deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-0104
Published: 2018-01-04
Description: A vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files could allow a remote attacker to execute arbitrary code on the system of a targeted user. The attacker could exploit this vulnerability by sending the user a link or email attachment with a malicious ARF file and persuading the user to follow the link or launch the file. Successful exploitation could allow the attacker to execute arbitrary code on the user's system. This vulnerability affects Cisco WebEx Business Suite meeting sites, Cisco WebEx Meetings sites, Cisco WebEx Meetings Server, and Cisco WebEx ARF players. Cisco Bug IDs: CSCvg78853, CSCvg78856, CSCvg78857.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/102382; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180103-warfp; http://www.securityfocus.com/bid/102382
CVE: CVE-2018-0114
Published: 2018-01-04
Description: A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker to re-sign tokens using a key that is embedded within the token. The vulnerability is due to node-jose following the JSON Web Signature (JWS) standard for JSON Web Tokens (JWTs). This standard specifies that a JSON Web Key (JWK) representing a public key can be embedded within the header of a JWS. This public key is then trusted for verification. An attacker could exploit this by forging valid JWS objects by removing the original signature, adding a new public key to the header, and then signing the object using the (attacker-owned) private key associated with the public key embedded in that JWS header.
CVSS Score: 7.5 (HIGH)
CWE: CWE-347, CWE-347
References: http://www.securityfocus.com/bid/102445; https://github.com/cisco/node-jose/blob/master/CHANGELOG.md; https://github.com/zi0Black/POC-CVE-2018-0114
CVE: CVE-2018-1190
Published: 2018-01-04
Description: An issue was discovered in these Pivotal Cloud Foundry products: all versions prior to cf-release v270, UAA v3.x prior to v3.20.2, and UAA bosh v30.x versions prior to v30.8 and all other versions prior to v45.0. A cross-site scripting (XSS) attack is possible in the clientId parameter of a request to the UAA OpenID Connect check session iframe endpoint used for single logout session management.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/102427; https://www.cloudfoundry.org/cve-2018-1190/; http://www.securityfocus.com/bid/102427
CVE: CVE-2018-5210
Published: 2018-01-04
Description: On Samsung mobile devices with N(7.x) software and Exynos chipsets, attackers can conduct a Trustlet stack overflow attack for arbitrary TEE code execution, in conjunction with a brute-force attack to discover unlock information (PIN, password, or pattern). The Samsung ID is SVE-2017-10733.
CVSS Score: 8.1 (HIGH)
CWE: CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb; https://security.samsungmobile.com/securityUpdate.smsb
CVE: CVE-2017-5715
Published: 2018-01-04
Description: Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-203, CWE-203
References: http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00004.html
CVE: CVE-2017-5753
Published: 2018-01-04
Description: Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-203
References: http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html
CVE: CVE-2017-5754
Published: 2018-01-04
Description: Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html
CVE: CVE-2018-0741
Published: 2018-01-04
Description: The Color Management Module (Icm32.dll) in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an information disclosure vulnerability due to the way objects are handled in memory, aka "Microsoft Color Management Information Disclosure Vulnerability".
CVSS Score: 5.3 (MEDIUM)
References: http://www.securityfocus.com/bid/102349; http://www.securitytracker.com/id/1040093; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0741
CVE: CVE-2018-0743
Published: 2018-01-04
Description: Windows Subsystem for Linux in Windows 10 version 1703, Windows 10 version 1709, and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Subsystem for Linux Elevation of Privilege Vulnerability".
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/102350; http://www.securitytracker.com/id/1040094; https://github.com/saaramar/execve_exploit
CVE: CVE-2018-0744
Published: 2018-01-04
Description: The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Elevation of Privilege Vulnerability".
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/102351; http://www.securitytracker.com/id/1040090; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0744
CVE: CVE-2018-0745
Published: 2018-01-04
Description: The Windows kernel in Windows 10 version 1703. Windows 10 version 1709, and Windows Server, version 1709 allows an information disclosure vulnerability due to the way objects are handled in memory, aka "Windows Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0746 and CVE-2018-0747.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-665
References: http://www.securityfocus.com/bid/102353; http://www.securitytracker.com/id/1040097; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0745
CVE: CVE-2018-0746
Published: 2018-01-04
Description: The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way memory addresses are handled, aka "Windows Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0745 and CVE-2018-0747.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-665
References: http://www.securityfocus.com/bid/102365; http://www.securitytracker.com/id/1040097; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0746
CVE: CVE-2018-0747
Published: 2018-01-04
Description: The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way memory addresses are handled, aka "Windows Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0745 and CVE-2018-0746.
CVSS Score: 4.7 (MEDIUM)
References: http://www.securityfocus.com/bid/102366; http://www.securitytracker.com/id/1040097; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0747
CVE: CVE-2018-0748
Published: 2018-01-04
Description: The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way memory addresses are handled, aka "Windows Elevation of Privilege Vulnerability".
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: http://www.securityfocus.com/bid/102354; http://www.securitytracker.com/id/1040095; https://95cnsec.com/windows-kernel-cve-2018-0748-exploit.html
CVE: CVE-2018-0749
Published: 2018-01-04
Description: The Microsoft Server Message Block (SMB) Server in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way SMB Server handles specially crafted files, aka "Windows Elevation of Privilege Vulnerability".
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/102355; http://www.securitytracker.com/id/1040096; https://95cnsec.com/windows-smb-cve-2018-0749-exploit.html
CVE: CVE-2018-0750
Published: 2018-01-04
Description: The Windows GDI component in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an information disclosure vulnerability due to the way objects are handled in memory, aka "Windows Elevation of Privilege Vulnerability".
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/102357; http://www.securitytracker.com/id/1040091; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0750
CVE: CVE-2018-0751
Published: 2018-01-04
Description: The Windows Kernel API in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way the Kernel API enforces permissions, aka "Windows Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2018-0752.
CVSS Score: 7.1 (HIGH)
CWE: CWE-269
References: http://www.securityfocus.com/bid/102359; http://www.securitytracker.com/id/1040095; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0751
CVE: CVE-2018-0752
Published: 2018-01-04
Description: The Windows Kernel API in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way the Kernel API enforces permissions, aka "Windows Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2018-0751.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: http://www.securityfocus.com/bid/102360; http://www.securitytracker.com/id/1040095; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0752
CVE: CVE-2018-0753
Published: 2018-01-04
Description: Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allow a denial of service vulnerability due to the way objects are handled in memory, aka "Windows IPSec Denial of Service Vulnerability".
CVSS Score: 5.9 (MEDIUM)
References: http://www.securityfocus.com/bid/102361; http://www.securitytracker.com/id/1040089; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0753
CVE: CVE-2018-0754
Published: 2018-01-04
Description: The Windows Adobe Type Manager Font Driver (Atmfd.dll) in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way objects are handled in memory, aka "OpenType Font Driver Information Disclosure Vulnerability".
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/102362; http://www.securitytracker.com/id/1040098; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0754
CVE: CVE-2018-0758
Published: 2018-01-04
Description: Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0762, CVE-2018-0768, CVE-2018-0769, CVE-2018-0770, CVE-2018-0772, CVE-2018-0773, CVE-2018-0774, CVE-2018-0775, CVE-2018-0776, CVE-2018-0777, CVE-2018-0778, and CVE-2018-0781.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/102405; http://www.securitytracker.com/id/1040100; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0758
CVE: CVE-2018-0762
Published: 2018-01-04
Description: Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0768, CVE-2018-0769, CVE-2018-0770, CVE-2018-0772, CVE-2018-0773, CVE-2018-0774, CVE-2018-0775, CVE-2018-0776, CVE-2018-0777, CVE-2018-0778, and CVE-2018-0781.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/102408; http://www.securitytracker.com/id/1040099; http://www.securitytracker.com/id/1040100
CVE: CVE-2018-0766
Published: 2018-01-04
Description: Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how the Microsoft Edge PDF Reader handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability".
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/102388; http://www.securitytracker.com/id/1040100; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0766
CVE: CVE-2018-0767
Published: 2018-01-04
Description: Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0780 and CVE-2018-0800.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102393; http://www.securitytracker.com/id/1040100; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0767
CVE: CVE-2018-0768
Published: 2018-01-04
Description: Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0769, CVE-2018-0770, CVE-2018-0772, CVE-2018-0773, CVE-2018-0774, CVE-2018-0775, CVE-2018-0776, CVE-2018-0777, CVE-2018-0778, and CVE-2018-0781.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/102395; http://www.securitytracker.com/id/1040100; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0768
CVE: CVE-2018-0769
Published: 2018-01-04
Description: Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0768, CVE-2018-0770, CVE-2018-0772, CVE-2018-0773, CVE-2018-0774, CVE-2018-0775, CVE-2018-0776, CVE-2018-0777, CVE-2018-0778, and CVE-2018-0781.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/102396; http://www.securitytracker.com/id/1040100; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0769
CVE: CVE-2018-0770
Published: 2018-01-04
Description: Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0768, CVE-2018-0769, CVE-2018-0772, CVE-2018-0773, CVE-2018-0774, CVE-2018-0775, CVE-2018-0776, CVE-2018-0777, CVE-2018-0778, and CVE-2018-0781.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/102397; http://www.securitytracker.com/id/1040100; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0770
CVE: CVE-2018-0772
Published: 2018-01-04
Description: Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0768, CVE-2018-0769, CVE-2018-0770, CVE-2018-0773, CVE-2018-0774, CVE-2018-0775, CVE-2018-0776, CVE-2018-0777, CVE-2018-0778, and CVE-2018-0781.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/102409; http://www.securitytracker.com/id/1040099; http://www.securitytracker.com/id/1040100
CVE: CVE-2018-0773
Published: 2018-01-04
Description: Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0768, CVE-2018-0769, CVE-2018-0770, CVE-2018-0772, CVE-2018-0774, CVE-2018-0775, CVE-2018-0776, CVE-2018-0777, CVE-2018-0778, and CVE-2018-0781.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/102398; http://www.securitytracker.com/id/1040100; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0773
CVE: CVE-2018-0774
Published: 2018-01-04
Description: Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0768, CVE-2018-0769, CVE-2018-0770, CVE-2018-0772, CVE-2018-0773, CVE-2018-0775, CVE-2018-0776, CVE-2018-0777, CVE-2018-0778, and CVE-2018-0781.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/102399; http://www.securitytracker.com/id/1040100; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0774
CVE: CVE-2018-0775
Published: 2018-01-04
Description: Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0768, CVE-2018-0769, CVE-2018-0770, CVE-2018-0772, CVE-2018-0773, CVE-2018-0774, CVE-2018-0776, CVE-2018-0777, CVE-2018-0778, and CVE-2018-0781.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/102400; http://www.securitytracker.com/id/1040100; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0775
CVE: CVE-2018-0776
Published: 2018-01-04
Description: Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0768, CVE-2018-0769, CVE-2018-0770, CVE-2018-0772, CVE-2018-0773, CVE-2018-0774, CVE-2018-0775, CVE-2018-0777, CVE-2018-0778, and CVE-2018-0781.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/102401; http://www.securitytracker.com/id/1040100; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0776
CVE: CVE-2018-0777
Published: 2018-01-04
Description: Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0768, CVE-2018-0769, CVE-2018-0770, CVE-2018-0772, CVE-2018-0773, CVE-2018-0774, CVE-2018-0775, CVE-2018-0776, CVE-2018-0778, and CVE-2018-0781.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/102402; http://www.securitytracker.com/id/1040100; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0777
CVE: CVE-2018-0778
Published: 2018-01-04
Description: Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0768, CVE-2018-0769, CVE-2018-0770, CVE-2018-0772, CVE-2018-0773, CVE-2018-0774, CVE-2018-0775, CVE-2018-0776, CVE-2018-0777, and CVE-2018-0781.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/102403; http://www.securitytracker.com/id/1040100; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0778
CVE: CVE-2018-0780
Published: 2018-01-04
Description: Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0767 and CVE-2018-0800.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102389; http://www.securitytracker.com/id/1040100; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0780
CVE: CVE-2018-0781
Published: 2018-01-04
Description: Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0768, CVE-2018-0769, CVE-2018-0770, CVE-2018-0772, CVE-2018-0773, CVE-2018-0774, CVE-2018-0775, CVE-2018-0776, CVE-2018-0777, and CVE-2018-0778.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/102404; http://www.securitytracker.com/id/1040100; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0781