# CVEs published 2017-07-11

63 CVEs were published on July 11, 2017: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2017-11176](https://cve.now/CVE-2017-11176.md): The mq\_notify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retry logic. (no CVSS)
- [CVE-2017-0170](https://cve.now/CVE-2017-0170.md): Windows Performance Monitor in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8 (no CVSS, Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…)
- [CVE-2017-0243](https://cve.now/CVE-2017-0243.md): Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote (no CVSS, Microsoft Office 2007 SP2 and SP3, Microsoft Office 2010 SP…)
- [CVE-2017-8463](https://cve.now/CVE-2017-8463.md): Windows Shell in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 (no CVSS, Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…)
- [CVE-2017-8467](https://cve.now/CVE-2017-8467.md): Graphics in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows (no CVSS, Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1…)
- [CVE-2017-8486](https://cve.now/CVE-2017-8486.md): Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 15 (no CVSS, Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1…)
- [CVE-2017-8495](https://cve.now/CVE-2017-8495.md): Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 15 (no CVSS, Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1…)
- [CVE-2017-8501](https://cve.now/CVE-2017-8501.md): Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Memory (no CVSS, Microsoft Office 2007 SP3, Microsoft Excel Viewer 2007 SP3,…)
- [CVE-2017-8502](https://cve.now/CVE-2017-8502.md): Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Memory (no CVSS, Microsoft Excel 2010 SP2, Microsoft Excel 2013 SP1, and Mic…)
- [CVE-2017-8556](https://cve.now/CVE-2017-8556.md): Graphics in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windo (no CVSS, Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…)
- [CVE-2017-8557](https://cve.now/CVE-2017-8557.md): Windows System Information Console in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windo (no CVSS, Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…)
- [CVE-2017-8559](https://cve.now/CVE-2017-8559.md): Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an elevation of (no CVSS, Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP…)
- [CVE-2017-8560](https://cve.now/CVE-2017-8560.md): Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an elevation of (no CVSS, Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP…)
- [CVE-2017-8561](https://cve.now/CVE-2017-8561.md): Windows kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows (no CVSS, Windows kernel in Microsoft Windows 8.1, Windows Server 201…)
- [CVE-2017-8562](https://cve.now/CVE-2017-8562.md): Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows (no CVSS, Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 20…)
- [CVE-2017-8563](https://cve.now/CVE-2017-8563.md): Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 15 (no CVSS, Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1…)
- [CVE-2017-8564](https://cve.now/CVE-2017-8564.md): Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, (no CVSS, Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…)
- [CVE-2017-8565](https://cve.now/CVE-2017-8565.md): Windows PowerShell in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windo (no CVSS, Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…)
- [CVE-2017-8566](https://cve.now/CVE-2017-8566.md): Microsoft Windows 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to Windows Input Method Editor (IME (no CVSS, Microsoft Windows 1607, 1703, and Windows Server 2016.)
- [CVE-2017-8569](https://cve.now/CVE-2017-8569.md): Microsoft SharePoint Server allows an elevation of privilege vulnerability due to the way that it sanitizes a specially crafted web request (no CVSS, Microsoft SharePoint Enterprise Server)
- [CVE-2017-8570](https://cve.now/CVE-2017-8570.md): Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote (CVSS 7.8, KEV, Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Micro…)
- [CVE-2017-8573](https://cve.now/CVE-2017-8573.md): Graphics in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windo (no CVSS, Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…)
- [CVE-2017-8574](https://cve.now/CVE-2017-8574.md): Graphics in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properl (no CVSS, Microsoft Windows 10 1607, 1703, and Windows Server)
- [CVE-2017-8577](https://cve.now/CVE-2017-8577.md): Win32k in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows (no CVSS, Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…)
- [CVE-2017-8578](https://cve.now/CVE-2017-8578.md): Win32k in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows (no CVSS, Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…)
- [CVE-2017-8580](https://cve.now/CVE-2017-8580.md): Win32k in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows (no CVSS, Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…)
- [CVE-2017-8581](https://cve.now/CVE-2017-8581.md): Win32k in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows (no CVSS, Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…)
- [CVE-2017-8582](https://cve.now/CVE-2017-8582.md): HTTP.sys in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windo (no CVSS, Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…)
- [CVE-2017-8584](https://cve.now/CVE-2017-8584.md): Windows 10 1607 and Windows Server 2016 allow an attacker to execute code remotely via a specially crafted WiFi packet aka "HoloLens Remote (no CVSS, Microsoft Windows 10 1607 and Windows Server)
- [CVE-2017-8585](https://cve.now/CVE-2017-8585.md): Microsoft .NET Framework 4.6, 4.6.1, 4.6.2, and 4.7 allow an attacker to send specially crafted requests to a .NET web application, resultin (no CVSS, Microsoft .NET Framework 4.6, 4.6.1, 4.6.2, and · Microsoft…)
- [CVE-2017-8587](https://cve.now/CVE-2017-8587.md): Windows Explorer in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows (no CVSS, Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…)
- [CVE-2017-8588](https://cve.now/CVE-2017-8588.md): Microsoft WordPad in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Window (no CVSS, Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…)
- [CVE-2017-8589](https://cve.now/CVE-2017-8589.md): Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 15 (no CVSS, Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1…)
- [CVE-2017-8590](https://cve.now/CVE-2017-8590.md): Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 15 (no CVSS, Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1…)
- [CVE-2017-8592](https://cve.now/CVE-2017-8592.md): Microsoft browsers on when Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, and Windows Server 2012 and R2, (no CVSS, Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Window…)
- [CVE-2017-8594](https://cve.now/CVE-2017-8594.md): Internet Explorer on Microsoft Windows 8.1 and Windows RT 8.1, and Windows Server 2012 R2 allows an attacker to execute arbitrary code in th (no CVSS, Microsoft Windows 8.1 and Windows RT 8.1, and Windows Serve…)
- [CVE-2017-8595](https://cve.now/CVE-2017-8595.md): Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in th (no CVSS, Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Window…)
- [CVE-2017-8596](https://cve.now/CVE-2017-8596.md): Microsoft Edge in Microsoft Windows 10 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of (no CVSS, Microsoft Windows 10 1607, and 1703, and Windows Server)
- [CVE-2017-8598](https://cve.now/CVE-2017-8598.md): Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in th (no CVSS, Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Window…)
- [CVE-2017-8599](https://cve.now/CVE-2017-8599.md): Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to trick a user into loading a (no CVSS, Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Window…)
- [CVE-2017-8601](https://cve.now/CVE-2017-8601.md): Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in th (no CVSS, Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Window…)
- [CVE-2017-8602](https://cve.now/CVE-2017-8602.md): Microsoft browsers on Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 1 (no CVSS, Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Window…)
- [CVE-2017-8603](https://cve.now/CVE-2017-8603.md): Microsoft Edge in Microsoft Windows 10 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the cont (no CVSS, Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Window…)
- [CVE-2017-8604](https://cve.now/CVE-2017-8604.md): Microsoft Edge in Microsoft Windows 10 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the cont (no CVSS, Microsoft Windows 10 1511, 1607, and 1703, and Windows Serv…)
- [CVE-2017-8605](https://cve.now/CVE-2017-8605.md): Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in th (no CVSS, Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Window…)
- [CVE-2017-8606](https://cve.now/CVE-2017-8606.md): Microsoft browsers in Microsoft Windows 7, Windows Server 2008 and R2, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 1 (no CVSS, Microsoft Windows 7, Windows Server 2008 and R2, Windows 8.…)
- [CVE-2017-8607](https://cve.now/CVE-2017-8607.md): Microsoft browsers in Microsoft Windows 7, Windows Server 2008 and R2, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 1 (no CVSS, Microsoft Windows 7, Windows Server 2008 and R2, Windows 8.…)
- [CVE-2017-8608](https://cve.now/CVE-2017-8608.md): Microsoft browsers in Microsoft Windows Server 2008 and R2, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 151 (no CVSS, Microsoft Windows Server 2008 and R2, Windows 8.1 and Windo…)
- [CVE-2017-8609](https://cve.now/CVE-2017-8609.md): Microsoft Internet Explorer in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitra (no CVSS, Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Window…)
- [CVE-2017-8610](https://cve.now/CVE-2017-8610.md): Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the JavaScr (no CVSS, Microsoft Windows 10)
- [CVE-2017-8611](https://cve.now/CVE-2017-8611.md): Microsoft Edge on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows remote attackers to spoof web content via (no CVSS, Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Window…)
- [CVE-2017-8617](https://cve.now/CVE-2017-8617.md): Microsoft Edge in Windows 10 1703 Microsoft Edge allows a remote code execution vulnerability in the way affected Microsoft scripting engine (no CVSS, Microsoft Windows 10)
- [CVE-2017-8618](https://cve.now/CVE-2017-8618.md): Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Window (no CVSS, Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Window…)
- [CVE-2017-8619](https://cve.now/CVE-2017-8619.md): Microsoft Edge on Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability in the way aff (no CVSS, Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Window…)
- [CVE-2017-8621](https://cve.now/CVE-2017-8621.md): Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an open redirec (no CVSS, Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP…)
- [CVE-2017-11170](https://cve.now/CVE-2017-11170.md): The ReadTGAImage function in coders\\tga.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via invali (no CVSS)
- [CVE-2017-11171](https://cve.now/CVE-2017-11171.md): Bad reference counting in the context of accept\_ice\_connection() in gsm-xsmp-server.c in old versions of gnome-session up until version 2.29 (no CVSS)
- [CVE-2017-10600](https://cve.now/CVE-2017-10600.md): ubuntu-image 1.0 before 2017-07-07, when invoked as non-root, creates files in the resulting image with the uid of the invoking user. (no CVSS)
- [CVE-2017-7726](https://cve.now/CVE-2017-7726.md): iSmartAlarm cube devices have an SSL Certificate Validation Vulnerability. (no CVSS)
- [CVE-2017-7728](https://cve.now/CVE-2017-7728.md): On iSmartAlarm cube devices, there is authentication bypass leading to remote execution of commands (e.g., setting the alarm on/off), relate (no CVSS)
- [CVE-2017-7729](https://cve.now/CVE-2017-7729.md): On iSmartAlarm cube devices, there is Incorrect Access Control because a "new key" is transmitted in cleartext. (no CVSS)
- [CVE-2017-7730](https://cve.now/CVE-2017-7730.md): iSmartAlarm cube devices allow Denial of Service. (no CVSS)
- [CVE-2017-11164](https://cve.now/CVE-2017-11164.md): In PCRE 8.41, the OP\_KETRMAX feature in the match function in pcre\_exec.c allows stack exhaustion (uncontrolled recursion) when processing a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-07-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.