deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-2389
Published: 2018-02-14
Description: Under certain conditions a malicious user can inject log files of SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, hiding important information in the log file.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-116
References: https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/; https://launchpad.support.sap.com/#/notes/2525222; https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
CVE: CVE-2018-2390
Published: 2018-02-14
Description: Under certain conditions a malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, via IGS Chart service.
CVSS Score: 6.5 (MEDIUM)
References: https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/; https://launchpad.support.sap.com/#/notes/2525222; https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
CVE: CVE-2018-2391
Published: 2018-02-14
Description: Under certain conditions a malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, via IGS portwatcher service.
CVSS Score: 6.5 (MEDIUM)
References: https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/; https://launchpad.support.sap.com/#/notes/2525222; https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
CVE: CVE-2018-2392
Published: 2018-02-14
Description: Under certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropriately causing the SAP Internet Graphics Server (IGS) to become unavailable.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/; https://launchpad.support.sap.com/#/notes/2525222; https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
CVE: CVE-2018-2393
Published: 2018-02-14
Description: Under certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropriately causing the SAP Internet Graphics Server (IGS) to become unavailable.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/; https://launchpad.support.sap.com/#/notes/2525222; https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
CVE: CVE-2018-2394
Published: 2018-02-14
Description: Under certain conditions an unauthenticated malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, services and/or system files.
CVSS Score: 6.5 (MEDIUM)
References: https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/; https://launchpad.support.sap.com/#/notes/2525222; https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
CVE: CVE-2018-2395
Published: 2018-02-14
Description: Under certain conditions a malicious user may retrieve information on SAP Internet Graphic Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, overwrite existing image or corrupt other type of files.
CVSS Score: 8.8 (HIGH)
References: http://www.securityfocus.com/bid/103019; https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/; https://launchpad.support.sap.com/#/notes/2525222
CVE: CVE-2018-2396
Published: 2018-02-14
Description: Under certain conditions a malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, using IGS Interpreter service.
CVSS Score: 6.5 (MEDIUM)
References: https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/; https://launchpad.support.sap.com/#/notes/2525222; https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
CVE: CVE-2018-1287
Published: 2018-02-14
Description: In Apache JMeter 2.X and 3.X, when using Distributed Test only (RMI based), jmeter server binds RMI Registry to wildcard host. This could allow an attacker to get Access to JMeterEngine and send unauthorized code.
CVSS Score: 9.8 (CRITICAL)
References: http://mail-archives.apache.org/mod_mbox/www-announce/201802.mbox/%3CCAH9fUpYsFx1%2Brwz1A%3Dmc7wAgbDHARyj1VrWNg41y9OySuL1mqw%40mail.gmail.com%3E; http://www.securityfocus.com/bid/103068; https://lists.apache.org/thread.html/31e0adbeca9d865ff74d0906b2248a41a1457cb54c1afbe5947df58b%40%3Cissues.jmeter.apache.org%3E
CVE: CVE-2017-1499
Published: 2018-02-14
Description: IBM Maximo Asset Management 7.5 and 7.6 could allow a remote attacker to include arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable Web server. IBM X-Force ID: 129106.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://www.ibm.com/support/docview.wss?uid=swg22012781; https://exchange.xforce.ibmcloud.com/vulnerabilities/129106; http://www.ibm.com/support/docview.wss?uid=swg22012781
CVE: CVE-2017-1682
Published: 2018-02-14
Description: IBM Connections 4.0, 4.5, 5.0, 5.5, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134004.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22012900; https://exchange.xforce.ibmcloud.com/vulnerabilities/134004; http://www.ibm.com/support/docview.wss?uid=swg22012900
CVE: CVE-2018-7032
Published: 2018-02-14
Description: webcheckout in myrepos through 1.20171231 does not sanitize URLs that are passed to git clone, allowing a malicious website operator or a MitM attacker to take advantage of it for arbitrary code execution, as demonstrated by an "ext::sh -c" attack or an option injection attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-74
References: https://bugs.debian.org/840014; https://bugs.debian.org/840014
CVE: CVE-2018-7034
Published: 2018-02-14
Description: TRENDnet TEW-751DR v1.03B03, TEW-752DRU v1.03B01, and TEW733GR v1.03B01 devices allow authentication bypass via an AUTHORIZED_GROUP=1 value, as demonstrated by a request for getcfg.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://blogs.securiteam.com/index.php/archives/3627; https://blogs.securiteam.com/index.php/archives/3627
CVE: CVE-2017-18187
Published: 2018-02-14
Description: In ARM mbed TLS before 2.7.0, there is a bounds-check bypass through an integer overflow in PSK identity parsing in the ssl_parse_client_psk_identity() function in library/ssl_srv.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: http://www.securityfocus.com/bid/103055; https://github.com/ARMmbed/mbedtls/blob/master/ChangeLog; https://github.com/ARMmbed/mbedtls/commit/83c9f495ffe70c7dd280b41fdfd4881485a3bc28
CVE: CVE-2017-6229
Published: 2018-02-14
Description: Ruckus Networks Unleashed AP firmware releases before 200.6.10.1.x and Ruckus Networks Zone Director firmware releases 10.1.0.0.x, 9.10.2.0.x, 9.12.3.0.x, 9.13.3.0.x, 10.0.1.0.x or before contain authenticated Root Command Injection in the CLI that could allow authenticated valid users to execute privileged commands on the respective systems.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://ruckus-www.s3.amazonaws.com/pdf/security/faq-security-advisory-id-20180202-v1.0.txt; https://ruckus-www.s3.amazonaws.com/pdf/security/faq-security-advisory-id-20180202-v1.0.txt
CVE: CVE-2017-6230
Published: 2018-02-14
Description: Ruckus Networks Solo APs firmware releases R110.x or before and Ruckus Networks SZ managed APs firmware releases R5.x or before contain authenticated Root Command Injection in the web-GUI that could allow authenticated valid users to execute privileged commands on the respective systems.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://ruckus-www.s3.amazonaws.com/pdf/security/faq-security-advisory-id-20180202-v1.0.txt; https://ruckus-www.s3.amazonaws.com/pdf/security/faq-security-advisory-id-20180202-v1.0.txt
CVE: CVE-2018-7039
Published: 2018-02-14
Description: CCN-lite 2.0.0 Beta allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact because the ccnl_ndntlv_prependBlob function in ccnl-pkt-ndntlv.c can be called with wrong arguments. Specifically, there is an incorrect integer data type causing a negative third argument in some cases of crafted TLV data with inconsistent length information.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://github.com/cn-uofbasel/ccn-lite/issues/191; https://github.com/cn-uofbasel/ccn-lite/issues/191
CVE: CVE-2017-18188
Published: 2018-02-14
Description: OpenRC opentmpfiles through 0.1.3, when the fs.protected_hardlinks sysctl is turned off, allows local users to obtain ownership of arbitrary files by creating a hard link inside a directory on which "chown -R" will be run.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: https://github.com/OpenRC/opentmpfiles/issues/3; https://github.com/OpenRC/opentmpfiles/issues/3
CVE: CVE-2017-13273
Published: 2018-02-15
Description: In xt_qtaguid.c, there is a race condition due to insufficient locking. This could lead to local elevation of privileges with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-65853158.
CVSS Score: 7.0 (HIGH)
References: https://source.android.com/security/bulletin/2018-02-01; https://source.android.com/security/bulletin/2018-02-01
CVE: CVE-2018-0742
Published: 2018-02-15
Description: The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Kernel Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0756. CVE-2018-0809, CVE-2018-0820 and CVE-2018-0843.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/102937; http://www.securitytracker.com/id/1040373; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0742
CVE: CVE-2018-0755
Published: 2018-02-15
Description: The Microsoft Windows Embedded OpenType (EOT) font engine in Microsoft Windows 7 SP1 and Windows Server 2008 R2 allows information disclosure, due to how the Windows EOT font engine handles embedded fonts, aka "Windows EOT Font Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0760, CVE-2018-0761, and CVE-2018-0855.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/102934; http://www.securitytracker.com/id/1040374; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0755
CVE: CVE-2018-0756
Published: 2018-02-15
Description: The Windows kernel in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Kernel Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0742, CVE-2018-0809, CVE-2018-0820 and CVE-2018-0843.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/102941; http://www.securitytracker.com/id/1040373; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0756
CVE: CVE-2018-0757
Published: 2018-02-15
Description: The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way objects are handled in memory, aka "Windows Kernel Information Disclosure Vulnerability". This CVE is unique from CVE-2018-0810.
CVSS Score: 4.7 (MEDIUM)
References: http://www.securityfocus.com/bid/102947; http://www.securitytracker.com/id/1040373; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0757
CVE: CVE-2018-0760
Published: 2018-02-15
Description: The Microsoft Windows Embedded OpenType (EOT) font engine in Microsoft Windows 7 SP1, Windows Server 2008 R2, and Windows Server 2012 allows information disclosure, due to how the Windows EOT font engine handles embedded fonts, aka "Windows EOT Font Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0755, CVE-2018-0761, and CVE-2018-0855.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/102953; http://www.securitytracker.com/id/1040374; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0760
CVE: CVE-2018-0761
Published: 2018-02-15
Description: The Microsoft Windows Embedded OpenType (EOT) font engine in Microsoft Windows 7 SP1 and Windows Server 2008 R2 allows information disclosure, due to how the Windows EOT font engine handles embedded fonts, aka "Windows EOT Font Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0755, CVE-2018-0760, and CVE-2018-0855.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/102952; http://www.securitytracker.com/id/1040374; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0761
CVE: CVE-2018-0763
Published: 2018-02-15
Description: Microsoft Edge in Microsoft Windows 10 1703 and 1709 allows information disclosure, due to how Edge handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0839.
CVSS Score: 3.1 (LOW)
CWE: CWE-200
References: http://www.securityfocus.com/bid/102873; http://www.securitytracker.com/id/1040372; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0763
CVE: CVE-2018-0771
Published: 2018-02-15
Description: Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows a security feature bypass, due to how Edge handles different-origin requests, aka "Microsoft Edge Security Feature Bypass".
CVSS Score: 4.3 (MEDIUM)
References: http://www.securityfocus.com/bid/102857; http://www.securitytracker.com/id/1040372; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0771
CVE: CVE-2018-0809
Published: 2018-02-15
Description: The Windows kernel in Windows 10, versions 1703 and 1709, and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0742, CVE-2018-0756, CVE-2018-0820 and CVE-2018-0843.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/102933; http://www.securitytracker.com/id/1040373; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0809
CVE: CVE-2018-0810
Published: 2018-02-15
Description: The Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2, and Windows Server 2012 allows an information disclosure vulnerability due to the way memory is initialized, aka "Windows Kernel Information Disclosure Vulnerability". This CVE is unique from CVE-2018-0757.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-665
References: http://www.securityfocus.com/bid/102938; http://www.securitytracker.com/id/1040373; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0810
CVE: CVE-2018-0820
Published: 2018-02-15
Description: The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Kernel Elevation Of Privilege Vulnerability". This CVE is unique from CVE-2018-0742, CVE-2018-0756, CVE-2018-0809 and CVE-2018-0843.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/102945; http://www.securitytracker.com/id/1040373; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0820
CVE: CVE-2018-0821
Published: 2018-02-15
Description: AppContainer in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way constrained impersonations are handled, aka "Windows AppContainer Elevation Of Privilege Vulnerability".
CVSS Score: 7.0 (HIGH)
CWE: CWE-269
References: http://www.securityfocus.com/bid/102939; http://www.securitytracker.com/id/1040379; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0821
CVE: CVE-2018-0822
Published: 2018-02-15
Description: NTFS in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way NTFS handles objects, aka "Windows NTFS Global Reparse Point Elevation of Privilege Vulnerability".
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/102942; http://www.securitytracker.com/id/1040378; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0822
CVE: CVE-2018-0823
Published: 2018-02-15
Description: The Named Pipe File System in Windows 10 version 1709 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way the Named Pipe File System handles objects, aka "Named Pipe File System Elevation of Privilege Vulnerability".
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/102919; http://www.securitytracker.com/id/1040379; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0823
CVE: CVE-2018-0825
Published: 2018-02-15
Description: StructuredQuery in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows a remote code execution vulnerability due to how objects are handled in memory, aka "StructuredQuery Remote Code Execution Vulnerability".
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/102920; http://www.securitytracker.com/id/1040366; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0825
CVE: CVE-2018-0826
Published: 2018-02-15
Description: Windows Storage Services in Windows 10 versions 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Storage Services Elevation of Privilege Vulnerability".
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/102944; http://www.securitytracker.com/id/1040379; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0826
CVE: CVE-2018-0827
Published: 2018-02-15
Description: Windows Scripting Host (WSH) in Windows 10 versions 1703 and 1709 and Windows Server, version 1709 allows a Device Guard security feature bypass vulnerability due to the way objects are handled in memory, aka "Windows Security Feature Bypass Vulnerability".
CVSS Score: 5.3 (MEDIUM)
References: http://www.securityfocus.com/bid/102927; http://www.securitytracker.com/id/1040373; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0827
CVE: CVE-2018-0828
Published: 2018-02-15
Description: Windows 10 version 1607 and Windows Server 2016 allow an elevation of privilege vulnerability due to how the MultiPoint management account password is stored, aka "Windows Elevation of Privilege Vulnerability".
CVSS Score: 7.8 (HIGH)
CWE: CWE-522
References: http://www.securityfocus.com/bid/102935; http://www.securitytracker.com/id/1040373; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0828
CVE: CVE-2018-0829
Published: 2018-02-15
Description: The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to how objects in memory are handled, aka "Windows Information Disclosure Vulnerability". This CVE is unique from CVE-2018-0830 and CVE-2018-0832.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/102948; http://www.securitytracker.com/id/1040373; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0829
CVE: CVE-2018-0830
Published: 2018-02-15
Description: The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to how objects in memory are handled, aka "Windows Information Disclosure Vulnerability". This CVE is unique from CVE-2018-0829 and CVE-2018-0832.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/102949; http://www.securitytracker.com/id/1040373; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0830
CVE: CVE-2018-0831
Published: 2018-02-15
Description: The Windows kernel in Windows 10 versions 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how objects in memory are handled, aka "Windows Kernel Elevation of Privilege Vulnerability".
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/102943; http://www.securitytracker.com/id/1040373; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0831
CVE: CVE-2018-0832
Published: 2018-02-15
Description: The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to how objects in memory are handled, aka "Windows Information Disclosure Vulnerability". This CVE is unique from CVE-2018-0829 and CVE-2018-0830.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-401
References: http://www.securityfocus.com/bid/102923; http://www.securitytracker.com/id/1040373; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0832
CVE: CVE-2018-0833
Published: 2018-02-15
Description: The Microsoft Server Message Block 2.0 and 3.0 (SMBv2/SMBv3) client in Windows 8.1 and RT 8.1 and Windows Server 2012 R2 allows a denial of service vulnerability due to how specially crafted requests are handled, aka "SMBv2/SMBv3 Null Dereference Denial of Service Vulnerability".
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/102924; http://www.securitytracker.com/id/1040375; https://github.com/KINGSABRI/CVE-in-Ruby/tree/master/CVE-2018-0833
CVE: CVE-2018-0834
Published: 2018-02-15
Description: Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0835, CVE-2018-0836, CVE-2018-0837, CVE-2018-0838, CVE-2018-0840, CVE-2018-0856, CVE-2018-0857, CVE-2018-0858, CVE-2018-0859, CVE-2018-0860, CVE-2018-0861, and CVE-2018-0866.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/102859; http://www.securitytracker.com/id/1040372; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0834