Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
2017-0289, CVE-2017-8531, and CVE-2017-8533. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8532 - http://www.securityfocus.com/bid/98820 - http://www.securitytracker.com/id/1038662
CVE ID: CVE-2017-8533 State: PUBLISHED Published: 2017-06-15T01:00:00 Last Updated: 2024-08-05T16:41:22.256Z Vendors: Microsoft Corporation Products: Graphics Problem Types: Information Disclosure Description: Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows improper disclosure of memory contents, aka "Graphics Uniscribe Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-0286, CVE-2017-0287, CVE-2017-0288, CVE-2017-0289, CVE-2017-8531, and CVE-2017-8532. Additional Analyst Notes: - CVE Program Container: References: - http://www
2017-0289, CVE-2017-8531, and CVE-2017-8532. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98821 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8533 - https://www.zerodayinitiative.com/advisories/ZDI-19-581/
CVE ID: CVE-2017-8534 State: PUBLISHED Published: 2017-06-15T01:00:00 Last Updated: 2024-08-05T16:41:23.192Z Vendors: Microsoft Corporation Products: Uniscribe Problem Types: Information Disclosure Description: Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, Windows Server 2016, Microsoft Office 2007 SP3, and Microsoft Office 2010 SP2 allows improper disclosure of memory contents, aka "Windows Uniscribe Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-0282, CVE-2017-0284, and CVE-2017-0285. Additional Analyst Notes: - CVE Program Container: References: - https:
CVE-2017-0282, CVE-2017-0284, and CVE-2017-0285. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8534 - http://www.securityfocus.com/bid/98822
CVE ID: CVE-2017-8535 State: PUBLISHED Published: 2017-05-26T20:00:00 Last Updated: 2024-08-05T16:41:23.020Z Vendors: Microsoft Corporation Products: Malware Protection Engine Problem Types: Denial of Server Description: The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to denial of service. aka "Microsoft Malware Protection Engine Denial of Service Vulnerability", a
crafted file leading to denial of service. aka "Microsoft Malware Protection Engine Denial of Service Vulnerability", a different vulnerability than CVE-2017-8536, CVE-2017-8537, CVE-2017-8539, and CVE-2017-8542. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42081/ - http://www.securityfocus.com/bid/98702 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8535 - http://www.securitytracker.com/id/1038571
CVE ID: CVE-2017-8536 State: PUBLISHED Published: 2017-05-26T20:00:00 Last Updated: 2024-08-05T16:41:23.191Z Vendors: Microsoft Corporation Products: Malware Protection Engine Problem Types: Denial of Server Description: The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to denial of service. aka "Microsoft Malware Protection Engine Denial of Service Vulnerability", a
crafted file leading to denial of service. aka "Microsoft Malware Protection Engine Denial of Service Vulnerability", a different vulnerability than CVE-2017-8535, CVE-2017-8537, CVE-2017-8539, and CVE-2017-8542. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42081/ - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8536 - http://www.securityfocus.com/bid/98708 - http://www.securitytracker.com/id/1038571
CVE ID: CVE-2017-8537 State: PUBLISHED Published: 2017-05-26T20:00:00 Last Updated: 2024-08-05T16:41:23.068Z Vendors: Microsoft Corporation Products: Malware Protection Engine Problem Types: Denial of Server Description: The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to denial of service. aka "Microsoft Malware Protection Engine Denial of Service Vulnerability", a
crafted file leading to denial of service. aka "Microsoft Malware Protection Engine Denial of Service Vulnerability", a different vulnerability than CVE-2017-8535, CVE-2017-8536, CVE-2017-8539, and CVE-2017-8542. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42081/ - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8537 - http://www.securityfocus.com/bid/98705 - http://www.securitytracker.com/id/1038571
CVE ID: CVE-2017-8538 State: PUBLISHED Published: 2017-05-26T20:00:00 Last Updated: 2024-08-05T16:41:23.649Z Vendors: Microsoft Corporation Products: Malware Protection Engine Problem Types: Remote Code Execution Description: The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to memory corruption. aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerab
ially crafted file leading to memory corruption. aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability", a different vulnerability than CVE-2017-8540 and CVE-2017-8541. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42081/ - http://www.securityfocus.com/bid/98706 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8538 - http://www.securitytracker.com/id/1038571
CVE ID: CVE-2017-8539 State: PUBLISHED Published: 2017-05-26T20:00:00 Last Updated: 2024-08-05T16:41:23.522Z Vendors: Microsoft Corporation Products: Malware Protection Engine Problem Types: Denial of Server Description: The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to denial of service. aka "Microsoft Malware Protection Engine Denial of Service Vulnerability", a
crafted file leading to denial of service. aka "Microsoft Malware Protection Engine Denial of Service Vulnerability", a different vulnerability than CVE-2017-8535, CVE-2017-8536, CVE-2017-8537, and CVE-2017-8542. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8539 - http://www.securityfocus.com/bid/98704 - http://www.securitytracker.com/id/1038571
CVE ID: CVE-2017-8540 State: PUBLISHED Published: 2017-05-26T20:00:00.000Z Last Updated: 2025-10-21T23:55:40.255Z Vendors: Microsoft Corporation Products: Malware Protection Engine Problem Types: Remote Code Execution Description: The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to memory corruption. aka "Microsoft Malware Protection Engine Remote Code Execution Vul
specially crafted file leading to memory corruption. aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability", a different vulnerability than CVE-2017-8538 and CVE-2017-8541. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8540 - http://www.securityfocus.com/bid/98703 - https://www.exploit-db.com/exploits/42088/ - http://www.securitytracker.com/id/1038571
CVE ID: CVE-2017-8541 State: PUBLISHED Published: 2017-05-26T20:00:00 Last Updated: 2024-08-05T16:41:23.708Z Vendors: Microsoft Corporation Products: Malware Protection Engine Problem Types: Remote Code Execution Description: The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to memory corruption. aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerab
ially crafted file leading to memory corruption. aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability", a different vulnerability than CVE-2017-8538 and CVE-2017-8540. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8541 - http://www.securityfocus.com/bid/98710 - https://www.exploit-db.com/exploits/42092/ - http://www.securitytracker.com/id/1038571
CVE ID: CVE-2017-8542 State: PUBLISHED Published: 2017-05-26T20:00:00 Last Updated: 2024-08-05T16:41:23.289Z Vendors: Microsoft Corporation Products: Malware Protection Problem Types: Denial of Server Description: The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to denial of service. aka "Microsoft Malware Protection Engine Denial of Service Vulnerability", a differ
d file leading to denial of service. aka "Microsoft Malware Protection Engine Denial of Service Vulnerability", a different vulnerability than CVE-2017-8535, CVE-2017-8536, CVE-2017-8537, and CVE-2017-8539. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8542 - http://www.securityfocus.com/bid/98707 - http://www.securitytracker.com/id/1038571
CVE ID: CVE-2017-8543 State: PUBLISHED Published: 2017-06-15T01:00:00.000Z Last Updated: 2025-10-21T23:55:39.576Z Vendors: Microsoft Corporation Products: Microsoft Windows Problem Types: Remote Code Execution Description: Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to take control of the affected system when Windows Search fails to handle objects in memory, aka "Windows Search Remote Code Execution Vulnerability". Additional Analyst Notes: - CVE Prog
handle objects in memory, aka "Windows Search Remote Code Execution Vulnerability". Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/98824 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8543 - http://www.securitytracker.com/id/1038667
CVE ID: CVE-2017-8544 State: PUBLISHED Published: 2017-06-15T01:00:00 Last Updated: 2024-08-05T16:41:23.656Z Vendors: Microsoft Corporation Products: Microsoft Windows Problem Types: Information Disclosure Description: Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to obtain information to further compromise the user's system when Windows Search fails to handle objects in memory, aka "Windows Search Information Disclosure Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98826
Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98826 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8544
CVE ID: CVE-2017-8545 State: PUBLISHED Published: 2017-06-15T01:00:00 Last Updated: 2024-08-05T16:41:23.593Z Vendors: Microsoft Corporation Products: Microsoft Outlook for Mac Problem Types: Spoofing Description: A spoofing vulnerability exists in when Microsoft Outlook for Mac does not sanitize html properly, aka "Microsoft Outlook for Mac Spoofing Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8545 - http://www.securityfocus.com/bid/98917 - http://www.securitytracker.com/id/1038664
CVE ID: CVE-2017-8547 State: PUBLISHED Published: 2017-06-15T01:00:00 Last Updated: 2024-08-05T16:41:23.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 and R2 allow an attacker to execute arbitrary code in the context of the current user when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8519. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8547 - http://
gram Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8547 - http://www.securityfocus.com/bid/98932
CVE ID: CVE-2017-8548 State: PUBLISHED Published: 2017-06-15T01:00:00 Last Updated: 2024-08-05T16:41:24.137Z Vendors: Microsoft Corporation Products: Microsoft Edge Problem Types: Remote Code Execution Description: Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system when Microsoft Edge improperly handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8499, CVE-2017-8520, CVE-2017-8521, and CVE-2017-8549. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/sec
-2017-8549. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8548 - http://www.securitytracker.com/id/1038676 - http://www.securityfocus.com/bid/98954 - https://www.exploit-db.com/exploits/42473/
CVE ID: CVE-2017-8549 State: PUBLISHED Published: 2017-06-15T01:00:00 Last Updated: 2024-08-05T16:41:24.175Z Vendors: Microsoft Corporation Products: Microsoft Edge Problem Types: Remote Code Execution Description: Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system when Microsoft Edge improperly handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8499, CVE-2017-8520, CVE-2017-8521, and CVE-2017-8548. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/sec
-2017-8548. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8549 - http://www.securityfocus.com/bid/98955
CVE ID: CVE-2017-8550 State: PUBLISHED Published: 2017-06-15T01:00:00 Last Updated: 2024-08-05T16:41:23.613Z Vendors: Microsoft Corporation Products: Skype for Business Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists in Skype for Business when the software fails to sanitize specially crafted content, aka "Skype for Business Remote Code Execution Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8550 - https://www.exploit-db.com/exploits/42316/ - http://www.securityfocus.com/bid/98916
CVE ID: CVE-2017-8551 State: PUBLISHED Published: 2017-06-15T01:00:00 Last Updated: 2024-08-05T16:41:23.520Z Vendors: Microsoft Corporation Products: Microsoft SharePoint Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists when Microsoft SharePoint software fails to properly sanitize a specially crafted requests, aka "Microsoft SharePoint XSS vulnerability". Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8551 - http://www.securitytracker.com/id/1038663 - http://www.securityfocus.com/bid/98913
CVE ID: CVE-2017-8552 State: PUBLISHED Published: 2017-06-15T01:00:00 Last Updated: 2024-08-05T16:41:23.618Z Vendors: Microsoft Corporation Products: Microsoft Windows Problem Types: Elevation of Privilege Description: A kernel-mode driver in Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows 8 allows an elevation of privilege when it fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability". This CVE is unique from CVE-2017-0263. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory
Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8552
CVE ID: CVE-2017-8553 State: PUBLISHED Published: 2017-06-15T01:00:00 Last Updated: 2024-08-05T16:41:23.599Z Vendors: Microsoft Corporation Products: Windows kernel Problem Types: Information Disclosure Description: An information disclosure vulnerability exists in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows Server 2016 when the Windows kernel improperly handles objects in memory, aka "GDI Information Disclosure Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038662 - http://www.securityfocus.com/bid/98940 - https://portal.msrc.microsoft.com/en-US/se
www.securitytracker.com/id/1038662 - http://www.securityfocus.com/bid/98940 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8553
CVE ID: CVE-2017-8554 State: PUBLISHED Published: 2017-06-29T13:00:00 Last Updated: 2024-08-05T16:41:23.757Z Vendors: Microsoft Corporation Products: Microsof Windows Problem Types: Information Disclosure Description: The kernel in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an authenticated attacker to obtain memory contents via a specially crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98942 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8554
CVE ID: CVE-2017-8555 State: PUBLISHED Published: 2017-06-15T01:00:00 Last Updated: 2024-08-05T16:41:24.133Z Vendors: Microsoft Corporation Products: Microsoft Edge Problem Types: Security Feature Bypass Description: Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to trick a user into loading a page with malicious content when the Edge Content Security Policy (CSP) fails to properly validate certain specially crafted documents, aka "Microsoft Edge Security Feature Bypass Vulnerability". This CVE ID is unique from CVE-2017-8523 and CVE-2017-8530. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98956 - https://portal.msrc.microso
alyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98956 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8555
CVE ID: CVE-2017-8556 State: PUBLISHED Published: 2017-07-11T21:00:00Z Last Updated: 2024-09-16T18:38:36.895Z Vendors: Microsoft Corporation Products: Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 Problem Types: Elevation of Privilege Description: Graphics in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, aka "Microsoft Graphics C
ws an elevation of privilege vulnerability when it fails to properly handle objects in memory, aka "Microsoft Graphics Component Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2017-8573 and CVE-2017-8574. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99439 - https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8556 - http://www.securitytracker.com/id/1038856
CVE ID: CVE-2017-8557 State: PUBLISHED Published: 2017-07-11T21:00:00Z Last Updated: 2024-09-17T01:51:27.597Z Vendors: Microsoft Corporation Products: Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 Problem Types: Information Disclosure Description: Windows System Information Console in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an information disclosure vulnerability improperly parses XML input containing a reference to an external ent
016 allows an information disclosure vulnerability improperly parses XML input containing a reference to an external entity, aka "Windows System Information Console Information Disclosure Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038855 - https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8557 - http://www.securityfocus.com/bid/99387 - http://www.securityfocus.com/bid/99398