2017 CVEs (page 120)
Page 120 of 148 — CVEs published in 2017, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-0609 | High | 7.0 | 2017-05-12 | An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2017-0608 | High | 7.0 | 2017-05-12 | An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2017-0607 | High | 7.0 | 2017-05-12 | An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2017-0606 | High | 7.0 | 2017-05-12 | An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2017-0604 | High | 7.8 | 2017-05-12 | An elevation of privilege vulnerability in the kernel Qualcomm power driver could enable a local malicious application to execute arbitrary code within the con… |
CVE-2017-0603 | Medium | 4.7 | 2017-05-12 | A denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. T… |
CVE-2017-0602 | Medium | 5.5 | 2017-05-12 | An information disclosure vulnerability in Bluetooth could allow a local malicious application to bypass operating system protections that isolate application… |
CVE-2017-0601 | Medium | 5.5 | 2017-05-12 | An Elevation of Privilege vulnerability in Bluetooth could potentially enable a local malicious application to accept harmful files shared via bluetooth withou… |
CVE-2017-0600 | Medium | 5.5 | 2017-05-12 | A remote denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or re… |
CVE-2017-0599 | Medium | 5.5 | 2017-05-12 | A remote denial of service vulnerability in libhevc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. T… |
CVE-2017-0598 | Medium | 5.5 | 2017-05-12 | An information disclosure vulnerability in the Framework APIs could enable a local malicious application to bypass operating system protections that isolate ap… |
CVE-2017-0597 | High | 7.8 | 2017-05-12 | An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged… |
CVE-2017-0596 | High | 7.8 | 2017-05-12 | An elevation of privilege vulnerability in libstagefright in Mediaserver could enable a local malicious application to execute arbitrary code within the contex… |
CVE-2017-0595 | High | 7.8 | 2017-05-12 | An elevation of privilege vulnerability in libstagefright in Mediaserver could enable a local malicious application to execute arbitrary code within the contex… |
CVE-2017-0594 | High | 7.8 | 2017-05-12 | An elevation of privilege vulnerability in codecs/aacenc/SoftAACEncoder2.cpp in libstagefright in Mediaserver could enable a local malicious application to exe… |
CVE-2017-0593 | High | 7.8 | 2017-05-12 | An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to obtain access to custom permissions. This issue is… |
CVE-2017-0592 | High | 7.8 | 2017-05-12 | A remote code execution vulnerability in FLACExtractor.cpp in libstagefright in Mediaserver could enable an attacker using a specially crafted file to cause me… |
CVE-2017-0591 | High | 7.8 | 2017-05-12 | A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media… |
CVE-2017-0590 | High | 7.8 | 2017-05-12 | A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media… |
CVE-2017-0589 | High | 7.8 | 2017-05-12 | A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media… |
CVE-2017-0588 | High | 7.8 | 2017-05-12 | A remote code execution vulnerability in id3/ID3.cpp in libstagefright in Mediaserver could enable an attacker using a specially crafted file to cause memory c… |
CVE-2017-0587 | High | 7.8 | 2017-05-12 | A remote code execution vulnerability in libmpeg2 in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during medi… |
CVE-2017-0493 | Medium | 5.5 | 2017-05-12 | An information disclosure vulnerability in File-Based Encryption could enable a local malicious attacker to bypass operating system protections for the lock sc… |
CVE-2017-0465 | High | 7.0 | 2017-05-12 | An elevation of privilege vulnerability in the Qualcomm ADSPRPC driver could enable a local malicious application to execute arbitrary code within the context… |
CVE-2017-0281 | High | 7.8 | 2017-05-12 | Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2016, Office Online Server 2016, Office Web Apps 2010 SP2,Office Web Apps 2013 SP1, Project… |
CVE-2017-0280 | Medium | 5.9 | 2017-05-12 | The Microsoft Server Message Block 1.0 (SMBv1) allows denial of service when an attacker sends specially crafted requests to the server, aka "Windows SMB Denia… |
CVE-2017-0279 | High | 7.0 | 2017-05-12 | The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and… |
CVE-2017-0278 | High | 7.0 | 2017-05-12 | The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and… |
CVE-2017-0277 | High | 7.0 | 2017-05-12 | The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and… |
CVE-2017-0276 | Medium | 5.9 | 2017-05-12 | Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 and R2 SP1, Windows… |
CVE-2017-0275 | Medium | 5.9 | 2017-05-12 | Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 and R2 SP1, Windows… |
CVE-2017-0274 | Medium | 5.9 | 2017-05-12 | Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 and R2 SP1, Windows… |
CVE-2017-0273 | Medium | 5.9 | 2017-05-12 | The Microsoft Server Message Block 1.0 (SMBv1) allows denial of service when an attacker sends specially crafted requests to the server, aka "Windows SMB Denia… |
CVE-2017-0272 | High | 8.1 | 2017-05-12 | The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and… |
CVE-2017-0271 | Medium | 5.9 | 2017-05-12 | Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 and R2 SP1, Windows… |
CVE-2017-0270 | Medium | 5.9 | 2017-05-12 | Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 and R2 SP1, Windows… |
CVE-2017-0269 | Medium | 5.9 | 2017-05-12 | The Microsoft Server Message Block 1.0 (SMBv1) allows denial of service when an attacker sends specially crafted requests to the server, aka "Windows SMB Denia… |
CVE-2017-0268 | Medium | 5.9 | 2017-05-12 | Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 and R2 SP1, Windows… |
CVE-2017-0267 | Medium | 5.9 | 2017-05-12 | Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 and R2 SP1, Windows… |
CVE-2017-0266 | High | 7.5 | 2017-05-12 | A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling objects in memory, aka "Mic… |
CVE-2017-0265 | High | 7.8 | 2017-05-12 | Microsoft PowerPoint for Mac 2011 allows a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Microsoft Off… |
CVE-2017-0264 | High | 7.8 | 2017-05-12 | Microsoft PowerPoint for Mac 2011 allows a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Microsoft Off… |
CVE-2017-0263 | High | 7.8 | 2017-05-12 | The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 1… |
CVE-2017-0262 | High | 7.8 | 2017-05-12 | Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in m… |
CVE-2017-0261 | High | 7.8 | 2017-05-12 | Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in m… |
CVE-2017-0259 | Medium | 4.7 | 2017-05-12 | The Windows kernel in Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows authenti… |
CVE-2017-0258 | Medium | 4.7 | 2017-05-12 | The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gol… |
CVE-2017-0256 | Medium | 5.3 | 2017-05-12 | A spoofing vulnerability exists when the ASP.NET Core fails to properly sanitize web requests. |
CVE-2017-0255 | Medium | 5.4 | 2017-05-12 | Microsoft SharePoint Foundation 2013 SP1 allows an elevation of privilege vulnerability when it does not properly sanitize a specially crafted web request, aka… |
CVE-2017-0254 | High | 7.8 | 2017-05-12 | Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Office for Mac 2011, Office for Mac 2016, Microsoft Office Web Apps 2010 SP… |
CVE-2017-0249 | High | 7.3 | 2017-05-12 | An elevation of privilege vulnerability exists when the ASP.NET Core fails to properly sanitize web requests. |
CVE-2017-0248 | High | 7.5 | 2017-05-12 | Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to bypass Enhanced Security Usage taggings when they present a cer… |
CVE-2017-0247 | High | 7.5 | 2017-05-12 | A denial of service vulnerability exists when the ASP.NET Core fails to properly validate web requests. NOTE: Microsoft has not commented on third-party claims… |
CVE-2017-0246 | High | 7.0 | 2017-05-12 | The Graphics Component in the kernel-mode drivers in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows R… |
CVE-2017-0245 | Medium | 4.7 | 2017-05-12 | The kernel-mode drivers in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1 and Windows Server 2012 Gold allow a local authenticated attacker to execute a spe… |
CVE-2017-0244 | Medium | 6.7 | 2017-05-12 | The kernel in Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows locally authenticated attackers to gain privileges via a crafted application, or in… |
CVE-2017-0242 | Medium | 5.5 | 2017-05-12 | An information disclosure vulnerability exists in the way some ActiveX objects are instantiated, aka "Microsoft ActiveX Information Disclosure Vulnerability." |
CVE-2017-0241 | Medium | 5.3 | 2017-05-12 | An elevation of privilege vulnerability exists when Microsoft Edge renders a domain-less page in the URL, which could allow Microsoft Edge to perform actions i… |
CVE-2017-0240 | High | 7.5 | 2017-05-12 | A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling objects in memory, aka "Mic… |
CVE-2017-0238 | High | 7.5 | 2017-05-12 | A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript scripting engines handle objects in memory, aka "Scripting Engine Memo… |
CVE-2017-0236 | High | 7.5 | 2017-05-12 | A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scrip… |
CVE-2017-0235 | High | 7.5 | 2017-05-12 | A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scrip… |
CVE-2017-0234 | High | 7.5 | 2017-05-12 | A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scrip… |
CVE-2017-0233 | High | 8.3 | 2017-05-12 | An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Micr… |
CVE-2017-0231 | Medium | 4.3 | 2017-05-12 | A spoofing vulnerability exists when Microsoft browsers render SmartScreen Filter, aka "Microsoft Browser Spoofing Vulnerability." |
CVE-2017-0230 | High | 7.5 | 2017-05-12 | A remote code execution vulnerability exists in Microsoft Edge in the way JavaScript engines render when handling objects in memory, aka "Scripting Engine Memo… |
CVE-2017-0229 | High | 7.5 | 2017-05-12 | A remote code execution vulnerability exists in Microsoft Edge in the way JavaScript engines render when handling objects in memory, aka "Scripting Engine Memo… |
CVE-2017-0228 | High | 7.5 | 2017-05-12 | A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript engines render when handling objects in memory, aka "Scripting Engine… |
CVE-2017-0227 | High | 7.5 | 2017-05-12 | A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling objects in memory, aka "Mic… |
CVE-2017-0226 | High | 7.5 | 2017-05-12 | A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerabili… |
CVE-2017-0224 | High | 7.5 | 2017-05-12 | A remote code execution vulnerability exists in the way JavaScript engines render when handling objects in memory in Microsoft Edge, aka "Scripting Engine Memo… |
CVE-2017-0222 | High | 8.8 | 2017-05-12 | A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerabili… |
CVE-2017-0221 | High | 7.5 | 2017-05-12 | A vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This CVE ID is unique f… |
CVE-2017-0220 | Medium | 4.7 | 2017-05-12 | The Windows kernel in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows Server 2012 Gold allows authenticated attackers to obtain sensitive inform… |
CVE-2017-0214 | High | 7.0 | 2017-05-12 | Windows COM in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511… |
CVE-2017-0213 | High | 7.3 | 2017-05-12 | Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, W… |
CVE-2017-0212 | High | 7.6 | 2017-05-12 | Windows Hyper-V allows an elevation of privilege vulnerability when Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 fail to properly v… |
CVE-2017-0190 | Medium | 4.4 | 2017-05-12 | The GDI component in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold… |
CVE-2017-0175 | Medium | 4.7 | 2017-05-12 | The Windows kernel in Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows authenticated attackers to obtain sensitive information via a specially craf… |
CVE-2017-0171 | Medium | 5.9 | 2017-05-12 | Windows DNS Server allows a denial of service vulnerability when Microsoft Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 Gold and R2, and Windows Ser… |
CVE-2017-0077 | High | 7.8 | 2017-05-12 | The kernel-mode drivers in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 15… |
CVE-2017-0064 | Medium | 6.5 | 2017-05-12 | A security feature bypass vulnerability exists in Internet Explorer that allows for bypassing Mixed Content warnings, aka "Internet Explorer Security Feature B… |
CVE-2017-8912 | High | 7.2 | 2017-05-12 | CMS Made Simple (CMSMS) 2.1.6 allows remote authenticated administrators to execute arbitrary PHP code via the code parameter to admin/editusertag.php, related… |
CVE-2017-8911 | Critical | 9.8 | 2017-05-12 | An integer underflow has been identified in the unicode_to_utf8() function in tnef 1.4.14. This might lead to invalid write operations, controlled by an attack… |
CVE-2017-8908 | Medium | 5.5 | 2017-05-12 | The mark_line_tr function in gxscanc.c in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted Post… |
CVE-2017-8900 | Medium | 4.6 | 2017-05-12 | LightDM through 1.22.0, when systemd is used in Ubuntu 16.10 and 17.x, allows physically proximate attackers to bypass intended AppArmor restrictions and visit… |
CVE-2017-8360 | Medium | 5.5 | 2017-05-12 | Conexant Systems mictray64 task, as used on HP Elite, EliteBook, ProBook, and ZBook systems, leaks sensitive data (keystrokes) to any process. In mictray64.exe… |
CVE-2017-8906 | Medium | 5.5 | 2017-05-11 | An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax() in MulticoreWare x265 through 2.4, as used by the x265_en… |
CVE-2017-8905 | High | 8.8 | 2017-05-11 | Xen through 4.6.x on 64-bit platforms mishandles a failsafe callback, which might allow PV guest OS users to execute arbitrary code on the host OS, aka XSA-215. |
CVE-2017-8904 | High | 8.8 | 2017-05-11 | Xen through 4.8.x mishandles the "contains segment descriptors" property during GNTTABOP_transfer (aka guest transfer) operations, which might allow PV guest O… |
CVE-2017-8903 | High | 8.8 | 2017-05-11 | Xen through 4.8.x on 64-bit platforms mishandles page tables after an IRET hypercall, which might allow PV guest OS users to execute arbitrary code on the host… |
CVE-2017-7472 | Medium | 5.5 | 2017-05-11 | The KEYS subsystem in the Linux kernel before 4.10.13 allows local users to cause a denial of service (memory consumption) via a series of KEY_REQKEY_DEFL_THRE… |
CVE-2017-8851 | Medium | 5.9 | 2017-05-11 | An issue was discovered on OnePlus One and X devices. Due to a lenient updater-script on the OnePlus One and X OTA images, the fact that both products use the… |
CVE-2017-8850 | Medium | 5.9 | 2017-05-11 | An issue was discovered on OnePlus One, X, 2, 3, and 3T devices. Due to a lenient updater-script in the OnePlus OTA images, and the fact that both ROMs use the… |
CVE-2017-5948 | Medium | 5.9 | 2017-05-11 | An issue was discovered on OnePlus One, X, 2, 3, and 3T devices. OxygenOS and HydrogenOS are vulnerable to downgrade attacks. This is due to a lenient 'updater… |
CVE-2017-8899 | High | 8.1 | 2017-05-11 | Invision Power Services (IPS) Community Suite 4.1.19.2 and earlier has a composite of Stored XSS and Information Disclosure issues in the attachments feature f… |
CVE-2017-8898 | Critical | 9.8 | 2017-05-11 | Invision Power Services (IPS) Community Suite 4.1.19.2 and earlier has stored XSS in the Announcements, allowing privilege escalation from an Invision Power Bo… |
CVE-2017-8897 | Medium | 6.1 | 2017-05-11 | Invision Power Services (IPS) Community Suite 4.1.19.2 and earlier has pre-auth reflected XSS in the IPS UTF8 Converter v1.1.18: admin/convertutf8/index.php?co… |
CVE-2017-6867 | Medium | 4.9 | 2017-05-11 | A vulnerability was discovered in Siemens SIMATIC WinCC (V7.3 before Upd 11 and V7.4 before SP1), SIMATIC WinCC Runtime Professional (V13 before SP2 and V14 be… |
CVE-2017-6865 | Medium | 6.5 | 2017-05-11 | A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1), SIMATIC Automation Tool (All versions < V3.0), SIMATIC NET PC-Softwa… |