# CVEs published 2017-06-15

112 CVEs were published on June 15, 2017: 2 critical, 1 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2017-7629](https://cve.now/CVE-2017-7629.md): QNAP QTS before 4.2.6 build 20170517 has a flaw in the change password function. (no CVSS)
- [CVE-2017-7876](https://cve.now/CVE-2017-7876.md): This command injection vulnerability in QTS allows attackers to run arbitrary commands in the compromised application. (CVSS 10.0)
- [CVE-2017-8461](https://cve.now/CVE-2017-8461.md): Windows RPC with Routing and Remote Access enabled in Windows XP and Windows Server 2003 allows an attacker to execute code on a targeted RP (no CVSS, Microsoft Windows)
- [CVE-2017-8487](https://cve.now/CVE-2017-8487.md): Windows OLE in Windows XP and Windows Server 2003 allows an attacker to execute code when a victim opens a specially crafted file or program (no CVSS, Microsoft Windows)
- [CVE-2017-9419](https://cve.now/CVE-2017-9419.md): Cross-site scripting (XSS) vulnerability in the Webhammer WP Custom Fields Search plugin 0.3.28 for WordPress allows remote attackers to inj (no CVSS)
- [CVE-2017-9675](https://cve.now/CVE-2017-9675.md): On D-Link DIR-605L devices, firmware before 2.08UIBetaB01.bin allows an unauthenticated GET request to trigger a reboot. (no CVSS)
- [CVE-2017-9613](https://cve.now/CVE-2017-9613.md): Stored Cross-site scripting (XSS) vulnerability in SAP SuccessFactors before b1705.1234962 allows remote authenticated users to inject arbit (no CVSS)
- [CVE-2017-9673](https://cve.now/CVE-2017-9673.md): In SimpleCE 2.3.0, a CSRF vulnerability can be exploited to add an administrator account (via the index.php/user/new URI) or change its sett (no CVSS)
- [CVE-2017-9674](https://cve.now/CVE-2017-9674.md): In SimpleCE 2.3.0, an authenticated XSS vulnerability was found on index.php/content/text/1?return\_url=\[XSS\] exploitable as a regular or adm (no CVSS)
- [CVE-2016-10395](https://cve.now/CVE-2016-10395.md): In FlexNet Publisher versions before Luton SP1 (11.14.1.1) running FlexNet Publisher Licensing Service on Windows platform, a boundary error (no CVSS, Flexera Software FlexNet Publisher)
- [CVE-2017-9505](https://cve.now/CVE-2017-9505.md): Atlassian Confluence starting with 4.3.0 before 6.2.1 did not check if a user had permission to view a page when creating a workbox notifica (no CVSS, Atlassian Confluence Server)
- [CVE-2015-7732](https://cve.now/CVE-2015-7732.md): The Avira Mobile Security app before 1.5.11 for iOS sends sensitive login information in cleartext. (no CVSS)
- [CVE-2017-5244](https://cve.now/CVE-2017-5244.md): Routes used to stop running Metasploit tasks (either particular ones or all tasks) allowed GET requests. (no CVSS, Rapid7 Metasploit)
- [CVE-2017-1197](https://cve.now/CVE-2017-1197.md): IBM BigFix Compliance (TEMA SUAv1 SCA SCM) uses an inadequate account lockout setting that could allow a remote attacker to brute force acco (no CVSS, IBM BigFix Compliance Analytics)
- [CVE-2017-1379](https://cve.now/CVE-2017-1379.md): IBM API Connect 5.0.0.0 could allow a remote attacker to obtain sensitive information, caused by improper handling of requests to the Develo (no CVSS, IBM API Connect)
- [CVE-2017-9670](https://cve.now/CVE-2017-9670.md): An uninitialized stack variable vulnerability in load\_tic\_series() in set.c in gnuplot 5.2.rc1 allows an attacker to cause Denial of Service (no CVSS)
- [CVE-2017-9606](https://cve.now/CVE-2017-9606.md): Infotecs ViPNet Client and Coordinator before 4.3.2-42442 allow local users to gain privileges by placing a Trojan horse ViPNet update file (no CVSS)
- [CVE-2017-0173](https://cve.now/CVE-2017-0173.md): Microsoft Windows 10 1607 and Windows Server 2016 allow an attacker to exploit a security feature bypass vulnerability in Device Guard that (no CVSS, Microsoft Windows)
- [CVE-2017-0193](https://cve.now/CVE-2017-0193.md): Windows Hyper-V in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1 (no CVSS, Microsoft Windows)
- [CVE-2017-0215](https://cve.now/CVE-2017-0215.md): Microsoft Windows 10 1607 and Windows Server 2016 allow an attacker to exploit a security feature bypass vulnerability in Device Guard that (no CVSS, Microsoft Windows)
- [CVE-2017-0216](https://cve.now/CVE-2017-0216.md): Microsoft Windows 10 1511, Windows 10 1607, and Windows Server 2016 allow an attacker to exploit a security feature bypass vulnerability in (no CVSS, Microsoft Windows)
- [CVE-2017-0218](https://cve.now/CVE-2017-0218.md): Microsoft Windows 10 Gold, Windows 10 1511, Windows 10 1607, and Windows Server 2016 allow an attacker to exploit a security feature bypass (no CVSS, Microsoft Windows)
- [CVE-2017-0219](https://cve.now/CVE-2017-0219.md): Microsoft Windows 10 Gold, Windows 10 1511, Windows 10 1607, and Windows Server 2016 allow an attacker to exploit a security feature bypass (no CVSS, Microsoft Windows)
- [CVE-2017-0260](https://cve.now/CVE-2017-0260.md): A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office R (no CVSS, Microsoft Office)
- [CVE-2017-0282](https://cve.now/CVE-2017-0282.md): Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gol (no CVSS, Microsoft Uniscribe)
- [CVE-2017-0283](https://cve.now/CVE-2017-0283.md): Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gol (no CVSS, Microsoft Uniscribe)
- [CVE-2017-0284](https://cve.now/CVE-2017-0284.md): Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gol (no CVSS, Microsoft Uniscribe)
- [CVE-2017-0285](https://cve.now/CVE-2017-0285.md): Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gol (no CVSS, Microsoft Uniscribe)
- [CVE-2017-0286](https://cve.now/CVE-2017-0286.md): Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold (no CVSS, Microsoft Uniscribe)
- [CVE-2017-0287](https://cve.now/CVE-2017-0287.md): Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold (no CVSS, Microsoft Uniscribe)
- [CVE-2017-0288](https://cve.now/CVE-2017-0288.md): Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold (no CVSS)
- [CVE-2017-0289](https://cve.now/CVE-2017-0289.md): Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold (no CVSS, Microsoft Uniscrbe)
- [CVE-2017-0291](https://cve.now/CVE-2017-0291.md): Windows PDF in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allo (no CVSS, Microsoft Windows PDF)
- [CVE-2017-0292](https://cve.now/CVE-2017-0292.md): Windows PDF in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allo (no CVSS, Microsoft Windows PDF)
- [CVE-2017-0294](https://cve.now/CVE-2017-0294.md): Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 15 (no CVSS, Microsoft Windows)
- [CVE-2017-0295](https://cve.now/CVE-2017-0295.md): Microsoft Windows 10 1607 and 1703, and Windows Server 2016 allow an authenticated attacker to modify the C:\\Users\\DEFAULT folder structure, (no CVSS, Microsoft Windows)
- [CVE-2017-0296](https://cve.now/CVE-2017-0296.md): Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 15 (no CVSS, Microsoft Windows)
- [CVE-2017-0297](https://cve.now/CVE-2017-0297.md): The kernel in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 (no CVSS, Microsoft Windows)
- [CVE-2017-0298](https://cve.now/CVE-2017-0298.md): A DCOM object in Helppane.exe in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, (no CVSS, Microsoft Windows COM)
- [CVE-2017-0299](https://cve.now/CVE-2017-0299.md): The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Win (no CVSS, Microsoft Windows)
- [CVE-2017-0300](https://cve.now/CVE-2017-0300.md): The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Win (no CVSS, Microsoft Windows)
- [CVE-2017-8460](https://cve.now/CVE-2017-8460.md): Windows PDF in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allo (no CVSS, Microsoft Windows PDF)
- [CVE-2017-8462](https://cve.now/CVE-2017-8462.md): The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Win (no CVSS, Microsoft Windows)
- [CVE-2017-8464](https://cve.now/CVE-2017-8464.md): Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windo (CVSS 8.8, KEV, Microsoft Windows Shell)
- [CVE-2017-8465](https://cve.now/CVE-2017-8465.md): Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an at (no CVSS, Microsoft Windows)
- [CVE-2017-8466](https://cve.now/CVE-2017-8466.md): Windows Cursor in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows (no CVSS, Microsoft Windows Cursor)
- [CVE-2017-8468](https://cve.now/CVE-2017-8468.md): Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an at (no CVSS, Microsoft Windows)
- [CVE-2017-8469](https://cve.now/CVE-2017-8469.md): The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Win (no CVSS, Microsoft Windows)
- [CVE-2017-8470](https://cve.now/CVE-2017-8470.md): Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 15 (no CVSS, Microsoft Windows)
- [CVE-2017-8471](https://cve.now/CVE-2017-8471.md): Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 15 (no CVSS, Microsoft Windows)
- [CVE-2017-8472](https://cve.now/CVE-2017-8472.md): Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 allow an authenticated attacker to run a specially craf (no CVSS, Microsoft Windows)
- [CVE-2017-8473](https://cve.now/CVE-2017-8473.md): Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and Windows Server 201 (no CVSS, Microsoft Windows)
- [CVE-2017-8474](https://cve.now/CVE-2017-8474.md): The kernel in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 (no CVSS, Microsoft Windows)
- [CVE-2017-8475](https://cve.now/CVE-2017-8475.md): Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows (no CVSS, Microsoft Windows)
- [CVE-2017-8476](https://cve.now/CVE-2017-8476.md): The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Win (no CVSS, Microsoft Windows)
- [CVE-2017-8477](https://cve.now/CVE-2017-8477.md): Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 15 (no CVSS, Microsoft Windows)
- [CVE-2017-8478](https://cve.now/CVE-2017-8478.md): The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Win (no CVSS, Microsoft Windows)
- [CVE-2017-8479](https://cve.now/CVE-2017-8479.md): The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Win (no CVSS, Microsoft Windows)
- [CVE-2017-8480](https://cve.now/CVE-2017-8480.md): The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Win (no CVSS, Microsoft Windows)
- [CVE-2017-8481](https://cve.now/CVE-2017-8481.md): The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Win (no CVSS, Microsoft Windows)
- [CVE-2017-8482](https://cve.now/CVE-2017-8482.md): The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Win (no CVSS, Microsoft Windows)
- [CVE-2017-8483](https://cve.now/CVE-2017-8483.md): The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Win (no CVSS, Microsoft Windows)
- [CVE-2017-8484](https://cve.now/CVE-2017-8484.md): Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 15 (no CVSS, Microsoft Windows)
- [CVE-2017-8485](https://cve.now/CVE-2017-8485.md): The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Win (no CVSS, Microsoft Windows)
- [CVE-2017-8488](https://cve.now/CVE-2017-8488.md): The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Win (no CVSS, Microsoft Windows)
- [CVE-2017-8489](https://cve.now/CVE-2017-8489.md): The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Win (no CVSS, Microsoft Windows)
- [CVE-2017-8490](https://cve.now/CVE-2017-8490.md): The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Win (no CVSS, Microsoft Windows)
- [CVE-2017-8491](https://cve.now/CVE-2017-8491.md): The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Win (no CVSS, Microsoft Windows)
- [CVE-2017-8492](https://cve.now/CVE-2017-8492.md): The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Win (no CVSS, Microsoft Windows)
- [CVE-2017-8493](https://cve.now/CVE-2017-8493.md): Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an at (no CVSS, Microsoft Windows)
- [CVE-2017-8494](https://cve.now/CVE-2017-8494.md): Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow a locally-authenticated attacker to run a specially crafted a (no CVSS, Microsoft Windows)
- [CVE-2017-8496](https://cve.now/CVE-2017-8496.md): Microsoft Edge in Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user wh (no CVSS, Microsoft Edge)
- [CVE-2017-8497](https://cve.now/CVE-2017-8497.md): Microsoft Edge in Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user wh (no CVSS, Microsoft Edge)
- [CVE-2017-8498](https://cve.now/CVE-2017-8498.md): Microsoft Edge in Windows 10 1607 and 1703, and Windows Server 2016 allows an attacker to read data not intended to be disclosed when Edge a (no CVSS, Microsoft Edge)
- [CVE-2017-8499](https://cve.now/CVE-2017-8499.md): Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the Edge JavaScript s (no CVSS, Microsoft Edge)
- [CVE-2017-8504](https://cve.now/CVE-2017-8504.md): Microsoft Edge in Windows 10 1607 and 1703, and Windows Server 2016 allows an attacker to read the URL of a cross-origin request when the Mi (no CVSS, Microsoft Edge)
- [CVE-2017-8506](https://cve.now/CVE-2017-8506.md): A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office R (no CVSS, Microsoft Office)
- [CVE-2017-8507](https://cve.now/CVE-2017-8507.md): A remote code execution vulnerability exists in the way Microsoft Office software parses specially crafted email messages, aka "Microsoft Of (no CVSS, Microsoft Office)
- [CVE-2017-8508](https://cve.now/CVE-2017-8508.md): A security feature bypass vulnerability exists in Microsoft Office software when it improperly handles the parsing of file formats, aka "Mic (no CVSS, Microsoft Office)
- [CVE-2017-8509](https://cve.now/CVE-2017-8509.md): A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office R (no CVSS, Microsoft Office)
- [CVE-2017-8510](https://cve.now/CVE-2017-8510.md): A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office R (no CVSS, Microsoft Office)
- [CVE-2017-8511](https://cve.now/CVE-2017-8511.md): A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office R (no CVSS, Microsoft Office)
- [CVE-2017-8512](https://cve.now/CVE-2017-8512.md): A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office R (no CVSS, Microsoft Office)
- [CVE-2017-8513](https://cve.now/CVE-2017-8513.md): A remote code execution vulnerability exists in Microsoft PowerPoint when the software fails to properly handle objects in memory, aka "Micr (no CVSS, Microsoft PowerPoint)
- [CVE-2017-8514](https://cve.now/CVE-2017-8514.md): An information disclosure vulnerability exists when Microsoft SharePoint software fails to properly sanitize a specially crafted requests, a (no CVSS, Microsoft SharePoint)
- [CVE-2017-8515](https://cve.now/CVE-2017-8515.md): Microsoft Windows 10 1511, 1607, and 1703, and Windows Server 2016 allow an unauthenticated attacker to send a specially crafted kernel mode (no CVSS, Microsoft Windows)
- [CVE-2017-8517](https://cve.now/CVE-2017-8517.md): Microsoft browsers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 G (no CVSS, Microsoft browsers)
- [CVE-2017-8519](https://cve.now/CVE-2017-8519.md): Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 and R2 (no CVSS, Microsoft Internet Explorer)
- [CVE-2017-8520](https://cve.now/CVE-2017-8520.md): Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the Edge JavaScript s (no CVSS, Microsoft Edge)
- [CVE-2017-8521](https://cve.now/CVE-2017-8521.md): Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the Edge JavaScript s (no CVSS, Microsoft Edge)
- [CVE-2017-8522](https://cve.now/CVE-2017-8522.md): Microsoft browsers in Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windo (no CVSS, Microsoft browsers)
- [CVE-2017-8523](https://cve.now/CVE-2017-8523.md): Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to trick a user into loading a (no CVSS, Microsoft Edge)
- [CVE-2017-8524](https://cve.now/CVE-2017-8524.md): Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windo (no CVSS, Microsoft browsers)
- [CVE-2017-8527](https://cve.now/CVE-2017-8527.md): Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold (no CVSS, Microsoft Graphics)
- [CVE-2017-8528](https://cve.now/CVE-2017-8528.md): Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gol (no CVSS, Microsoft Uniscribe)
- [CVE-2017-8529](https://cve.now/CVE-2017-8529.md): Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 and R2 all (no CVSS, Microsoft Internet Explorer)
- [CVE-2017-8530](https://cve.now/CVE-2017-8530.md): Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to trick a user into loading a (no CVSS, Microsoft Edge)
- [CVE-2017-8531](https://cve.now/CVE-2017-8531.md): Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold (no CVSS, Microsoft Graphics)
- [CVE-2017-8532](https://cve.now/CVE-2017-8532.md): Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold (no CVSS, Microsoft Graphics)
- [CVE-2017-8533](https://cve.now/CVE-2017-8533.md): Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold (no CVSS, Microsoft Graphics)
- [CVE-2017-8534](https://cve.now/CVE-2017-8534.md): Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gol (no CVSS, Microsoft Uniscribe)
- [CVE-2017-8543](https://cve.now/CVE-2017-8543.md): Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Win (CVSS 9.8, KEV, Microsoft Windows)
- [CVE-2017-8544](https://cve.now/CVE-2017-8544.md): Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 15 (no CVSS, Microsoft Windows)
- [CVE-2017-8545](https://cve.now/CVE-2017-8545.md): A spoofing vulnerability exists in when Microsoft Outlook for Mac does not sanitize html properly, aka "Microsoft Outlook for Mac Spoofing V (no CVSS, Microsoft Outlook for Mac)
- [CVE-2017-8547](https://cve.now/CVE-2017-8547.md): Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 and R2 all (no CVSS)
- [CVE-2017-8548](https://cve.now/CVE-2017-8548.md): Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to obtain information to furth (no CVSS, Microsoft Edge)
- [CVE-2017-8549](https://cve.now/CVE-2017-8549.md): Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to obtain information to furth (no CVSS, Microsoft Edge)
- [CVE-2017-8550](https://cve.now/CVE-2017-8550.md): A remote code execution vulnerability exists in Skype for Business when the software fails to sanitize specially crafted content, aka "Skype (no CVSS, Microsoft Skype for Business)
- [CVE-2017-8551](https://cve.now/CVE-2017-8551.md): An elevation of privilege vulnerability exists when Microsoft SharePoint software fails to properly sanitize a specially crafted requests, a (no CVSS, Microsoft SharePoint)
- [CVE-2017-8552](https://cve.now/CVE-2017-8552.md): A kernel-mode driver in Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server (no CVSS, Microsoft Windows)
- [CVE-2017-8553](https://cve.now/CVE-2017-8553.md): An information disclosure vulnerability exists in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2 (no CVSS, Microsoft Windows kernel)
- [CVE-2017-8555](https://cve.now/CVE-2017-8555.md): Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to trick a user into loading a page with malicious content when the Edge Cont (no CVSS, Microsoft Edge)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-06-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.