rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-0797 
Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way RTF content is handled, aka "Microsoft Word Memory Corruption Vulnerability".
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft Corporation
product: Microsoft Office
Published: 2018-01-10T01:00:00.000Z
CVE-2018-0798 
Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Office Memory Corruption Vulnerability".
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft Corporation
product: Equation Editor
Published: 2018-01-10T01:00:00.000Z
CVE-2018-0799 
Microsoft Access in Microsoft SharePoint Enterprise Server 2013 and Microsoft SharePoint Enterprise Server 2016 allows a cross-site-scripting (XSS) vulnerability due to the way image field values are handled, aka "Microsoft Access Tampering Vulnerability".
Problem types: description: Tampering
Affected products: vendor: Microsoft Corporation
product: Microsoft Access
Published: 2018-01-10T01:00:00.000Z
CVE-2018-0800 
Microsoft Edge in Microsoft Windows 10 1709 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0767 and CVE-2018-0780.
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft Corporation
product: Microsoft Edge
Published: 2018-01-04T14:00:00.000Z
CVE-2018-0801 
Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Office Remote Code Execution Vulnerability".
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft Corporation
product: Equation Editor
Published: 2018-01-10T01:00:00.000Z
CVE-2018-0802 
Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE is unique from CVE-2018-0797 and CVE-2018-0812.
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft Corporation
product: Equation Editor
Published: 2018-01-10T01:00:00.000Z
CVE-2018-0803 
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to access information from one domain and inject it into another domain, due to how Microsoft Edge enforces cross-domain policies, aka "Microsoft Edge Elevation of Privilege Vulnerability".
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft Corporation
product: Microsoft Edge
Published: 2018-01-04T14:00:00.000Z
CVE-2018-0804 
Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution Vulnerability". This CVE is unique from CVE-2018-0805, CVE-2018-0806, and CVE-2018-0807.
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft Corporation
product: Equation Editor
Published: 2018-01-10T01:00:00.000Z
CVE-2018-0805 
Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution Vulnerability". This CVE is unique from CVE-2018-0804, CVE-2018-0806, and CVE-2018-0807
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft Corporation
product: Equation Editor
Published: 2018-01-10T01:00:00.000Z
CVE-2018-0806 
Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution Vulnerability". This CVE is unique from CVE-2018-0804, CVE-2018-0805, and CVE-2018-0807.
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft Corporation
product: Equation Editor
Published: 2018-01-10T01:00:00.000Z
CVE-2018-0807 
Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution Vulnerability". This CVE is unique from CVE-2018-0804, CVE-2018-0805, and CVE-2018-0806.
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft Corporation
product: Equation Editor
Published: 2018-01-10T01:00:00.000Z
CVE-2018-0808 
ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to how ASP.NET web applications handle web requests, aka "ASP.NET Core Elevation Of Privilege Vulnerability". This CVE is unique from CVE-2018-0784.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft Corporation
product: ASP.NET Core
Published: 2018-03-14T17:00:00.000Z
CVE-2018-0809 
The Windows kernel in Windows 10, versions 1703 and 1709, and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0742, CVE-2018-0756, CVE-2018-0820 and CVE-2018-0843.
Problem types: description: Important
Affected products: vendor: Microsoft Corporation
product: Windows
Published: 2018-02-15T02:00:00.000Z
CVE-2018-0810 
The Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2, and Windows Server 2012 allows an information disclosure vulnerability due to the way memory is initialized, aka "Windows Kernel Information Disclosure Vulnerability". This CVE is unique from CVE-2018-0757.
Problem types: description: Important
Affected products: vendor: Microsoft Corporation
product: Windows
Published: 2018-02-15T02:00:00.000Z
CVE-2018-0811 
The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way objects are initialized in memory, aka "Windows Kernel Information Disclosure Vulnerability". This CVE is unique from CVE-2018-0813, CVE-2018-0814, CVE-2018-0894, CVE-2018-0895, CVE-2018-0896, CVE-2018-0897, CVE-2018-0898, CVE-2018-0899, CVE-2018-0900, CVE-2018-0901 and CVE-2018-0926.
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft Corporation
product: Windows kernel
Published: 2018-03-14T17:00:00.000Z
CVE-2018-0812 
Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Memory Corruption Vulnerability".
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft Corporation
product: Equation Editor
Published: 2018-01-10T01:00:00.000Z
CVE-2018-0813 
The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way objects are initialized in memory, aka "Windows Kernel Information Disclosure Vulnerability". This CVE is unique from CVE-2018-0811, CVE-2018-0814, CVE-2018-0894, CVE-2018-0895, CVE-2018-0896, CVE-2018-0897, CVE-2018-0898, CVE-2018-0899, CVE-2018-0900, and CVE-2018-0901 and CVE-2018-0926.
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft Corporation
product: Windows kernel
Published: 2018-03-14T17:00:00.000Z
CVE-2018-0814 
The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way objects are initialized in memory, aka "Windows Kernel Information Disclosure Vulnerability". This CVE is unique from CVE-2018-0811, CVE-2018-0813, CVE-2018-0894, CVE-2018-0895, CVE-2018-0896, CVE-2018-0897, CVE-2018-0898, CVE-2018-0899, CVE-2018-0900, and CVE-2018-0901 and CVE-2018-0926.
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft Corporation
product: Windows kernel
Published: 2018-03-14T17:00:00.000Z
CVE-2018-0815 
The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1 and Windows 7 SP1 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows GDI Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0816, and CVE-2018-0817.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft Corporation
product: Windows
Published: 2018-03-14T17:00:00.000Z
CVE-2018-0816 
The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows GDI Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0815 and CVE-2018-0817.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft Corporation
product: Windows
Published: 2018-03-14T17:00:00.000Z
CVE-2018-0817 
The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows GDI Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0815 and CVE-2018-0816.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft Corporation
product: Windows
Published: 2018-03-14T17:00:00.000Z
CVE-2018-0818 
Microsoft ChakraCore allows an attacker to bypass Control Flow Guard (CFG) in conjunction with another vulnerability to run arbitrary code on a target system, due to how the Chakra scripting engine handles accessing memory, aka "Scripting Engine Security Feature Bypass".
Problem types: description: Security Feature Bypass
Affected products: vendor: Microsoft Corporation
product: ChakraCore
Published: 2018-01-10T01:00:00.000Z
CVE-2018-0819 
Microsoft Office 2016 for Mac allows an attacker to send a specially crafted email attachment to a user in an attempt to launch a social engineering attack, such as phishing, due to how Outlook for Mac displays encoded email addresses, aka "Spoofing Vulnerability in Microsoft Office for Mac."
Problem types: description: Spoofing
Affected products: vendor: Microsoft Corporation
product: Microsoft Office 2016 for Mac
Published: 2018-01-10T01:00:00.000Z
CVE-2018-0820 
The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Kernel Elevation Of Privilege Vulnerability". This CVE is unique from CVE-2018-0742, CVE-2018-0756, CVE-2018-0809 and CVE-2018-0843.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-15T02:00:00.000Z
CVE-2018-0821 
AppContainer in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way constrained impersonations are handled, aka "Windows AppContainer Elevation Of Privilege Vulnerability".
Problem types: description: Important
Affected products: vendor: Microsoft Corporation
product: AppContainer
Published: 2018-02-15T02:00:00.000Z
CVE-2018-0822 
NTFS in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way NTFS handles objects, aka "Windows NTFS Global Reparse Point Elevation of Privilege Vulnerability".
Problem types: description: Important
Affected products: vendor: Microsoft Corporation
product: NTFS
Published: 2018-02-15T02:00:00.000Z
CVE-2018-0823 
The Named Pipe File System in Windows 10 version 1709 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way the Named Pipe File System handles objects, aka "Named Pipe File System Elevation of Privilege Vulnerability".
Problem types: description: Important
Affected products: vendor: Microsoft Corporation
product: Named Pipe File System
Published: 2018-02-15T02:00:00.000Z
CVE-2018-0824 
A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Microsoft COM for Windows Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-09T19:00:00.000Z
CVE-2018-0825 
StructuredQuery in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows a remote code execution vulnerability due to how objects are handled in memory, aka "StructuredQuery Remote Code Execution Vulnerability".
Problem types: description: Critical
Affected products: vendor: Microsoft Corporation
product: StructuredQuery
Published: 2018-02-15T02:00:00.000Z
CVE-2018-0826 
Windows Storage Services in Windows 10 versions 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Storage Services Elevation of Privilege Vulnerability".
Problem types: description: Important
Affected products: vendor: Microsoft Corporation
product: Windows Storage Services
Published: 2018-02-15T02:00:00.000Z
CVE-2018-0827 
Windows Scripting Host (WSH) in Windows 10 versions 1703 and 1709 and Windows Server, version 1709 allows a Device Guard security feature bypass vulnerability due to the way objects are handled in memory, aka "Windows Security Feature Bypass Vulnerability".
Problem types: description: Important
Affected products: vendor: Microsoft Corporation
product: Windows Scripting Host
Published: 2018-02-15T02:00:00.000Z
CVE-2018-0828 
Windows 10 version 1607 and Windows Server 2016 allow an elevation of privilege vulnerability due to how the MultiPoint management account password is stored, aka "Windows Elevation of Privilege Vulnerability".
Problem types: description: Important
Affected products: vendor: Microsoft Corporation
product: Windows
Published: 2018-02-15T02:00:00.000Z
CVE-2018-0829 
The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to how objects in memory are handled, aka "Windows Information Disclosure Vulnerability". This CVE is unique from CVE-2018-0830 and CVE-2018-0832.
Problem types: description: Important
Affected products: vendor: Microsoft Corporation
product: Windows
Published: 2018-02-15T02:00:00.000Z
CVE-2018-0830 
The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to how objects in memory are handled, aka "Windows Information Disclosure Vulnerability". This CVE is unique from CVE-2018-0829 and CVE-2018-0832.
Problem types: description: Important
Affected products: vendor: Microsoft Corporation
product: Windows
Published: 2018-02-15T02:00:00.000Z
CVE-2018-0831 
The Windows kernel in Windows 10 versions 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how objects in memory are handled, aka "Windows Kernel Elevation of Privilege Vulnerability".
Problem types: description: Important
Affected products: vendor: Microsoft Corporation
product: Windows
Published: 2018-02-15T02:00:00.000Z
CVE-2018-0832 
The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to how objects in memory are handled, aka "Windows Information Disclosure Vulnerability". This CVE is unique from CVE-2018-0829 and CVE-2018-0830.
Problem types: description: Important
Affected products: vendor: Microsoft Corporation
product: Windows
Published: 2018-02-15T02:00:00.000Z
CVE-2018-0833 
The Microsoft Server Message Block 2.0 and 3.0 (SMBv2/SMBv3) client in Windows 8.1 and RT 8.1 and Windows Server 2012 R2 allows a denial of service vulnerability due to how specially crafted requests are handled, aka "SMBv2/SMBv3 Null Dereference Denial of Service Vulnerability".
Problem types: description: Moderate
Affected products: vendor: Microsoft Corporation
product: Server Message Block
Published: 2018-02-15T02:00:00.000Z
CVE-2018-0834 
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0835, CVE-2018-0836, CVE-2018-0837, CVE-2018-0838, CVE-2018-0840, CVE-2018-0856, CVE-2018-0857, CVE-2018-0858, CVE-2018-0859, CVE-2018-0860, CVE-2018-0861, and CVE-2018-0866.
Problem types: description: Critical
Affected products: vendor: Microsoft Corporation
product: Microsoft Edge, ChakraCore
Published: 2018-02-15T02:00:00.000Z
CVE-2018-0835 
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834, CVE-2018-0836, CVE-2018-0837, CVE-2018-0838, CVE-2018-0840, CVE-2018-0856, CVE-2018-0857, CVE-2018-0858, CVE-2018-0859, CVE-2018-0860, CVE-2018-0861, and CVE-2018-0866.
Problem types: description: Critical
Affected products: vendor: Microsoft Corporation
product: Microsoft Edge, ChakraCore
Published: 2018-02-15T02:00:00.000Z
CVE-2018-0836 
Microsoft Edge and ChakraCore in Microsoft Windows 10 1703 and 1709 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834, CVE-2018-0835, CVE-2018-0837, CVE-2018-0838, CVE-2018-0840, CVE-2018-0856, CVE-2018-0857, CVE-2018-0858, CVE-2018-0859, CVE-2018-0860, CVE-2018-0861, and CVE-2018-0866.
Problem types: description: Important
Affected products: vendor: Microsoft Corporation
product: Microsoft Edge, ChakraCore
Published: 2018-02-15T02:00:00.000Z
CVE-2018-0837 
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834, CVE-2018-0835, CVE-2018-0836, CVE-2018-0838, CVE-2018-0840, CVE-2018-0856, CVE-2018-0857, CVE-2018-0858, CVE-2018-0859, CVE-2018-0860, CVE-2018-0861, and CVE-2018-0866.
Problem types: description: Critical
Affected products: vendor: Microsoft Corporation
product: Microsoft Edge, ChakraCore
Published: 2018-02-15T02:00:00.000Z
CVE-2018-0838 
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834, CVE-2018-0835, CVE-2018-0836, CVE-2018-0837, CVE-2018-0840, CVE-2018-0856, CVE-2018-0857, CVE-2018-0858, CVE-2018-0859, CVE-2018-0860, CVE-2018-0861, and CVE-2018-0866.
Problem types: description: Critical
Affected products: vendor: Microsoft Corporation
product: Microsoft Edge, ChakraCore
Published: 2018-02-15T02:00:00.000Z
CVE-2018-0839 
Microsoft Edge in Microsoft Windows 10 1703 allows information disclosure, due to how Edge handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0763.
Problem types: description: Important
Affected products: vendor: Microsoft Corporation
product: Microsoft Edge
Published: 2018-02-15T02:00:00.000Z
CVE-2018-0840 
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834, CVE-2018-0835, CVE-2018-0836, CVE-2018-0837, CVE-2018-0838, CVE-2018-0856, CVE-2018-0857, CVE-2018-0858, CVE-2018-0859, CVE-2018-0860, CVE-2018-0861, and CVE-2018-0866.
Problem types: description: Critical
Affected products: vendor: Microsoft Corporation
product: Microsoft Edge, ChakraCore, Internet Explorer
Published: 2018-02-15T02:00:00.000Z
CVE-2018-0841 
Microsoft Office 2016 Click-to-Run allows a remote code execution vulnerability due to how objects are handled in memory, aka "Office Remote Code Execution Vulnerability"
Problem types: description: Important
Affected products: vendor: Microsoft Corporation
product: Microsoft Office
Published: 2018-02-15T02:00:00.000Z
CVE-2018-0842 
Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allow an elevation of privilege vulnerability due to how objects in memory are handled, aka "Windows Kernel Elevation of Privilege Vulnerability".
Problem types: description: Important
Affected products: vendor: Microsoft Corporation
product: Windows
Published: 2018-02-15T02:00:00.000Z
CVE-2018-0843 
The Windows kernel in Windows 10 version 1709 and Windows Server, version 1709 allows an information disclosure vulnerability due to how objects in memory are handled, aka "Windows Kernel Information Disclosure Vulnerability". This CVE is unique from CVE-2018-0742, CVE-2018-0756, CVE-2018-0809 and CVE-2018-0820.
Problem types: description: Important
Affected products: vendor: Microsoft Corporation
product: Windows
Published: 2018-02-15T02:00:00.000Z