Archive
March 2017
Vulnerabilities first published in this month (UTC), newest first.
1,302 results · Feed
-
Unscored —
Microsoft Lync for Mac 2011 fails to properly validate certificates, allowing remote attackers to alter server-client c…
-
Unscored —
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…
-
Unscored —CVE-2017-0042 EPSS 30%
Windows Media Player in Microsoft Windows 8.1; Windows Server 2012 R2; Windows RT 8.1; Windows 7 SP1; Windows 2008 SP2 …
-
Unscored —
Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server…
-
Unscored —
The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2; Windows Server 2008 SP2 and…
-
Unscored —
Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Server 2012 Gold and R…
-
Unscored —
The kernel API in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7; Windows 8; Windows 10 Gol…
-
Unscored —CVE-2017-0094 EPSS 29%
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objec…
-
High 7.8
The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; …
KEV May 24, 2022 -
Unscored —
The kernel-mode drivers in Microsoft Windows 10 Gold and 1511 allow local users to gain privileges via a crafted applic…
-
Unscored —
Microsoft Windows 10 1607 and Windows Server 2016 allow remote attackers to cause a denial of service (application hang…
-
Unscored —CVE-2017-0031 EPSS 28%
Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, and Word 2010 SP2 allow remote attackers to ex…
-
Unscored —
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…
-
Unscored —
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Serve…
-
High 8.8
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Window…
KEV Mar 25, 2022 -
Unscored —CVE-2017-0066 EPSS 27%
Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka…
-
Unscored —CVE-2017-0140 EPSS 26%
Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka…
-
Unscored —CVE-2017-0040 EPSS 14%
The scripting engine in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or c…
-
High 8.8
Microsoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service …
KEV May 24, 2022 -
Unscored —
Microsoft Internet Information Server (IIS) in Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Window…
-
Unscored —
The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 2…
-
Unscored —
Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server 2012…
-
Unscored —CVE-2017-0103 Public exploit
The kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows Server 20…
-
Unscored —CVE-2017-0045 Public exploit
Windows DVD Maker in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows Vista SP2 does not properly parse c…
-
Unscored —CVE-2017-0023 EPSS 31%
The PDF library in Microsoft Edge; Windows 8.1; Windows Server 2012 and R2; Windows RT 8.1; and Windows 10, 1511, and 1…
-
Unscored —CVE-2017-0071 EPSS 32%
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objec…
-
Unscored —
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…
-
Unscored —
Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Server 2012…
-
Unscored —
Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to spoof web content via a crafted web site, a…
-
Unscored —
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…
-
Unscored —CVE-2017-0049 EPSS 39%
The VBScript engine in Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information from proc…
-
Unscored —
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…
-
Unscored —CVE-2017-0052 EPSS 18%
Microsoft Office Compatibility Pack SP3, Excel 2007 SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3…
-
High 8.8
Capstone Integer overflow
Integer overflow in the cs_winkernel_malloc function in winkernel_mm.c in Capstone 3.0.4 and earlier allows attackers to cause a denial of service (heap-based buffer overflow in a kernel driver) or possibly have unspecified other impact via a large value.
-
Unscored —
The keyring_search_aux function in security/keys/keyring.c in the Linux kernel through 3.14.79 allows local users to ca…
-
Unscored —
An issue was discovered in CHICKEN Scheme through 4.12.0. When using a nonstandard CHICKEN-specific extension to alloca…
-
Unscored —
Heap-based buffer overflow in the PdfParser::ReadXRefSubsection function in base/PdfParser.cpp in PoDoFo allows attacke…
-
Unscored —
Cross-site scripting (XSS) vulnerability in includes/admin/pages/manage.php in the Connections Business Directory plugi…
-
Unscored —
The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with J…
-
Unscored —
Memory leak in the megasas_handle_dcmd function in hw/scsi/megasas.c in QEMU (aka Quick Emulator) allows local guest OS…