Skip to content
OpenAdvisories

Archive

March 2017

Vulnerabilities first published in this month (UTC), newest first.

1,302 results · Feed

  • Unscored —

    The kernel-mode drivers in Microsoft Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 151…

  • Unscored —
    CVE-2017-0010 EPSS 25%

    A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objec…

  • Unscored —
    CVE-2017-0057 EPSS 14%

    DNS client in Microsoft Windows 8.1; Windows Server 2012 R2, Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windo…

  • Unscored —
    CVE-2017-0092 Public exploit EPSS 23%

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…

  • Unscored —
    CVE-2017-0087 Public exploit EPSS 43%

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…

  • Unscored —
    CVE-2017-0020 EPSS 17%

    Microsoft Excel 2016, Excel 2010 SP2, Excel 2013 RT SP1, and Office Web Apps Server 2013 SP1 allow remote attackers to …

  • Unscored —
    CVE-2017-0083 Public exploit EPSS 43%

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…

  • Unscored —
    CVE-2017-0084 Public exploit EPSS 38%

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Serve…

  • Unscored —
    CVE-2017-0034 EPSS 13%

    A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerabili…

  • Unscored —
    CVE-2017-0100 Public exploit

    A DCOM object in Helppane.exe in Microsoft Windows 7 SP1; Windows Server 2008 R2; Windows 8.1; Windows Server 2012 Gold…

  • Unscored —
    CVE-2017-0113 Public exploit EPSS 23%

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…

  • Unscored —

    Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server 2012…

  • Unscored —
    CVE-2017-0127 Public exploit EPSS 23%

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…

  • High 8.1
    CVE-2017-0148 Exploited · Ransomware Public exploit EPSS 99%

    The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Window…

    KEV Apr 6, 2022
  • Unscored —
    CVE-2017-0017 EPSS 36%

    The RegEx class in the XSS filter in Microsoft Edge allows remote attackers to conduct cross-site scripting (XSS) attac…

  • Unscored —
    CVE-2017-0008 EPSS 39%

    Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via…

  • Unscored —
    CVE-2017-0114 Public exploit EPSS 23%

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…

  • Unscored —

    Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server…

  • Unscored —
    CVE-2017-0131 EPSS 15%

    A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objec…

  • Unscored —
    CVE-2017-0134 EPSS 26%

    A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objec…

  • Unscored —
    CVE-2017-0117 Public exploit EPSS 23%

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…

  • Unscored —

    The kernel-mode drivers in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allow local users to gain …

  • Unscored —

    The kernel-mode drivers in Windows 8.1; Windows Server 2012 R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 all…

  • Unscored —
    CVE-2017-0111 Public exploit EPSS 23%

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…

  • Unscored —
    CVE-2017-0011 EPSS 37%

    Microsoft Edge allows remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Edge Info…

  • Unscored —

    Hyper-V in Microsoft Windows 10 1607 and Windows Server 2016 does not properly validate vSMB packet data, which allows …

  • Unscored —

    Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka…

  • Unscored —
    CVE-2017-0015 EPSS 26%

    A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objec…

  • Medium 4.3
    CVE-2017-0059 Exploited Public exploit EPSS 62%

    Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via…

    KEV Mar 28, 2022
  • Unscored —
    CVE-2017-0073 EPSS 33%

    The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; …

  • High 8.8
    CVE-2017-0143 Exploited · Ransomware Public exploit EPSS 93%

    The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Window…

    KEV Nov 3, 2021
  • Unscored —
    CVE-2017-0132 EPSS 15%

    A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objec…

  • Unscored —
    CVE-2017-0105 EPSS 31%

    Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Office Compatibility Pack SP3, Word Automat…

  • Unscored —
    CVE-2017-0006 EPSS 18%

    Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3…

  • Unscored —

    The kernel-mode drivers in Microsoft Windows 10 1607 and Windows Server 2016 allow local users to gain privileges via a…

  • Unscored —
    CVE-2017-0009 EPSS 36%

    Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via…

  • Unscored —
    CVE-2017-0150 EPSS 15%

    A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objec…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Microsoft Exchange Outlook Web Access (OWA) allows remote attackers to inje…

  • Medium 6.5
    CVE-2017-0022 Exploited EPSS 18%

    Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Win…

    KEV May 24, 2022
  • Unscored —
    CVE-2017-0090 Public exploit EPSS 43%

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…