İçeriğe atla
Noroxi

Yayın tarihine göre

Mart 2017: sömürülen ve yeni ciddi CVE kayıtları

158 kayıt · 17 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 2

  • CVE-2017-6403
    47Planlayın

    An issue was discovered in Veritas NetBackup Before 8.0 and NetBackup Appliance Before 3.0.

    KritikCVSS 9,8İstismar yokEPSS %26

    veritas · netbackup2 Mar 2017

  • CVE-2015-8813
    35İzleyin

    The Page_Load function in Umbraco.Web/umbraco.presentation/umbraco/dashboard/FeedProxy.aspx.cs in Umbraco before 7.4.0 allows remote attacke

    YüksekCVSS 8,2Kavram kanıtıEPSS %11

    umbraco · umbraco3 Mar 2017

  • CVE-2016-6883
    60Bu hafta

    MatrixSSL before 3.8.3 configured with RSA Cipher Suites allows remote attackers to obtain sensitive information via a Bleichenbacher varian

    OrtaCVSS 5,9SilahlaştırılmışEPSS %13

    matrixssl · matrixssl3 Mar 2017

  • CVE-2016-7406
    42Planlayın

    Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via format string specifiers in

    KritikCVSS 9,8İstismar yokEPSS %10

    dropbear ssh project · dropbear ssh3 Mar 2017

  • CVE-2017-6334
    87Hemen

    dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %72

    netgear · dgn2200 series firmware5 Mar 2017

  • CVE-2017-6416
    60Bu hafta

    An issue was discovered in SysGauge 1.5.18.

    KritikCVSS 9,8SilahlaştırılmışEPSS %10

    flexense · sysgauge5 Mar 2017

  • CVE-2016-6255
    38İzleyin

    Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a POST request without

    YüksekCVSS 7,5Kavram kanıtıEPSS %26

    debian · debian linux7 Mar 2017

  • CVE-2017-5178
    43Planlayın

    An issue was discovered in Schneider Electric Tableau Server/Desktop Versions 7.0 to 10.1.3 in Wonderware Intelligence Versions 2014R3 and p

    KritikCVSS 9,8İstismar yokEPSS %13

    schneider-electric · tableau desktop8 Mar 2017

  • CVE-2017-6548
    45Planlayın

    Buffer overflows in networkmap on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC

    KritikCVSS 9,8Kavram kanıtıEPSS %21

    asus · rt-ac53 firmware9 Mar 2017

  • CVE-2017-6558
    44Planlayın

    iball Baton 150M iB-WRA150N v1 00000001 1.2.6 build 110401 Rel.47776n devices are prone to an authentication bypass vulnerability that allow

    KritikCVSS 9,8Kavram kanıtıEPSS %15

    iball · ib-wra150n firmware9 Mar 2017

  • CVE-2017-6526
    60Bu hafta

    An issue was discovered in dnaTools dnaLIMS 4-2015s13.

    KritikCVSS 9,8SilahlaştırılmışEPSS %57

    dnatools · dnalims9 Mar 2017

  • CVE-2017-6527
    60Bu hafta

    An issue was discovered in dnaTools dnaLIMS 4-2015s13.

    YüksekCVSS 7,5SilahlaştırılmışEPSS %56

    dnatools · dnalims9 Mar 2017

  • CVE-2017-6465
    60Bu hafta

    Remote Code Execution was discovered in FTPShell Client 6.53.

    KritikCVSS 9,8SilahlaştırılmışEPSS %50

    ftpshell · ftpshell client9 Mar 2017

  • CVE-2017-6506
    43Planlayın

    In Azure Data Expert Ultimate 2.2.16, the SMTP verification function suffers from a buffer overflow vulnerability, leading to remote code ex

    KritikCVSS 9,8Kavram kanıtıEPSS %11

    azure dex · data expert ultimate10 Mar 2017

  • CVE-2017-5638
    99Hemen

    The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-mes

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    apache · struts10 Mar 2017

  • CVE-2017-6444
    34İzleyin

    The MikroTik Router hAP Lite 6.25 has no protection mechanism for unsolicited TCP ACK packets in the case of a fast network connection, whic

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    mikrotik · routeros12 Mar 2017

  • CVE-2017-5674
    45Planlayın

    A vulnerability in a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models allows an attacker

    KritikCVSS 9,8İstismar yokEPSS %21

    embedthis · goahead13 Mar 2017

  • CVE-2013-4659
    43Planlayın

    Buffer overflow in Broadcom ACSD allows remote attackers to execute arbitrary code via a long string to TCP port 5916.

    KritikCVSS 9,8Kavram kanıtıEPSS %13

    asus · rt-ac66u firmware14 Mar 2017

  • CVE-2017-6398
    51Planlayın

    An issue was discovered in Trend Micro InterScan Messaging Security (Virtual Appliance) 9.1-1600.

    YüksekCVSS 8,8SilahlaştırılmışEPSS %54

    trendmicro · interscan messaging security virtual appliance14 Mar 2017

  • CVE-2017-6516
    40Planlayın

    A Local Privilege Escalation Vulnerability in MagniComp's Sysinfo before 10-H64 for Linux and UNIX platforms could allow a local attacker to

    OrtaCVSS 6,7SilahlaştırılmışEPSS %5

    magnicomp · sysinfo14 Mar 2017

  • CVE-2016-8020
    35İzleyin

    Improper control of generation of code vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote a

    YüksekCVSS 8,0Kavram kanıtıEPSS %11

    mcafee · virusscan enterprise14 Mar 2017

  • CVE-2016-8022
    34İzleyin

    Authentication bypass by spoofing vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote unauth

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    mcafee · virusscan enterprise14 Mar 2017

  • CVE-2016-10166
    42Planlayın

    Integer underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.4 allows rem

    KritikCVSS 9,8İstismar yokEPSS %10

    libgd · libgd15 Mar 2017

  • CVE-2017-5358
    43Planlayın

    Stack-based buffer overflows in php_Easycom5_3_0.dll in EasyCom for PHP 4.0.0.29 allows remote attackers to execute arbitrary code via the s

    KritikCVSS 9,8Kavram kanıtıEPSS %12

    easycom-aura · easycom for php15 Mar 2017

  • CVE-2016-7103
    33İzleyin

    Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via

    OrtaCVSS 6,1İstismar yokEPSS %29

    jqueryui · jquery ui15 Mar 2017

  • CVE-2017-6510
    60Bu hafta

    Easy File Sharing FTP Server version 3.6 is vulnerable to a directory traversal vulnerability which allows an attacker to list and download

    YüksekCVSS 7,5SilahlaştırılmışEPSS %15

    efssoft · easy file sharing ftp server16 Mar 2017

  • CVE-2017-0001
    62Bu hafta

    The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %3

    microsoft · windows 10 150716 Mar 2017

  • CVE-2017-0005
    64Bu hafta

    The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %11

    microsoft · windows 10 150716 Mar 2017

  • CVE-2017-0006
    36İzleyin

    Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attacke

    YüksekCVSS 7,8İstismar yokEPSS %16

    microsoft · excel16 Mar 2017

  • CVE-2017-0007
    25İzleyin

    Device Guard in Microsoft Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows remote attackers to modify PowerShell script without i

    OrtaCVSS 5,5İstismar yokEPSS %11

    microsoft · windows 1016 Mar 2017

  • CVE-2017-0008
    28İzleyin

    Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site,

    OrtaCVSS 4,3İstismar yokEPSS %36

    microsoft · internet explorer16 Mar 2017

  • CVE-2017-0009
    29İzleyin

    Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site,

    OrtaCVSS 4,3İstismar yokEPSS %39

    microsoft · internet explorer16 Mar 2017

  • CVE-2017-0010
    38İzleyin

    A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micro

    YüksekCVSS 7,5İstismar yokEPSS %27

    microsoft · edge16 Mar 2017

  • CVE-2017-0011
    30İzleyin

    Microsoft Edge allows remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Edge Information Disclosure Vu

    OrtaCVSS 4,3İstismar yokEPSS %42

    microsoft · edge16 Mar 2017

  • CVE-2017-0014
    35İzleyin

    The Windows Graphics Component in Microsoft Office 2010 SP2; Windows Server 2008 R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gol

    YüksekCVSS 7,5İstismar yokEPSS %17

    microsoft · office16 Mar 2017

  • CVE-2017-0015
    38İzleyin

    A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micro

    YüksekCVSS 7,5İstismar yokEPSS %26

    microsoft · edge16 Mar 2017

  • CVE-2017-0016
    31İzleyin

    Microsoft Windows 10 Gold, 1511, and 1607; Windows 8.1; Windows RT 8.1; Windows Server 2012 R2, and Windows Server 2016 do not properly hand

    OrtaCVSS 5,9İstismar yokEPSS %25

    microsoft · windows 1016 Mar 2017

  • CVE-2017-0017
    37İzleyin

    The RegEx class in the XSS filter in Microsoft Edge allows remote attackers to conduct cross-site scripting (XSS) attacks and obtain sensiti

    OrtaCVSS 6,1İstismar yokEPSS %41

    microsoft · edge16 Mar 2017

  • CVE-2017-0018
    34İzleyin

    Microsoft Internet Explorer 10 and 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    YüksekCVSS 7,5İstismar yokEPSS %13

    microsoft · internet explorer16 Mar 2017

  • CVE-2017-0019
    36İzleyin

    Microsoft Word 2016 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted documen

    YüksekCVSS 7,8İstismar yokEPSS %16

    microsoft · word16 Mar 2017

  • CVE-2017-0020
    36İzleyin

    Microsoft Excel 2016, Excel 2010 SP2, Excel 2013 RT SP1, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary cod

    YüksekCVSS 7,8İstismar yokEPSS %16

    microsoft · excel16 Mar 2017

  • CVE-2017-0022
    61Bu hafta

    Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2

    OrtaCVSS 6,5KEVSilahlaştırılmışEPSS %18

    microsoft · xml core services16 Mar 2017

  • CVE-2017-0023
    40Planlayın

    The PDF library in Microsoft Edge; Windows 8.1; Windows Server 2012 and R2; Windows RT 8.1; and Windows 10, 1511, and 1607 allows remote att

    YüksekCVSS 7,5İstismar yokEPSS %34

    microsoft · edge16 Mar 2017

  • CVE-2017-0027
    25İzleyin

    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Services on SharePoint Ser

    OrtaCVSS 4,7İstismar yokEPSS %22

    microsoft · excel16 Mar 2017

  • CVE-2017-0029
    27İzleyin

    Microsoft Office 2010 SP2, Word 2010 SP2, Word 2013 RT SP1, and Word 2016 allow remote attackers to cause a denial of service (application h

    OrtaCVSS 5,5İstismar yokEPSS %15

    microsoft · office16 Mar 2017

  • CVE-2017-0030
    39İzleyin

    Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Office Web Apps Server 2010 SP2, Word 2007 SP3, Word 2010 SP2, and Word Automation

    YüksekCVSS 7,8İstismar yokEPSS %25

    microsoft · office16 Mar 2017

  • CVE-2017-0031
    39İzleyin

    Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, and Word 2010 SP2 allow remote attackers to execute arbitrary code

    YüksekCVSS 7,8İstismar yokEPSS %26

    microsoft · office16 Mar 2017

  • CVE-2017-0032
    35İzleyin

    A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micro

    YüksekCVSS 7,5İstismar yokEPSS %15

    microsoft · edge16 Mar 2017

  • CVE-2017-0034
    34İzleyin

    A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory.

    YüksekCVSS 7,5İstismar yokEPSS %12

    microsoft · edge16 Mar 2017

  • CVE-2017-0035
    35İzleyin

    A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micro

    YüksekCVSS 7,5İstismar yokEPSS %15

    microsoft · edge16 Mar 2017

  • CVE-2017-0039
    42Planlayın

    Microsoft Windows Vista SP2 and Server 2008 SP2 mishandle dynamic link library (DLL) loading, which allows local users to gain privileges vi

    YüksekCVSS 7,8İstismar yokEPSS %37

    microsoft · windows server 200816 Mar 2017

  • CVE-2017-0040
    34İzleyin

    The scripting engine in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of serv

    YüksekCVSS 7,5İstismar yokEPSS %13

    microsoft · internet explorer16 Mar 2017

  • CVE-2017-0042
    21İzleyin

    Windows Media Player in Microsoft Windows 8.1; Windows Server 2012 R2; Windows RT 8.1; Windows 7 SP1; Windows 2008 SP2 and R2 SP1, Windows S

    DüşükCVSS 3,1İstismar yokEPSS %29

    microsoft · windows 1016 Mar 2017

  • CVE-2017-0049
    29İzleyin

    The VBScript engine in Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information from process memory via a craf

    OrtaCVSS 4,3İstismar yokEPSS %38

    microsoft · internet explorer16 Mar 2017

  • CVE-2017-0052
    36İzleyin

    Microsoft Office Compatibility Pack SP3, Excel 2007 SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attacke

    YüksekCVSS 7,8İstismar yokEPSS %16

    microsoft · excel16 Mar 2017

  • CVE-2017-0053
    36İzleyin

    Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, Word 2010 SP2, Word 2013 SP1, Word 2013 R2 SP1, Word 2016, and Word

    YüksekCVSS 7,8İstismar yokEPSS %16

    microsoft · office16 Mar 2017

  • CVE-2017-0055
    29İzleyin

    Microsoft Internet Information Server (IIS) in Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server

    OrtaCVSS 6,1Kavram kanıtıEPSS %16

    microsoft · windows 1016 Mar 2017

  • CVE-2017-0057
    21İzleyin

    DNS client in Microsoft Windows 8.1; Windows Server 2012 R2, Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 fails

    OrtaCVSS 4,3İstismar yokEPSS %13

    microsoft · windows 1016 Mar 2017

  • CVE-2017-0059
    66Bu hafta

    Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site,

    OrtaCVSS 4,3KEVSilahlaştırılmışEPSS %61

    microsoft · internet explorer16 Mar 2017

  • CVE-2017-0060
    27İzleyin

    The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

    OrtaCVSS 5,5Kavram kanıtıEPSS %15

    microsoft · live meeting16 Mar 2017

  • CVE-2017-0061
    34İzleyin

    The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2, Windows Server 2008 SP2 and R2, and Windows 7 SP

    OrtaCVSS 5,3Kavram kanıtıEPSS %43

    microsoft · windows 716 Mar 2017

  • CVE-2017-0062
    23İzleyin

    The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

    OrtaCVSS 4,7Kavram kanıtıEPSS %17

    microsoft · windows 1016 Mar 2017

  • CVE-2017-0063
    37İzleyin

    The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2; Windows Server 2008 SP2 and R2; and Windows 7 SP

    OrtaCVSS 6,5Kavram kanıtıEPSS %35

    microsoft · windows 1016 Mar 2017

  • CVE-2017-0065
    25İzleyin

    Microsoft Edge allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Microsoft Browser In

    OrtaCVSS 4,3Kavram kanıtıEPSS %27

    microsoft · edge16 Mar 2017

  • CVE-2017-0066
    25İzleyin

    Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka "Microsoft Edge Secu

    OrtaCVSS 4,2İstismar yokEPSS %29

    microsoft · edge16 Mar 2017

  • CVE-2017-0067
    35İzleyin

    A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micro

    YüksekCVSS 7,5İstismar yokEPSS %15

    microsoft · edge16 Mar 2017

  • CVE-2017-0068
    22İzleyin

    Browsers in Microsoft Edge allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Microsoft

    OrtaCVSS 4,3İstismar yokEPSS %15

    microsoft · edge16 Mar 2017

  • CVE-2017-0070
    54Planlayın

    A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micro

    YüksekCVSS 7,5Kavram kanıtıEPSS %78

    microsoft · edge16 Mar 2017

  • CVE-2017-0071
    40Planlayın

    A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micro

    YüksekCVSS 7,5İstismar yokEPSS %31

    microsoft · edge16 Mar 2017

  • CVE-2017-0072
    48Planlayın

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary

    YüksekCVSS 8,8Kavram kanıtıEPSS %42

    microsoft · windows 716 Mar 2017

  • CVE-2017-0073
    27İzleyin

    The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

    OrtaCVSS 4,3İstismar yokEPSS %33

    microsoft · live meeting16 Mar 2017

  • CVE-2017-0075
    34İzleyin

    Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows

    YüksekCVSS 7,6Kavram kanıtıEPSS %12

    microsoft · windows 1016 Mar 2017

  • CVE-2017-0083
    48Planlayın

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary

    YüksekCVSS 8,8Kavram kanıtıEPSS %42

    microsoft · windows 716 Mar 2017

  • CVE-2017-0084
    46Planlayın

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, W

    YüksekCVSS 8,8Kavram kanıtıEPSS %36

    microsoft · windows 1016 Mar 2017

  • CVE-2017-0085
    24İzleyin

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive

    OrtaCVSS 4,3Kavram kanıtıEPSS %22

    microsoft · windows 716 Mar 2017

  • CVE-2017-0086
    48Planlayın

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary

    YüksekCVSS 8,8Kavram kanıtıEPSS %42

    microsoft · windows 716 Mar 2017

  • CVE-2017-0087
    48Planlayın

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary

    YüksekCVSS 8,8Kavram kanıtıEPSS %42

    microsoft · windows 716 Mar 2017

  • CVE-2017-0088
    48Planlayın

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary

    YüksekCVSS 8,8Kavram kanıtıEPSS %41

    microsoft · windows 716 Mar 2017

  • CVE-2017-0089
    52Planlayın

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary

    YüksekCVSS 8,8Kavram kanıtıEPSS %57

    microsoft · windows 716 Mar 2017

  • CVE-2017-0090
    48Planlayın

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary

    YüksekCVSS 8,8Kavram kanıtıEPSS %42

    microsoft · windows 716 Mar 2017

  • CVE-2017-0091
    24İzleyin

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive

    OrtaCVSS 4,3Kavram kanıtıEPSS %22

    microsoft · windows 716 Mar 2017

  • CVE-2017-0092
    24İzleyin

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive

    OrtaCVSS 4,3Kavram kanıtıEPSS %22

    microsoft · windows 716 Mar 2017

  • CVE-2017-0094
    40Planlayın

    A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micro

    YüksekCVSS 7,5İstismar yokEPSS %31

    microsoft · edge16 Mar 2017

  • CVE-2017-0101
    78Bu hafta

    The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, W

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %57

    microsoft · windows 716 Mar 2017

  • CVE-2017-0104
    36İzleyin

    The iSNS Server service in Microsoft Windows Server 2008 SP2 and R2, Windows Server 2012 Gold and R2, and Windows Server 2016 allows remote

    YüksekCVSS 8,1İstismar yokEPSS %13

    microsoft · windows server 200816 Mar 2017

  • CVE-2017-0105
    31İzleyin

    Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on Share

    OrtaCVSS 5,5İstismar yokEPSS %30

    microsoft · office16 Mar 2017

  • CVE-2017-0108
    46Planlayın

    The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; L

    YüksekCVSS 7,8Kavram kanıtıEPSS %50

    microsoft · live meeting16 Mar 2017

  • CVE-2017-0111
    24İzleyin

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive

    OrtaCVSS 4,3Kavram kanıtıEPSS %22

    microsoft · windows 716 Mar 2017

  • CVE-2017-0112
    24İzleyin

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive

    OrtaCVSS 4,3Kavram kanıtıEPSS %22

    microsoft · windows 716 Mar 2017

  • CVE-2017-0113
    24İzleyin

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive

    OrtaCVSS 4,3Kavram kanıtıEPSS %22

    microsoft · windows 716 Mar 2017

  • CVE-2017-0114
    24İzleyin

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive

    OrtaCVSS 4,3Kavram kanıtıEPSS %22

    microsoft · windows 716 Mar 2017

  • CVE-2017-0115
    24İzleyin

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive

    OrtaCVSS 4,3Kavram kanıtıEPSS %22

    microsoft · windows 716 Mar 2017

  • CVE-2017-0116
    24İzleyin

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive

    OrtaCVSS 4,3Kavram kanıtıEPSS %22

    microsoft · windows 716 Mar 2017

  • CVE-2017-0117
    24İzleyin

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive

    OrtaCVSS 4,3Kavram kanıtıEPSS %22

    microsoft · windows 716 Mar 2017

  • CVE-2017-0118
    24İzleyin

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, W

    OrtaCVSS 4,3Kavram kanıtıEPSS %22

    microsoft · windows 1016 Mar 2017

  • CVE-2017-0119
    24İzleyin

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive

    OrtaCVSS 4,3Kavram kanıtıEPSS %22

    microsoft · windows 716 Mar 2017

  • CVE-2017-0120
    24İzleyin

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive

    OrtaCVSS 4,3Kavram kanıtıEPSS %22

    microsoft · windows 716 Mar 2017

  • CVE-2017-0121
    30İzleyin

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, W

    OrtaCVSS 4,3Kavram kanıtıEPSS %42

    microsoft · windows 1016 Mar 2017

  • CVE-2017-0122
    24İzleyin

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive

    OrtaCVSS 4,3Kavram kanıtıEPSS %22

    microsoft · windows 716 Mar 2017

  • CVE-2017-0123
    24İzleyin

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive

    OrtaCVSS 4,3Kavram kanıtıEPSS %22

    microsoft · windows 716 Mar 2017