By publication date

Exploited and new serious CVEs: March 2017

158 records · 17 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 1 of 2

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
47Plan	CVE-2017-6403No exploit	An issue was discovered in Veritas NetBackup Before 8.0 and NetBackup Appliance Before 3.0.veritas · netbackup · CWE-798 Pre-auth Hard-coded credentials	Critical9.8	—	26.6%	Mar 2, 2017
35Monitor	CVE-2015-8813Proof of concept	The Page_Load function in Umbraco.Web/umbraco.presentation/umbraco/dashboard/FeedProxy.aspx.cs in Umbraco before 7.4.0 allows remote attackeumbraco · umbraco · CWE-918 Pre-auth SSRF	High8.2	—	11.1%	Mar 3, 2017
60This week	CVE-2016-6883Weaponized	MatrixSSL before 3.8.3 configured with RSA Cipher Suites allows remote attackers to obtain sensitive information via a Bleichenbacher varianmatrixssl · matrixssl · CWE-200 Pre-auth Info leak	Medium5.9	—	13.9%	Mar 3, 2017
42Plan	CVE-2016-7406No exploit	Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via format string specifiers indropbear ssh project · dropbear ssh · CWE-20 pre-auth RCE	Critical9.8	—	10.2%	Mar 3, 2017
87Now	CVE-2017-6334Weaponized	dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands netgear · dgn2200 series firmware · CWE-78 RCE Command injection	High8.8	KEV	72.6%	Mar 5, 2017
60This week	CVE-2017-6416Weaponized	An issue was discovered in SysGauge 1.5.18.flexense · sysgauge · CWE-119 pre-auth RCE Memory safety	Critical9.8	—	10.7%	Mar 5, 2017
38Monitor	CVE-2016-6255Proof of concept	Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a POST request without debian · debian linux · CWE-284 Pre-auth Broken access control (IDOR)	High7.5	—	26.6%	Mar 7, 2017
43Plan	CVE-2017-5178No exploit	An issue was discovered in Schneider Electric Tableau Server/Desktop Versions 7.0 to 10.1.3 in Wonderware Intelligence Versions 2014R3 and pschneider-electric · tableau desktop · CWE-1188 Pre-auth Hard-coded credentials	Critical9.8	—	13.6%	Mar 8, 2017
45Plan	CVE-2017-6548Proof of concept	Buffer overflows in networkmap on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-ACasus · rt-ac53 firmware · CWE-119 pre-auth RCE Memory safety	Critical9.8	—	21.3%	Mar 9, 2017
44Plan	CVE-2017-6558Proof of concept	iball Baton 150M iB-WRA150N v1 00000001 1.2.6 build 110401 Rel.47776n devices are prone to an authentication bypass vulnerability that allowiball · ib-wra150n firmware · CWE-798 Pre-auth Auth bypass Hard-coded credentials	Critical9.8	—	15.2%	Mar 9, 2017
60This week	CVE-2017-6526Weaponized	An issue was discovered in dnaTools dnaLIMS 4-2015s13.dnatools · dnalims · CWE-287 pre-auth RCE Auth bypass	Critical9.8	—	57.4%	Mar 9, 2017
60This week	CVE-2017-6527Weaponized	An issue was discovered in dnaTools dnaLIMS 4-2015s13.dnatools · dnalims · CWE-22 Pre-auth Path traversal	High7.5	—	56.6%	Mar 9, 2017
60This week	CVE-2017-6465Weaponized	Remote Code Execution was discovered in FTPShell Client 6.53.ftpshell · ftpshell client · CWE-119 pre-auth RCE Memory safety	Critical9.8	—	50.3%	Mar 9, 2017
43Plan	CVE-2017-6506Proof of concept	In Azure Data Expert Ultimate 2.2.16, the SMTP verification function suffers from a buffer overflow vulnerability, leading to remote code exazure dex · data expert ultimate · CWE-119 pre-auth RCE Memory safety	Critical9.8	—	11.6%	Mar 10, 2017
99Now	CVE-2017-5638Weaponized	The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-mesapache · struts · CWE-755 pre-auth RCE	Critical9.8	KEV	99.9%	Mar 10, 2017
34Monitor	CVE-2017-6444Proof of concept	The MikroTik Router hAP Lite 6.25 has no protection mechanism for unsolicited TCP ACK packets in the case of a fast network connection, whicmikrotik · routeros · CWE-400 Pre-auth Denial of service	High7.5	—	13.4%	Mar 12, 2017
45Plan	CVE-2017-5674No exploit	A vulnerability in a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models allows an attacker embedthis · goahead · CWE-200 Pre-auth Info leak	Critical9.8	—	21.5%	Mar 13, 2017
43Plan	CVE-2013-4659Proof of concept	Buffer overflow in Broadcom ACSD allows remote attackers to execute arbitrary code via a long string to TCP port 5916.asus · rt-ac66u firmware · CWE-119 pre-auth RCE Memory safety	Critical9.8	—	13.9%	Mar 14, 2017
51Plan	CVE-2017-6398Weaponized	An issue was discovered in Trend Micro InterScan Messaging Security (Virtual Appliance) 9.1-1600.trendmicro · interscan messaging security virtual appliance · CWE-78 RCE Command injection	High8.8	—	54.0%	Mar 14, 2017
40Plan	CVE-2017-6516Weaponized	A Local Privilege Escalation Vulnerability in MagniComp's Sysinfo before 10-H64 for Linux and UNIX platforms could allow a local attacker tomagnicomp · sysinfo · CWE-20 Local privilege escalation	Medium6.7	—	5.2%	Mar 14, 2017
35Monitor	CVE-2016-8020Proof of concept	Improper control of generation of code vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote amcafee · virusscan enterprise · CWE-94 RCE	High8.0	—	11.0%	Mar 14, 2017
34Monitor	CVE-2016-8022Proof of concept	Authentication bypass by spoofing vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote unauthmcafee · virusscan enterprise · CWE-287 pre-auth RCE Auth bypass	High7.5	—	13.2%	Mar 14, 2017
42Plan	CVE-2016-10166No exploit	Integer underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remlibgd · libgd · CWE-191 Pre-auth Memory safety	Critical9.8	—	10.6%	Mar 15, 2017
43Plan	CVE-2017-5358Proof of concept	Stack-based buffer overflows in php_Easycom5_3_0.dll in EasyCom for PHP 4.0.0.29 allows remote attackers to execute arbitrary code via the seasycom-aura · easycom for php · CWE-119 pre-auth RCE Memory safety	Critical9.8	—	12.1%	Mar 15, 2017
33Monitor	CVE-2016-7103No exploit	Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via jqueryui · jquery ui · CWE-79 Pre-auth XSS	Medium6.1	—	29.1%	Mar 15, 2017
60This week	CVE-2017-6510Weaponized	Easy File Sharing FTP Server version 3.6 is vulnerable to a directory traversal vulnerability which allows an attacker to list and download efssoft · easy file sharing ftp server · CWE-22 Pre-auth Path traversal	High7.5	—	15.3%	Mar 16, 2017
62This week	CVE-2017-0001Weaponized	The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows microsoft · windows 10 1507 Local privilege escalation	High7.8	KEV	3.1%	Mar 16, 2017
64This week	CVE-2017-0005Weaponized	The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows microsoft · windows 10 1507 Local privilege escalation	High7.8	KEV	11.0%	Mar 16, 2017
36Monitor	CVE-2017-0006No exploit	Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attackemicrosoft · excel · CWE-119 RCE Memory safety	High7.8	—	16.6%	Mar 16, 2017
25Monitor	CVE-2017-0007No exploit	Device Guard in Microsoft Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows remote attackers to modify PowerShell script without imicrosoft · windows 10 · CWE-20	Medium5.5	—	11.2%	Mar 16, 2017
28Monitor	CVE-2017-0008No exploit	Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, microsoft · internet explorer · CWE-200 Pre-auth Info leak	Medium4.3	—	36.9%	Mar 16, 2017
29Monitor	CVE-2017-0009No exploit	Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, microsoft · internet explorer · CWE-200 Pre-auth Info leak	Medium4.3	—	39.6%	Mar 16, 2017
38Monitor	CVE-2017-0010No exploit	A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micromicrosoft · edge pre-auth RCE	High7.5	—	27.0%	Mar 16, 2017
30Monitor	CVE-2017-0011No exploit	Microsoft Edge allows remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Edge Information Disclosure Vumicrosoft · edge · CWE-200 Pre-auth Info leak	Medium4.3	—	42.3%	Mar 16, 2017
35Monitor	CVE-2017-0014No exploit	The Windows Graphics Component in Microsoft Office 2010 SP2; Windows Server 2008 R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Golmicrosoft · office pre-auth RCE	High7.5	—	17.5%	Mar 16, 2017
38Monitor	CVE-2017-0015No exploit	A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micromicrosoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	26.3%	Mar 16, 2017
31Monitor	CVE-2017-0016No exploit	Microsoft Windows 10 Gold, 1511, and 1607; Windows 8.1; Windows RT 8.1; Windows Server 2012 R2, and Windows Server 2016 do not properly handmicrosoft · windows 10 · CWE-476 pre-auth RCE Memory safety Denial of service	Medium5.9	—	25.7%	Mar 16, 2017
37Monitor	CVE-2017-0017No exploit	The RegEx class in the XSS filter in Microsoft Edge allows remote attackers to conduct cross-site scripting (XSS) attacks and obtain sensitimicrosoft · edge · CWE-79 Pre-auth XSS	Medium6.1	—	41.9%	Mar 16, 2017
34Monitor	CVE-2017-0018No exploit	Microsoft Internet Explorer 10 and 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	High7.5	—	13.5%	Mar 16, 2017
36Monitor	CVE-2017-0019No exploit	Microsoft Word 2016 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted documenmicrosoft · word · CWE-119 RCE Memory safety	High7.8	—	16.6%	Mar 16, 2017
36Monitor	CVE-2017-0020No exploit	Microsoft Excel 2016, Excel 2010 SP2, Excel 2013 RT SP1, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary codmicrosoft · excel · CWE-119 RCE Memory safety	High7.8	—	16.3%	Mar 16, 2017
61This week	CVE-2017-0022Weaponized	Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 microsoft · xml core services · CWE-119 Pre-auth Memory safety	Medium6.5	KEV	18.0%	Mar 16, 2017
40Plan	CVE-2017-0023No exploit	The PDF library in Microsoft Edge; Windows 8.1; Windows Server 2012 and R2; Windows RT 8.1; and Windows 10, 1511, and 1607 allows remote attmicrosoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	34.0%	Mar 16, 2017
25Monitor	CVE-2017-0027No exploit	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Services on SharePoint Sermicrosoft · excel · CWE-200 Info leak	Medium4.7	—	22.5%	Mar 16, 2017
27Monitor	CVE-2017-0029No exploit	Microsoft Office 2010 SP2, Word 2010 SP2, Word 2013 RT SP1, and Word 2016 allow remote attackers to cause a denial of service (application hmicrosoft · office Denial of service	Medium5.5	—	15.5%	Mar 16, 2017
39Monitor	CVE-2017-0030No exploit	Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Office Web Apps Server 2010 SP2, Word 2007 SP3, Word 2010 SP2, and Word Automationmicrosoft · office · CWE-119 RCE Memory safety	High7.8	—	25.9%	Mar 16, 2017
39Monitor	CVE-2017-0031No exploit	Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, and Word 2010 SP2 allow remote attackers to execute arbitrary code microsoft · office · CWE-119 RCE Memory safety	High7.8	—	26.3%	Mar 16, 2017
35Monitor	CVE-2017-0032No exploit	A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micromicrosoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	15.2%	Mar 16, 2017
34Monitor	CVE-2017-0034No exploit	A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory.microsoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	12.7%	Mar 16, 2017
35Monitor	CVE-2017-0035No exploit	A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micromicrosoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	15.2%	Mar 16, 2017
42Plan	CVE-2017-0039No exploit	Microsoft Windows Vista SP2 and Server 2008 SP2 mishandle dynamic link library (DLL) loading, which allows local users to gain privileges vimicrosoft · windows server 2008 RCE Local privilege escalation	High7.8	—	37.3%	Mar 16, 2017
34Monitor	CVE-2017-0040No exploit	The scripting engine in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of servmicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	High7.5	—	13.4%	Mar 16, 2017
21Monitor	CVE-2017-0042No exploit	Windows Media Player in Microsoft Windows 8.1; Windows Server 2012 R2; Windows RT 8.1; Windows 7 SP1; Windows 2008 SP2 and R2 SP1, Windows Smicrosoft · windows 10 · CWE-200 Pre-auth Info leak	Low3.1	—	29.5%	Mar 16, 2017
29Monitor	CVE-2017-0049No exploit	The VBScript engine in Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information from process memory via a crafmicrosoft · internet explorer · CWE-200 Pre-auth Info leak	Medium4.3	—	38.9%	Mar 16, 2017
36Monitor	CVE-2017-0052No exploit	Microsoft Office Compatibility Pack SP3, Excel 2007 SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attackemicrosoft · excel · CWE-119 RCE Memory safety	High7.8	—	16.6%	Mar 16, 2017
36Monitor	CVE-2017-0053No exploit	Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, Word 2010 SP2, Word 2013 SP1, Word 2013 R2 SP1, Word 2016, and Wordmicrosoft · office · CWE-119 RCE Memory safety	High7.8	—	16.7%	Mar 16, 2017
29Monitor	CVE-2017-0055Proof of concept	Microsoft Internet Information Server (IIS) in Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Servermicrosoft · windows 10 · CWE-79 Pre-auth XSS	Medium6.1	—	16.3%	Mar 16, 2017
21Monitor	CVE-2017-0057No exploit	DNS client in Microsoft Windows 8.1; Windows Server 2012 R2, Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 fails microsoft · windows 10 · CWE-200 Pre-auth Info leak	Medium4.3	—	13.9%	Mar 16, 2017
66This week	CVE-2017-0059Weaponized	Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, microsoft · internet explorer Pre-auth	Medium4.3	KEV	61.9%	Mar 16, 2017
27Monitor	CVE-2017-0060Proof of concept	The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows microsoft · live meeting · CWE-200 Info leak	Medium5.5	—	15.9%	Mar 16, 2017
34Monitor	CVE-2017-0061Proof of concept	The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2, Windows Server 2008 SP2 and R2, and Windows 7 SPmicrosoft · windows 7 · CWE-200 Pre-auth Info leak	Medium5.3	—	43.1%	Mar 16, 2017
23Monitor	CVE-2017-0062Proof of concept	The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows microsoft · windows 10 · CWE-200 Info leak	Medium4.7	—	17.8%	Mar 16, 2017
37Monitor	CVE-2017-0063Proof of concept	The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2; Windows Server 2008 SP2 and R2; and Windows 7 SPmicrosoft · windows 10 · CWE-200 Pre-auth Info leak	Medium6.5	—	35.2%	Mar 16, 2017
25Monitor	CVE-2017-0065Proof of concept	Microsoft Edge allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Microsoft Browser Inmicrosoft · edge · CWE-200 Pre-auth Info leak	Medium4.3	—	27.4%	Mar 16, 2017
25Monitor	CVE-2017-0066No exploit	Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka "Microsoft Edge Secumicrosoft · edge Pre-auth	Medium4.2	—	29.9%	Mar 16, 2017
35Monitor	CVE-2017-0067No exploit	A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micromicrosoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	15.2%	Mar 16, 2017
22Monitor	CVE-2017-0068No exploit	Browsers in Microsoft Edge allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Microsoftmicrosoft · edge · CWE-200 Pre-auth Info leak	Medium4.3	—	15.1%	Mar 16, 2017
54Plan	CVE-2017-0070Proof of concept	A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micromicrosoft · edge · CWE-416 pre-auth RCE Memory safety	High7.5	—	78.5%	Mar 16, 2017
40Plan	CVE-2017-0071No exploit	A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micromicrosoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	31.8%	Mar 16, 2017
48Plan	CVE-2017-0072Proof of concept	Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrarymicrosoft · windows 7 · CWE-119 pre-auth RCE Memory safety	High8.8	—	42.5%	Mar 16, 2017
27Monitor	CVE-2017-0073No exploit	The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows microsoft · live meeting · CWE-200 Pre-auth Info leak	Medium4.3	—	33.3%	Mar 16, 2017
34Monitor	CVE-2017-0075Proof of concept	Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windowsmicrosoft · windows 10 RCE	High7.6	—	12.6%	Mar 16, 2017
48Plan	CVE-2017-0083Proof of concept	Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrarymicrosoft · windows 7 · CWE-119 pre-auth RCE Memory safety	High8.8	—	42.5%	Mar 16, 2017
46Plan	CVE-2017-0084Proof of concept	Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Wmicrosoft · windows 10 · CWE-119 pre-auth RCE Memory safety	High8.8	—	36.5%	Mar 16, 2017
24Monitor	CVE-2017-0085Proof of concept	Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive microsoft · windows 7 · CWE-200 Pre-auth Info leak	Medium4.3	—	22.4%	Mar 16, 2017
48Plan	CVE-2017-0086Proof of concept	Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrarymicrosoft · windows 7 · CWE-119 pre-auth RCE Memory safety	High8.8	—	42.5%	Mar 16, 2017
48Plan	CVE-2017-0087Proof of concept	Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrarymicrosoft · windows 7 · CWE-119 pre-auth RCE Memory safety	High8.8	—	42.5%	Mar 16, 2017
48Plan	CVE-2017-0088Proof of concept	Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrarymicrosoft · windows 7 · CWE-119 pre-auth RCE Memory safety	High8.8	—	41.8%	Mar 16, 2017
52Plan	CVE-2017-0089Proof of concept	Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrarymicrosoft · windows 7 · CWE-119 pre-auth RCE Memory safety	High8.8	—	57.3%	Mar 16, 2017
48Plan	CVE-2017-0090Proof of concept	Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrarymicrosoft · windows 7 · CWE-119 pre-auth RCE Memory safety	High8.8	—	42.5%	Mar 16, 2017
24Monitor	CVE-2017-0091Proof of concept	Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive microsoft · windows 7 · CWE-200 Pre-auth Info leak	Medium4.3	—	22.4%	Mar 16, 2017
24Monitor	CVE-2017-0092Proof of concept	Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive microsoft · windows 7 · CWE-200 Pre-auth Info leak	Medium4.3	—	22.4%	Mar 16, 2017
40Plan	CVE-2017-0094No exploit	A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micromicrosoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	31.6%	Mar 16, 2017
78This week	CVE-2017-0101Weaponized	The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Wmicrosoft · windows 7 · CWE-119 Local privilege escalation Memory safety	High7.8	KEV	57.4%	Mar 16, 2017
36Monitor	CVE-2017-0104No exploit	The iSNS Server service in Microsoft Windows Server 2008 SP2 and R2, Windows Server 2012 Gold and R2, and Windows Server 2016 allows remote microsoft · windows server 2008 · CWE-190 Pre-auth Memory safety	High8.1	—	13.8%	Mar 16, 2017
31Monitor	CVE-2017-0105No exploit	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on Sharemicrosoft · office · CWE-200 Info leak	Medium5.5	—	30.4%	Mar 16, 2017
46Plan	CVE-2017-0108Proof of concept	The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lmicrosoft · live meeting · CWE-119 RCE Memory safety	High7.8	—	50.4%	Mar 16, 2017
24Monitor	CVE-2017-0111Proof of concept	Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive microsoft · windows 7 · CWE-200 Pre-auth Info leak	Medium4.3	—	22.4%	Mar 16, 2017
24Monitor	CVE-2017-0112Proof of concept	Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive microsoft · windows 7 · CWE-200 Pre-auth Info leak	Medium4.3	—	22.4%	Mar 16, 2017
24Monitor	CVE-2017-0113Proof of concept	Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive microsoft · windows 7 · CWE-200 Pre-auth Info leak	Medium4.3	—	22.4%	Mar 16, 2017
24Monitor	CVE-2017-0114Proof of concept	Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive microsoft · windows 7 · CWE-200 Pre-auth Info leak	Medium4.3	—	22.4%	Mar 16, 2017
24Monitor	CVE-2017-0115Proof of concept	Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive microsoft · windows 7 · CWE-200 Pre-auth Info leak	Medium4.3	—	22.4%	Mar 16, 2017
24Monitor	CVE-2017-0116Proof of concept	Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive microsoft · windows 7 · CWE-200 Pre-auth Info leak	Medium4.3	—	22.4%	Mar 16, 2017
24Monitor	CVE-2017-0117Proof of concept	Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive microsoft · windows 7 · CWE-200 Pre-auth Info leak	Medium4.3	—	22.4%	Mar 16, 2017
24Monitor	CVE-2017-0118Proof of concept	Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Wmicrosoft · windows 10 · CWE-200 Pre-auth Info leak	Medium4.3	—	22.9%	Mar 16, 2017
24Monitor	CVE-2017-0119Proof of concept	Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive microsoft · windows 7 · CWE-200 Pre-auth Info leak	Medium4.3	—	22.4%	Mar 16, 2017
24Monitor	CVE-2017-0120Proof of concept	Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive microsoft · windows 7 · CWE-200 Pre-auth Info leak	Medium4.3	—	22.0%	Mar 16, 2017
30Monitor	CVE-2017-0121Proof of concept	Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Wmicrosoft · windows 10 · CWE-200 Pre-auth Info leak	Medium4.3	—	42.1%	Mar 16, 2017
24Monitor	CVE-2017-0122Proof of concept	Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive microsoft · windows 7 · CWE-200 Pre-auth Info leak	Medium4.3	—	22.4%	Mar 16, 2017
24Monitor	CVE-2017-0123Proof of concept	Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive microsoft · windows 7 · CWE-200 Pre-auth Info leak	Medium4.3	—	22.4%	Mar 16, 2017

CVE-2017-6403
47Plan
An issue was discovered in Veritas NetBackup Before 8.0 and NetBackup Appliance Before 3.0.
CriticalCVSS 9.8No exploitEPSS 26%
- Pre-auth
- Hard-coded credentials
veritas · netbackupMar 2, 2017
CVE-2015-8813
35Monitor
The Page_Load function in Umbraco.Web/umbraco.presentation/umbraco/dashboard/FeedProxy.aspx.cs in Umbraco before 7.4.0 allows remote attacke
HighCVSS 8.2Proof of conceptEPSS 11%
- Pre-auth
- SSRF
umbraco · umbracoMar 3, 2017
CVE-2016-6883
60This week
MatrixSSL before 3.8.3 configured with RSA Cipher Suites allows remote attackers to obtain sensitive information via a Bleichenbacher varian
MediumCVSS 5.9WeaponizedEPSS 13%
- Pre-auth
- Info leak
matrixssl · matrixsslMar 3, 2017
CVE-2016-7406
42Plan
Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via format string specifiers in
CriticalCVSS 9.8No exploitEPSS 10%
- pre-auth RCE
dropbear ssh project · dropbear sshMar 3, 2017
CVE-2017-6334
87Now
dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands
HighCVSS 8.8KEVWeaponizedEPSS 72%
- RCE
- Command injection
netgear · dgn2200 series firmwareMar 5, 2017
CVE-2017-6416
60This week
An issue was discovered in SysGauge 1.5.18.
CriticalCVSS 9.8WeaponizedEPSS 10%
- pre-auth RCE
- Memory safety
flexense · sysgaugeMar 5, 2017
CVE-2016-6255
38Monitor
Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a POST request without
HighCVSS 7.5Proof of conceptEPSS 26%
- Pre-auth
- Broken access control (IDOR)
debian · debian linuxMar 7, 2017
CVE-2017-5178
43Plan
An issue was discovered in Schneider Electric Tableau Server/Desktop Versions 7.0 to 10.1.3 in Wonderware Intelligence Versions 2014R3 and p
CriticalCVSS 9.8No exploitEPSS 13%
- Pre-auth
- Hard-coded credentials
schneider-electric · tableau desktopMar 8, 2017
CVE-2017-6548
45Plan
Buffer overflows in networkmap on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC
CriticalCVSS 9.8Proof of conceptEPSS 21%
- pre-auth RCE
- Memory safety
asus · rt-ac53 firmwareMar 9, 2017
CVE-2017-6558
44Plan
iball Baton 150M iB-WRA150N v1 00000001 1.2.6 build 110401 Rel.47776n devices are prone to an authentication bypass vulnerability that allow
CriticalCVSS 9.8Proof of conceptEPSS 15%
- Pre-auth
- Auth bypass
- Hard-coded credentials
iball · ib-wra150n firmwareMar 9, 2017
CVE-2017-6526
60This week
An issue was discovered in dnaTools dnaLIMS 4-2015s13.
CriticalCVSS 9.8WeaponizedEPSS 57%
- pre-auth RCE
- Auth bypass
dnatools · dnalimsMar 9, 2017
CVE-2017-6527
60This week
An issue was discovered in dnaTools dnaLIMS 4-2015s13.
HighCVSS 7.5WeaponizedEPSS 56%
- Pre-auth
- Path traversal
dnatools · dnalimsMar 9, 2017
CVE-2017-6465
60This week
Remote Code Execution was discovered in FTPShell Client 6.53.
CriticalCVSS 9.8WeaponizedEPSS 50%
- pre-auth RCE
- Memory safety
ftpshell · ftpshell clientMar 9, 2017
CVE-2017-6506
43Plan
In Azure Data Expert Ultimate 2.2.16, the SMTP verification function suffers from a buffer overflow vulnerability, leading to remote code ex
CriticalCVSS 9.8Proof of conceptEPSS 11%
- pre-auth RCE
- Memory safety
azure dex · data expert ultimateMar 10, 2017
CVE-2017-5638
99Now
The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-mes
CriticalCVSS 9.8KEVWeaponizedEPSS 99%
- pre-auth RCE
apache · strutsMar 10, 2017
CVE-2017-6444
34Monitor
The MikroTik Router hAP Lite 6.25 has no protection mechanism for unsolicited TCP ACK packets in the case of a fast network connection, whic
HighCVSS 7.5Proof of conceptEPSS 13%
- Pre-auth
- Denial of service
mikrotik · routerosMar 12, 2017
CVE-2017-5674
45Plan
A vulnerability in a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models allows an attacker
CriticalCVSS 9.8No exploitEPSS 21%
- Pre-auth
- Info leak
embedthis · goaheadMar 13, 2017
CVE-2013-4659
43Plan
Buffer overflow in Broadcom ACSD allows remote attackers to execute arbitrary code via a long string to TCP port 5916.
CriticalCVSS 9.8Proof of conceptEPSS 13%
- pre-auth RCE
- Memory safety
asus · rt-ac66u firmwareMar 14, 2017
CVE-2017-6398
51Plan
An issue was discovered in Trend Micro InterScan Messaging Security (Virtual Appliance) 9.1-1600.
HighCVSS 8.8WeaponizedEPSS 54%
- RCE
- Command injection
trendmicro · interscan messaging security virtual applianceMar 14, 2017
CVE-2017-6516
40Plan
A Local Privilege Escalation Vulnerability in MagniComp's Sysinfo before 10-H64 for Linux and UNIX platforms could allow a local attacker to
MediumCVSS 6.7WeaponizedEPSS 5%
- Local privilege escalation
magnicomp · sysinfoMar 14, 2017
CVE-2016-8020
35Monitor
Improper control of generation of code vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote a
HighCVSS 8.0Proof of conceptEPSS 11%
- RCE
mcafee · virusscan enterpriseMar 14, 2017
CVE-2016-8022
34Monitor
Authentication bypass by spoofing vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote unauth
HighCVSS 7.5Proof of conceptEPSS 13%
- pre-auth RCE
- Auth bypass
mcafee · virusscan enterpriseMar 14, 2017
CVE-2016-10166
42Plan
Integer underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.4 allows rem
CriticalCVSS 9.8No exploitEPSS 10%
- Pre-auth
- Memory safety
libgd · libgdMar 15, 2017
CVE-2017-5358
43Plan
Stack-based buffer overflows in php_Easycom5_3_0.dll in EasyCom for PHP 4.0.0.29 allows remote attackers to execute arbitrary code via the s
CriticalCVSS 9.8Proof of conceptEPSS 12%
- pre-auth RCE
- Memory safety
easycom-aura · easycom for phpMar 15, 2017
CVE-2016-7103
33Monitor
Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via
MediumCVSS 6.1No exploitEPSS 29%
- Pre-auth
- XSS
jqueryui · jquery uiMar 15, 2017
CVE-2017-6510
60This week
Easy File Sharing FTP Server version 3.6 is vulnerable to a directory traversal vulnerability which allows an attacker to list and download
HighCVSS 7.5WeaponizedEPSS 15%
- Pre-auth
- Path traversal
efssoft · easy file sharing ftp serverMar 16, 2017
CVE-2017-0001
62This week
The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
HighCVSS 7.8KEVWeaponizedEPSS 3%
- Local privilege escalation
microsoft · windows 10 1507Mar 16, 2017
CVE-2017-0005
64This week
The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
HighCVSS 7.8KEVWeaponizedEPSS 11%
- Local privilege escalation
microsoft · windows 10 1507Mar 16, 2017
CVE-2017-0006
36Monitor
Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attacke
HighCVSS 7.8No exploitEPSS 16%
- RCE
- Memory safety
microsoft · excelMar 16, 2017
CVE-2017-0007
25Monitor
Device Guard in Microsoft Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows remote attackers to modify PowerShell script without i
MediumCVSS 5.5No exploitEPSS 11%
microsoft · windows 10Mar 16, 2017
CVE-2017-0008
28Monitor
Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site,
MediumCVSS 4.3No exploitEPSS 36%
- Pre-auth
- Info leak
microsoft · internet explorerMar 16, 2017
CVE-2017-0009
29Monitor
Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site,
MediumCVSS 4.3No exploitEPSS 39%
- Pre-auth
- Info leak
microsoft · internet explorerMar 16, 2017
CVE-2017-0010
38Monitor
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micro
HighCVSS 7.5No exploitEPSS 27%
- pre-auth RCE
microsoft · edgeMar 16, 2017
CVE-2017-0011
30Monitor
Microsoft Edge allows remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Edge Information Disclosure Vu
MediumCVSS 4.3No exploitEPSS 42%
- Pre-auth
- Info leak
microsoft · edgeMar 16, 2017
CVE-2017-0014
35Monitor
The Windows Graphics Component in Microsoft Office 2010 SP2; Windows Server 2008 R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gol
HighCVSS 7.5No exploitEPSS 17%
- pre-auth RCE
microsoft · officeMar 16, 2017
CVE-2017-0015
38Monitor
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micro
HighCVSS 7.5No exploitEPSS 26%
- pre-auth RCE
- Memory safety
microsoft · edgeMar 16, 2017
CVE-2017-0016
31Monitor
Microsoft Windows 10 Gold, 1511, and 1607; Windows 8.1; Windows RT 8.1; Windows Server 2012 R2, and Windows Server 2016 do not properly hand
MediumCVSS 5.9No exploitEPSS 25%
- pre-auth RCE
- Memory safety
- Denial of service
microsoft · windows 10Mar 16, 2017
CVE-2017-0017
37Monitor
The RegEx class in the XSS filter in Microsoft Edge allows remote attackers to conduct cross-site scripting (XSS) attacks and obtain sensiti
MediumCVSS 6.1No exploitEPSS 41%
- Pre-auth
- XSS
microsoft · edgeMar 16, 2017
CVE-2017-0018
34Monitor
Microsoft Internet Explorer 10 and 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via
HighCVSS 7.5No exploitEPSS 13%
- pre-auth RCE
- Memory safety
microsoft · internet explorerMar 16, 2017
CVE-2017-0019
36Monitor
Microsoft Word 2016 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted documen
HighCVSS 7.8No exploitEPSS 16%
- RCE
- Memory safety
microsoft · wordMar 16, 2017
CVE-2017-0020
36Monitor
Microsoft Excel 2016, Excel 2010 SP2, Excel 2013 RT SP1, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary cod
HighCVSS 7.8No exploitEPSS 16%
- RCE
- Memory safety
microsoft · excelMar 16, 2017
CVE-2017-0022
61This week
Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2
MediumCVSS 6.5KEVWeaponizedEPSS 18%
- Pre-auth
- Memory safety
microsoft · xml core servicesMar 16, 2017
CVE-2017-0023
40Plan
The PDF library in Microsoft Edge; Windows 8.1; Windows Server 2012 and R2; Windows RT 8.1; and Windows 10, 1511, and 1607 allows remote att
HighCVSS 7.5No exploitEPSS 34%
- pre-auth RCE
- Memory safety
microsoft · edgeMar 16, 2017
CVE-2017-0027
25Monitor
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Services on SharePoint Ser
MediumCVSS 4.7No exploitEPSS 22%
- Info leak
microsoft · excelMar 16, 2017
CVE-2017-0029
27Monitor
Microsoft Office 2010 SP2, Word 2010 SP2, Word 2013 RT SP1, and Word 2016 allow remote attackers to cause a denial of service (application h
MediumCVSS 5.5No exploitEPSS 15%
- Denial of service
microsoft · officeMar 16, 2017
CVE-2017-0030
39Monitor
Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Office Web Apps Server 2010 SP2, Word 2007 SP3, Word 2010 SP2, and Word Automation
HighCVSS 7.8No exploitEPSS 25%
- RCE
- Memory safety
microsoft · officeMar 16, 2017
CVE-2017-0031
39Monitor
Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, and Word 2010 SP2 allow remote attackers to execute arbitrary code
HighCVSS 7.8No exploitEPSS 26%
- RCE
- Memory safety
microsoft · officeMar 16, 2017
CVE-2017-0032
35Monitor
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micro
HighCVSS 7.5No exploitEPSS 15%
- pre-auth RCE
- Memory safety
microsoft · edgeMar 16, 2017
CVE-2017-0034
34Monitor
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory.
HighCVSS 7.5No exploitEPSS 12%
- pre-auth RCE
- Memory safety
microsoft · edgeMar 16, 2017
CVE-2017-0035
35Monitor
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micro
HighCVSS 7.5No exploitEPSS 15%
- pre-auth RCE
- Memory safety
microsoft · edgeMar 16, 2017
CVE-2017-0039
42Plan
Microsoft Windows Vista SP2 and Server 2008 SP2 mishandle dynamic link library (DLL) loading, which allows local users to gain privileges vi
HighCVSS 7.8No exploitEPSS 37%
- RCE
- Local privilege escalation
microsoft · windows server 2008Mar 16, 2017
CVE-2017-0040
34Monitor
The scripting engine in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of serv
HighCVSS 7.5No exploitEPSS 13%
- pre-auth RCE
- Memory safety
microsoft · internet explorerMar 16, 2017
CVE-2017-0042
21Monitor
Windows Media Player in Microsoft Windows 8.1; Windows Server 2012 R2; Windows RT 8.1; Windows 7 SP1; Windows 2008 SP2 and R2 SP1, Windows S
LowCVSS 3.1No exploitEPSS 29%
- Pre-auth
- Info leak
microsoft · windows 10Mar 16, 2017
CVE-2017-0049
29Monitor
The VBScript engine in Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information from process memory via a craf
MediumCVSS 4.3No exploitEPSS 38%
- Pre-auth
- Info leak
microsoft · internet explorerMar 16, 2017
CVE-2017-0052
36Monitor
Microsoft Office Compatibility Pack SP3, Excel 2007 SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attacke
HighCVSS 7.8No exploitEPSS 16%
- RCE
- Memory safety
microsoft · excelMar 16, 2017
CVE-2017-0053
36Monitor
Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, Word 2010 SP2, Word 2013 SP1, Word 2013 R2 SP1, Word 2016, and Word
HighCVSS 7.8No exploitEPSS 16%
- RCE
- Memory safety
microsoft · officeMar 16, 2017
CVE-2017-0055
29Monitor
Microsoft Internet Information Server (IIS) in Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server
MediumCVSS 6.1Proof of conceptEPSS 16%
- Pre-auth
- XSS
microsoft · windows 10Mar 16, 2017
CVE-2017-0057
21Monitor
DNS client in Microsoft Windows 8.1; Windows Server 2012 R2, Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 fails
MediumCVSS 4.3No exploitEPSS 13%
- Pre-auth
- Info leak
microsoft · windows 10Mar 16, 2017
CVE-2017-0059
66This week
Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site,
MediumCVSS 4.3KEVWeaponizedEPSS 61%
- Pre-auth
microsoft · internet explorerMar 16, 2017
CVE-2017-0060
27Monitor
The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
MediumCVSS 5.5Proof of conceptEPSS 15%
- Info leak
microsoft · live meetingMar 16, 2017
CVE-2017-0061
34Monitor
The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2, Windows Server 2008 SP2 and R2, and Windows 7 SP
MediumCVSS 5.3Proof of conceptEPSS 43%
- Pre-auth
- Info leak
microsoft · windows 7Mar 16, 2017
CVE-2017-0062
23Monitor
The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
MediumCVSS 4.7Proof of conceptEPSS 17%
- Info leak
microsoft · windows 10Mar 16, 2017
CVE-2017-0063
37Monitor
The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2; Windows Server 2008 SP2 and R2; and Windows 7 SP
MediumCVSS 6.5Proof of conceptEPSS 35%
- Pre-auth
- Info leak
microsoft · windows 10Mar 16, 2017
CVE-2017-0065
25Monitor
Microsoft Edge allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Microsoft Browser In
MediumCVSS 4.3Proof of conceptEPSS 27%
- Pre-auth
- Info leak
microsoft · edgeMar 16, 2017
CVE-2017-0066
25Monitor
Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka "Microsoft Edge Secu
MediumCVSS 4.2No exploitEPSS 29%
- Pre-auth
microsoft · edgeMar 16, 2017
CVE-2017-0067
35Monitor
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micro
HighCVSS 7.5No exploitEPSS 15%
- pre-auth RCE
- Memory safety
microsoft · edgeMar 16, 2017
CVE-2017-0068
22Monitor
Browsers in Microsoft Edge allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Microsoft
MediumCVSS 4.3No exploitEPSS 15%
- Pre-auth
- Info leak
microsoft · edgeMar 16, 2017
CVE-2017-0070
54Plan
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micro
HighCVSS 7.5Proof of conceptEPSS 78%
- pre-auth RCE
- Memory safety
microsoft · edgeMar 16, 2017
CVE-2017-0071
40Plan
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micro
HighCVSS 7.5No exploitEPSS 31%
- pre-auth RCE
- Memory safety
microsoft · edgeMar 16, 2017
CVE-2017-0072
48Plan
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary
HighCVSS 8.8Proof of conceptEPSS 42%
- pre-auth RCE
- Memory safety
microsoft · windows 7Mar 16, 2017
CVE-2017-0073
27Monitor
The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
MediumCVSS 4.3No exploitEPSS 33%
- Pre-auth
- Info leak
microsoft · live meetingMar 16, 2017
CVE-2017-0075
34Monitor
Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows
HighCVSS 7.6Proof of conceptEPSS 12%
- RCE
microsoft · windows 10Mar 16, 2017
CVE-2017-0083
48Plan
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary
HighCVSS 8.8Proof of conceptEPSS 42%
- pre-auth RCE
- Memory safety
microsoft · windows 7Mar 16, 2017
CVE-2017-0084
46Plan
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, W
HighCVSS 8.8Proof of conceptEPSS 36%
- pre-auth RCE
- Memory safety
microsoft · windows 10Mar 16, 2017
CVE-2017-0085
24Monitor
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive
MediumCVSS 4.3Proof of conceptEPSS 22%
- Pre-auth
- Info leak
microsoft · windows 7Mar 16, 2017
CVE-2017-0086
48Plan
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary
HighCVSS 8.8Proof of conceptEPSS 42%
- pre-auth RCE
- Memory safety
microsoft · windows 7Mar 16, 2017
CVE-2017-0087
48Plan
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary
HighCVSS 8.8Proof of conceptEPSS 42%
- pre-auth RCE
- Memory safety
microsoft · windows 7Mar 16, 2017
CVE-2017-0088
48Plan
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary
HighCVSS 8.8Proof of conceptEPSS 41%
- pre-auth RCE
- Memory safety
microsoft · windows 7Mar 16, 2017
CVE-2017-0089
52Plan
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary
HighCVSS 8.8Proof of conceptEPSS 57%
- pre-auth RCE
- Memory safety
microsoft · windows 7Mar 16, 2017
CVE-2017-0090
48Plan
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary
HighCVSS 8.8Proof of conceptEPSS 42%
- pre-auth RCE
- Memory safety
microsoft · windows 7Mar 16, 2017
CVE-2017-0091
24Monitor
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive
MediumCVSS 4.3Proof of conceptEPSS 22%
- Pre-auth
- Info leak
microsoft · windows 7Mar 16, 2017
CVE-2017-0092
24Monitor
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive
MediumCVSS 4.3Proof of conceptEPSS 22%
- Pre-auth
- Info leak
microsoft · windows 7Mar 16, 2017
CVE-2017-0094
40Plan
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micro
HighCVSS 7.5No exploitEPSS 31%
- pre-auth RCE
- Memory safety
microsoft · edgeMar 16, 2017
CVE-2017-0101
78This week
The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, W
HighCVSS 7.8KEVWeaponizedEPSS 57%
- Local privilege escalation
- Memory safety
microsoft · windows 7Mar 16, 2017
CVE-2017-0104
36Monitor
The iSNS Server service in Microsoft Windows Server 2008 SP2 and R2, Windows Server 2012 Gold and R2, and Windows Server 2016 allows remote
HighCVSS 8.1No exploitEPSS 13%
- Pre-auth
- Memory safety
microsoft · windows server 2008Mar 16, 2017
CVE-2017-0105
31Monitor
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on Share
MediumCVSS 5.5No exploitEPSS 30%
- Info leak
microsoft · officeMar 16, 2017
CVE-2017-0108
46Plan
The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; L
HighCVSS 7.8Proof of conceptEPSS 50%
- RCE
- Memory safety
microsoft · live meetingMar 16, 2017
CVE-2017-0111
24Monitor
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive
MediumCVSS 4.3Proof of conceptEPSS 22%
- Pre-auth
- Info leak
microsoft · windows 7Mar 16, 2017
CVE-2017-0112
24Monitor
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive
MediumCVSS 4.3Proof of conceptEPSS 22%
- Pre-auth
- Info leak
microsoft · windows 7Mar 16, 2017
CVE-2017-0113
24Monitor
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive
MediumCVSS 4.3Proof of conceptEPSS 22%
- Pre-auth
- Info leak
microsoft · windows 7Mar 16, 2017
CVE-2017-0114
24Monitor
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive
MediumCVSS 4.3Proof of conceptEPSS 22%
- Pre-auth
- Info leak
microsoft · windows 7Mar 16, 2017
CVE-2017-0115
24Monitor
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive
MediumCVSS 4.3Proof of conceptEPSS 22%
- Pre-auth
- Info leak
microsoft · windows 7Mar 16, 2017
CVE-2017-0116
24Monitor
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive
MediumCVSS 4.3Proof of conceptEPSS 22%
- Pre-auth
- Info leak
microsoft · windows 7Mar 16, 2017
CVE-2017-0117
24Monitor
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive
MediumCVSS 4.3Proof of conceptEPSS 22%
- Pre-auth
- Info leak
microsoft · windows 7Mar 16, 2017
CVE-2017-0118
24Monitor
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, W
MediumCVSS 4.3Proof of conceptEPSS 22%
- Pre-auth
- Info leak
microsoft · windows 10Mar 16, 2017
CVE-2017-0119
24Monitor
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive
MediumCVSS 4.3Proof of conceptEPSS 22%
- Pre-auth
- Info leak
microsoft · windows 7Mar 16, 2017
CVE-2017-0120
24Monitor
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive
MediumCVSS 4.3Proof of conceptEPSS 22%
- Pre-auth
- Info leak
microsoft · windows 7Mar 16, 2017
CVE-2017-0121
30Monitor
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, W
MediumCVSS 4.3Proof of conceptEPSS 42%
- Pre-auth
- Info leak
microsoft · windows 10Mar 16, 2017
CVE-2017-0122
24Monitor
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive
MediumCVSS 4.3Proof of conceptEPSS 22%
- Pre-auth
- Info leak
microsoft · windows 7Mar 16, 2017
CVE-2017-0123
24Monitor
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive
MediumCVSS 4.3Proof of conceptEPSS 22%
- Pre-auth
- Info leak
microsoft · windows 7Mar 16, 2017