Microsoft Corporation

678 tracked vulnerabilities.

CVE-2017-8729 HIGH
Microsoft Edge - Remote Code Execution via Scripting Engine Memory Corruption
Sep 13, 2017
CVSS 7.5
EPSS 0.78
CVE-2017-8728 HIGH
Microsoft Windows PDF Library - Remote Code Execution via Memory Corruption
Sep 13, 2017
CVSS 7.5
EPSS 0.34
CVE-2017-8725 HIGH
Microsoft Publisher 2007 SP3 and 2010 SP2 - Remote Code Execution via Memory Corruption
Sep 13, 2017
CVSS 7.8
EPSS 0.32
CVE-2017-8724 MEDIUM
Microsoft Edge - Spoofing via HTTP Content Parsing
Sep 13, 2017
CVSS 4.3
EPSS 0.03
CVE-2017-8723 MEDIUM
Microsoft Edge - Security Feature Bypass via Crafted Document CSP Validation
Sep 13, 2017
CVSS 4.3
EPSS 0.06
CVE-2017-8720 HIGH
Microsoft Windows - Privilege Escalation
Sep 13, 2017
CVSS 7.8
EPSS 0.01
CVE-2017-8719 MEDIUM
Windows Kernel - Information Disclosure via Improper Memory Handling
Sep 13, 2017
CVSS 4.7
EPSS 0.04
CVE-2017-8716 MEDIUM
Microsoft Windows 10 <1703 - Privilege Escalation
Sep 13, 2017
CVSS 5.3
EPSS 0.02
CVE-2017-8714 HIGH
Windows Hyper-V - Remote Code Execution via Improper Input Validation
Sep 13, 2017
CVSS 7.8
EPSS 0.01
CVE-2017-8713 MEDIUM
Windows Hyper-V - Authenticated Information Disclosure via Improper Input Validation
Sep 13, 2017
CVSS 5.3
EPSS 0.03
CVE-2017-8712 MEDIUM
Windows Hyper-V Information Disclosure via Improper Input Validation
Sep 13, 2017
CVSS 5.3
EPSS 0.03
CVE-2017-8711 MEDIUM
Windows Hyper-V on Windows 10 1607 and Windows Server 2016 - Authenticated Information Disclosure via Guest OS Input
Sep 13, 2017
CVSS 5.3
EPSS 0.03
CVE-2017-8710 MEDIUM
Microsoft Windows 7 SP1, Server 2008 SP2/R2 SP1 - XXE in Common Console Document
Sep 13, 2017
CVSS 5.5
EPSS 0.33
CVE-2017-8709 MEDIUM
Windows Kernel - Information Disclosure via Improper Memory Object Handling
Sep 13, 2017
CVSS 4.7
EPSS 0.04
CVE-2017-8708 MEDIUM
Windows Kernel - Information Disclosure via Improper Memory Handling
Sep 13, 2017
CVSS 4.7
EPSS 0.19
CVE-2017-8707 MEDIUM
Windows Hyper-V - Authenticated Information Disclosure via Guest OS Input Validation
Sep 13, 2017
CVSS 5.3
EPSS 0.03
CVE-2017-8706 MEDIUM
Windows Hyper-V on Windows 10 and Windows Server 2016 - Authenticated Information Disclosure via Guest OS Input
Sep 13, 2017
CVSS 5.3
EPSS 0.03
CVE-2017-8704 MEDIUM
Windows Hyper-V - Denial of Service via Improper Input Validation
Sep 13, 2017
CVSS 5.3
EPSS 0.00
CVE-2017-8702 HIGH
Microsoft Windows <10.0.1511-10.0.1607 - Privilege Escalation
Sep 13, 2017
CVSS 7.0
EPSS 0.01
CVE-2017-8699 HIGH
Windows Shell - Remote Code Execution via File Copy Destination Validation
Sep 13, 2017
CVSS 7.0
EPSS 0.31
CVE-2017-8695 MEDIUM
Microsoft Live Meeting - Information Disclosure
Sep 13, 2017
CVSS 5.3
EPSS 0.26
CVE-2017-8692 HIGH
Windows Uniscribe - Remote Code Execution via Memory Corruption
Sep 13, 2017
CVSS 7.5
EPSS 0.26
CVE-2017-8688 MEDIUM
Windows GDI+ - Information Disclosure via Kernel Memory Address Exposure
Sep 13, 2017
CVSS 5.5
EPSS 0.06
CVE-2017-8687 MEDIUM
Windows Kernel - Information Disclosure via Improper Memory Handling
Sep 13, 2017
CVSS 5.5
EPSS 0.23
CVE-2017-8685 MEDIUM
Windows GDI+ on Windows 7 SP1 and Windows Server 2008 SP2/R2 SP1 - Kernel Memory Address Disclosure
Sep 13, 2017
CVSS 5.5
EPSS 0.27
Products
Microsoft Edge 66 Microsoft Windows 63 Internet Explorer 41 Microsoft Office 37 ChakraCore, Microsoft Edge 30 Windows Uniscribe 30 Browser 20 Microsoft Scripting Engine 18 Windows Hyper-V 17 Office 14 Edge 13 Windows kernel 13 Hyper-V 12 Windows 12 ChakraCore, Microsoft Edge, Internet Explorer 9 Windows Kernel 9 Uniscribe 8 Win32k 8 Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 8 Malware Protection Engine 7 Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 7 Server Message Block 1.0 7 Microsoft Graphics Component 6 Microsoft browsers 6 Windows GDI+ 6 Windows SMB 6 ASP.NET Core 5 ChakraCore 5 Device Guard 5 Internet Explorer, Microsoft Edge 5
Quick Filters
Critical CVEs With Exploits In CISA KEV