CVEs published July 11, 2017
63 CVEs were published on July 11, 2017: 0 critical, 1 high. 1 is now in CISA KEV.
- Published
- 63
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 62
- Now in CISA KEV
- 1
- Fix available
- 1
Most affected products
- Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…
- 14
- Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Window…
- 9
- Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1…
- 6
- Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP…
- 3
- Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Window…
- 3
- Microsoft Windows 10
- 2
- Microsoft Windows 7, Windows Server 2008 and R2, Windows 8.…
- 2
- Microsoft .NET Framework 4.6, 4.6.1, 4.6.2, and · Microsoft…
- 1
- Microsoft Excel 2010 SP2, Microsoft Excel 2013 SP1, and Mic…
- 1
- Microsoft Office 2007 SP2 and SP3, Microsoft Office 2010 SP…
- 1
High 1
Medium, low and unrated 62
- CVE-2017-11176The mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retry logic.
- CVE-2017-0170Windows Performance Monitor in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…
- CVE-2017-0243Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office RemoteMicrosoft Office 2007 SP2 and SP3, Microsoft Office 2010 SP…
- CVE-2017-8463Windows Shell in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…
- CVE-2017-8467Graphics in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, WindowsMicrosoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1…
- CVE-2017-8486Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 15Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1…
- CVE-2017-8495Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 15Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1…
- CVE-2017-8501Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office MemoryMicrosoft Office 2007 SP3, Microsoft Excel Viewer 2007 SP3,…
- CVE-2017-8502Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office MemoryMicrosoft Excel 2010 SP2, Microsoft Excel 2013 SP1, and Mic…
- CVE-2017-8556Graphics in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, WindoMicrosoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…
- CVE-2017-8557Windows System Information Console in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, WindoMicrosoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…
- CVE-2017-8559Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an elevation ofMicrosoft Exchange Server 2010 SP3, Exchange Server 2013 SP…
- CVE-2017-8560Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an elevation ofMicrosoft Exchange Server 2010 SP3, Exchange Server 2013 SP…
- CVE-2017-8561Windows kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and WindowsWindows kernel in Microsoft Windows 8.1, Windows Server 201…
- CVE-2017-8562Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 20…
- CVE-2017-8563Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 15Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1…
- CVE-2017-8564Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…
- CVE-2017-8565Windows PowerShell in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, WindoMicrosoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…
- CVE-2017-8566Microsoft Windows 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to Windows Input Method Editor (IMEMicrosoft Windows 1607, 1703, and Windows Server 2016.
- CVE-2017-8569Microsoft SharePoint Server allows an elevation of privilege vulnerability due to the way that it sanitizes a specially crafted web request Microsoft SharePoint Enterprise Server
- CVE-2017-8573Graphics in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, WindoMicrosoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…
- CVE-2017-8574Graphics in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properlMicrosoft Windows 10 1607, 1703, and Windows Server
- CVE-2017-8577Win32k in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, WindowsMicrosoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…
- CVE-2017-8578Win32k in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, WindowsMicrosoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…
- CVE-2017-8580Win32k in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, WindowsMicrosoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…
- CVE-2017-8581Win32k in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, WindowsMicrosoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…
- CVE-2017-8582HTTP.sys in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, WindoMicrosoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…
- CVE-2017-8584Windows 10 1607 and Windows Server 2016 allow an attacker to execute code remotely via a specially crafted WiFi packet aka "HoloLens Remote Microsoft Windows 10 1607 and Windows Server
- CVE-2017-8585Microsoft .NET Framework 4.6, 4.6.1, 4.6.2, and 4.7 allow an attacker to send specially crafted requests to a .NET web application, resultinMicrosoft .NET Framework 4.6, 4.6.1, 4.6.2, and · Microsoft…
- CVE-2017-8587Windows Explorer in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, WindowsMicrosoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…
- CVE-2017-8588Microsoft WordPad in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, WindowMicrosoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…
- CVE-2017-8589Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 15Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1…
- CVE-2017-8590Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 15Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1…
- CVE-2017-8592Microsoft browsers on when Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, and Windows Server 2012 and R2,Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Window…
- CVE-2017-8594Internet Explorer on Microsoft Windows 8.1 and Windows RT 8.1, and Windows Server 2012 R2 allows an attacker to execute arbitrary code in thMicrosoft Windows 8.1 and Windows RT 8.1, and Windows Serve…
- CVE-2017-8595Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in thMicrosoft Windows 10 Gold, 1511, 1607, and 1703, and Window…
- CVE-2017-8596Microsoft Edge in Microsoft Windows 10 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context ofMicrosoft Windows 10 1607, and 1703, and Windows Server
- CVE-2017-8598Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in thMicrosoft Windows 10 Gold, 1511, 1607, and 1703, and Window…
- CVE-2017-8599Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to trick a user into loading aMicrosoft Windows 10 Gold, 1511, 1607, and 1703, and Window…
- CVE-2017-8601Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in thMicrosoft Windows 10 Gold, 1511, 1607, and 1703, and Window…
- CVE-2017-8602Microsoft browsers on Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 1Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Window…
- CVE-2017-8603Microsoft Edge in Microsoft Windows 10 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the contMicrosoft Windows 10 Gold, 1511, 1607, and 1703, and Window…
- CVE-2017-8604Microsoft Edge in Microsoft Windows 10 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the contMicrosoft Windows 10 1511, 1607, and 1703, and Windows Serv…
- CVE-2017-8605Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in thMicrosoft Windows 10 Gold, 1511, 1607, and 1703, and Window…
- CVE-2017-8606Microsoft browsers in Microsoft Windows 7, Windows Server 2008 and R2, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 1Microsoft Windows 7, Windows Server 2008 and R2, Windows 8.…
- CVE-2017-8607Microsoft browsers in Microsoft Windows 7, Windows Server 2008 and R2, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 1Microsoft Windows 7, Windows Server 2008 and R2, Windows 8.…
- CVE-2017-8608Microsoft browsers in Microsoft Windows Server 2008 and R2, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 151Microsoft Windows Server 2008 and R2, Windows 8.1 and Windo…
- CVE-2017-8609Microsoft Internet Explorer in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitraMicrosoft Windows 10 Gold, 1511, 1607, and 1703, and Window…
- CVE-2017-8610Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the JavaScrMicrosoft Windows 10
- CVE-2017-8611Microsoft Edge on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows remote attackers to spoof web content via Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Window…
- CVE-2017-8617Microsoft Edge in Windows 10 1703 Microsoft Edge allows a remote code execution vulnerability in the way affected Microsoft scripting engineMicrosoft Windows 10
- CVE-2017-8618Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, WindowMicrosoft Windows 7 SP1, Windows Server 2008 R2 SP1, Window…
- CVE-2017-8619Microsoft Edge on Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability in the way affMicrosoft Windows 10 Gold, 1511, 1607, and 1703, and Window…
- CVE-2017-8621Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an open redirecMicrosoft Exchange Server 2010 SP3, Exchange Server 2013 SP…
- CVE-2017-11170The ReadTGAImage function in coders\tga.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via invali
- CVE-2017-11171Bad reference counting in the context of accept_ice_connection() in gsm-xsmp-server.c in old versions of gnome-session up until version 2.29
- CVE-2017-10600ubuntu-image 1.0 before 2017-07-07, when invoked as non-root, creates files in the resulting image with the uid of the invoking user.
- CVE-2017-7726iSmartAlarm cube devices have an SSL Certificate Validation Vulnerability.
- CVE-2017-7728On iSmartAlarm cube devices, there is authentication bypass leading to remote execution of commands (e.g., setting the alarm on/off), relate
- CVE-2017-7729On iSmartAlarm cube devices, there is Incorrect Access Control because a "new key" is transmitted in cleartext.
- CVE-2017-7730iSmartAlarm cube devices allow Denial of Service.
- CVE-2017-11164In PCRE 8.41, the OP_KETRMAX feature in the match function in pcre_exec.c allows stack exhaustion (uncontrolled recursion) when processing a