CVEs published May 12, 2017
174 CVEs were published on May 12, 2017: 0 critical, 6 high. 5 are now in CISA KEV.
- Published
- 174
- Critical
- 0
- High
- 6
- Medium
- 0
- Low
- 0
- Unrated
- 168
- Now in CISA KEV
- 5
- Fix available
- 13
Most affected products
- Google Android
- 70
- Microsoft Server Message Block
- 11
- Microsoft Windows
- 11
- Microsoft Edge
- 8
- Microsoft Office
- 7
- Microsoft Edge · Microsoft.ChakraCore
- 4
- Splunk Enterprise · Splunk Light
- 4
- baserCMS Users Community baserCMS
- 3
- Microsoft browsers
- 3
- Microsoft Internet Explorer
- 3
High 6
- CVE-2017-0213Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2Microsoft Windows COM
- CVE-2017-0222A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory CorMicrosoft Internet Explorer
- CVE-2017-0261Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly Microsoft Office
- CVE-2017-0262Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly Microsoft Office
- CVE-2017-0263The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, WindowMicrosoft Windows
- CVE-2017-8912CMS Made Simple (CMSMS) 2.1.6 allows remote authenticated administrators to execute arbitrary PHP code via the code parameter to admin/editu
Medium, low and unrated 168
- CVE-2017-5654In Ambari 2.4.x (before 2.4.3) and Ambari 2.5.0, an authorized user of the Ambari Hive View may be able to gain unauthorized read access to Apache Software Foundation Apache Ambari
- CVE-2017-8924The edge_bulk_in_callback function in drivers/usb/serial/io_ti.c in the Linux kernel before 4.10.4 allows local users to obtain sensitive in
- CVE-2017-8925The omninet_open function in drivers/usb/serial/omninet.c in the Linux kernel before 4.10.4 allows local users to cause a denial of service
- CVE-2016-10329Command injection vulnerability in login.php in Synology Photo Station before 6.5.3-3226 allows remote attackers to execute arbitrary code vSynology Photo Station
- CVE-2016-10330Directory traversal vulnerability in synophoto_dsm_user, a SUID program, as used in Synology Photo Station before 6.5.3-3226 allows local usSynology Photo Station
- CVE-2016-10331Directory traversal vulnerability in download.php in Synology Photo Station before 6.5.3-3226 allows remote attackers to read arbitrary fileSynology Photo Station
- CVE-2017-8244In core_info_read and inst_info_read in all Android releases from CAF using the Linux kernel, variable "dbg_buf", "dbg_buf->curr" and "dbg_bQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2017-8245In all Android releases from CAF using the Linux kernel, while processing a voice SVC request which is nonstandard by specifying a payload sQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2017-8246In function msm_pcm_playback_close() in all Android releases from CAF using the Linux kernel, prtd is assigned substream->runtime->private_dQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2017-8923The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to string objects that result in a negat
- CVE-2017-7474It was found that the Keycloak Node.js adapter 2.5 - 3.0 did not handle invalid tokens correctly.Red Hat Keycloak Node.js adapter · keycloak-connect +1
- CVE-2017-7484It was found that some selectivity estimation functions in PostgreSQL before 9.2.21, 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before The PostgreSQL Global Development Group PostgreSQL
- CVE-2017-7485In PostgreSQL 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3, it was found that the PGREQUIRESSL envirThe PostgreSQL Global Development Group PostgreSQL
- CVE-2017-7486PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses foreign server passwords to any usThe PostgreSQL Global Development Group PostgreSQL
- CVE-2017-8921In FlightGear before 2017.2.1, the FGCommand interface allows overwriting any file the user has write access to, but not with arbitrary data
- CVE-2016-4838The Android Apps Money Forward (prior to v7.18.0), Money Forward for The Gunma Bank (prior to v1.2.0), Money Forward for SHIGA BANK (prior tMoney Foward Money Forward · SOURCENEXT Money Forward fo… +2
- CVE-2016-4839The Android Apps Money Forward (prior to v7.18.0), Money Forward for The Gunma Bank (prior to v1.2.0), Money Forward for SHIGA BANK (prior tMoney Foward Money Forward · SOURCENEXT Money Forward fo… +2
- CVE-2016-4855Cross-site scripting vulnerability in ADOdb versions prior to 5.20.6 allows remote attackers to inject arbitrary web script or HTML via unspADOdb · adodb/adodb-php
- CVE-2016-4856Cross-site scripting vulnerability in Splunk Enterprise 6.3.x prior to 6.3.5 and Splunk Light 6.3.x prior to 6.3.5 allows attacker with admiSplunk Enterprise · Splunk Light
- CVE-2016-4857Open redirect vulnerability in Splunk Enterprise 6.4.x prior to 6.4.2, Splunk Enterprise 6.3.x prior to 6.3.6, Splunk Enterprise 6.2.x priorSplunk Enterprise · Splunk Light
- CVE-2016-4858Cross-site scripting vulnerability in Splunk Enterprise 6.4.x prior to 6.4.2, Splunk Enterprise 6.3.x prior to 6.3.6, Splunk Enterprise 6.2.Splunk Enterprise · Splunk Light
- CVE-2016-4859Open redirect vulnerability in Splunk Enterprise 6.4.x prior to 6.4.3, Splunk Enterprise 6.3.x prior to 6.3.6, Splunk Enterprise 6.2.x priorSplunk Enterprise · Splunk Light
- CVE-2016-4864H2O versions 2.0.3 and earlier and 2.1.0-beta2 and earlier allows remote attackers to cause a denial-of-service (DoS) via format string specKazuho Oku H2O
- CVE-2016-4876Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication baserCMS Users Community baserCMS
- CVE-2016-4877Cross-site scripting vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote authenticated attackers to inject arbitrbaserCMS Users Community baserCMS plugin Mail
- CVE-2016-4878Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication baserCMS Users Community baserCMS · baserproject/basercms
- CVE-2016-4879Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote attackers to hijack the autbaserCMS Users Community baserCMS plugin Mail · baserprojec…
- CVE-2016-4880Cross-site scripting vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote authenticated attackers to inject arbitrbaserCMS Users Community baserCMS plugin Blog · baserprojec…
- CVE-2016-4881Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote attackers to hijack the autbaserCMS Users Community baserCMS plugin Blog · baserprojec…
- CVE-2016-4882Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication baserCMS Users Community baserCMS
- CVE-2016-4883Cross-site scripting vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to inject arbitrary web script or HTML viabaserCMS Users Community baserCMS
- CVE-2016-4884Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote attackers to hijack the autbaserCMS Users Community baserCMS plugin Blog
- CVE-2016-4885Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Feed version 3.0.10 and earlier allows remote attackers to hijack the autbaserCMS Users Community baserCMS plugin Feed
- CVE-2016-4886Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote attackers to hijack the autbaserCMS Users Community baserCMS plugin Mail
- CVE-2016-4887Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Uploader version 3.0.10 and earlier allows remote attackers to hijack thebaserCMS Users Community baserCMS plugin Uploader
- CVE-2017-2122Cross-site scripting vulnerability in Nessus versions 6.8.0, 6.8.1, 6.9.0, 6.9.1 and 6.9.2 allows remote authenticated attackers to inject aTenable Network Security Nessus
- CVE-2017-2157Untrusted search path vulnerability in installers for The Public Certification Service for Individuals "The JPKI user's software (for WindowJapan Agency for Local Authority Information Systems Ins… +1
- CVE-2017-2163Directory traversal vulnerability in SOY CMS Ver.1.8.1 to Ver.1.8.12 allows authenticated attackers to read arbitrary files via shop_id.Nippon Institute of Agroinformatics SOY CMS
- CVE-2017-2164Cross-site scripting vulnerability in SOY CMS with installer 1.8.12 and earlier allows remote attackers to inject arbitrary web script or HTNippon Institute of Agroinformatics SOY CMS with installer
- CVE-2017-2167Untrusted search path vulnerability in Installer for PrimeDrive Desktop Application version 1.4.4 and earlier allows remote attackers to exeSoftBank Installer for PrimeDrive Desktop Application
- CVE-2016-10274An elevation of privilege vulnerability in the MediaTek touchscreen driver could enable a local malicious application to execute arbitrary cGoogle Android
- CVE-2016-10275An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code withGoogle Android
- CVE-2016-10276An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code withGoogle Android
- CVE-2016-10277An elevation of privilege vulnerability in the Motorola bootloader could enable a local malicious application to execute arbitrary code withGoogle Android
- CVE-2016-10280An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code Google Android
- CVE-2016-10281An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code Google Android
- CVE-2016-10282An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code Google Android
- CVE-2016-10283An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2016-10284An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2016-10285An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2016-10286An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2016-10287An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2016-10288An elevation of privilege vulnerability in the Qualcomm LED driver could enable a local malicious application to execute arbitrary code withGoogle Android
- CVE-2016-10289An elevation of privilege vulnerability in the Qualcomm crypto driver could enable a local malicious application to execute arbitrary code wGoogle Android
- CVE-2016-10290An elevation of privilege vulnerability in the Qualcomm shared memory driver could enable a local malicious application to execute arbitraryGoogle Android
- CVE-2016-10291An elevation of privilege vulnerability in the Qualcomm Slimbus driver could enable a local malicious application to execute arbitrary code Google Android
- CVE-2016-10292A denial of service vulnerability in the Qualcomm Wi-Fi driver could enable a proximate attacker to cause a denial of service in the Wi-Fi sGoogle Android
- CVE-2016-10293An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of itGoogle Android
- CVE-2016-10294An information disclosure vulnerability in the Qualcomm power driver could enable a local malicious application to access data outside of itGoogle Android
- CVE-2016-10295An information disclosure vulnerability in the Qualcomm LED driver could enable a local malicious application to access data outside of its Google Android
- CVE-2016-10296An information disclosure vulnerability in the Qualcomm shared memory driver could enable a local malicious application to access data outsiGoogle Android
- CVE-2017-0465An elevation of privilege vulnerability in the Qualcomm ADSPRPC driver could enable a local malicious application to execute arbitrary code Google Android
- CVE-2017-0493An information disclosure vulnerability in File-Based Encryption could enable a local malicious attacker to bypass operating system protectiGoogle Android
- CVE-2017-0587A remote code execution vulnerability in libmpeg2 in Mediaserver could enable an attacker using a specially crafted file to cause memory corGoogle Android
- CVE-2017-0588A remote code execution vulnerability in id3/ID3.cpp in libstagefright in Mediaserver could enable an attacker using a specially crafted filGoogle Android
- CVE-2017-0589A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corrGoogle Android
- CVE-2017-0590A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corrGoogle Android
- CVE-2017-0591A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruGoogle Android
- CVE-2017-0592A remote code execution vulnerability in FLACExtractor.cpp in libstagefright in Mediaserver could enable an attacker using a specially craftGoogle Android
- CVE-2017-0593An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to obtain access to custom permissiGoogle Android
- CVE-2017-0594An elevation of privilege vulnerability in codecs/aacenc/SoftAACEncoder2.cpp in libstagefright in Mediaserver could enable a local maliciousGoogle Android
- CVE-2017-0595An elevation of privilege vulnerability in libstagefright in Mediaserver could enable a local malicious application to execute arbitrary codGoogle Android
- CVE-2017-0596An elevation of privilege vulnerability in libstagefright in Mediaserver could enable a local malicious application to execute arbitrary codGoogle Android
- CVE-2017-0597An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the conteGoogle Android
- CVE-2017-0598An information disclosure vulnerability in the Framework APIs could enable a local malicious application to bypass operating system protectiGoogle Android
- CVE-2017-0599A remote denial of service vulnerability in libhevc in Mediaserver could enable an attacker to use a specially crafted file to cause a devicGoogle Android
- CVE-2017-0600A remote denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause Google Android
- CVE-2017-0601An Elevation of Privilege vulnerability in Bluetooth could potentially enable a local malicious application to accept harmful files shared vGoogle Android
- CVE-2017-0602An information disclosure vulnerability in Bluetooth could allow a local malicious application to bypass operating system protections that iGoogle Android
- CVE-2017-0603A denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a devicGoogle Android
- CVE-2017-0604An elevation of privilege vulnerability in the kernel Qualcomm power driver could enable a local malicious application to execute arbitrary Google Android
- CVE-2017-0606An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2017-0607An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2017-0608An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2017-0609An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2017-0610An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2017-0611An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2017-0612An elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator driver could enable a local malicious applGoogle Android
- CVE-2017-0613An elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator driver could enable a local malicious applGoogle Android
- CVE-2017-0614An elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator driver could enable a local malicious applGoogle Android
- CVE-2017-0615An elevation of privilege vulnerability in the MediaTek power driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2017-0616An elevation of privilege vulnerability in the MediaTek system management interrupt driver could enable a local malicious application to exeGoogle Android
- CVE-2017-0617An elevation of privilege vulnerability in the MediaTek video driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2017-0618An elevation of privilege vulnerability in the MediaTek command queue driver could enable a local malicious application to execute arbitraryGoogle Android
- CVE-2017-0619An elevation of privilege vulnerability in the Qualcomm pin controller driver could enable a local malicious application to execute arbitrarGoogle Android
- CVE-2017-0620An elevation of privilege vulnerability in the Qualcomm Secure Channel Manager driver could enable a local malicious application to execute Google Android
- CVE-2017-0621An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code wGoogle Android
- CVE-2017-0622An elevation of privilege vulnerability in the Goodix touchscreen driver could enable a local malicious application to execute arbitrary codGoogle Android
- CVE-2017-0623An elevation of privilege vulnerability in the HTC bootloader could enable a local malicious application to execute arbitrary code within thGoogle Android
- CVE-2017-0624An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of itGoogle Android
- CVE-2017-0625An information disclosure vulnerability in the MediaTek command queue driver could enable a local malicious application to access data outsiGoogle Android
- CVE-2017-0626An information disclosure vulnerability in the Qualcomm crypto engine driver could enable a local malicious application to access data outsiGoogle Android
- CVE-2017-0627An information disclosure vulnerability in the kernel UVC driver could enable a local malicious application to access data outside of its peGoogle Android
- CVE-2017-0628An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to access data outside of iGoogle Android
- CVE-2017-0629An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to access data outside of iGoogle Android
- CVE-2017-0630An information disclosure vulnerability in the kernel trace subsystem could enable a local malicious application to access data outside of iGoogle Android
- CVE-2017-0631An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to access data outside of iGoogle Android
- CVE-2017-0632An information disclosure vulnerability in the Qualcomm sound codec driver could enable a local malicious application to access data outsideGoogle Android
- CVE-2017-0633An information disclosure vulnerability in the Broadcom Wi-Fi driver could enable a local malicious component to access data outside of its Google Android
- CVE-2017-0634An information disclosure vulnerability in the Synaptics touchscreen driver could enable a local malicious application to access data outsid
- CVE-2017-0635A remote denial of service vulnerability in HevcUtils.cpp in libstagefright in Mediaserver could enable an attacker to use a specially craftGoogle Android
- CVE-2017-0064A security feature bypass vulnerability exists in Internet Explorer that allows for bypassing Mixed Content warnings, aka "Internet ExplorerMicrosoft Internet Explorer
- CVE-2017-0077The kernel-mode drivers in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Microsoft Windows
- CVE-2017-0171Windows DNS Server allows a denial of service vulnerability when Microsoft Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 Gold and Microsoft Windows DNS Server
- CVE-2017-0175The Windows kernel in Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows authenticated attackers to obtain sensitive information vMicrosoft Windows
- CVE-2017-0190The GDI component in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8Microsoft Windows
- CVE-2017-0212Windows Hyper-V allows an elevation of privilege vulnerability when Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016Microsoft Hyper-V
- CVE-2017-0214Windows COM in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, WiMicrosoft Windows COM
- CVE-2017-0220The Windows kernel in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows Server 2012 Gold allows authenticated attackers to obtaMicrosoft Windows
- CVE-2017-0221A vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." ThisMicrosoft Edge
- CVE-2017-0224A remote code execution vulnerability exists in the way JavaScript engines render when handling objects in memory in Microsoft Edge, aka "ScMicrosoft Edge · Microsoft.ChakraCore
- CVE-2017-0226A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory CorMicrosoft Internet Explorer
- CVE-2017-0227A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling objects Microsoft Edge
- CVE-2017-0228A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript engines render when handling objects in memory, akaMicrosoft browsers
- CVE-2017-0229A remote code execution vulnerability exists in Microsoft Edge in the way JavaScript engines render when handling objects in memory, aka "ScMicrosoft Edge
- CVE-2017-0230A remote code execution vulnerability exists in Microsoft Edge in the way JavaScript engines render when handling objects in memory, aka "ScMicrosoft Edge
- CVE-2017-0231A spoofing vulnerability exists when Microsoft browsers render SmartScreen Filter, aka "Microsoft Browser Spoofing Vulnerability."Microsoft browsers
- CVE-2017-0233An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in theMicrosoft Edge
- CVE-2017-0234A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects inMicrosoft Edge · Microsoft.ChakraCore
- CVE-2017-0235A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects inMicrosoft Edge · Microsoft.ChakraCore
- CVE-2017-0236A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects inMicrosoft Edge · Microsoft.ChakraCore
- CVE-2017-0238A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript scripting engines handle objects in memory, aka "ScMicrosoft browsers
- CVE-2017-0240A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling objects Microsoft Edge
- CVE-2017-0241An elevation of privilege vulnerability exists when Microsoft Edge renders a domain-less page in the URL, which could allow Microsoft Edge tMicrosoft Edge
- CVE-2017-0242An information disclosure vulnerability exists in the way some ActiveX objects are instantiated, aka "Microsoft ActiveX Information DisclosuMicrosoft Windows
- CVE-2017-0244The kernel in Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows locally authenticated attackers to gain privileges via a crafted Microsoft Windows
- CVE-2017-0245The kernel-mode drivers in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1 and Windows Server 2012 Gold allow a local authenticated attackMicrosoft Windows
- CVE-2017-0246The Graphics Component in the kernel-mode drivers in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 GolMicrosoft Windows
- CVE-2017-0247A denial of service vulnerability exists when the ASP.NET Core fails to properly validate web requests.Microsoft ASP.NET Core · Microsoft.AspNetCore.Mvc +18
- CVE-2017-0248Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to bypass Enhanced Security Usage taggings whenMicrosoft .NET Framework · Microsoft.AspNetCore.Mvc +18
- CVE-2017-0249An elevation of privilege vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.Microsoft ASP.NET Core · Microsoft.AspNetCore.Mvc +19
- CVE-2017-0254Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Office for Mac 2011, Office for Mac 2016, Microsoft OffiMicrosoft Office
- CVE-2017-0255Microsoft SharePoint Foundation 2013 SP1 allows an elevation of privilege vulnerability when it does not properly sanitize a specially craftMicrosoft Office
- CVE-2017-0256A spoofing vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.Microsoft ASP.NET Core · Microsoft.AspNetCore.Mvc +18
- CVE-2017-0258The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Microsoft Windows
- CVE-2017-0259The Windows kernel in Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2Microsoft Windows
- CVE-2017-0264Microsoft PowerPoint for Mac 2011 allows a remote code execution vulnerability when the software fails to properly handle objects in memory,Microsoft Office
- CVE-2017-0265Microsoft PowerPoint for Mac 2011 allows a remote code execution vulnerability when the software fails to properly handle objects in memory,Microsoft Office
- CVE-2017-0266A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling objects Microsoft Edge
- CVE-2017-0267Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 Microsoft Server Message Block
- CVE-2017-0268Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 Microsoft Server Message Block
- CVE-2017-0269The Microsoft Server Message Block 1.0 (SMBv1) allows denial of service when an attacker sends specially crafted requests to the server, akaMicrosoft Server Block Message
- CVE-2017-0270Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 Microsoft Server Message Block
- CVE-2017-0271Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 Microsoft Server Message Block
- CVE-2017-0272The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows SMicrosoft Server Message Block
- CVE-2017-0273The Microsoft Server Message Block 1.0 (SMBv1) allows denial of service when an attacker sends specially crafted requests to the server, akaMicrosoft Server Block Message
- CVE-2017-0274Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 Microsoft Server Message Block
- CVE-2017-0275Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 Microsoft Server Message Block
- CVE-2017-0276Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 Microsoft Server Message Block
- CVE-2017-0277The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows SMicrosoft Server Message Block
- CVE-2017-0278The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows SMicrosoft Server Message Block
- CVE-2017-0279The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows SMicrosoft Server Message Block
- CVE-2017-0280The Microsoft Server Message Block 1.0 (SMBv1) allows denial of service when an attacker sends specially crafted requests to the server, akaMicrosoft Server Block Message
- CVE-2017-0281Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2016, Office Online Server 2016, Office Web Apps 2010 SP2,Office Web AppMicrosoft Office
- CVE-2017-8360Conexant Systems mictray64 task, as used on HP Elite, EliteBook, ProBook, and ZBook systems, leaks sensitive data (keystrokes) to any proces
- CVE-2017-8900LightDM through 1.22.0, when systemd is used in Ubuntu 16.10 and 17.x, allows physically proximate attackers to bypass intended AppArmor res
- CVE-2017-8908The mark_line_tr function in gxscanc.c in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service (out-of-bounds read)
- CVE-2017-8911An integer underflow has been identified in the unicode_to_utf8() function in tnef 1.4.14.