CVEs published June 15, 2017
112 CVEs were published on June 15, 2017: 2 critical, 1 high. 2 are now in CISA KEV.
- Published
- 112
- Critical
- 2
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 109
- Now in CISA KEV
- 2
- Fix available
- 0
Most affected products
- Microsoft Windows
- 45
- Microsoft Edge
- 12
- Microsoft Office
- 8
- Microsoft Uniscribe
- 8
- Microsoft Graphics
- 4
- Microsoft browsers
- 3
- Microsoft Windows PDF
- 3
- Microsoft Internet Explorer
- 2
- Microsoft SharePoint
- 2
- Atlassian Confluence Server
- 1
Critical 2
- CVE-2017-7876This command injection vulnerability in QTS allows attackers to run arbitrary commands in the compromised application.
- CVE-2017-8543Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, WinMicrosoft Windows
High 1
Medium, low and unrated 109
- CVE-2017-7629QNAP QTS before 4.2.6 build 20170517 has a flaw in the change password function.
- CVE-2017-8461Windows RPC with Routing and Remote Access enabled in Windows XP and Windows Server 2003 allows an attacker to execute code on a targeted RPMicrosoft Windows
- CVE-2017-8487Windows OLE in Windows XP and Windows Server 2003 allows an attacker to execute code when a victim opens a specially crafted file or programMicrosoft Windows
- CVE-2017-9419Cross-site scripting (XSS) vulnerability in the Webhammer WP Custom Fields Search plugin 0.3.28 for WordPress allows remote attackers to inj
- CVE-2017-9675On D-Link DIR-605L devices, firmware before 2.08UIBetaB01.bin allows an unauthenticated GET request to trigger a reboot.
- CVE-2017-9613Stored Cross-site scripting (XSS) vulnerability in SAP SuccessFactors before b1705.1234962 allows remote authenticated users to inject arbit
- CVE-2017-9673In SimpleCE 2.3.0, a CSRF vulnerability can be exploited to add an administrator account (via the index.php/user/new URI) or change its sett
- CVE-2017-9674In SimpleCE 2.3.0, an authenticated XSS vulnerability was found on index.php/content/text/1?return_url=[XSS] exploitable as a regular or adm
- CVE-2016-10395In FlexNet Publisher versions before Luton SP1 (11.14.1.1) running FlexNet Publisher Licensing Service on Windows platform, a boundary errorFlexera Software FlexNet Publisher
- CVE-2017-9505Atlassian Confluence starting with 4.3.0 before 6.2.1 did not check if a user had permission to view a page when creating a workbox notificaAtlassian Confluence Server
- CVE-2015-7732The Avira Mobile Security app before 1.5.11 for iOS sends sensitive login information in cleartext.
- CVE-2017-5244Routes used to stop running Metasploit tasks (either particular ones or all tasks) allowed GET requests.Rapid7 Metasploit
- CVE-2017-1197IBM BigFix Compliance (TEMA SUAv1 SCA SCM) uses an inadequate account lockout setting that could allow a remote attacker to brute force accoIBM BigFix Compliance Analytics
- CVE-2017-1379IBM API Connect 5.0.0.0 could allow a remote attacker to obtain sensitive information, caused by improper handling of requests to the DeveloIBM API Connect
- CVE-2017-9670An uninitialized stack variable vulnerability in load_tic_series() in set.c in gnuplot 5.2.rc1 allows an attacker to cause Denial of Service
- CVE-2017-9606Infotecs ViPNet Client and Coordinator before 4.3.2-42442 allow local users to gain privileges by placing a Trojan horse ViPNet update file
- CVE-2017-0173Microsoft Windows 10 1607 and Windows Server 2016 allow an attacker to exploit a security feature bypass vulnerability in Device Guard that Microsoft Windows
- CVE-2017-0193Windows Hyper-V in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1Microsoft Windows
- CVE-2017-0215Microsoft Windows 10 1607 and Windows Server 2016 allow an attacker to exploit a security feature bypass vulnerability in Device Guard that Microsoft Windows
- CVE-2017-0216Microsoft Windows 10 1511, Windows 10 1607, and Windows Server 2016 allow an attacker to exploit a security feature bypass vulnerability in Microsoft Windows
- CVE-2017-0218Microsoft Windows 10 Gold, Windows 10 1511, Windows 10 1607, and Windows Server 2016 allow an attacker to exploit a security feature bypass Microsoft Windows
- CVE-2017-0219Microsoft Windows 10 Gold, Windows 10 1511, Windows 10 1607, and Windows Server 2016 allow an attacker to exploit a security feature bypass Microsoft Windows
- CVE-2017-0260A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office RMicrosoft Office
- CVE-2017-0282Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 GolMicrosoft Uniscribe
- CVE-2017-0283Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 GolMicrosoft Uniscribe
- CVE-2017-0284Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 GolMicrosoft Uniscribe
- CVE-2017-0285Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 GolMicrosoft Uniscribe
- CVE-2017-0286Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 GoldMicrosoft Uniscribe
- CVE-2017-0287Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 GoldMicrosoft Uniscribe
- CVE-2017-0288Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold
- CVE-2017-0289Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 GoldMicrosoft Uniscrbe
- CVE-2017-0291Windows PDF in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 alloMicrosoft Windows PDF
- CVE-2017-0292Windows PDF in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 alloMicrosoft Windows PDF
- CVE-2017-0294Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 15Microsoft Windows
- CVE-2017-0295Microsoft Windows 10 1607 and 1703, and Windows Server 2016 allow an authenticated attacker to modify the C:\Users\DEFAULT folder structure,Microsoft Windows
- CVE-2017-0296Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 15Microsoft Windows
- CVE-2017-0297The kernel in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Microsoft Windows
- CVE-2017-0298A DCOM object in Helppane.exe in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Microsoft Windows COM
- CVE-2017-0299The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, WinMicrosoft Windows
- CVE-2017-0300The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, WinMicrosoft Windows
- CVE-2017-8460Windows PDF in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 alloMicrosoft Windows PDF
- CVE-2017-8462The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, WinMicrosoft Windows
- CVE-2017-8465Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an atMicrosoft Windows
- CVE-2017-8466Windows Cursor in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows Microsoft Windows Cursor
- CVE-2017-8468Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an atMicrosoft Windows
- CVE-2017-8469The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, WinMicrosoft Windows
- CVE-2017-8470Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 15Microsoft Windows
- CVE-2017-8471Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 15Microsoft Windows
- CVE-2017-8472Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 allow an authenticated attacker to run a specially crafMicrosoft Windows
- CVE-2017-8473Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and Windows Server 201Microsoft Windows
- CVE-2017-8474The kernel in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Microsoft Windows
- CVE-2017-8475Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Microsoft Windows
- CVE-2017-8476The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, WinMicrosoft Windows
- CVE-2017-8477Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 15Microsoft Windows
- CVE-2017-8478The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, WinMicrosoft Windows
- CVE-2017-8479The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, WinMicrosoft Windows
- CVE-2017-8480The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, WinMicrosoft Windows
- CVE-2017-8481The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, WinMicrosoft Windows
- CVE-2017-8482The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, WinMicrosoft Windows
- CVE-2017-8483The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, WinMicrosoft Windows
- CVE-2017-8484Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 15Microsoft Windows
- CVE-2017-8485The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, WinMicrosoft Windows
- CVE-2017-8488The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, WinMicrosoft Windows
- CVE-2017-8489The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, WinMicrosoft Windows
- CVE-2017-8490The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, WinMicrosoft Windows
- CVE-2017-8491The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, WinMicrosoft Windows
- CVE-2017-8492The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, WinMicrosoft Windows
- CVE-2017-8493Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an atMicrosoft Windows
- CVE-2017-8494Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow a locally-authenticated attacker to run a specially crafted aMicrosoft Windows
- CVE-2017-8496Microsoft Edge in Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user whMicrosoft Edge
- CVE-2017-8497Microsoft Edge in Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user whMicrosoft Edge
- CVE-2017-8498Microsoft Edge in Windows 10 1607 and 1703, and Windows Server 2016 allows an attacker to read data not intended to be disclosed when Edge aMicrosoft Edge
- CVE-2017-8499Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the Edge JavaScript sMicrosoft Edge
- CVE-2017-8504Microsoft Edge in Windows 10 1607 and 1703, and Windows Server 2016 allows an attacker to read the URL of a cross-origin request when the MiMicrosoft Edge
- CVE-2017-8506A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office RMicrosoft Office
- CVE-2017-8507A remote code execution vulnerability exists in the way Microsoft Office software parses specially crafted email messages, aka "Microsoft OfMicrosoft Office
- CVE-2017-8508A security feature bypass vulnerability exists in Microsoft Office software when it improperly handles the parsing of file formats, aka "MicMicrosoft Office
- CVE-2017-8509A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office RMicrosoft Office
- CVE-2017-8510A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office RMicrosoft Office
- CVE-2017-8511A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office RMicrosoft Office
- CVE-2017-8512A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office RMicrosoft Office
- CVE-2017-8513A remote code execution vulnerability exists in Microsoft PowerPoint when the software fails to properly handle objects in memory, aka "MicrMicrosoft PowerPoint
- CVE-2017-8514An information disclosure vulnerability exists when Microsoft SharePoint software fails to properly sanitize a specially crafted requests, aMicrosoft SharePoint
- CVE-2017-8515Microsoft Windows 10 1511, 1607, and 1703, and Windows Server 2016 allow an unauthenticated attacker to send a specially crafted kernel modeMicrosoft Windows
- CVE-2017-8517Microsoft browsers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 GMicrosoft browsers
- CVE-2017-8519Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 and R2Microsoft Internet Explorer
- CVE-2017-8520Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the Edge JavaScript sMicrosoft Edge
- CVE-2017-8521Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the Edge JavaScript sMicrosoft Edge
- CVE-2017-8522Microsoft browsers in Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and WindoMicrosoft browsers
- CVE-2017-8523Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to trick a user into loading aMicrosoft Edge
- CVE-2017-8524Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, WindoMicrosoft browsers
- CVE-2017-8527Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 GoldMicrosoft Graphics
- CVE-2017-8528Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 GolMicrosoft Uniscribe
- CVE-2017-8529Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 and R2 allMicrosoft Internet Explorer
- CVE-2017-8530Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to trick a user into loading aMicrosoft Edge
- CVE-2017-8531Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 GoldMicrosoft Graphics
- CVE-2017-8532Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 GoldMicrosoft Graphics
- CVE-2017-8533Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 GoldMicrosoft Graphics
- CVE-2017-8534Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 GolMicrosoft Uniscribe
- CVE-2017-8544Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 15Microsoft Windows
- CVE-2017-8545A spoofing vulnerability exists in when Microsoft Outlook for Mac does not sanitize html properly, aka "Microsoft Outlook for Mac Spoofing VMicrosoft Outlook for Mac
- CVE-2017-8547Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 and R2 all
- CVE-2017-8548Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to obtain information to furthMicrosoft Edge
- CVE-2017-8549Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to obtain information to furthMicrosoft Edge
- CVE-2017-8550A remote code execution vulnerability exists in Skype for Business when the software fails to sanitize specially crafted content, aka "SkypeMicrosoft Skype for Business
- CVE-2017-8551An elevation of privilege vulnerability exists when Microsoft SharePoint software fails to properly sanitize a specially crafted requests, aMicrosoft SharePoint
- CVE-2017-8552A kernel-mode driver in Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server Microsoft Windows
- CVE-2017-8553An information disclosure vulnerability exists in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2Microsoft Windows kernel
- CVE-2017-8555Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to trick a user into loading a page with malicious content when the Edge ContMicrosoft Edge