Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
7-11863 and CVE-2017-11874. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101749 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11872 - http://www.securitytracker.com/id/1039801
CVE ID: CVE-2017-11873 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-16T18:34:48.468Z Vendors: Microsoft Corporation Products: ChakraCore, Microsoft Edge Problem Types: Remote Code Execution Description: ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11
-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, and CVE-2017-11871. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11873 - http://www.securitytracker.com/id/1039780 - http://www.securityfocus.com/bid/101728 - https://www.exploit-db.com/exploits/43154/
CVE ID: CVE-2017-11874 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-16T17:32:43.644Z Vendors: Microsoft Corporation Products: Microsoft Edge Problem Types: Security Feature Bypass Description: Microsoft Edge in Microsoft Windows 10 1703, 1709, Windows Server, version 1709, and ChakraCore allows an attacker to bypass Control Flow Guard (CFG) to run arbitrary code on a target system, due to how Microsoft Edge handles accessing memory in code compiled by the Edge Just-In-Time (JIT) compiler, aka "Microsoft Edge Security Feature Bypass Vulnerability". This CVE ID is unique from CVE-2017-11863 and CVE-2017-11872. Additional Analyst Notes: - CVE Program Container: Referen
This CVE ID is unique from CVE-2017-11863 and CVE-2017-11872. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101750 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11874 - http://www.securitytracker.com/id/1039801
CVE ID: CVE-2017-11876 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-17T00:26:38.656Z Vendors: Microsoft Corporation Products: Microsoft Server Problem Types: Elevation of Privilege Description: Microsoft Project Server and Microsoft SharePoint Enterprise Server 2016 allow an attacker to use cross-site forgery to read content that they are not authorized to read, use the victim's identity to take actions on the web application on behalf of the victim, such as change permissions and delete content, and inject malicious content in the browser of the victim, aka "Microsoft Project Server Elevation of Privilege Vulnerability". Additional Analyst Notes: - CVE Program Cont
ictim, aka "Microsoft Project Server Elevation of Privilege Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039789 - http://www.securitytracker.com/id/1039788 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11876 - http://www.securityfocus.com/bid/101754
CVE ID: CVE-2017-11877 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-16T23:30:46.800Z Vendors: Microsoft Corporation Products: Microsoft Office Problem Types: Security Feature Bypass Description: Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Compatibility Pack Service Pack 3, Microsoft Excel Viewer 2007 Service Pack 3, and Microsoft Excel 2016 for Mac allow a security feature bypass by not enforcing macro settings on an Excel document, aka "Microsoft Excel Security Feature Bypass Vulnerability". Additional Analyst Notes: - CV
ttings on an Excel document, aka "Microsoft Excel Security Feature Bypass Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11877 - http://www.securitytracker.com/id/1039783 - http://www.securityfocus.com/bid/101747
CVE ID: CVE-2017-11878 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-17T04:05:13.407Z Vendors: Microsoft Corporation Products: Microsoft Office Problem Types: Remote Code Execution Description: Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Compatibility Pack Service Pack 3, and Microsoft Excel Viewer 2007 Service Pack 3 allow an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka "Microsoft Excel Memory Corruption Vulnerability". Additional Analyst Notes: - CV
properly handle objects in memory, aka "Microsoft Excel Memory Corruption Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039783 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11878 - http://www.securityfocus.com/bid/101756
CVE ID: CVE-2017-11879 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-16T22:14:43.416Z Vendors: Microsoft Corporation Products: ASP.NET Core Problem Types: Elevation of Privilege Description: ASP.NET Core 2.0 allows an attacker to steal log-in session information such as cookies or authentication tokens via a specially crafted URL aka "ASP.NET Core Elevation Of Privilege Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11879 - http://www.securityfocus.com/bid/101713 - http://www.securitytracker.com/id/1039793
CVE ID: CVE-2017-11880 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-17T04:28:48.281Z Vendors: Microsoft Corporation Products: Windows Kernel Problem Types: Information Disclosure Description: Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to run a specially crafted application and obtain information to further compromise the user's system due to the Windows kernel improperly initializing objects in memory, aka "Windows Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11831. Additional An
in memory, aka "Windows Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11831. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101755 - http://www.securitytracker.com/id/1039782 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11880
CVE ID: CVE-2017-11882 State: PUBLISHED Published: 2017-11-15T03:00:00.000Z Last Updated: 2025-10-21T23:55:30.163Z Vendors: Microsoft Corporation Products: Microsoft Office Problem Types: Remote Code Execution Description: Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Microsoft Office 2016 allow an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11884. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/embed
1884. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/embedi/CVE-2017-11882 - https://github.com/unamer/CVE-2017-11882 - http://reversingminds-blog.logdown.com/posts/3907313-fileless-attack-in-word-without-macros-cve-2017-11882 - https://github.com/rxwx/CVE-2017-11882 - http://www.securityfocus.com/bid/101757 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11882 - https://researchcenter.paloaltonetworks.com/2017/12/unit42-analysis-of-cve-2017-11882-exploit-in-the-wild/ - http://www.securitytracker.com/id/1039783 - https://www.kb.cert.org/vuls/id/421280 - https://0patch.blogspot.com/2017/11/did-microsof
curitytracker.com/id/1039783 - https://www.kb.cert.org/vuls/id/421280 - https://0patch.blogspot.com/2017/11/did-microsoft-just-manually-patch-their.html - https://0patch.blogspot.com/2017/11/official-patch-for-cve-2017-11882-meets.html - https://github.com/0x09AL/CVE-2017-11882-metasploit - https://www.exploit-db.com/exploits/43163/ - https://web.archive.org/web/20181104111128/https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about/
CVE ID: CVE-2017-11883 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-16T23:06:51.531Z Vendors: Microsoft Corporation Products: ASP.NET Problem Types: Denial of Service Description: .NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly handling web requests, aka ".NET CORE Denial Of Service Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11883 - http://www.securityfocus.com/bid/101835 - http://www.securitytracker.com/id/1039793
CVE ID: CVE-2017-11884 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-17T01:25:49.834Z Vendors: Microsoft Corporation Products: Microsoft Office Problem Types: Remote Code Execution Description: Microsoft Excel 2016 Click-to-Run (C2R) allows an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11882. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039783 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11884 - http://www.securityfocus
d/1039783 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11884 - http://www.securityfocus.com/bid/101766
CVE ID: CVE-2017-11885 State: PUBLISHED Published: 2017-12-12T21:00:00Z Last Updated: 2024-09-16T22:46:52.379Z Vendors: Microsoft Corporation Products: Microsoft Windows Problem Types: Remote Code Execution Description: Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allow a remote code execution vulnerability due to the way the Routing and Remote Access service handles requests, aka "Windows RRAS Service Remote Code Execution Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en
on Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11885 - http://www.securityfocus.com/bid/102055 - http://www.securitytracker.com/id/1039987 - https://www.exploit-db.com/exploits/44616/
CVE ID: CVE-2017-11886 State: PUBLISHED Published: 2017-12-12T21:00:00Z Last Updated: 2024-09-16T22:52:06.317Z Vendors: Microsoft Corporation Products: Internet Explorer Problem Types: Remote Code Execution Description: Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user, due to how Internet Explorer handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895,
lnerability". This CVE ID is unique from CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039991 - http://www.securityfocus.com/bid/102062 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11886
CVE ID: CVE-2017-11887 State: PUBLISHED Published: 2017-12-12T21:00:00Z Last Updated: 2024-09-16T23:55:26.673Z Vendors: Microsoft Corporation Products: Internet Explorer Problem Types: Information Disclosure Description: Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how Internet Explorer handle objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11906 and CVE-2017-11919. Addition
ing Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11906 and CVE-2017-11919. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102063 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11887 - http://www.securitytracker.com/id/1039993
CVE ID: CVE-2017-11888 State: PUBLISHED Published: 2017-12-12T21:00:00Z Last Updated: 2024-09-17T00:11:14.292Z Vendors: Microsoft Corporation Products: Microsoft Edge Problem Types: Remote Code Execution Description: Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how Microsoft Edge handles objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039990 - http://www.securityfocus.com/bid/102065 - https://portal.msrc.microsoft.com/en-US/security-gu
tytracker.com/id/1039990 - http://www.securityfocus.com/bid/102065 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11888
CVE ID: CVE-2017-11889 State: PUBLISHED Published: 2017-12-12T21:00:00Z Last Updated: 2024-09-17T03:48:20.525Z Vendors: Microsoft Corporation Products: ChakraCore, Microsoft Edge Problem Types: Remote Code Execution Description: ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11907, CVE-20
, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039990 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11889 - http://www.securityfocus.com/bid/102080
CVE ID: CVE-2017-11890 State: PUBLISHED Published: 2017-12-12T21:00:00Z Last Updated: 2024-09-17T04:09:42.061Z Vendors: Microsoft Corporation Products: Internet Explorer Problem Types: Remote Code Execution Description: Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user, due to how Internet Explorer handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895,
lnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102082 - http://www.securitytracker.com/id/1039991 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11890 - https://www.exploit-db.com/exploits/43369/
CVE ID: CVE-2017-11893 State: PUBLISHED Published: 2017-12-12T21:00:00Z Last Updated: 2024-09-16T23:21:28.465Z Vendors: Microsoft Corporation Products: ChakraCore, Microsoft Edge Problem Types: Remote Code Execution Description: ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11907, CVE-2017-119
2017-11890, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102081 - http://www.securitytracker.com/id/1039990 - https://www.exploit-db.com/exploits/43466/ - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11893
CVE ID: CVE-2017-11894 State: PUBLISHED Published: 2017-12-12T21:00:00Z Last Updated: 2024-09-17T02:32:01.262Z Vendors: Microsoft Corporation Products: ChakraCore, Microsoft Edge, Internet Explorer Problem Types: Remote Code Execution Description: ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and and Internet Explorer adn Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". T
er, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102053 - http://www.securitytracker.com/id/1039990 - http://www.securitytracker.com/id/1039991 - https://portal.msrc.microsoft.com/en-US/security-gu
tracker.com/id/1039990 - http://www.securitytracker.com/id/1039991 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11894
CVE ID: CVE-2017-11895 State: PUBLISHED Published: 2017-12-12T21:00:00Z Last Updated: 2024-09-17T00:51:41.601Z Vendors: Microsoft Corporation Products: ChakraCore, Microsoft Edge, Internet Explorer Problem Types: Remote Code Execution Description: ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Internet Explorer and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID i
ow the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11895 - http://www.securitytracker.com/id/1039990 - http://www.securitytracker.com/id/1039991 - http://www.securityfo
17-11895 - http://www.securitytracker.com/id/1039990 - http://www.securitytracker.com/id/1039991 - http://www.securityfocus.com/bid/102054
CVE ID: CVE-2017-11899 State: PUBLISHED Published: 2017-12-12T21:00:00Z Last Updated: 2024-09-17T01:16:24.032Z Vendors: Microsoft Corporation Products: Device Guard Problem Types: Security Feature Bypass Description: Device Guard in Windows 10 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows a security feature bypass vulnerability due to the way untrusted files are handled, aka "Microsoft Windows Security Feature Bypass Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11899 - http://www.securitytracker.com/id/1039992 - http://www.securityfocus.com/
US/security-guidance/advisory/CVE-2017-11899 - http://www.securitytracker.com/id/1039992 - http://www.securityfocus.com/bid/102077
CVE ID: CVE-2017-11901 State: PUBLISHED Published: 2017-12-12T21:00:00Z Last Updated: 2024-09-17T01:36:22.869Z Vendors: Microsoft Corporation Products: Internet Explorer Problem Types: Remote Code Execution Description: Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to how Internet Explorer handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-
ion Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11903, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11901 - http://www.securityfocus.com/bid/102046 - http://www.securitytracker.com/id/1039991