Archive

15 November 2017

Vulnerabilities first published on this day (UTC), newest first.

← October 2017 2017 / November /15 December 2017 →

All Critical High Medium Low Exploited only Public exploit

91 results · Feed

High 7.5

CVE-2017-11883

Denial of service in ASP.NET Core

.NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly handling web requests, aka ".NET CORE Denial Of Service Vulnerability".

Microsoft ASP.NET Microsoft.AspNetCore.Server.HttpSys Microsoft.AspNetCore.Server.WebListener NuGet

Nov 15, 2017
Unscored —

CVE-2017-11856

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windo…

Microsoft Internet Explorer

Nov 15, 2017
High 7.8

CVE-2017-11882 Exploited · Ransomware Public exploit EPSS 100%

Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and M…

Microsoft Microsoft Office

Nov 15, 2017
KEV Nov 3, 2021
High 7.5

CVE-2017-11870 Public exploit EPSS 60%

Chakra Core vulnerable to privilege escalation when writing to JavaScript null scope objects

ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vu…

Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet

Nov 15, 2017
Unscored —

CVE-2017-11880

Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2…

Microsoft Windows kernel Windows

Nov 15, 2017
Unscored —

CVE-2017-11848

Internet Explorer in Microsoft Microsoft Windows 7 SP1, Windows Server 2008 SP2, Windows 8.1 and Windows RT 8.1, Window…

Microsoft Internet Explorer

Nov 15, 2017
Unscored —

CVE-2017-11863

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 17…

Microsoft Microsoft Edge Browsers

Nov 15, 2017
Unscored —

CVE-2017-11845

Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current …

Microsoft Microsoft Edge Browsers

Nov 15, 2017
Unscored —

CVE-2017-11838

ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1…

Microsoft ChakraCore, Microsoft Edge, Internet Explorer Browsers

Nov 15, 2017
Unscored —

CVE-2017-11874

Microsoft Edge in Microsoft Windows 10 1703, 1709, Windows Server, version 1709, and ChakraCore allows an attacker to b…

Microsoft Microsoft Edge Browsers

Nov 15, 2017
High 7.5

CVE-2017-11770

Improper Certificate Validation

.NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly parsing certificate data. A denial of service vulnerability exists when .NET Core improperly handles p…

Microsoft .NET Core Microsoft.NETCore.App System.Security.Cryptography.X509Certificates NuGet

Nov 15, 2017
Unscored —

CVE-2017-11791

ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Window…

Microsoft ChakraCore, Microsoft Edge, Internet Explorer Browsers

Nov 15, 2017
Unscored —

CVE-2017-11858

ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT…

Microsoft ChakraCore, Microsoft Edge, Internet Explorer Browsers

Nov 15, 2017
High 7.5

CVE-2017-11862

Chakra Core vulnerable to privilege escalation due to type confusion

ChakraCore and Microsoft Edge in Windows 10 1709 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerabi…

Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet

Nov 15, 2017
Unscored —

CVE-2017-11841 Public exploit EPSS 60%

ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, versi…

Microsoft ChakraCore, Microsoft Edge Browsers

Nov 15, 2017
Unscored —

CVE-2017-11854

Microsoft Word 2007 Service Pack 3, Microsoft Word 2010 Service Pack 2, Microsoft Office 2010 Service Pack 2, and Micro…

Microsoft Microsoft Office

Nov 15, 2017
Unscored —

CVE-2017-11872

Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to force the browser to s…

Microsoft Microsoft Edge Browsers

Nov 15, 2017
Unscored —

CVE-2017-11869

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows S…

Microsoft Internet Explorer

Nov 15, 2017
Unscored —

CVE-2017-11837

ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1…

Microsoft ChakraCore, Microsoft Edge, Internet Explorer Browsers

Nov 15, 2017
Unscored —

CVE-2017-11839 Public exploit EPSS 62%

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows …

Nov 15, 2017
Unscored —

CVE-2017-11788

Windows Search in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2…

Microsoft Windows Search Windows

Nov 15, 2017
Unscored —

CVE-2017-11866

ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, versi…

Microsoft ChakraCore, Microsoft Edge Browsers

Nov 15, 2017
Unscored —

CVE-2017-11832

The Microsoft Windows embedded OpenType (EOT) font engine in Windows 7 SP1, Windows Server 2008 SP2 and 2008 R2 SP1, an…

Microsoft Microsoft Graphics Component

Nov 15, 2017
Unscored —

CVE-2017-11831 Public exploit

Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2…

Microsoft Windows kernel Windows

Nov 15, 2017
Unscored —

CVE-2017-11876

Microsoft Project Server and Microsoft SharePoint Enterprise Server 2016 allow an attacker to use cross-site forgery to…

Microsoft Microsoft Server

Nov 15, 2017
Unscored —

CVE-2017-11855 Public exploit EPSS 49%

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windo…

Microsoft Internet Explorer

Nov 15, 2017
Unscored —

CVE-2017-11861 Public exploit EPSS 64%

Microsoft Edge in Windows 10 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker …

Microsoft ChakraCore, Microsoft Edge Browsers

Nov 15, 2017
Unscored —

CVE-2017-11851

The Windows kernel component on Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Serv…

Microsoft Windows kernel Windows

Nov 15, 2017
High 8.8

CVE-2017-11879

Open redirect in ASP.NET Core

ASP.NET Core 2.0 allows an attacker to steal log-in session information such as cookies or authentication tokens via a specially crafted URL aka "ASP.NET Core Elevation Of Privilege Vulnerability".

Microsoft ASP.NET Core Microsoft.AspNetCore.All Microsoft.AspNetCore.Mvc.Core NuGet

Nov 15, 2017
Unscored —

CVE-2017-11852

Microsoft GDI Component in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an attacker to log on to an affe…

Microsoft GDI

Nov 15, 2017
Unscored —

CVE-2017-11878

Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsof…

Microsoft Microsoft Office

Nov 15, 2017
Unscored —

CVE-2017-11835

Microsoft graphics in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an attacker to potentially read data …

Microsoft Microsoft Graphics

Nov 15, 2017
Unscored —

CVE-2017-11830 Public exploit

Device Guard in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allo…

Microsoft Device Guard

Nov 15, 2017
Unscored —

CVE-2017-11847

Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT1, Windows Server 2012 and R2, W…

Microsoft Windows kernel Windows

Nov 15, 2017
Unscored —

CVE-2017-11853 EPSS 11%

Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Server 2012 and R2, Window…

Microsoft Windows kernel Windows

Nov 15, 2017
Unscored —

CVE-2017-11843

ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT…

Microsoft ChakraCore, Microsoft Edge, Internet Explorer Browsers

Nov 15, 2017
Unscored —

CVE-2017-11768

Windows Media Player in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 …

Microsoft Windows Media Player Windows

Nov 15, 2017
Unscored —

CVE-2017-11877

Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsof…

Microsoft Microsoft Office

Nov 15, 2017
Unscored —

CVE-2017-11836

ChakraCore, and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Se…

Microsoft ChakraCore, Microsoft Edge Browsers

Nov 15, 2017
Unscored —

CVE-2017-11873 Public exploit EPSS 70%

ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 170…

Microsoft ChakraCore, Microsoft Edge Browsers

Nov 15, 2017