2017-8595, CVE-2017-8618, CVE-2017-8619, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8606, CVE-2017-8607, CVE-2017-8608, an
E-2017-8619, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8606, CVE-2017-8607, CVE-2017-8608, and CVE-2017-8609. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038849 - http://www.securityfocus.com/bid/99415 - https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8610
CVE ID: CVE-2017-8611 State: PUBLISHED Published: 2017-07-11T21:00:00Z Last Updated: 2024-09-17T01:56:27.407Z Vendors: Microsoft Corporation Products: Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 Problem Types: Spoofing Description: Microsoft Edge on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows remote attackers to spoof web content via a crafted web site, aka "Microsoft Edge Spoofing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99391 - http://www.securitytracker.com/id/1038858 - https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8611
CVE ID: CVE-2017-8613 State: PUBLISHED Published: 2017-06-29T13:00:00 Last Updated: 2024-08-05T16:41:24.196Z Vendors: Microsoft Corporation Products: Azure AD Connect Problem Types: Elevation of Privilege Description: Azure AD Connect Password writeback, if misconfigured during enablement, allows an attacker to reset passwords and gain unauthorized access to arbitrary on-premises AD privileged user accounts aka "Azure AD Connect Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99294 - https://technet.microsoft.com/library/security/4033453
CVE ID: CVE-2017-8617 State: PUBLISHED Published: 2017-07-11T21:00:00Z Last Updated: 2024-09-17T03:54:49.397Z Vendors: Microsoft Corporation Products: Windows 10 1703 Problem Types: Remote Code Execution Description: Microsoft Edge in Windows 10 1703 Microsoft Edge allows a remote code execution vulnerability in the way affected Microsoft scripting engines render when handling objects in memory, aka "Microsoft Edge Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99422 - https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8617
CVE ID: CVE-2017-8618 State: PUBLISHED Published: 2017-07-11T21:00:00Z Last Updated: 2024-09-17T00:51:55.361Z Vendors: Microsoft Corporation Products: Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 Problem Types: Remote Code Execution Description: Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 Internet Explorer in the way affected Microsoft scripting engines render when handling objects in memory, aka "Scripting Engine Memory C
r in the way affected Microsoft scripting engines render when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-8596, CVE-2017-8610, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8606, CVE-2017-8607, CVE-2017-8608, CVE-2017-8619, CVE-2017-9598 and CVE-2017-8609. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038848 - https://www.exploit-db.com/exploits/42337/ - http://www.securityfocus.com/bid/99399 - https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8618
CVE ID: CVE-2017-8619 State: PUBLISHED Published: 2017-07-11T21:00:00Z Last Updated: 2024-09-17T00:51:24.415Z Vendors: Microsoft Corporation Products: Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 Problem Types: Remote Code Execution Description: Microsoft Edge on Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability in the way affected Microsoft scripting engines render when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-8596, CVE-2017-8610, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8606, CVE-2017-8607, CVE-2017-8608, CVE-
2017-8610, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8606, CVE-2017-8607, CVE-2017-8608, CVE-2017-8618, CVE-2017-9598 and CVE-2017-8609. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038849 - https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8619 - http://www.securityfocus.com/bid/99392
CVE ID: CVE-2017-8620 State: PUBLISHED Published: 2017-08-08T21:00:00Z Last Updated: 2024-09-17T00:02:34.544Z Vendors: Microsoft Corporation Products: Microsoft Windows Search Component Problem Types: Remote Code Execution Description: Windows Search in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it improperly handles objects in memory, aka "Windows Search Remote Code Execution Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - https://threatpost.com/windows-search-bug-worth-watching
dditional Analyst Notes: - CVE Program Container: References: - https://threatpost.com/windows-search-bug-worth-watching-and-squashing/127434/ - http://www.securityfocus.com/bid/100034 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8620 - http://www.securitytracker.com/id/1039091
CVE ID: CVE-2017-8621 State: PUBLISHED Published: 2017-07-11T21:00:00Z Last Updated: 2024-09-16T23:45:31.629Z Vendors: Microsoft Corporation Products: Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5. Problem Types: Spoofing Description: Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an open redirect vulnerability that could lead to spoofing, aka "Microsoft Exchange Open Redirect Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8621 - http:/
ogram Container: References: - https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8621 - http://www.securitytracker.com/id/1038852 - http://www.securityfocus.com/bid/99533
CVE ID: CVE-2017-8622 State: PUBLISHED Published: 2017-08-08T21:00:00Z Last Updated: 2024-09-16T18:03:07.702Z Vendors: Microsoft Corporation Products: Windows Subsystem for Linux Problem Types: Elevation of Privilege Description: Windows Subsystem for Linux in Windows 10 1703 allows an elevation of privilege vulnerability when it fails to properly handle handles NT pipes, aka "Windows Subsystem for Linux Elevation of Privilege Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8622 - http://www.securityfocus.com/bid/100040 - http://www.securitytracker.com/id/1039103
CVE ID: CVE-2017-8623 State: PUBLISHED Published: 2017-08-08T21:00:00Z Last Updated: 2024-09-16T18:55:23.590Z Vendors: Microsoft Corporation Products: Windows Hyper-V Problem Types: Denial of Service Description: Windows Hyper-V in Windows 10 1607, 1703, and Windows Server 2016 allows a denial of service vulnerability when it fails to properly validate input from a privileged user on a guest operating system, aka "Windows Hyper-V Denial of Service Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100042 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8623 - http://www.securitytracker.com/id/1039104
CVE ID: CVE-2017-8624 State: PUBLISHED Published: 2017-08-08T21:00:00Z Last Updated: 2024-09-16T23:36:34.258Z Vendors: Microsoft Corporation Products: Common Log File System Driver Problem Types: Elevation of Privilege Description: CLFS in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to the way it handles objects in memory, aka "Windows CLFS Elevation of Privilege Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039106 - http://www.securityfocus.com/b
Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039106 - http://www.securityfocus.com/bid/100061 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8624
CVE ID: CVE-2017-8625 State: PUBLISHED Published: 2017-08-08T21:00:00Z Last Updated: 2024-09-16T16:58:29.913Z Vendors: Microsoft Corporation Products: Internet Explorer Problem Types: Security Feature Bypass Description: Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to bypass Device Guard User Mode Code Integrity (UMCI) policies due to Internet Explorer failing to validate UMCI policies, aka "Internet Explorer Security Feature Bypass Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8625 - https://posts.specterops.io/umci-vs-internet-
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8625 - https://posts.specterops.io/umci-vs-internet-explorer-exploring-cve-2017-8625-3946536c6442 - http://www.securityfocus.com/bid/100063 - http://www.securitytracker.com/id/1039112 - https://oddvar.moe/2017/08/13/bypassing-device-guard-umci-using-chm-cve-2017-8625/
CVE ID: CVE-2017-8627 State: PUBLISHED Published: 2017-08-08T21:00:00Z Last Updated: 2024-09-16T22:19:43.218Z Vendors: Microsoft Corporation Products: Windows Subsystem for Linux Problem Types: Denial of Service Description: Windows Subsystem for Linux in Windows 10 1703, allows a denial of service vulnerability due to the way it handles objects in memory, aka "Windows Subsystem for Linux Denial of Service Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8627 - http://www.securityfocus.com/bid/100065 - http://www.securitytracker.com/id/1039103
CVE ID: CVE-2017-8628 State: PUBLISHED Published: 2017-09-13T01:00:00Z Last Updated: 2024-09-16T22:25:49.794Z Vendors: Microsoft Corporation Products: Microsoft Bluetooth Driver Problem Types: Spoofing Description: Microsoft Bluetooth Driver in Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 allows a spoofing vulnerability due to Microsoft's implementation of the Bluetooth stack, aka "Microsoft Bluetooth Driver Spoofing Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039339 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8628 - http://www.se
racker.com/id/1039339 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8628 - http://www.securityfocus.com/bid/100744
CVE ID: CVE-2017-8629 State: PUBLISHED Published: 2017-09-13T01:00:00Z Last Updated: 2024-09-16T20:37:05.758Z Vendors: Microsoft Corporation Products: Microsoft SharePoint Server Problem Types: Elevation of Privilege Description: Microsoft SharePoint Server 2013 Service Pack 1 allows an elevation of privilege vulnerability when it fails to properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint XSS Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039329 - http://www.securityfocus.com/bid/100725 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8
http://www.securityfocus.com/bid/100725 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8629
CVE ID: CVE-2017-8630 State: PUBLISHED Published: 2017-09-13T01:00:00Z Last Updated: 2024-09-17T04:09:51.106Z Vendors: Microsoft Corporation Products: Microsoft Office Problem Types: Remote Code Execution Description: Microsoft Office 2016 allows a remote code execution vulnerability when it fails to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8631, CVE-2017-8632, and CVE-2017-8744. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8630 - http://www.securityfocus.com/bid/100732 - http://www.securitytracker.com/id/1039315
CVE ID: CVE-2017-8631 State: PUBLISHED Published: 2017-09-13T01:00:00Z Last Updated: 2024-09-16T23:32:04.447Z Vendors: Microsoft Corporation Products: Microsoft Office Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists in Excel Services, Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Web Apps 2013, Microsoft Office Compatibility Pack Service Pack 3, Microsoft Excel Web App 2013 Service Pack 1, Microsoft Excel Viewer 2007 Service Pack 3, and Office Online Server when they fail to properly handle objects in me
1, Microsoft Excel Viewer 2007 Service Pack 3, and Office Online Server when they fail to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8630, CVE-2017-8632, and CVE-2017-8744. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100751 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8631 - http://www.securitytracker.com/id/1039315
CVE ID: CVE-2017-8632 State: PUBLISHED Published: 2017-09-13T01:00:00Z Last Updated: 2024-09-17T04:20:07.139Z Vendors: Microsoft Corporation Products: Microsoft Office Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists in Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Web Apps 2013, Microsoft Excel for Mac 2011, Microsoft Excel 2016 for Mac, and Microsoft Office Compatibility Pack Service Pack 3, when they fail to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8630,
dle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8630, CVE-2017-8631, and CVE-2017-8744. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8632 - http://www.securityfocus.com/bid/100734 - http://www.securitytracker.com/id/1039315
CVE ID: CVE-2017-8633 State: PUBLISHED Published: 2017-08-08T21:00:00Z Last Updated: 2024-09-17T00:36:25.288Z Vendors: Microsoft Corporation Products: Microsoft Windows Problem Types: Elevation of Privilege Description: Windows Error Reporting (WER) in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability, aka "Windows Error Reporting Elevation of Privilege Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8633 - http://www.
Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8633 - http://www.securityfocus.com/bid/100069 - http://www.securitytracker.com/id/1039102
CVE ID: CVE-2017-8634 State: PUBLISHED Published: 2017-08-08T21:00:00Z Last Updated: 2024-09-16T22:03:22.850Z Vendors: Microsoft Corporation Products: Microsoft Scripting Engine Problem Types: Remote Code Execution Description: Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8
638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, and CVE-2017-8674. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42474/ - http://www.securityfocus.com/bid/100043 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8634 - http://www.securitytracker.com/id/1039095
CVE ID: CVE-2017-8635 State: PUBLISHED Published: 2017-08-08T21:00:00Z Last Updated: 2024-09-16T22:03:44.615Z Vendors: Microsoft Corporation Products: Microsoft Scripting Engine Problem Types: Remote Code Execution Description: Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to the way that JavaScript engines render when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8634, CVE-2017-8636, CVE-201
aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8634, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, and CVE-2017-8674. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100055 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8635 - http://www.securitytracker.com/id/1039095 - http://www.securitytracker.com/id/1039094 - https://www.exploit-db.com/exploits/42471/
CVE ID: CVE-2017-8636 State: PUBLISHED Published: 2017-08-08T21:00:00Z Last Updated: 2024-09-17T00:56:30.410Z Vendors: Microsoft Corporation Products: Microsoft Scripting Engine Problem Types: Remote Code Execution Description: Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-86
ndling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8634, CVE-2017-8635, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, and CVE-2017-8674. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8636 - http://www.securityfocus.com/bid/100056 - https://www.exploit-db.com/exploits/42466/ - https://www.exploit-db.com/exploits/42467/ - https://www.exploit-db.com/exploits/42468/ - http://www.securitytra
2466/ - https://www.exploit-db.com/exploits/42467/ - https://www.exploit-db.com/exploits/42468/ - http://www.securitytracker.com/id/1039095 - http://www.securitytracker.com/id/1039094 - https://www.exploit-db.com/exploits/42478/
CVE ID: CVE-2017-8637 State: PUBLISHED Published: 2017-08-08T21:00:00Z Last Updated: 2024-09-16T16:13:50.902Z Vendors: Microsoft Corporation Products: Microsoft Scripting Engine Problem Types: Security Feature Bypass Description: Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to bypass Arbitrary Code Guard (ACG) due to how Microsoft Edge accesses memory in code compiled by the Edge Just-In-Time (JIT) compiler, aka "Scripting Engine Security Feature Bypass Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100045 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8637 - http://www.securit
s.com/bid/100045 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8637 - http://www.securitytracker.com/id/1039095
CVE ID: CVE-2017-8638 State: PUBLISHED Published: 2017-08-08T21:00:00Z Last Updated: 2024-09-16T19:51:55.465Z Vendors: Microsoft Corporation Products: Microsoft Scripting Engine Problem Types: Remote Code Execution Description: Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8
636, CVE-2017-8639, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, and CVE-2017-8674. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8638 - http://www.securityfocus.com/bid/100049 - http://www.securitytracker.com/id/1039095