CVEs published March 17, 2017
180 CVEs were published on March 17, 2017: 1 critical, 10 high. 13 are now in CISA KEV.
- Published
- 180
- Critical
- 1
- High
- 10
- Medium
- 2
- Low
- 0
- Unrated
- 167
- Now in CISA KEV
- 13
- Fix available
- 1
Most affected products
- Microsoft Windows Uniscribe
- 28
- Microsoft Browser
- 20
- Microsoft Office
- 10
- Microsoft Edge
- 9
- Microsoft Internet Explorer
- 8
- Microsoft Win32k
- 8
- Microsoft Hyper-V
- 7
- Microsoft Windows SMB
- 6
- Microsoft Windows GDI
- 4
- Cisco Unified Communications Manager
- 3
Critical 1
High 10
- CVE-2017-0001The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Microsoft Windows GDI
- CVE-2017-0005The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Microsoft Windows GDI
- CVE-2017-0101The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, WMicrosoft Windows
- CVE-2017-0143The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold anMicrosoft Windows SMB
- CVE-2017-0144The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold anMicrosoft Windows SMB
- CVE-2017-0145The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold anMicrosoft Windows SMB
- CVE-2017-0146The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold anMicrosoft Windows SMB
- CVE-2017-0147The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold anMicrosoft Windows SMB
- CVE-2017-0148The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold anMicrosoft Windows SMB
- CVE-2017-0149Microsoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vMicrosoft Internet Explorer
Medium, low and unrated 169
- CVE-2017-7174The user-account creation feature in Chef Manage 2.1.0 through 2.4.4 allows remote attackers to execute arbitrary code.
- CVE-2017-3811An XML External Entity vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to have read access to parCisco WebEx Meetings Server
- CVE-2017-3815An API Privilege vulnerability in Cisco TelePresence Server Software could allow an unauthenticated, remote attacker to emulate Cisco TelePrCisco TelePresence Server
- CVE-2017-3866A vulnerability in the web framework code of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to conduct a cross-Cisco Prime Service Catalog
- CVE-2017-3867A vulnerability in the Border Gateway Protocol (BGP) Bidirectional Forwarding Detection (BFD) implementation of Cisco Adaptive Security ApplCisco Adaptive Security Appliance
- CVE-2017-3868A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to conduct a croCisco UCS Director
- CVE-2017-3869An API Credentials Management vulnerability in the APIs for Cisco Prime Infrastructure could allow an authenticated, remote attacker to acceCisco Prime Infrastructure
- CVE-2017-3870A vulnerability in the URL filtering feature of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an unauthenticatedCisco Web Security Appliance
- CVE-2017-3871A RADIUS Secret Disclosure vulnerability in the web network management interface of Cisco Prime Optical for Service Providers could allow anCisco Prime Optical for Service Providers
- CVE-2017-3872A cross-site scripting (XSS) filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager couldCisco Unified Communications Manager
- CVE-2017-3874A vulnerability in the web framework of Cisco Unified Communications Manager (CallManager) could allow an authenticated, remote attacker to Cisco Unified Communications Manager
- CVE-2017-3875An Access-Control Filtering Mechanisms Bypass vulnerability in certain access-control filtering mechanisms on Cisco Nexus 7000 Series SwitchCisco Nexus 7000 Series Switches
- CVE-2017-3877A vulnerability in the web framework of Cisco Unified Communications Manager (CallManager) could allow an unauthenticated, remote attacker tCisco Unified Communications Manager
- CVE-2017-3878A Denial of Service vulnerability in the Telnet remote login functionality of Cisco NX-OS Software running on Cisco Nexus 9000 Series SwitchCisco Nexus 9000 Series Switches
- CVE-2017-3879A Denial of Service vulnerability in the remote login functionality for Cisco NX-OS Software running on Cisco Nexus 9000 Series Switches couCisco Nexus 9000 Series Switches
- CVE-2017-3880An Authentication Bypass vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to access limited meetCisco WebEx Meetings Server
- CVE-2017-6370TYPO3 7.6.15 sends an http request to an index.php?loginProvider URI in cases with an https Referer, which allows remote attackers to obtaintypo3/cms
- CVE-2017-6880Buffer overflow in Cerberus FTP Server 8.0.10.3 allows remote attackers to cause a denial of service (daemon crash) or possibly have unspeci
- CVE-2014-8701Wonder CMS 2014 allows remote attackers to obtain sensitive information by viewing /files/password, which reveals the unsalted MD5 hashed pa
- CVE-2014-8702Wonder CMS 2014 allows remote attackers to obtain sensitive information by logging into the application with an array for the password, whic
- CVE-2014-8703Cross-site scripting (XSS) vulnerability in Wonder CMS 2014 allows remote attackers to inject arbitrary web script or HTML.
- CVE-2014-8704Directory traversal vulnerability in index.php in Wonder CMS 2014 allows remote attackers to include and execute arbitrary local files via a
- CVE-2014-8705PHP remote file inclusion vulnerability in editInplace.php in Wonder CMS 2014 allows remote attackers to execute arbitrary PHP code via a UR
- CVE-2014-8706Pluck CMS 4.7.2 allows remote attackers to obtain sensitive information by (1) changing "PHPSESSID" to an array; (2) adding non-alphanumeric
- CVE-2014-8707Cross-site scripting (XSS) vulnerability in TinyMCE in Pluck CMS 4.7.2 allows remote authenticated users to inject arbitrary web script or H
- CVE-2014-8708Pluck CMS 4.7.2 allows remote attackers to execute arbitrary code via the blog form feature.
- CVE-2014-8722GetSimple CMS 3.3.4 allows remote attackers to obtain sensitive information via a direct request to (1) data/users/<username>.xml, (2) backu
- CVE-2014-8723GetSimple CMS 3.3.4 allows remote attackers to obtain sensitive information via a direct request to (1) plugins/anonymous_data.php or (2) pl
- CVE-2014-9852distribute-cache.c in ImageMagick re-uses objects after they have been destroyed, which allows remote attackers to have unspecified impact v
- CVE-2014-9853Memory leak in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (memory consumption) via a crafted rle file.
- CVE-2014-9854coders/tiff.c in ImageMagick allows remote attackers to cause a denial of service (application crash) via vectors related to the "identifica
- CVE-2015-3881Information disclosure issue in qdPM 8.3 allows remote attackers to obtain sensitive information via a direct request to (1) core/config/dat
- CVE-2015-3882qdPM 8.3 allows remote attackers to obtain sensitive information via invalid ID value to index.php/users/info/id/[ID], which reveals the ins
- CVE-2015-3883Multiple cross-site scripting (XSS) vulnerabilities in qdPM 8.3 allow remote attackers to inject arbitrary web script or HTML via the (1) se
- CVE-2015-3884Unrestricted file upload vulnerability in the (1) myAccount, (2) projects, (3) tasks, (4) tickets, (5) discussions, (6) reports, and (7) sch
- CVE-2015-4645Integer overflow in the read_fragment_table_4 function in unsquash-4.c in Squashfs and sasquatch allows remote attackers to cause a denial o
- CVE-2015-7313LibTIFF before 4.0.7 allows remote attackers to cause a denial of service (memory consumption and crash) via a crafted tiff file.
- CVE-2017-6954An issue was discovered in includes/component.php in the BuddyPress Docs plugin before 1.9.3 for WordPress.buddypress/buddypress
- CVE-2017-6955An issue was discovered in by-email/by-email.php in the Invite Anyone plugin before 1.3.15 for WordPress.
- CVE-2017-6958An XSS vulnerability in the MantisBT Source Integration Plugin (before 2.0.2) search result page allows an attacker to inject arbitrary HTML
- CVE-2017-6960An issue was discovered in apng2gif 1.7.
- CVE-2017-6961An issue was discovered in apng2gif 1.7.
- CVE-2017-6962An issue was discovered in apng2gif 1.7.
- CVE-2017-6965readelf in GNU Binutils 2.28 writes to illegal addresses while processing corrupt input files containing symbol-difference relocations, lead
- CVE-2017-6966readelf in GNU Binutils 2.28 has a use-after-free (specifically read-after-free) error while processing multiple, relocated sections in an M
- CVE-2017-6967xrdp 0.9.1 calls the PAM function auth_start_session() in an incorrect location, leading to PAM session modules not being properly initializ
- CVE-2017-6969readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries.
- CVE-2017-0006Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attackeMicrosoft Office
- CVE-2017-0007Device Guard in Microsoft Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows remote attackers to modify PowerShell script without iMicrosoft Device Guard
- CVE-2017-0008Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, Microsoft Internet Explorer
- CVE-2017-0009Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, Microsoft Browser
- CVE-2017-0010A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in MicroMicrosoft Browser
- CVE-2017-0011Microsoft Edge allows remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Edge Information Disclosure VuMicrosoft Edge
- CVE-2017-0012Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to spoof web content via a crafted web site, aka "Microsoft BrowserMicrosoft Browsers
- CVE-2017-0014The Windows Graphics Component in Microsoft Office 2010 SP2; Windows Server 2008 R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 GolMicrosoft Windows Graphics Component
- CVE-2017-0015A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in MicroMicrosoft Browser
- CVE-2017-0016Microsoft Windows 10 Gold, 1511, and 1607; Windows 8.1; Windows RT 8.1; Windows Server 2012 R2, and Windows Server 2016 do not properly handMicrosoft SMBv2/SMBv3
- CVE-2017-0017The RegEx class in the XSS filter in Microsoft Edge allows remote attackers to conduct cross-site scripting (XSS) attacks and obtain sensitiMicrosoft Edge
- CVE-2017-0018Microsoft Internet Explorer 10 and 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via Microsoft Internet Explorer
- CVE-2017-0019Microsoft Word 2016 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted documenMicrosoft Office
- CVE-2017-0020Microsoft Excel 2016, Excel 2010 SP2, Excel 2013 RT SP1, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary codMicrosoft Office
- CVE-2017-0021Hyper-V in Microsoft Windows 10 1607 and Windows Server 2016 does not properly validate vSMB packet data, which allows attackers to execute Microsoft Hyper-V vSMB
- CVE-2017-0022Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 Microsoft XML Core Services
- CVE-2017-0023The PDF library in Microsoft Edge; Windows 8.1; Windows Server 2012 and R2; Windows RT 8.1; and Windows 10, 1511, and 1607 allows remote attMicrosoft PDF
- CVE-2017-0024The kernel-mode drivers in Microsoft Windows 10 1607 and Windows Server 2016 allow local users to gain privileges via a crafted application,Microsoft Win32k
- CVE-2017-0025The kernel-mode drivers in Microsoft Windows Vista; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 GoldMicrosoft Windows GDI
- CVE-2017-0026The kernel-mode drivers in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allow local users to gain privileges via a crafMicrosoft Win32k
- CVE-2017-0027Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Services on SharePoint SerMicrosoft Office
- CVE-2017-0029Microsoft Office 2010 SP2, Word 2010 SP2, Word 2013 RT SP1, and Word 2016 allow remote attackers to cause a denial of service (application hMicrosoft Office
- CVE-2017-0030Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Office Web Apps Server 2010 SP2, Word 2007 SP3, Word 2010 SP2, and Word AutomationMicrosoft Office
- CVE-2017-0031Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, and Word 2010 SP2 allow remote attackers to execute arbitrary code Microsoft Office
- CVE-2017-0032A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in MicroMicrosoft Browser
- CVE-2017-0033Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to spoof web content via a crafted web site, aka "Microsoft BrowserMicrosoft Browser
- CVE-2017-0034A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory.Microsoft Edge
- CVE-2017-0035A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in MicroMicrosoft Browser
- CVE-2017-0039Microsoft Windows Vista SP2 and Server 2008 SP2 mishandle dynamic link library (DLL) loading, which allows local users to gain privileges viMicrosoft Windows DLL
- CVE-2017-0040The scripting engine in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of servMicrosoft Internet Explorer
- CVE-2017-0042Windows Media Player in Microsoft Windows 8.1; Windows Server 2012 R2; Windows RT 8.1; Windows 7 SP1; Windows 2008 SP2 and R2 SP1, Windows SMicrosoft Windows DirectShow
- CVE-2017-0043Active Directory Federation Services in Microsoft Windows 10 1607, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 Gold and R2, and Microsoft Active Directory Federation Services
- CVE-2017-0045Windows DVD Maker in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows Vista SP2 does not properly parse crafted .msdvd files, Microsoft Windows DVD Maker
- CVE-2017-0047The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Microsoft Windows GDI
- CVE-2017-0049The VBScript engine in Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information from process memory via a crafMicrosoft Internet Explorer
- CVE-2017-0050The kernel API in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7; Windows 8; Windows 10 Gold, 1511, and 1607; WiMicrosoft Windows Kernel
- CVE-2017-0051Microsoft Windows 10 1607 and Windows Server 2016 allow remote attackers to cause a denial of service (application hang) via a crafted OfficMicrosoft Hyper-V Network Switch
- CVE-2017-0052Microsoft Office Compatibility Pack SP3, Excel 2007 SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attackeMicrosoft Office
- CVE-2017-0053Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, Word 2010 SP2, Word 2013 SP1, Word 2013 R2 SP1, Word 2016, and WordMicrosoft Office
- CVE-2017-0055Microsoft Internet Information Server (IIS) in Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows ServerMicrosoft IIS Server
- CVE-2017-0056The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Microsoft Win32k
- CVE-2017-0057DNS client in Microsoft Windows 8.1; Windows Server 2012 R2, Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 fails Microsoft Windows dnsclient
- CVE-2017-0059Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, Microsoft Internet Explorer
- CVE-2017-0060The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Microsoft Windows GDI+
- CVE-2017-0061The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2, Windows Server 2008 SP2 and R2, and Windows 7 SPMicrosoft Color Management
- CVE-2017-0062The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Microsoft Windows GDI+
- CVE-2017-0063The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2; Windows Server 2008 SP2 and R2; and Windows 7 SPMicrosoft Color Management
- CVE-2017-0065Microsoft Edge allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Microsoft Browser InMicrosoft Edge
- CVE-2017-0066Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka "Microsoft Edge SecuMicrosoft Edge
- CVE-2017-0067A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in MicroMicrosoft Browser
- CVE-2017-0068Browsers in Microsoft Edge allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "MicrosoftMicrosoft Edge
- CVE-2017-0069Microsoft Edge allows remote attackers to spoof web content via a crafted web site, aka "Microsoft Edge Spoofing Vulnerability." This vulnerMicrosoft Edge
- CVE-2017-0070A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in MicroMicrosoft Browser
- CVE-2017-0071A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in MicroMicrosoft Browser
- CVE-2017-0072Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitraryMicrosoft Windows Uniscribe
- CVE-2017-0073The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Microsoft Windows GDI+
- CVE-2017-0074Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 and R2; WindowsHyper-V in Microsoft Windows Vista SP2; Windows Server 2008…
- CVE-2017-0075Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; WindowsMicrosoft Hyper-V
- CVE-2017-0076Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 and R2; WindowsMicrosoft Hyper-V
- CVE-2017-0078The kernel-mode drivers in Microsoft Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and WindMicrosoft Win32k
- CVE-2017-0079The kernel-mode drivers in Windows 8.1; Windows Server 2012 R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gaiMicrosoft Win32k
- CVE-2017-0080The kernel-mode drivers in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allow local users to gain privileges via a crafMicrosoft Win32k
- CVE-2017-0081The kernel-mode drivers in Microsoft Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and WindMicrosoft Win32k
- CVE-2017-0082The kernel-mode drivers in Microsoft Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k ElMicrosoft Win32k
- CVE-2017-0083Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitraryMicrosoft Windows Uniscribe
- CVE-2017-0084Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, WMicrosoft Windows Uniscribe
- CVE-2017-0085Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive Microsoft Windows Uniscribe
- CVE-2017-0086Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitraryMicrosoft Windows Uniscribe
- CVE-2017-0087Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitraryMicrosoft Windows Uniscribe
- CVE-2017-0088Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitraryMicrosoft Windows Uniscribe
- CVE-2017-0089Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitraryMicrosoft Windows Uniscribe
- CVE-2017-0090Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitraryMicrosoft Windows Uniscribe
- CVE-2017-0091Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive Microsoft Windows Uniscribe
- CVE-2017-0092Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive Microsoft Windows Uniscribe
- CVE-2017-0094A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in MicroMicrosoft Browser
- CVE-2017-0095Hyper-V in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 does not properly validate vSMB packet data, which allows attacvSMB Hyper-V in Microsoft Windows 10 Gold, 1511, and 1607 a…
- CVE-2017-0096Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Server 2012 Gold and R2; WindowsMicrosoft Hyper-V
- CVE-2017-0097Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 and R2; WindowsMicrosoft Hyper-V
- CVE-2017-0098Hyper-V in Microsoft Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows guest OS users, running as virtual machines, to cause aMicrosoft Hyper-V
- CVE-2017-0099Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; WiMicrosoft Hyper-V
- CVE-2017-0100A DCOM object in Helppane.exe in Microsoft Windows 7 SP1; Windows Server 2008 R2; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8Microsoft Windows HelpPane
- CVE-2017-0102Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1; WiMicrosoft Windows
- CVE-2017-0103The kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows Server 2012 mishandles registrMicrosoft Windows Registry
- CVE-2017-0104The iSNS Server service in Microsoft Windows Server 2008 SP2 and R2, Windows Server 2012 Gold and R2, and Windows Server 2016 allows remote Microsoft iSNS Server
- CVE-2017-0105Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on ShareMicrosoft Office
- CVE-2017-0107Microsoft SharePoint Server fails to sanitize crafted web requests, allowing remote attackers to run cross-script in local security context,Microsoft SharePoint
- CVE-2017-0108The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; LMicrosoft Windows Graphics Component
- CVE-2017-0109Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; WindowsMicrosoft Hyper-V
- CVE-2017-0110Cross-site scripting (XSS) vulnerability in Microsoft Exchange Outlook Web Access (OWA) allows remote attackers to inject arbitrary web scriMicrosoft Exchange Server
- CVE-2017-0111Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive Microsoft Windows Uniscribe
- CVE-2017-0112Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive Microsoft Windows Uniscribe
- CVE-2017-0113Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive Microsoft Windows Uniscribe
- CVE-2017-0114Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive Microsoft Windows Uniscribe
- CVE-2017-0115Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive Microsoft Windows Uniscribe
- CVE-2017-0116Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive Microsoft Windows Uniscribe
- CVE-2017-0117Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive Microsoft Windows Uniscribe
- CVE-2017-0118Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, WMicrosoft Windows Uniscribe
- CVE-2017-0119Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive Microsoft Windows Uniscribe
- CVE-2017-0120Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive Uniscribe in Microsoft Windows Vista SP2, Windows Server 20…
- CVE-2017-0121Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, WMicrosoft Windows Uniscribe
- CVE-2017-0122Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive Microsoft Windows Uniscribe
- CVE-2017-0123Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive Microsoft Windows Uniscribe
- CVE-2017-0124Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive Microsoft Windows Uniscribe
- CVE-2017-0125Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive Microsoft Windows Uniscribe
- CVE-2017-0126Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive Microsoft Windows Uniscribe
- CVE-2017-0127Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive Microsoft Windows Uniscribe
- CVE-2017-0128Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive Microsoft Windows Uniscribe
- CVE-2017-0129Microsoft Lync for Mac 2011 fails to properly validate certificates, allowing remote attackers to alter server-client communications, aka "MMicrosoft Lync for Mac
- CVE-2017-0130The scripting engine in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of servMicrosoft Internet Explorer
- CVE-2017-0131A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in MicroMicrosoft Browser
- CVE-2017-0132A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in MicroMicrosoft Browser
- CVE-2017-0133A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in MicroMicrosoft Browser
- CVE-2017-0134A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in MicroMicrosoft Browser
- CVE-2017-0135Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka "Microsoft Edge SecuMicrosoft Edge
- CVE-2017-0136A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in MicroMicrosoft Browser
- CVE-2017-0137A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in MicroMicrosoft Browser
- CVE-2017-0138A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in MicroMicrosoft Browser
- CVE-2017-0140Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka "Microsoft Edge SecuMicrosoft Edge
- CVE-2017-0141A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in MicroMicrosoft Browser
- CVE-2017-0150A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in MicroMicrosoft Browser
- CVE-2017-0151A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in MicroMicrosoft Browser
- CVE-2017-0154Microsoft Internet Explorer 11 on Windows 10, 1511, and 1606 and Windows Server 2016 does not enforce cross-domain policies, allowing attackMicrosoft Internet Explorer