deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-8679
Published: 2017-09-13
Description: The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8708, CVE-2017-8709, and CVE-2017-8719.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/100720; http://www.securitytracker.com/id/1039325; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8679
CVE: CVE-2017-8680
Published: 2017-09-13
Description: The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT 8.1 allows an information disclosure vulnerability when it improperly handles objects in memory, aka "Win32k Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8678, CVE-2017-8677, CVE-2017-8681, and CVE-2017-8687.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/100722; http://www.securitytracker.com/id/1039338; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8680
CVE: CVE-2017-8681
Published: 2017-09-13
Description: The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it improperly handles objects in memory, aka "Win32k Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8678, CVE-2017-8680, CVE-2017-8677, and CVE-2017-8687.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/100727; http://www.securitytracker.com/id/1039338; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8681
CVE: CVE-2017-8682
Published: 2017-09-13
Description: Windows graphics on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, Windows Server 2016, Microsoft Office Word Viewer, Microsoft Office 2007 Service Pack 3 , and Microsoft Office 2010 Service Pack 2 allows an attacker to execute remote code by the way it handles embedded fonts, aka "Win32k Graphics Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8683.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/100772; http://www.securitytracker.com/id/1039352; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8682
CVE: CVE-2017-8683
Published: 2017-09-13
Description: Windows graphics on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows an attacker to execute remote code by the way it handles embedded fonts, aka "Win32k Graphics Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8682.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/100781; http://www.securitytracker.com/id/1039338; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8683
CVE: CVE-2017-8684
Published: 2017-09-13
Description: Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT 8.1, allows information disclosure by the way it discloses kernel memory addresses, aka "Windows GDI+ Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8685 and CVE-2017-8688.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/100782; http://www.securitytracker.com/id/1039338; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8684
CVE: CVE-2017-8685
Published: 2017-09-13
Description: Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows information disclosure by the way it discloses kernel memory addresses, aka "Windows GDI+ Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8684 and CVE-2017-8688.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/100724; http://www.securitytracker.com/id/1039338; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8685
CVE: CVE-2017-8686
Published: 2017-09-13
Description: The Windows Server DHCP service in Windows Server 2012 Gold and R2, and Windows Server 2016 allows an attacker to either run arbitrary code on the DHCP failover server or cause the DHCP service to become nonresponsive, due to a memory corruption vulnerability in the Windows Server DHCP service, aka "Windows DHCP Server Remote Code Execution Vulnerability".
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100730; http://www.securitytracker.com/id/1039337; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8686
CVE: CVE-2017-8687
Published: 2017-09-13
Description: The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it improperly handles objects in memory, aka "Win32k Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8678, CVE-2017-8680, CVE-2017-8677, and CVE-2017-8681.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/100736; http://www.securitytracker.com/id/1039325; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8687
CVE: CVE-2017-8688
Published: 2017-09-13
Description: Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows information disclosure by the way it discloses kernel memory addresses, aka "Windows GDI+ Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8684 and CVE-2017-8685.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/100756; http://www.securitytracker.com/id/1039338; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8688
CVE: CVE-2017-8692
Published: 2017-09-13
Description: The Windows Uniscribe component on Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows remote code execution vulnerability when it fails to properly handle objects in memory, aka "Uniscribe Remote Code Execution Vulnerability".
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100762; http://www.securitytracker.com/id/1039344; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8692
CVE: CVE-2017-8695
Published: 2017-09-13
Description: Windows Uniscribe in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607, 1703, and Server 2016; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for Mac 2011 and 2016; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010 Attendee; and Live Meeting 2007 Add-in and Console allows an attacker to obtain information to further compromise a user's system via a specially crafted document or an untrusted webpage, aka "Graphics Component Information Disclosure Vulnerability."
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/100773; http://www.securitytracker.com/id/1039344; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8695
CVE: CVE-2017-8696
Published: 2017-09-13
Description: Windows Uniscribe in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for Mac 2011 and 2016; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010 Attendee; and Live Meeting 2007 Add-in and Console allows an attacker to execute code remotely via a specially crafted website or a specially crafted document or email attachment, aka "Microsoft Graphics Component Remote Code Execution."
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100780; http://www.securitytracker.com/id/1039344; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8696
CVE: CVE-2017-8699
Published: 2017-09-13
Description: Windows Shell in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to run arbitrary code in the context of the current user, due to the way that Windows Shell validates file copy destinations, aka "Windows Shell Remote Code Execution Vulnerability".
CVSS Score: 7.0 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/100783; http://www.securitytracker.com/id/1039331; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8699
CVE: CVE-2017-8702
Published: 2017-09-13
Description: Windows Error Reporting (WER) in Microsoft Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows an attacker to gain greater access to sensitive information and system functionality, due to the way that WER handles and executes files, aka "Windows Elevation of Privilege Vulnerability".
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/100785; http://www.securitytracker.com/id/1039353; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8702
CVE: CVE-2017-8704
Published: 2017-09-13
Description: The Windows Hyper-V component on Microsoft Windows 10 1607 and Windows Server 2016 allows a denial of service vulnerability when it fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Denial of Service Vulnerability".
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/100787; http://www.securitytracker.com/id/1039317; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8704
CVE: CVE-2017-8706
Published: 2017-09-13
Description: The Windows Hyper-V component on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8707, CVE-2017-8711, CVE-2017-8712, and CVE-2017-8713.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/100789; http://www.securitytracker.com/id/1039317; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8706
CVE: CVE-2017-8707
Published: 2017-09-13
Description: The Windows Hyper-V component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it fails to properly validate input from an authenticated user on a guest operating system, aka Hyper-V Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8706, CVE-2017-8711, CVE-2017-8712, and CVE-2017-8713.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/100790; http://www.securitytracker.com/id/1039317; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8707
CVE: CVE-2017-8708
Published: 2017-09-13
Description: The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8679, CVE-2017-8709, and CVE-2017-8719.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/100791; http://www.securitytracker.com/id/1039325; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8708
CVE: CVE-2017-8709
Published: 2017-09-13
Description: The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8708, CVE-2017-8679, and CVE-2017-8719.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/100792; http://www.securitytracker.com/id/1039325; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8709
CVE: CVE-2017-8710
Published: 2017-09-13
Description: The Microsoft Common Console Document (.msc) in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1 allows an attacker to read arbitrary files via an XML external entity (XXE) declaration, due to the way that the Microsoft Common Console Document (.msc) parses XML input containing a reference to an external entity, aka "Windows Information Disclosure Vulnerability".
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-611
References: http://www.securityfocus.com/bid/100793; http://www.securitytracker.com/id/1039325; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8710
CVE: CVE-2017-8711
Published: 2017-09-13
Description: The Windows Hyper-V component on Microsoft Windows 10 1607 and Windows Server 2016 allows an information disclosure vulnerability when it fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8707, CVE-2017-8706, CVE-2017-8712, and CVE-2017-8713.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/100794; http://www.securitytracker.com/id/1039317; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8711
CVE: CVE-2017-8712
Published: 2017-09-13
Description: The Windows Hyper-V component on Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an information disclosure vulnerability when it fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8707, CVE-2017-8711, CVE-2017-8706, and CVE-2017-8713.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/100795; http://www.securitytracker.com/id/1039317; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8712
CVE: CVE-2017-8713
Published: 2017-09-13
Description: The Windows Hyper-V component on Microsoft Windows Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8707, CVE-2017-8711, CVE-2017-8712, and CVE-2017-8706.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/100796; http://www.securitytracker.com/id/1039317; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8713
CVE: CVE-2017-8714
Published: 2017-09-13
Description: The Windows Hyper-V component on Microsoft Windows 8.1, Windows Server 2012 Gold and R2,, Windows 10 1607, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly validate input from an authenticated user on a guest operating system, aka "Remote Desktop Virtual Host Remote Code Execution Vulnerability".
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/100797; http://www.securitytracker.com/id/1039341; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8714
CVE: CVE-2017-8716
Published: 2017-09-13
Description: Windows Control Flow Guard in Microsoft Windows 10 Version 1703 allows an attacker to run a specially crafted application to bypass Control Flow Guard, due to the way that Control Flow Guard handles objects in memory, aka "Windows Security Feature Bypass Vulnerability".
CVSS Score: 5.3 (MEDIUM)
References: http://www.securityfocus.com/bid/100802; http://www.securitytracker.com/id/1039325; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8716
CVE: CVE-2017-8719
Published: 2017-09-13
Description: The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8708, CVE-2017-8709, and CVE-2017-8679.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/100803; http://www.securitytracker.com/id/1039325; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8719
CVE: CVE-2017-8720
Published: 2017-09-13
Description: The Microsoft Windows graphics component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2017-8675.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/100804; http://www.securitytracker.com/id/1039325; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8720
CVE: CVE-2017-8723
Published: 2017-09-13
Description: Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page containing malicious content, due to the way that the Edge Content Security Policy (CSP) validates certain specially crafted documents, aka "Microsoft Edge Security Feature Bypass Vulnerability". This CVE ID is unique from CVE-2017-8754.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/100768; http://www.securitytracker.com/id/1039326; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8723
CVE: CVE-2017-8724
Published: 2017-09-13
Description: Microsoft Edge in Microsoft Windows 10 Version 1703 allows an attacker to trick a user by redirecting the user to a specially crafted website, due to the way that Microsoft Edge parses HTTP content, aka "Microsoft Edge Spoofing Vulnerability". This CVE ID is unique from CVE-2017-8735.
CVSS Score: 4.3 (MEDIUM)
References: http://www.securityfocus.com/bid/100777; http://www.securitytracker.com/id/1039326; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8724
CVE: CVE-2017-8725
Published: 2017-09-13
Description: A remote code execution vulnerability exists in Microsoft Publisher 2007 Service Pack 3 and Microsoft Publisher 2010 Service Pack 2 when they fail to properly handle objects in memory, aka "Microsoft Office Publisher Remote Code Execution".
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100758; http://www.securitytracker.com/id/1039322; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8725
CVE: CVE-2017-8728
Published: 2017-09-13
Description: Microsoft Windows PDF Library in Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Windows PDF Library handles objects in memory, aka "Windows PDF Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8737.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100739; http://www.securitytracker.com/id/1039327; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8728
CVE: CVE-2017-8729
Published: 2017-09-13
Description: Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8649, CVE-2017-8660, CVE-2017-8738, CVE-2017-8740, CVE-2017-8741, CVE-2017-8748, CVE-2017-8752, CVE-2017-8753, CVE-2017-8755, CVE-2017-8756, and CVE-2017-11764.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100733; http://www.securitytracker.com/id/1039342; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8729
CVE: CVE-2017-8731
Published: 2017-09-13
Description: Microsoft Edge in Microsoft Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft Edge accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8734, CVE-2017-8751, and CVE-2017-11766.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100735; http://www.securitytracker.com/id/1039326; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8731
CVE: CVE-2017-8733
Published: 2017-09-13
Description: Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to trick a user into believing that the user was visiting a legitimate website, due to the way that Internet Explorer handles specific HTML content, aka "Internet Explorer Spoofing Vulnerability".
CVSS Score: 4.3 (MEDIUM)
References: http://www.securityfocus.com/bid/100737; http://www.securitytracker.com/id/1039328; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8733
CVE: CVE-2017-8734
Published: 2017-09-13
Description: Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft Edge accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8731, CVE-2017-8751, and CVE-2017-11766.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100738; http://www.securitytracker.com/id/1039326; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8734
CVE: CVE-2017-8735
Published: 2017-09-13
Description: Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to trick a user by redirecting the user to a specially crafted website, due to the way that Microsoft Edge parses HTTP content, aka "Microsoft Edge Spoofing Vulnerability". This CVE ID is unique from CVE-2017-8724.
CVSS Score: 4.3 (MEDIUM)
References: http://www.securityfocus.com/bid/100740; http://www.securitytracker.com/id/1039326; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8735