Archive
May 2017
Vulnerabilities first published in this month (UTC), newest first.
1,010 results · Feed
-
Unscored —CVE-2017-0272 EPSS 17%
The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, W…
-
Unscored —
Windows Hyper-V allows an elevation of privilege vulnerability when Microsoft Windows 10 Gold, 1511, 1607, and 1703, an…
-
Unscored —
An information disclosure vulnerability exists in the way some ActiveX objects are instantiated, aka "Microsoft ActiveX…
-
Unscored —CVE-2017-0281 EPSS 16%
Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2016, Office Online Server 2016, Office Web Apps 20…
-
Unscored —CVE-2017-0267 EPSS 13%
Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Win…
-
Unscored —CVE-2017-0240 EPSS 15%
A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render w…
-
Medium —CVE-2017-0248 Public exploit
Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc and Microsoft.AspNetCore.Mvc.Core
Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to bypass Enhanced Security Usage taggings when they present a certificate that is invalid for a specific use, aka ".NET Security Feature Bypass Vulnerability."
-
Unscored —
An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppCon…
-
Unscored —
The Microsoft Server Message Block 1.0 (SMBv1) allows denial of service when an attacker sends specially crafted reques…
-
Medium 5.3
Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc
A spoofing vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.
-
Unscored —
Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Win…
-
Unscored —CVE-2017-0259 Public exploit
The Windows kernel in Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703,…
-
Unscored —
A spoofing vulnerability exists when Microsoft browsers render SmartScreen Filter, aka "Microsoft Browser Spoofing Vuln…
-
Unscored —
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Interne…
-
Unscored —
The Microsoft Server Message Block 1.0 (SMBv1) allows denial of service when an attacker sends specially crafted reques…
-
High 7.8
Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the softwa…
KEV Mar 3, 2022 -
High 7.3
Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Se…
KEV Mar 28, 2022 -
High 7.5CVE-2017-0247 EPSS 17%
ASP.NET Core fails to properly validate web requests
A denial of service vulnerability exists when the ASP.NET Core fails to properly validate web requests. NOTE: Microsoft has not commented on third-party claims that the issue is that the TextEncoder.EncodeCore function in the System.Text.Encodings.Web package…
-
Unscored —CVE-2017-0190 EPSS 43%
The GDI component in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold…
-
Unscored —CVE-2017-0220 Public exploit
The Windows kernel in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows Server 2012 Gold allows authentica…
-
Unscored —
Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Win…
-
Unscored —CVE-2017-0278 EPSS 11%
The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, W…
-
Unscored —
The Microsoft Server Message Block 1.0 (SMBv1) allows denial of service when an attacker sends specially crafted reques…
-
Unscored —CVE-2017-0271 EPSS 13%
Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Win…
-
Unscored —CVE-2017-0279 EPSS 11%
The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, W…
-
Unscored —CVE-2017-0227 EPSS 14%
A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render w…
-
Unscored —CVE-2017-0277 EPSS 11%
The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, W…
-
High 7.8
Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the softwa…
KEV Feb 10, 2022 -
High 7.8
The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 201…
KEV Feb 10, 2022 -
Unscored —
Microsoft SharePoint Foundation 2013 SP1 allows an elevation of privilege vulnerability when it does not properly sanit…
-
Unscored —CVE-2017-0265 EPSS 19%
Microsoft PowerPoint for Mac 2011 allows a remote code execution vulnerability when the software fails to properly hand…
-
Unscored —
Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Win…
-
High 8.8
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Interne…
KEV Feb 25, 2022 -
Unscored —
A vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption…
-
Unscored —
Windows DNS Server allows a denial of service vulnerability when Microsoft Windows Server 2008 SP2 and R2 SP1, Windows …
-
Unscored —CVE-2017-0245 Public exploit
The kernel-mode drivers in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1 and Windows Server 2012 Gold allow a local…
-
Unscored —CVE-2017-0264 EPSS 14%
Microsoft PowerPoint for Mac 2011 allows a remote code execution vulnerability when the software fails to properly hand…
-
Unscored —CVE-2017-0258 Public exploit
The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gol…
-
Unscored —CVE-2017-0254 EPSS 20%
Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Office for Mac 2011, Office for Mac…
-
Unscored —
An elevation of privilege vulnerability exists when Microsoft Edge renders a domain-less page in the URL, which could a…