# CVEs published 2017-09-13

136 CVEs were published on September 13, 2017: 1 critical, 2 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2017-12249](https://cve.now/CVE-2017-12249.md): A vulnerability in the Traversal Using Relay NAT (TURN) server included with Cisco Meeting Server (CMS) could allow an authenticated, remote (no CVSS, Cisco Meeting Server)
- [CVE-2017-14431](https://cve.now/CVE-2017-14431.md): Memory leak in Xen 3.3 through 4.8.x allows guest OS users to cause a denial of service (ARM or x86 AMD host OS memory consumption) by conti (no CVSS)
- [CVE-2017-1508](https://cve.now/CVE-2017-1508.md): IBM Informix Dynamic Server 12.1 could allow a local user logged in with database administrator user to gain root privileges. (no CVSS, IBM Informix Servers)
- [CVE-2017-1556](https://cve.now/CVE-2017-1556.md): IBM API Connect 5.0.7.0 through 5.0.7.2 is vulnerable to a regular expression attack that could allow an authenticated attacker to use a reg (no CVSS, IBM API Connect)
- [CVE-2017-2816](https://cve.now/CVE-2017-2816.md): An exploitable buffer overflow vulnerability exists in the tag parsing functionality of LibOFX 0.9.11. (CVSS 8.8, LibOfx)
- [CVE-2017-14413](https://cve.now/CVE-2017-14413.md): D-Link DIR-850L REV. (no CVSS)
- [CVE-2017-14414](https://cve.now/CVE-2017-14414.md): D-Link DIR-850L REV. (no CVSS)
- [CVE-2017-14415](https://cve.now/CVE-2017-14415.md): D-Link DIR-850L REV. (no CVSS)
- [CVE-2017-14416](https://cve.now/CVE-2017-14416.md): D-Link DIR-850L REV. (no CVSS)
- [CVE-2017-14417](https://cve.now/CVE-2017-14417.md): register\_send.php on D-Link DIR-850L REV. (no CVSS)
- [CVE-2017-14418](https://cve.now/CVE-2017-14418.md): The D-Link NPAPI extension, as used in conjunction with D-Link DIR-850L REV. (no CVSS)
- [CVE-2017-14419](https://cve.now/CVE-2017-14419.md): The D-Link NPAPI extension, as used on D-Link DIR-850L REV. (no CVSS)
- [CVE-2017-14420](https://cve.now/CVE-2017-14420.md): The D-Link NPAPI extension, as used on D-Link DIR-850L REV. (no CVSS)
- [CVE-2017-14421](https://cve.now/CVE-2017-14421.md): D-Link DIR-850L REV. (no CVSS)
- [CVE-2017-14422](https://cve.now/CVE-2017-14422.md): D-Link DIR-850L REV. (no CVSS)
- [CVE-2017-14423](https://cve.now/CVE-2017-14423.md): htdocs/parentalcontrols/bind.php on D-Link DIR-850L REV. (no CVSS)
- [CVE-2017-14424](https://cve.now/CVE-2017-14424.md): D-Link DIR-850L REV. (no CVSS)
- [CVE-2017-14425](https://cve.now/CVE-2017-14425.md): D-Link DIR-850L REV. (no CVSS)
- [CVE-2017-14426](https://cve.now/CVE-2017-14426.md): D-Link DIR-850L REV. (no CVSS)
- [CVE-2017-14427](https://cve.now/CVE-2017-14427.md): D-Link DIR-850L REV. (no CVSS)
- [CVE-2017-14428](https://cve.now/CVE-2017-14428.md): D-Link DIR-850L REV. (no CVSS)
- [CVE-2017-14429](https://cve.now/CVE-2017-14429.md): The DHCP client on D-Link DIR-850L REV. (CVSS 9.8)
- [CVE-2017-14430](https://cve.now/CVE-2017-14430.md): D-Link DIR-850L REV. (no CVSS)
- [CVE-2017-7560](https://cve.now/CVE-2017-7560.md): It was found that rhnsd PID files are created as world-writable that allows local attackers to fill the disks or to kill selected processes. (no CVSS, Red Hat rhnsd)
- [CVE-2017-7561](https://cve.now/CVE-2017-7561.md): Red Hat JBoss EAP version 3.0.7 through before 4.0.0.Beta1 is vulnerable to a server-side cache poisoning or CORS requests in the JAX-RS com (no CVSS, Red Hat resteasy · org.jboss.resteasy:resteasy-jaxrs)
- [CVE-2015-2749](https://cve.now/CVE-2015-2749.md): Open redirect vulnerability in Drupal 6.x before 6.35 and 7.x before 7.35 allows remote attackers to redirect users to arbitrary web sites a (no CVSS)
- [CVE-2015-2750](https://cve.now/CVE-2015-2750.md): Open redirect vulnerability in URL-related API functions in Drupal 6.x before 6.35 and 7.x before 7.35 allows remote attackers to redirect u (no CVSS)
- [CVE-2015-5168](https://cve.now/CVE-2015-5168.md): Unspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server 5.3.x before 5.3.2 has unknown impact and attack vecto (no CVSS)
- [CVE-2015-5206](https://cve.now/CVE-2015-5206.md): Unspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server before 5.3.x before 5.3.2 has unknown impact and attac (no CVSS)
- [CVE-2015-7880](https://cve.now/CVE-2015-7880.md): The Entity Registration module 7.x-1.x before 7.x-1.5 for Drupal allows remote attackers to obtain sensitive event registration information (no CVSS)
- [CVE-2016-8737](https://cve.now/CVE-2016-8737.md): In Apache Brooklyn before 0.10.0, the REST server is vulnerable to cross-site request forgery (CSRF), which could permit a malicious web sit (no CVSS, Apache Software Foundation Apache Brooklyn · org.apache.… +1)
- [CVE-2016-8744](https://cve.now/CVE-2016-8744.md): Apache Brooklyn uses the SnakeYAML library for parsing YAML inputs. (no CVSS, Apache Software Foundation Apache Brooklyn · org.apache.bro…)
- [CVE-2017-11462](https://cve.now/CVE-2017-11462.md): Double free vulnerability in MIT Kerberos 5 (aka krb5) allows attackers to have unspecified impact via vectors involving automatic deletion (no CVSS)
- [CVE-2017-12612](https://cve.now/CVE-2017-12612.md): In Apache Spark 1.6.0 until 2.1.1, the launcher API performs unsafe deserialization of data received by its socket. (no CVSS, org.apache.spark:spark-core\_2.11 · org.apache.spark:spar… +1)
- [CVE-2017-14124](https://cve.now/CVE-2017-14124.md): In eLux RP 5.x before 5.5.1000 LTSR and 5.6.x before 5.6.2 CR when classic desktop mode is used, it is possible to start applications other (no CVSS)
- [CVE-2017-3165](https://cve.now/CVE-2017-3165.md): In Apache Brooklyn before 0.10.0, the REST server is vulnerable to cross-site scripting where one authenticated user can cause scripts to ru (no CVSS, Apache Software Foundation Apache Brooklyn · org.apache.bro…)
- [CVE-2017-6330](https://cve.now/CVE-2017-6330.md): Symantec Encryption Desktop before SED 10.4.1MP2 can allow remote attackers to cause a denial of service (resource consumption) via crafted (no CVSS, Symantec Encryption Desktop)
- [CVE-2017-11350](https://cve.now/CVE-2017-11350.md): Cross-Site Request Forgery (CSRF) exists in cgi-bin/ConfigSet on Axesstel MU553S MU55XS-V1.14 devices. (no CVSS)
- [CVE-2017-11351](https://cve.now/CVE-2017-11351.md): Axesstel MU553S MU55XS-V1.14 devices have a default password of admin for the admin account. (no CVSS)
- [CVE-2017-13724](https://cve.now/CVE-2017-13724.md): On the Axesstel MU553S MU55XS-V1.14, there is a Stored Cross Site Scripting vulnerability in the APN parameter under the "Basic Settings" pa (no CVSS)
- [CVE-2017-14398](https://cve.now/CVE-2017-14398.md): rzpnk.sys in Razer Synapse 2.20.15.1104 allows local users to read and write to arbitrary memory locations, and consequently gain privileges (no CVSS)
- [CVE-2017-6007](https://cve.now/CVE-2017-6007.md): A kernel pool overflow in the driver hitmanpro37.sys in Sophos SurfRight HitmanPro before 3.7.20 Build 286 (included in the HitmanPro.Alert (no CVSS)
- [CVE-2017-6008](https://cve.now/CVE-2017-6008.md): A kernel pool overflow in the driver hitmanpro37.sys in Sophos SurfRight HitmanPro before 3.7.20 Build 286 (included in the HitmanPro.Alert (no CVSS)
- [CVE-2017-7441](https://cve.now/CVE-2017-7441.md): In Sophos SurfRight HitmanPro before 3.7.20 Build 286 (included in the HitmanPro.Alert solution and Sophos Clean), a crafted IOCTL with code (no CVSS)
- [CVE-2017-14401](https://cve.now/CVE-2017-14401.md): The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the user\_name parameter to module/admin\_user/add\_modify\_user.php in (no CVSS)
- [CVE-2017-14402](https://cve.now/CVE-2017-14402.md): The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the user\_name parameter to module/admin\_user/add\_modify\_user.php in (no CVSS)
- [CVE-2017-14403](https://cve.now/CVE-2017-14403.md): The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the term parameter to module/admin\_group/search.php. (no CVSS)
- [CVE-2017-14404](https://cve.now/CVE-2017-14404.md): The EyesOfNetwork web interface (aka eonweb) 5.1-0 allows local file inclusion via the tool\_list parameter (aka the url\_tool variable) to mo (no CVSS)
- [CVE-2017-14405](https://cve.now/CVE-2017-14405.md): The EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote command execution via shell metacharacters in a hosts\_cacti array parameter (no CVSS)
- [CVE-2017-14406](https://cve.now/CVE-2017-14406.md): A NULL pointer dereference was discovered in sync\_buffer in interface.c in mpglibDBL, as used in MP3Gain version 1.5.2. (no CVSS)
- [CVE-2017-14407](https://cve.now/CVE-2017-14407.md): A stack-based buffer over-read was discovered in filterYule in gain\_analysis.c in MP3Gain version 1.5.2. (no CVSS)
- [CVE-2017-14408](https://cve.now/CVE-2017-14408.md): A stack-based buffer over-read was discovered in dct36 in layer3.c in mpglibDBL, as used in MP3Gain version 1.5.2. (no CVSS)
- [CVE-2017-14409](https://cve.now/CVE-2017-14409.md): A buffer overflow was discovered in III\_dequantize\_sample in layer3.c in mpglibDBL, as used in MP3Gain version 1.5.2. (no CVSS)
- [CVE-2017-14410](https://cve.now/CVE-2017-14410.md): A buffer over-read was discovered in III\_i\_stereo in layer3.c in mpglibDBL, as used in MP3Gain version 1.5.2. (no CVSS)
- [CVE-2017-14411](https://cve.now/CVE-2017-14411.md): A stack-based buffer overflow was discovered in copy\_mp in interface.c in mpglibDBL, as used in MP3Gain version 1.5.2. (no CVSS)
- [CVE-2017-14412](https://cve.now/CVE-2017-14412.md): An invalid memory write was discovered in copy\_mp in interface.c in mpglibDBL, as used in MP3Gain version 1.5.2. (no CVSS)
- [CVE-2017-0161](https://cve.now/CVE-2017-0161.md): The Windows NetBT Session Services component on Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold a (no CVSS, Microsoft Windows NetBT Session Services)
- [CVE-2017-11761](https://cve.now/CVE-2017-11761.md): Microsoft Exchange Server 2013 and Microsoft Exchange Server 2016 allow an input sanitization issue with Microsoft Exchange that could poten (no CVSS, Microsoft Exchange Server)
- [CVE-2017-11764](https://cve.now/CVE-2017-11764.md): Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of th (no CVSS, Microsoft Edge)
- [CVE-2017-11766](https://cve.now/CVE-2017-11766.md): Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the c (no CVSS, Microsoft Edge)
- [CVE-2017-8567](https://cve.now/CVE-2017-8567.md): A remote code execution vulnerability exists in Microsoft Excel for Mac 2011 when it fails to properly handle objects in memory, aka "Micros (no CVSS, Microsoft Office)
- [CVE-2017-8597](https://cve.now/CVE-2017-8597.md): Microsoft Edge in Microsoft Windows 10 Version 1703 allows an attacker to obtain information to further compromise the user's system, due to (no CVSS, Microsoft Edge)
- [CVE-2017-8628](https://cve.now/CVE-2017-8628.md): Microsoft Bluetooth Driver in Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 allows (no CVSS, Microsoft Bluetooth Driver)
- [CVE-2017-8629](https://cve.now/CVE-2017-8629.md): Microsoft SharePoint Server 2013 Service Pack 1 allows an elevation of privilege vulnerability when it fails to properly sanitize a speciall (no CVSS, Microsoft SharePoint Server)
- [CVE-2017-8630](https://cve.now/CVE-2017-8630.md): Microsoft Office 2016 allows a remote code execution vulnerability when it fails to properly handle objects in memory, aka "Microsoft Office (no CVSS, Microsoft Office)
- [CVE-2017-8631](https://cve.now/CVE-2017-8631.md): A remote code execution vulnerability exists in Excel Services, Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Mi (no CVSS, Microsoft Office)
- [CVE-2017-8632](https://cve.now/CVE-2017-8632.md): A remote code execution vulnerability exists in Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 20 (no CVSS, Microsoft Office)
- [CVE-2017-8643](https://cve.now/CVE-2017-8643.md): Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to leave a malicious website open (no CVSS, Microsoft Edge)
- [CVE-2017-8648](https://cve.now/CVE-2017-8648.md): Microsoft Edge in Microsoft Windows Version 1703 allows an attacker to obtain information to further compromise the user's system, due to th (no CVSS, Microsoft Edge)
- [CVE-2017-8649](https://cve.now/CVE-2017-8649.md): Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of th (no CVSS, Microsoft Edge)
- [CVE-2017-8660](https://cve.now/CVE-2017-8660.md): Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context (no CVSS, Microsoft Edge)
- [CVE-2017-8675](https://cve.now/CVE-2017-8675.md): The Windows Kernel-Mode Drivers component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 G (no CVSS, Microsoft Windows Kernel-Mode Drivers)
- [CVE-2017-8676](https://cve.now/CVE-2017-8676.md): The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 (no CVSS, Microsoft Windows Graphics Device Interface)
- [CVE-2017-8677](https://cve.now/CVE-2017-8677.md): The Windows GDI+ component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Win (no CVSS, Microsoft Windows GDI+ component)
- [CVE-2017-8678](https://cve.now/CVE-2017-8678.md): The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, W (no CVSS, Microsoft Windows kernel)
- [CVE-2017-8679](https://cve.now/CVE-2017-8679.md): The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, W (no CVSS, Microsoft Windows kernel)
- [CVE-2017-8680](https://cve.now/CVE-2017-8680.md): The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, a (no CVSS, Microsoft Windows kernel)
- [CVE-2017-8681](https://cve.now/CVE-2017-8681.md): The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, W (no CVSS, Microsoft Windows kernel)
- [CVE-2017-8682](https://cve.now/CVE-2017-8682.md): Windows graphics on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8. (no CVSS, Microsoft Windows graphics)
- [CVE-2017-8683](https://cve.now/CVE-2017-8683.md): Windows graphics on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8. (no CVSS, Microsoft Windows graphics)
- [CVE-2017-8684](https://cve.now/CVE-2017-8684.md): Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT 8. (no CVSS, Microsoft Windows GDI+)
- [CVE-2017-8685](https://cve.now/CVE-2017-8685.md): Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows information disclosure by the way it discloses kernel (no CVSS, Microsoft Windows GDI+)
- [CVE-2017-8686](https://cve.now/CVE-2017-8686.md): The Windows Server DHCP service in Windows Server 2012 Gold and R2, and Windows Server 2016 allows an attacker to either run arbitrary code (no CVSS)
- [CVE-2017-8687](https://cve.now/CVE-2017-8687.md): The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, W (no CVSS, Microsoft Windows kernel)
- [CVE-2017-8688](https://cve.now/CVE-2017-8688.md): Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, W (no CVSS, Microsoft Windows GDI+)
- [CVE-2017-8692](https://cve.now/CVE-2017-8692.md): The Windows Uniscribe component on Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and (no CVSS, Microsoft Windows Uniscribe)
- [CVE-2017-8695](https://cve.now/CVE-2017-8695.md): Windows Uniscribe in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8 (no CVSS, Microsoft Windows Uniscribe)
- [CVE-2017-8696](https://cve.now/CVE-2017-8696.md): Windows Uniscribe in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for (no CVSS)
- [CVE-2017-8699](https://cve.now/CVE-2017-8699.md): Windows Shell in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Window (no CVSS, Microsoft Windows Shell)
- [CVE-2017-8702](https://cve.now/CVE-2017-8702.md): Windows Error Reporting (WER) in Microsoft Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows an attacker to gain greater acces (no CVSS, Microsoft Windows Error Reporting)
- [CVE-2017-8704](https://cve.now/CVE-2017-8704.md): The Windows Hyper-V component on Microsoft Windows 10 1607 and Windows Server 2016 allows a denial of service vulnerability when it fails to (no CVSS, Microsoft Windows Hyper-V)
- [CVE-2017-8706](https://cve.now/CVE-2017-8706.md): The Windows Hyper-V component on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure v (no CVSS, Microsoft Windows Hyper-V)
- [CVE-2017-8707](https://cve.now/CVE-2017-8707.md): The Windows Hyper-V component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold (no CVSS, Microsoft Windows Hyper-V)
- [CVE-2017-8708](https://cve.now/CVE-2017-8708.md): The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, W (no CVSS, Microsoft Windows kernel)
- [CVE-2017-8709](https://cve.now/CVE-2017-8709.md): The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, W (no CVSS, Microsoft Windows kernel)
- [CVE-2017-8710](https://cve.now/CVE-2017-8710.md): The Microsoft Common Console Document (.msc) in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1 allows an attacker to read arbit (no CVSS, Microsoft Common Console Document)
- [CVE-2017-8711](https://cve.now/CVE-2017-8711.md): The Windows Hyper-V component on Microsoft Windows 10 1607 and Windows Server 2016 allows an information disclosure vulnerability when it fa (no CVSS, Microsoft Windows Hyper-V)
- [CVE-2017-8712](https://cve.now/CVE-2017-8712.md): The Windows Hyper-V component on Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an information disclosure vulnerability whe (no CVSS, Microsoft Windows Hyper-V)
- [CVE-2017-8713](https://cve.now/CVE-2017-8713.md): The Windows Hyper-V component on Microsoft Windows Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold, 1511, 1607, and 1703, and (no CVSS, Microsoft Windows Hyper-V)
- [CVE-2017-8714](https://cve.now/CVE-2017-8714.md): The Windows Hyper-V component on Microsoft Windows 8.1, Windows Server 2012 Gold and R2,, Windows 10 1607, and Windows Server 2016 allows a (no CVSS, Microsoft Windows Hyper-V)
- [CVE-2017-8716](https://cve.now/CVE-2017-8716.md): Windows Control Flow Guard in Microsoft Windows 10 Version 1703 allows an attacker to run a specially crafted application to bypass Control (no CVSS, Microsoft Windows Control Flow Guard)
- [CVE-2017-8719](https://cve.now/CVE-2017-8719.md): The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, W (no CVSS, Microsoft Windows kernel)
- [CVE-2017-8720](https://cve.now/CVE-2017-8720.md): The Microsoft Windows graphics component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Go (no CVSS, Microsoft Windows graphics component)
- [CVE-2017-8723](https://cve.now/CVE-2017-8723.md): Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to trick a user into loading a pag (no CVSS, Microsoft Edge)
- [CVE-2017-8724](https://cve.now/CVE-2017-8724.md): Microsoft Edge in Microsoft Windows 10 Version 1703 allows an attacker to trick a user by redirecting the user to a specially crafted websit (no CVSS, Microsoft Edge)
- [CVE-2017-8725](https://cve.now/CVE-2017-8725.md): A remote code execution vulnerability exists in Microsoft Publisher 2007 Service Pack 3 and Microsoft Publisher 2010 Service Pack 2 when the (no CVSS, Microsoft Office)
- [CVE-2017-8728](https://cve.now/CVE-2017-8728.md): Microsoft Windows PDF Library in Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, an (no CVSS, Microsoft Windows PDF Library)
- [CVE-2017-8729](https://cve.now/CVE-2017-8729.md): Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way (no CVSS, Microsoft Edge)
- [CVE-2017-8731](https://cve.now/CVE-2017-8731.md): Microsoft Edge in Microsoft Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the curre (no CVSS)
- [CVE-2017-8733](https://cve.now/CVE-2017-8733.md): Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2 (no CVSS, Microsoft Internet Explorer)
- [CVE-2017-8734](https://cve.now/CVE-2017-8734.md): Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the c (no CVSS, Microsoft Edge)
- [CVE-2017-8735](https://cve.now/CVE-2017-8735.md): Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to trick a user by redirecting the (no CVSS, Microsoft Edge)
- [CVE-2017-8736](https://cve.now/CVE-2017-8736.md): Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Micros (no CVSS, Internet Explorer, Microsoft Edge)
- [CVE-2017-8737](https://cve.now/CVE-2017-8737.md): Microsoft Windows PDF Library in Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, an (no CVSS, Microsoft Windows PDF Library)
- [CVE-2017-8738](https://cve.now/CVE-2017-8738.md): Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows an attacker to execute arbitrary code in the context (no CVSS, Microsoft Edge)
- [CVE-2017-8739](https://cve.now/CVE-2017-8739.md): Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to obtain information to further compromise the user's system, due to the way (no CVSS, Microsoft Edge)
- [CVE-2017-8740](https://cve.now/CVE-2017-8740.md): Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way (no CVSS, Microsoft Edge)
- [CVE-2017-8741](https://cve.now/CVE-2017-8741.md): Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2 (no CVSS, Internet Explorer, Microsoft Edge)
- [CVE-2017-8742](https://cve.now/CVE-2017-8742.md): A remote code execution vulnerability exists in Microsoft PowerPoint 2007 Service Pack 3, Microsoft PowerPoint 2010 Service Pack 2, Microsof (no CVSS, Microsoft Office)
- [CVE-2017-8743](https://cve.now/CVE-2017-8743.md): A remote code execution vulnerability exists in Microsoft PowerPoint 2016, Microsoft SharePoint Enterprise Server 2016, and Office Online Se (no CVSS, Microsoft Office)
- [CVE-2017-8744](https://cve.now/CVE-2017-8744.md): A remote code execution vulnerability exists in Excel Services, Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Mi (no CVSS, Microsoft Office)
- [CVE-2017-8745](https://cve.now/CVE-2017-8745.md): An elevation of privilege vulnerability exists in Microsoft SharePoint Foundation 2013 Service Pack 1 when it does not properly sanitize a s (no CVSS, Microsoft Office)
- [CVE-2017-8746](https://cve.now/CVE-2017-8746.md): Windows Device Guard in Windows 10 1607, 1703, and Windows Server 2016 allows A security feature bypass vulnerability due to how PowerShell (no CVSS, Microsoft Windows Device Guard)
- [CVE-2017-8747](https://cve.now/CVE-2017-8747.md): Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Window (no CVSS, Microsoft Internet Explorer)
- [CVE-2017-8748](https://cve.now/CVE-2017-8748.md): Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Micros (no CVSS, Internet Explorer, Microsoft Edge)
- [CVE-2017-8749](https://cve.now/CVE-2017-8749.md): Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2 (no CVSS, Microsoft Internet Explorer)
- [CVE-2017-8750](https://cve.now/CVE-2017-8750.md): Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Micros (no CVSS, Internet Explorer, Microsoft Edge)
- [CVE-2017-8751](https://cve.now/CVE-2017-8751.md): Microsoft Edge in Microsoft Windows 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way tha (no CVSS, Microsoft Edge)
- [CVE-2017-8752](https://cve.now/CVE-2017-8752.md): Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context (no CVSS, Microsoft Edge)
- [CVE-2017-8753](https://cve.now/CVE-2017-8753.md): Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the c (no CVSS, Microsoft Edge)
- [CVE-2017-8754](https://cve.now/CVE-2017-8754.md): Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to trick a user into loading a pag (no CVSS, Microsoft Edge)
- [CVE-2017-8755](https://cve.now/CVE-2017-8755.md): Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context (no CVSS, Microsoft Edge)
- [CVE-2017-8756](https://cve.now/CVE-2017-8756.md): Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the c (no CVSS, Microsoft Edge)
- [CVE-2017-8757](https://cve.now/CVE-2017-8757.md): Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the c (no CVSS, Microsoft Edge)
- [CVE-2017-8758](https://cve.now/CVE-2017-8758.md): Microsoft Exchange Server 2016 allows an elevation of privilege vulnerability when Microsoft Exchange Outlook Web Access (OWA) fails to prop (no CVSS, Microsoft Exchange Server)
- [CVE-2017-8759](https://cve.now/CVE-2017-8759.md): Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious docume (CVSS 7.8, KEV, Microsoft .NET Framework)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-09-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.