VULN/vuln-microsoft
1
0
Fork 0
Code Pull Requests Actions Activity
Files
main
vuln-microsoft/data/cvrf/2017/2017-Dec.json
T

2 lines
495 KiB
JSON
Raw Permalink Blame History

This file contains invisible Unicode characters
This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<p>The December security release consists of security updates for the following software: </p>\n<ul>\n<li>Internet Explorer</li>\n<li>Microsoft Edge</li>\n<li>Microsoft Windows</li>\n<li>Microsoft Office and Microsoft Office Services and Web Apps</li>\n<li>Microsoft Exchange Server</li>\n<li>ChakraCore</li>\n<li>Microsoft Malware Protection Engine</li>\n</ul>\n<p>Please note the following information regarding the security updates:</p>\n<ul>\n<li>Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the <a href=\"http://catalog.update.microsoft.com/v7/site/Home.aspx\">Microsoft Update Catalog</a>.</li>\n<li>Starting in March 2017, a delta package will be available on the Microsoft Update Catalog for Windows 10 version 1607 and newer. This delta package contains just the delta changes between the previous month and the current release.</li>\n<li>Updates for Windows RT 8.1 and Microsoft Office RT software are only available via <a href=\"http://go.microsoft.com/fwlink/?LinkId=21130\">Windows Update</a>.</li>\n<li>In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.</li>\n<li>For information on lifecycle and support dates for Windows 10 operating systems, please see <a href=\"https://support.microsoft.com/en-us/help/13853/windows-lifecycle-fact-sheet\">Windows Lifecycle Facts Sheet</a>.</li>\n</ul>\n<p><strong>Known Issues</strong></p>\n<ul>\n<li><a href=\"https://support.microsoft.com/help/4036108\">4036108</a></li>\n<li><a href=\"https://support.microsoft.com/help/4045655\">4045655</a></li>\n<li><a href=\"https://support.microsoft.com/help/4054517\">4054517</a></li>\n<li><a href=\"https://support.microsoft.com/help/891716\">891716</a></li>\n</ul>\n"},{"Audience":"Public","Ordinal":"1","Title":"Legal Disclaimer","Type":5,"Value":"The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply."}],"DocumentPublisher":{"ContactDetails":{"Value":"secure@microsoft.com"},"IssuingAuthority":{"Value":"The Microsoft Security Response Center (MSRC) identifies, monitors, resolves, and responds to security incidents and Microsoft software security vulnerabilities. For more information, see http://www.microsoft.com/security/msrc."},"Type":0},"DocumentTitle":{"Value":"December 2017 Security Updates"},"DocumentTracking":{"CurrentReleaseDate":"2026-10-28T01:47:59","Identification":{"Alias":{"Value":"2017-Dec"},"ID":{"Value":"2017-Dec"}},"InitialReleaseDate":"2017-12-12T08:00:00","RevisionHistory":[{"Date":"2026-10-28T01:47:59","Description":{"Value":"December 2017 Security Updates"},"Number":"304"}],"Status":2,"Version":"1.0"},"DocumentType":{"Value":"Security Update"},"ProductTree":{"Branch":[{"Items":[{"Items":[{"ProductID":"10951","Value":"Windows 10 Version 1703 for 32-bit Systems"},{"ProductID":"10952","Value":"Windows 10 Version 1703 for x64-based Systems"},{"ProductID":"10729","Value":"Windows 10 for 32-bit Systems"},{"ProductID":"10735","Value":"Windows 10 for x64-based Systems"},{"ProductID":"10789","Value":"Windows 10 Version 1511 for 32-bit Systems"},{"ProductID":"10788","Value":"Windows 10 Version 1511 for x64-based Systems"},{"ProductID":"10852","Value":"Windows 10 Version 1607 for 32-bit Systems"},{"ProductID":"10853","Value":"Windows 10 Version 1607 for x64-based Systems"},{"ProductID":"10816","Value":"Windows Server 2016"},{"ProductID":"10855","Value":"Windows Server 2016 (Server Core installation)"},{"ProductID":"10481","Value":"Windows 8.1 for 32-bit systems"},{"ProductID":"10482","Value":"Windows 8.1 for x64-based systems"},{"ProductID":"10484","Value":"Windows RT 8.1"},{"ProductID":"10378","Value":"Windows Server 2012"},{"ProductID":"10379","Value":"Windows Server 2012 (Server Core installation)"},{"ProductID":"10483","Value":"Windows Server 2012 R2"},{"ProductID":"10543","Value":"Windows Server 2012 R2 (Server Core installation)"},{"ProductID":"11453","Value":"Windows 10 Version 1709 for 32-bit Systems"},{"ProductID":"11454","Value":"Windows 10 Version 1709 for x64-based Systems"},{"ProductID":"11466","Value":"Windows Server, version 1709 (Server Core Installation)"}],"Name":"Windows","Type":1},{"Items":[{"ProductID":"10047","Value":"Windows 7 for 32-bit Systems Service Pack 1"},{"ProductID":"10048","Value":"Windows 7 for x64-based Systems Service Pack 1"},{"ProductID":"10287","Value":"Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)"},{"ProductID":"9311","Value":"Windows Server 2008 for Itanium-Based Systems Service Pack 2"},{"ProductID":"9318","Value":"Windows Server 2008 for x64-based Systems Service Pack 2"},{"ProductID":"9344","Value":"Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)"},{"ProductID":"10050","Value":"Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1"},{"ProductID":"10051","Value":"Windows Server 2008 R2 for x64-based Systems Service Pack 1"},{"ProductID":"10049","Value":"Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"},{"ProductID":"10336-9312","Value":"Internet Explorer 9 on Windows Server 2008 for 32-bit Systems Service Pack 2"},{"ProductID":"10336-9318","Value":"Internet Explorer 9 on Windows Server 2008 for x64-based Systems Service Pack 2"},{"ProductID":"9312","Value":"Windows Server 2008 for 32-bit Systems Service Pack 2"}],"Name":"ESU","Type":1},{"Items":[{"ProductID":"11447","Value":"ChakraCore"},{"ProductID":"10724-10951","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for 32-bit Systems"},{"ProductID":"10724-10952","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for x64-based Systems"},{"ProductID":"10724-11453","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for 32-bit Systems"},{"ProductID":"10724-11454","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for x64-based Systems"},{"ProductID":"10724-10729","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems"},{"ProductID":"10724-10735","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems"},{"ProductID":"10724-10789","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for 32-bit Systems"},{"ProductID":"10724-10788","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for x64-based Systems"},{"ProductID":"10724-10852","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems"},{"ProductID":"10724-10853","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems"},{"ProductID":"10724-10816","Value":"Microsoft Edge (EdgeHTML-based) on Windows Server 2016"},{"ProductID":"10555-10378","Value":"Internet Explorer 10 on Windows Server 2012"},{"ProductID":"10486-10951","Value":"Internet Explorer 11 on Windows 10 Version 1703 for 32-bit Systems"},{"ProductID":"10486-10952","Value":"Internet Explorer 11 on Windows 10 Version 1703 for x64-based Systems"},{"ProductID":"10486-11453","Value":"Internet Explorer 11 on Windows 10 Version 1709 for 32-bit Systems"},{"ProductID":"10486-11454","Value":"Internet Explorer 11 on Windows 10 Version 1709 for x64-based Systems"},{"ProductID":"10486-10729","Value":"Internet Explorer 11 on Windows 10 for 32-bit Systems"},{"ProductID":"10486-10735","Value":"Internet Explorer 11 on Windows 10 for x64-based Systems"},{"ProductID":"10486-10789","Value":"Internet Explorer 11 on Windows 10 Version 1511 for 32-bit Systems"},{"ProductID":"10486-10788","Value":"Internet Explorer 11 on Windows 10 Version 1511 for x64-based Systems"},{"ProductID":"10486-10852","Value":"Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems"},{"ProductID":"10486-10853","Value":"Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems"},{"ProductID":"10486-10816","Value":"Internet Explorer 11 on Windows Server 2016"},{"ProductID":"10486-10047","Value":"Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1"},{"ProductID":"10486-10048","Value":"Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1"},{"ProductID":"10486-10481","Value":"Internet Explorer 11 on Windows 8.1 for 32-bit systems"},{"ProductID":"10486-10482","Value":"Internet Explorer 11 on Windows 8.1 for x64-based systems"},{"ProductID":"10486-10484","Value":"Internet Explorer 11 on Windows RT 8.1"},{"ProductID":"10486-10051","Value":"Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1"},{"ProductID":"10486-10483","Value":"Internet Explorer 11 on Windows Server 2012 R2"}],"Name":"Browser","Type":1},{"Items":[{"ProductID":"11450","Value":"Microsoft Exchange Server 2016 Cumulative Update 6"},{"ProductID":"11469","Value":"Microsoft Exchange Server 2016 Cumulative Update 7"},{"ProductID":"10804","Value":"Microsoft Exchange Server 2016"},{"ProductID":"10431","Value":"Microsoft Exchange Server 2013"},{"ProductID":"11449","Value":"Microsoft Exchange Server 2013 Cumulative Update 17"},{"ProductID":"11470","Value":"Microsoft Exchange Server 2013 Cumulative Update 18"}],"Name":"Exchange Server","Type":1},{"Items":[{"ProductID":"11431","Value":"Microsoft Forefront Endpoint Protection 2010"},{"ProductID":"11432","Value":"Microsoft System Center Endpoint Protection"},{"ProductID":"10013","Value":"Microsoft Security Essentials"},{"ProductID":"10334","Value":"Windows Intune Endpoint Protection"},{"ProductID":"251-10951","Value":"Windows Defender on Windows 10 Version 1703 for 32-bit Systems"},{"ProductID":"251-10952","Value":"Windows Defender on Windows 10 Version 1703 for x64-based Systems"},{"ProductID":"251-10729","Value":"Windows Defender on Windows 10 for 32-bit Systems"},{"ProductID":"251-10735","Value":"Windows Defender on Windows 10 for x64-based Systems"},{"ProductID":"251-10789","Value":"Windows Defender on Windows 10 Version 1511 for 32-bit Systems"},{"ProductID":"251-10788","Value":"Windows Defender on Windows 10 Version 1511 for x64-based Systems"},{"ProductID":"251-10852","Value":"Windows Defender on Windows 10 Version 1607 for 32-bit Systems"},{"ProductID":"251-10853","Value":"Windows Defender on Windows 10 Version 1607 for x64-based Systems"},{"ProductID":"251-10816","Value":"Windows Defender on Windows Server 2016"},{"ProductID":"251-10855","Value":"Windows Defender on Windows Server 2016 (Server Core installation)"},{"ProductID":"251-10047","Value":"Windows Defender on Windows 7 for 32-bit Systems Service Pack 1"},{"ProductID":"251-10048","Value":"Windows Defender on Windows 7 for x64-based Systems Service Pack 1"},{"ProductID":"251-10481","Value":"Windows Defender on Windows 8.1 for 32-bit systems"},{"ProductID":"251-10482","Value":"Windows Defender on Windows 8.1 for x64-based systems"},{"ProductID":"251-10484","Value":"Windows Defender on Windows RT 8.1"},{"ProductID":"251-11453","Value":"Windows Defender on Windows 10 Version 1709 for 32-bit Systems"},{"ProductID":"251-11454","Value":"Windows Defender on Windows 10 Version 1709 for x64-based Systems"},{"ProductID":"251-11466","Value":"Windows Defender on Windows Server, version 1709 (Server Core Installation)"}],"Name":"System Center","Type":1},{"Items":[{"ProductID":"10739","Value":"Microsoft Excel 2016 (32-bit edition)"},{"ProductID":"10740","Value":"Microsoft Excel 2016 (64-bit edition)"},{"ProductID":"10746","Value":"Microsoft Word 2016 (32-bit edition)"},{"ProductID":"10747","Value":"Microsoft Word 2016 (64-bit edition)"},{"ProductID":"10905","Value":"Microsoft Office 2016 Click-to-Run (C2R) for 32-bit editions"},{"ProductID":"10906","Value":"Microsoft Office 2016 Click-to-Run (C2R) for 64-bit editions"},{"ProductID":"10152","Value":"Microsoft Excel 2007 Service Pack 3"},{"ProductID":"10489","Value":"Microsoft Excel 2010 Service Pack 2 (32-bit editions)"},{"ProductID":"10490","Value":"Microsoft Excel 2010 Service Pack 2 (64-bit editions)"},{"ProductID":"10656","Value":"Microsoft Excel 2013 RT Service Pack 1"},{"ProductID":"10654","Value":"Microsoft Excel 2013 Service Pack 1 (32-bit editions)"},{"ProductID":"10655","Value":"Microsoft Excel 2013 Service Pack 1 (64-bit editions)"},{"ProductID":"10279","Value":"Microsoft Excel Viewer 2007 Service Pack 3"},{"ProductID":"10521","Value":"Microsoft Office 2010 Service Pack 2 (32-bit editions)"},{"ProductID":"10522","Value":"Microsoft Office 2010 Service Pack 2 (64-bit editions)"},{"ProductID":"4497","Value":"Microsoft Office Compatibility Pack Service Pack 3"},{"ProductID":"10162","Value":"Microsoft Word 2007 Service Pack 3"},{"ProductID":"10513","Value":"Microsoft Word 2010 Service Pack 2 (32-bit editions)"},{"ProductID":"10514","Value":"Microsoft Word 2010 Service Pack 2 (64-bit editions)"},{"ProductID":"10606","Value":"Microsoft Word 2013 RT Service Pack 1"},{"ProductID":"10604","Value":"Microsoft Word 2013 Service Pack 1 (32-bit editions)"},{"ProductID":"10605","Value":"Microsoft Word 2013 Service Pack 1 (64-bit editions)"},{"ProductID":"10753","Value":"Microsoft Office 2016 (32-bit edition)"},{"ProductID":"10754","Value":"Microsoft Office 2016 (64-bit edition)"},{"ProductID":"10734","Value":"Microsoft Office 2016 for Mac"},{"ProductID":"10603","Value":"Microsoft Office 2013 RT Service Pack 1"},{"ProductID":"10601","Value":"Microsoft Office 2013 Service Pack 1 (32-bit editions)"},{"ProductID":"10602","Value":"Microsoft Office 2013 Service Pack 1 (64-bit editions)"},{"ProductID":"10950","Value":"Microsoft SharePoint Enterprise Server 2016"}],"Name":"Microsoft Office","Type":1},{"Items":[{"ProductID":"10384-10951","Value":"Adobe Flash Player on Windows 10 Version 1703 for 32-bit Systems"},{"ProductID":"10384-10952","Value":"Adobe Flash Player on Windows 10 Version 1703 for x64-based Systems"},{"ProductID":"10384-11453","Value":"Adobe Flash Player on Windows 10 Version 1709 for 32-bit Systems"},{"ProductID":"10384-11454","Value":"Adobe Flash Player on Windows 10 Version 1709 for x64-based Systems"},{"ProductID":"10384-11466","Value":"Adobe Flash Player on Windows Server, version 1709 (Server Core Installation)"},{"ProductID":"10384-10729","Value":"Adobe Flash Player on Windows 10 for 32-bit Systems"},{"ProductID":"10384-10735","Value":"Adobe Flash Player on Windows 10 for x64-based Systems"},{"ProductID":"10384-10789","Value":"Adobe Flash Player on Windows 10 Version 1511 for 32-bit Systems"},{"ProductID":"10384-10788","Value":"Adobe Flash Player on Windows 10 Version 1511 for x64-based Systems"},{"ProductID":"10384-10852","Value":"Adobe Flash Player on Windows 10 Version 1607 for 32-bit Systems"},{"ProductID":"10384-10853","Value":"Adobe Flash Player on Windows 10 Version 1607 for x64-based Systems"},{"ProductID":"10384-10816","Value":"Adobe Flash Player on Windows Server 2016"},{"ProductID":"10384-10481","Value":"Adobe Flash Player on Windows 8.1 for 32-bit systems"},{"ProductID":"10384-10482","Value":"Adobe Flash Player on Windows 8.1 for x64-based systems"},{"ProductID":"10384-10484","Value":"Adobe Flash Player on Windows RT 8.1"},{"ProductID":"10384-10378","Value":"Adobe Flash Player on Windows Server 2012"},{"ProductID":"10384-10483","Value":"Adobe Flash Player on Windows Server 2012 R2"}],"Name":"Other","Type":1},{"Items":[{"ProductID":"16904-16820","Value":"cm1 python2 2.7.18-3 on CBL Mariner 1.0"},{"ProductID":"16905-16823","Value":"cbl2 python2 2.7.18-8 on CBL Mariner 2.0"}],"Name":"Mariner","Type":1}],"Name":"Microsoft","Type":0}],"FullProductName":[{"ProductID":"10013","Value":"Microsoft Security Essentials"},{"ProductID":"10047","Value":"Windows 7 for 32-bit Systems Service Pack 1"},{"ProductID":"10048","Value":"Windows 7 for x64-based Systems Service Pack 1"},{"ProductID":"10049","Value":"Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"},{"ProductID":"10050","Value":"Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1"},{"ProductID":"10051","Value":"Windows Server 2008 R2 for x64-based Systems Service Pack 1"},{"ProductID":"10152","Value":"Microsoft Excel 2007 Service Pack 3"},{"ProductID":"10162","Value":"Microsoft Word 2007 Service Pack 3"},{"ProductID":"10279","Value":"Microsoft Excel Viewer 2007 Service Pack 3"},{"ProductID":"10287","Value":"Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)"},{"ProductID":"10334","Value":"Windows Intune Endpoint Protection"},{"ProductID":"10336-9312","Value":"Internet Explorer 9 on Windows Server 2008 for 32-bit Systems Service Pack 2"},{"ProductID":"10336-9318","Value":"Internet Explorer 9 on Windows Server 2008 for x64-based Systems Service Pack 2"},{"ProductID":"10378","Value":"Windows Server 2012"},{"ProductID":"10379","Value":"Windows Server 2012 (Server Core installation)"},{"ProductID":"10384-10378","Value":"Adobe Flash Player on Windows Server 2012"},{"ProductID":"10384-10481","Value":"Adobe Flash Player on Windows 8.1 for 32-bit systems"},{"ProductID":"10384-10482","Value":"Adobe Flash Player on Windows 8.1 for x64-based systems"},{"ProductID":"10384-10483","Value":"Adobe Flash Player on Windows Server 2012 R2"},{"ProductID":"10384-10484","Value":"Adobe Flash Player on Windows RT 8.1"},{"ProductID":"10384-10729","Value":"Adobe Flash Player on Windows 10 for 32-bit Systems"},{"ProductID":"10384-10735","Value":"Adobe Flash Player on Windows 10 for x64-based Systems"},{"ProductID":"10384-10788","Value":"Adobe Flash Player on Windows 10 Version 1511 for x64-based Systems"},{"ProductID":"10384-10789","Value":"Adobe Flash Player on Windows 10 Version 1511 for 32-bit Systems"},{"ProductID":"10384-10816","Value":"Adobe Flash Player on Windows Server 2016"},{"ProductID":"10384-10852","Value":"Adobe Flash Player on Windows 10 Version 1607 for 32-bit Systems"},{"ProductID":"10384-10853","Value":"Adobe Flash Player on Windows 10 Version 1607 for x64-based Systems"},{"ProductID":"10384-10951","Value":"Adobe Flash Player on Windows 10 Version 1703 for 32-bit Systems"},{"ProductID":"10384-10952","Value":"Adobe Flash Player on Windows 10 Version 1703 for x64-based Systems"},{"ProductID":"10384-11453","Value":"Adobe Flash Player on Windows 10 Version 1709 for 32-bit Systems"},{"ProductID":"10384-11454","Value":"Adobe Flash Player on Windows 10 Version 1709 for x64-based Systems"},{"ProductID":"10384-11466","Value":"Adobe Flash Player on Windows Server, version 1709 (Server Core Installation)"},{"ProductID":"10431","Value":"Microsoft Exchange Server 2013"},{"ProductID":"10481","Value":"Windows 8.1 for 32-bit systems"},{"ProductID":"10482","Value":"Windows 8.1 for x64-based systems"},{"ProductID":"10483","Value":"Windows Server 2012 R2"},{"ProductID":"10484","Value":"Windows RT 8.1"},{"ProductID":"10486-10047","Value":"Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1"},{"ProductID":"10486-10048","Value":"Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1"},{"ProductID":"10486-10051","Value":"Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1"},{"ProductID":"10486-10481","Value":"Internet Explorer 11 on Windows 8.1 for 32-bit systems"},{"ProductID":"10486-10482","Value":"Internet Explorer 11 on Windows 8.1 for x64-based systems"},{"ProductID":"10486-10483","Value":"Internet Explorer 11 on Windows Server 2012 R2"},{"ProductID":"10486-10484","Value":"Internet Explorer 11 on Windows RT 8.1"},{"ProductID":"10486-10729","Value":"Internet Explorer 11 on Windows 10 for 32-bit Systems"},{"ProductID":"10486-10735","Value":"Internet Explorer 11 on Windows 10 for x64-based Systems"},{"ProductID":"10486-10788","Value":"Internet Explorer 11 on Windows 10 Version 1511 for x64-based Systems"},{"ProductID":"10486-10789","Value":"Internet Explorer 11 on Windows 10 Version 1511 for 32-bit Systems"},{"ProductID":"10486-10816","Value":"Internet Explorer 11 on Windows Server 2016"},{"ProductID":"10486-10852","Value":"Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems"},{"ProductID":"10486-10853","Value":"Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems"},{"ProductID":"10486-10951","Value":"Internet Explorer 11 on Windows 10 Version 1703 for 32-bit Systems"},{"ProductID":"10486-10952","Value":"Internet Explorer 11 on Windows 10 Version 1703 for x64-based Systems"},{"ProductID":"10486-11453","Value":"Internet Explorer 11 on Windows 10 Version 1709 for 32-bit Systems"},{"ProductID":"10486-11454","Value":"Internet Explorer 11 on Windows 10 Version 1709 for x64-based Systems"},{"ProductID":"10489","Value":"Microsoft Excel 2010 Service Pack 2 (32-bit editions)"},{"ProductID":"10490","Value":"Microsoft Excel 2010 Service Pack 2 (64-bit editions)"},{"ProductID":"10513","Value":"Microsoft Word 2010 Service Pack 2 (32-bit editions)"},{"ProductID":"10514","Value":"Microsoft Word 2010 Service Pack 2 (64-bit editions)"},{"ProductID":"10521","Value":"Microsoft Office 2010 Service Pack 2 (32-bit editions)"},{"ProductID":"10522","Value":"Microsoft Office 2010 Service Pack 2 (64-bit editions)"},{"ProductID":"10543","Value":"Windows Server 2012 R2 (Server Core installation)"},{"ProductID":"10555-10378","Value":"Internet Explorer 10 on Windows Server 2012"},{"ProductID":"10601","Value":"Microsoft Office 2013 Service Pack 1 (32-bit editions)"},{"ProductID":"10602","Value":"Microsoft Office 2013 Service Pack 1 (64-bit editions)"},{"ProductID":"10603","Value":"Microsoft Office 2013 RT Service Pack 1"},{"ProductID":"10604","Value":"Microsoft Word 2013 Service Pack 1 (32-bit editions)"},{"ProductID":"10605","Value":"Microsoft Word 2013 Service Pack 1 (64-bit editions)"},{"ProductID":"10606","Value":"Microsoft Word 2013 RT Service Pack 1"},{"ProductID":"10654","Value":"Microsoft Excel 2013 Service Pack 1 (32-bit editions)"},{"ProductID":"10655","Value":"Microsoft Excel 2013 Service Pack 1 (64-bit editions)"},{"ProductID":"10656","Value":"Microsoft Excel 2013 RT Service Pack 1"},{"ProductID":"10724-10729","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems"},{"ProductID":"10724-10735","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems"},{"ProductID":"10724-10788","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for x64-based Systems"},{"ProductID":"10724-10789","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for 32-bit Systems"},{"ProductID":"10724-10816","Value":"Microsoft Edge (EdgeHTML-based) on Windows Server 2016"},{"ProductID":"10724-10852","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems"},{"ProductID":"10724-10853","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems"},{"ProductID":"10724-10951","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for 32-bit Systems"},{"ProductID":"10724-10952","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for x64-based Systems"},{"ProductID":"10724-11453","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for 32-bit Systems"},{"ProductID":"10724-11454","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for x64-based Systems"},{"ProductID":"10729","Value":"Windows 10 for 32-bit Systems"},{"ProductID":"10734","Value":"Microsoft Office 2016 for Mac"},{"ProductID":"10735","Value":"Windows 10 for x64-based Systems"},{"ProductID":"10739","Value":"Microsoft Excel 2016 (32-bit edition)"},{"ProductID":"10740","Value":"Microsoft Excel 2016 (64-bit edition)"},{"ProductID":"10746","Value":"Microsoft Word 2016 (32-bit edition)"},{"ProductID":"10747","Value":"Microsoft Word 2016 (64-bit edition)"},{"ProductID":"10753","Value":"Microsoft Office 2016 (32-bit edition)"},{"ProductID":"10754","Value":"Microsoft Office 2016 (64-bit edition)"},{"ProductID":"10788","Value":"Windows 10 Version 1511 for x64-based Systems"},{"ProductID":"10789","Value":"Windows 10 Version 1511 for 32-bit Systems"},{"ProductID":"10804","Value":"Microsoft Exchange Server 2016"},{"ProductID":"10816","Value":"Windows Server 2016"},{"ProductID":"10852","Value":"Windows 10 Version 1607 for 32-bit Systems"},{"ProductID":"10853","Value":"Windows 10 Version 1607 for x64-based Systems"},{"ProductID":"10855","Value":"Windows Server 2016 (Server Core installation)"},{"ProductID":"10905","Value":"Microsoft Office 2016 Click-to-Run (C2R) for 32-bit editions"},{"ProductID":"10906","Value":"Microsoft Office 2016 Click-to-Run (C2R) for 64-bit editions"},{"ProductID":"10950","Value":"Microsoft SharePoint Enterprise Server 2016"},{"ProductID":"10951","Value":"Windows 10 Version 1703 for 32-bit Systems"},{"ProductID":"10952","Value":"Windows 10 Version 1703 for x64-based Systems"},{"ProductID":"11431","Value":"Microsoft Forefront Endpoint Protection 2010"},{"ProductID":"11432","Value":"Microsoft System Center Endpoint Protection"},{"ProductID":"11447","Value":"ChakraCore"},{"ProductID":"11449","Value":"Microsoft Exchange Server 2013 Cumulative Update 17"},{"ProductID":"11450","Value":"Microsoft Exchange Server 2016 Cumulative Update 6"},{"ProductID":"11453","Value":"Windows 10 Version 1709 for 32-bit Systems"},{"ProductID":"11454","Value":"Windows 10 Version 1709 for x64-based Systems"},{"ProductID":"11466","Value":"Windows Server, version 1709 (Server Core Installation)"},{"ProductID":"11469","Value":"Microsoft Exchange Server 2016 Cumulative Update 7"},{"ProductID":"11470","Value":"Microsoft Exchange Server 2013 Cumulative Update 18"},{"CPE":"cpe:2.3:a:microsoft:cm1_python2_2.7.18-3:*:*:*:*:*:*:*:*","ProductID":"16904-16820","Value":"cm1 python2 2.7.18-3 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_python2_2.7.18-8:*:*:*:*:*:*:*:*","ProductID":"16905-16823","Value":"cbl2 python2 2.7.18-8 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_mozjs_102.15.1-1:*:*:*:*:*:*:*:*","ProductID":"18469-17084","Value":"azl3 mozjs 102.15.1-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_python-py_1.11.0-1:*:*:*:*:*:*:*:*","ProductID":"21639-17084","Value":"azl3 python-py 1.11.0-1 on Azure Linux 3.0"},{"ProductID":"251-10047","Value":"Windows Defender on Windows 7 for 32-bit Systems Service Pack 1"},{"ProductID":"251-10048","Value":"Windows Defender on Windows 7 for x64-based Systems Service Pack 1"},{"ProductID":"251-10481","Value":"Windows Defender on Windows 8.1 for 32-bit systems"},{"ProductID":"251-10482","Value":"Windows Defender on Windows 8.1 for x64-based systems"},{"ProductID":"251-10484","Value":"Windows Defender on Windows RT 8.1"},{"ProductID":"251-10729","Value":"Windows Defender on Windows 10 for 32-bit Systems"},{"ProductID":"251-10735","Value":"Windows Defender on Windows 10 for x64-based Systems"},{"ProductID":"251-10788","Value":"Windows Defender on Windows 10 Version 1511 for x64-based Systems"},{"ProductID":"251-10789","Value":"Windows Defender on Windows 10 Version 1511 for 32-bit Systems"},{"ProductID":"251-10816","Value":"Windows Defender on Windows Server 2016"},{"ProductID":"251-10852","Value":"Windows Defender on Windows 10 Version 1607 for 32-bit Systems"},{"ProductID":"251-10853","Value":"Windows Defender on Windows 10 Version 1607 for x64-based Systems"},{"ProductID":"251-10855","Value":"Windows Defender on Windows Server 2016 (Server Core installation)"},{"ProductID":"251-10951","Value":"Windows Defender on Windows 10 Version 1703 for 32-bit Systems"},{"ProductID":"251-10952","Value":"Windows Defender on Windows 10 Version 1703 for x64-based Systems"},{"ProductID":"251-11453","Value":"Windows Defender on Windows 10 Version 1709 for 32-bit Systems"},{"ProductID":"251-11454","Value":"Windows Defender on Windows 10 Version 1709 for x64-based Systems"},{"ProductID":"251-11466","Value":"Windows Defender on Windows Server, version 1709 (Server Core Installation)"},{"ProductID":"4497","Value":"Microsoft Office Compatibility Pack Service Pack 3"},{"ProductID":"9311","Value":"Windows Server 2008 for Itanium-Based Systems Service Pack 2"},{"ProductID":"9312","Value":"Windows Server 2008 for 32-bit Systems Service Pack 2"},{"ProductID":"9318","Value":"Windows Server 2008 for x64-based Systems Service Pack 2"},{"ProductID":"9344","Value":"Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)"}]},"Vulnerability":[{"Acknowledgments":[],"CVE":"CVE-2017-17522","CVSSScoreSets":[{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16904-16820"],"TemporalScore":8.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16905-16823"],"TemporalScore":8.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-74","Value":"Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"0","ProductStatuses":[{"ProductID":["16904-16820","16905-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"2.7.18-3","ProductID":["16904-16820"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16904-16820"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"2.7.18-8","ProductID":["16905-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16905-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2024-09-26T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"8.7"},{"Date":"2024-09-29T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"9.0"},{"Date":"2024-09-30T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"9.1"},{"Date":"2024-10-02T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"9.3"},{"Date":"2024-10-03T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"9.4"},{"Date":"2024-10-04T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"9.5"},{"Date":"2024-10-07T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"9.8"},{"Date":"2024-10-09T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"10.0"},{"Date":"2024-10-15T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"10.6"},{"Date":"2024-10-20T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"11.1"},{"Date":"2024-10-22T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"11.3"},{"Date":"2024-10-23T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"11.4"},{"Date":"2024-10-24T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"11.5"},{"Date":"2024-10-25T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"11.6"},{"Date":"2024-10-26T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"11.7"},{"Date":"2024-10-28T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"11.9"},{"Date":"2024-10-30T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"12.1"},{"Date":"2024-11-02T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"12.4"},{"Date":"2024-11-04T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"12.5"},{"Date":"2024-11-05T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"12.6"},{"Date":"2024-11-06T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"12.7"},{"Date":"2024-11-08T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"12.9"},{"Date":"2024-11-09T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"13.0"},{"Date":"2024-11-10T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"13.1"},{"Date":"2024-11-11T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"13.2"},{"Date":"2024-11-13T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"13.4"},{"Date":"2024-11-16T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"13.7"},{"Date":"2024-11-19T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"14.0"},{"Date":"2024-11-20T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"14.1"},{"Date":"2024-11-23T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"14.3"},{"Date":"2024-11-24T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"14.4"},{"Date":"2024-11-25T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"14.5"},{"Date":"2024-11-26T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"14.6"},{"Date":"2024-11-28T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"14.8"},{"Date":"2024-11-29T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"14.9"},{"Date":"2024-11-30T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"15.0"},{"Date":"2024-12-01T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"15.1"},{"Date":"2024-12-02T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"15.2"},{"Date":"2024-12-07T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"15.6"},{"Date":"2024-12-08T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"15.7"},{"Date":"2024-12-10T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"15.9"},{"Date":"2024-12-16T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"16.5"},{"Date":"2024-12-17T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"16.6"},{"Date":"2024-12-19T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"16.8"},{"Date":"2024-12-23T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"17.2"},{"Date":"2024-12-24T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"17.3"},{"Date":"2025-01-01T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"18.1"},{"Date":"2025-01-04T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"18.4"},{"Date":"2025-01-05T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"18.5"},{"Date":"2025-01-06T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"18.6"},{"Date":"2025-01-07T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"18.7"},{"Date":"2025-01-09T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"18.9"},{"Date":"2025-01-12T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"19.2"},{"Date":"2025-01-13T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"19.3"},{"Date":"2025-01-15T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"19.4"},{"Date":"2025-01-16T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"19.5"},{"Date":"2025-01-17T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"19.6"},{"Date":"2025-01-22T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"20.1"},{"Date":"2025-01-27T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"20.5"},{"Date":"2025-01-30T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"20.8"},{"Date":"2025-02-01T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"20.9"},{"Date":"2025-02-03T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"21.1"},{"Date":"2025-02-04T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"21.2"},{"Date":"2025-02-05T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"21.3"},{"Date":"2025-02-07T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"21.4"},{"Date":"2025-02-08T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"21.5"},{"Date":"2025-02-11T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"21.8"},{"Date":"2025-02-12T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"21.9"},{"Date":"2025-02-16T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"22.3"},{"Date":"2025-02-17T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"22.4"},{"Date":"2025-02-18T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"22.5"},{"Date":"2025-02-20T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"22.7"},{"Date":"2025-02-21T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"22.8"},{"Date":"2025-02-24T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"23.1"},{"Date":"2025-02-25T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"23.2"},{"Date":"2025-02-28T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"23.5"},{"Date":"2025-03-02T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"23.7"},{"Date":"2025-03-03T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"23.8"},{"Date":"2025-03-06T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"24.1"},{"Date":"2025-03-08T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"24.2"},{"Date":"2025-03-09T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"24.3"},{"Date":"2025-03-10T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"24.4"},{"Date":"2025-03-11T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"24.5"},{"Date":"2025-03-12T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"24.6"},{"Date":"2025-03-22T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"25.6"},{"Date":"2025-03-23T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"25.7"},{"Date":"2025-03-27T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"26.1"},{"Date":"2025-03-28T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"26.2"},{"Date":"2025-03-30T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"26.4"},{"Date":"2025-04-01T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"26.6"},{"Date":"2025-04-06T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"27.0"},{"Date":"2025-04-07T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"27.1"},{"Date":"2025-04-08T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"27.2"},{"Date":"2025-04-09T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"27.3"},{"Date":"2025-04-14T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"27.7"},{"Date":"2025-04-18T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"28.1"},{"Date":"2025-04-20T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"28.3"},{"Date":"2025-04-26T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"28.6"},{"Date":"2025-04-28T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"28.7"},{"Date":"2025-04-30T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"28.9"},{"Date":"2025-05-01T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"29.0"},{"Date":"2025-05-03T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"29.2"},{"Date":"2025-05-04T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"29.3"},{"Date":"2025-05-06T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"29.5"},{"Date":"2025-05-07T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"29.6"},{"Date":"2025-05-11T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"30.0"},{"Date":"2025-05-12T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"30.1"},{"Date":"2025-05-14T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"30.3"},{"Date":"2025-05-15T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"30.4"},{"Date":"2025-05-20T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"30.9"},{"Date":"2025-05-21T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"31.0"},{"Date":"2025-05-22T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"31.1"},{"Date":"2025-05-24T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"31.3"},{"Date":"2025-05-26T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"31.5"},{"Date":"2025-05-27T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"31.6"},{"Date":"2020-08-18T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2024-06-30T07:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.6"},{"Date":"2024-07-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.7"},{"Date":"2024-07-09T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.8"},{"Date":"2024-07-10T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.9"},{"Date":"2024-07-12T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"},{"Date":"2024-07-13T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.1"},{"Date":"2024-07-14T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.2"},{"Date":"2024-07-15T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.3"},{"Date":"2024-07-16T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.4"},{"Date":"2024-07-17T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.5"},{"Date":"2024-07-19T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.6"},{"Date":"2024-07-20T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.7"},{"Date":"2024-07-21T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.8"},{"Date":"2024-07-22T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.9"},{"Date":"2024-07-23T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.0"},{"Date":"2024-07-24T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.1"},{"Date":"2024-07-25T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.2"},{"Date":"2024-07-26T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.3"},{"Date":"2024-07-27T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.4"},{"Date":"2024-07-28T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.5"},{"Date":"2024-07-29T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.6"},{"Date":"2024-08-02T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.7"},{"Date":"2024-08-03T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.8"},{"Date":"2024-08-04T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.9"},{"Date":"2024-08-05T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"4.0"},{"Date":"2024-08-06T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"4.1"},{"Date":"2024-08-07T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"4.2"},{"Date":"2024-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"4.3"},{"Date":"2024-08-09T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"4.4"},{"Date":"2024-08-10T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"4.5"},{"Date":"2024-08-11T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"4.6"},{"Date":"2024-08-12T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"4.7"},{"Date":"2024-08-15T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"4.8"},{"Date":"2024-08-16T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"4.9"},{"Date":"2024-08-17T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"5.0"},{"Date":"2024-08-18T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"5.1"},{"Date":"2024-08-19T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"5.2"},{"Date":"2024-08-20T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"5.3"},{"Date":"2024-08-21T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"5.4"},{"Date":"2024-08-22T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"5.5"},{"Date":"2024-08-23T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"5.6"},{"Date":"2024-08-24T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"5.7"},{"Date":"2024-08-25T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"5.8"},{"Date":"2024-08-26T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"5.9"},{"Date":"2024-08-27T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"6.0"},{"Date":"2024-08-28T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"6.1"},{"Date":"2024-08-29T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"6.2"},{"Date":"2024-08-30T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"6.3"},{"Date":"2024-08-31T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"6.4"},{"Date":"2024-09-01T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"6.5"},{"Date":"2024-09-02T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"6.6"},{"Date":"2024-09-03T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"6.7"},{"Date":"2024-09-05T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"6.8"},{"Date":"2024-09-06T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"6.9"},{"Date":"2024-09-07T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"7.0"},{"Date":"2024-09-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"7.1"},{"Date":"2024-09-11T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"7.2"},{"Date":"2024-09-12T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"7.3"},{"Date":"2024-09-13T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"7.4"},{"Date":"2024-09-14T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"7.5"},{"Date":"2024-09-15T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"7.6"},{"Date":"2024-09-16T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"7.7"},{"Date":"2024-09-17T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"7.8"},{"Date":"2024-09-18T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"7.9"},{"Date":"2024-09-19T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"8.0"},{"Date":"2024-09-20T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"8.1"},{"Date":"2024-09-21T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"8.2"},{"Date":"2024-09-22T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"8.3"},{"Date":"2024-09-23T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"8.4"},{"Date":"2024-09-24T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"8.5"},{"Date":"2024-09-25T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"8.6"},{"Date":"2024-09-27T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"8.8"},{"Date":"2024-09-28T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"8.9"},{"Date":"2024-10-01T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"9.2"},{"Date":"2024-10-05T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"9.6"},{"Date":"2024-10-06T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"9.7"},{"Date":"2024-10-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"9.9"},{"Date":"2024-10-10T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"10.1"},{"Date":"2024-10-11T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"10.2"},{"Date":"2024-10-12T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"10.3"},{"Date":"2024-10-13T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"10.4"},{"Date":"2024-10-14T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"10.5"},{"Date":"2024-10-16T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"10.7"},{"Date":"2024-10-17T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"10.8"},{"Date":"2024-10-18T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"10.9"},{"Date":"2024-10-19T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"11.0"},{"Date":"2024-10-21T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"11.2"},{"Date":"2024-10-27T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"11.8"},{"Date":"2024-10-29T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"12.0"},{"Date":"2024-10-31T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"12.2"},{"Date":"2024-11-01T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"12.3"},{"Date":"2024-11-07T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"12.8"},{"Date":"2024-11-12T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"13.3"},{"Date":"2024-11-14T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"13.5"},{"Date":"2024-11-15T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"13.6"},{"Date":"2024-11-17T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"13.8"},{"Date":"2024-11-18T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"13.9"},{"Date":"2024-11-21T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"14.2"},{"Date":"2024-11-27T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"14.7"},{"Date":"2024-12-03T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"15.3"},{"Date":"2024-12-04T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"15.4"},{"Date":"2024-12-05T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"15.5"},{"Date":"2024-12-09T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"15.8"},{"Date":"2024-12-11T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"16.0"},{"Date":"2024-12-12T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"16.1"},{"Date":"2024-12-13T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"16.2"},{"Date":"2024-12-14T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"16.3"},{"Date":"2024-12-15T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"16.4"},{"Date":"2024-12-18T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"16.7"},{"Date":"2024-12-20T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"16.9"},{"Date":"2024-12-21T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"17.0"},{"Date":"2024-12-22T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"17.1"},{"Date":"2024-12-25T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"17.4"},{"Date":"2024-12-26T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"17.5"},{"Date":"2024-12-27T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"17.6"},{"Date":"2024-12-28T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"17.7"},{"Date":"2024-12-29T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"17.8"},{"Date":"2024-12-30T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"17.9"},{"Date":"2024-12-31T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"18.0"},{"Date":"2025-01-02T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"18.2"},{"Date":"2025-01-03T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"18.3"},{"Date":"2025-01-08T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"18.8"},{"Date":"2025-01-10T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"19.0"},{"Date":"2025-01-11T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"19.1"},{"Date":"2025-01-18T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"19.7"},{"Date":"2025-01-19T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"19.8"},{"Date":"2025-01-20T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"19.9"},{"Date":"2025-01-21T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"20.0"},{"Date":"2025-01-23T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"20.2"},{"Date":"2025-01-24T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"20.3"},{"Date":"2025-01-25T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"20.4"},{"Date":"2025-01-28T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"20.6"},{"Date":"2025-01-29T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"20.7"},{"Date":"2025-02-02T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"21.0"},{"Date":"2025-02-09T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"21.6"},{"Date":"2025-02-10T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"21.7"},{"Date":"2025-02-13T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"22.0"},{"Date":"2025-02-14T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"22.1"},{"Date":"2025-02-15T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"22.2"},{"Date":"2025-02-19T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"22.6"},{"Date":"2025-02-22T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"22.9"},{"Date":"2025-02-23T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"23.0"},{"Date":"2025-02-26T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"23.3"},{"Date":"2025-02-27T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"23.4"},{"Date":"2025-03-01T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"23.6"},{"Date":"2025-03-04T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"23.9"},{"Date":"2025-03-05T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"24.0"},{"Date":"2025-03-13T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"24.7"},{"Date":"2025-03-14T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"24.8"},{"Date":"2025-03-15T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"24.9"},{"Date":"2025-03-16T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"25.0"},{"Date":"2025-03-17T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"25.1"},{"Date":"2025-03-18T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"25.2"},{"Date":"2025-03-19T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"25.3"},{"Date":"2025-03-20T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"25.4"},{"Date":"2025-03-21T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"25.5"},{"Date":"2025-03-24T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"25.8"},{"Date":"2025-03-25T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"25.9"},{"Date":"2025-03-26T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"26.0"},{"Date":"2025-03-29T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"26.3"},{"Date":"2025-03-31T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"26.5"},{"Date":"2025-04-03T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"26.7"},{"Date":"2025-04-04T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"26.8"},{"Date":"2025-04-05T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"26.9"},{"Date":"2025-04-11T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"27.4"},{"Date":"2025-04-12T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"27.5"},{"Date":"2025-04-13T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"27.6"},{"Date":"2025-04-15T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"27.8"},{"Date":"2025-04-16T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"27.9"},{"Date":"2025-04-17T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"28.0"},{"Date":"2025-04-19T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"28.2"},{"Date":"2025-04-21T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"28.4"},{"Date":"2025-04-25T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"28.5"},{"Date":"2025-04-29T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"28.8"},{"Date":"2025-05-02T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"29.1"},{"Date":"2025-05-05T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"29.4"},{"Date":"2025-05-08T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"29.7"},{"Date":"2025-05-09T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"29.8"},{"Date":"2025-05-10T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"29.9"},{"Date":"2025-05-13T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"30.2"},{"Date":"2025-05-16T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"30.5"},{"Date":"2025-05-17T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"30.6"},{"Date":"2025-05-18T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"30.7"},{"Date":"2025-05-19T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"30.8"},{"Date":"2025-05-23T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"31.2"},{"Date":"2025-05-25T00:00:00","Description":{"Value":"<p>Added python2 to CBL-Mariner 1.0</p>\n"},"Number":"31.4"},{"Date":"2026-10-21T01:06:43","Description":{"Value":"<p>Information published.</p>\n"},"Number":"32.0"},{"Date":"2026-10-28T01:47:59","Description":{"Value":"<p>Information published.</p>\n"},"Number":"33.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16904-16820"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16905-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["16904-16820"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["16905-16823"],"Type":3}],"Title":{"Value":"Lib/webbrowser.py in Python through 3.6.3 does not validate strings before launching the program specified by the BROWSER environment variable which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a software maintainer indicates that exploitation is impossible because the code relies on subprocess.Popen and the default shell=False setting"}},{"Acknowledgments":[],"CVE":"CVE-2017-11697","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18469-17084"],"TemporalScore":7.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-119","Value":"Improper Restriction of Operations within the Bounds of a Memory Buffer"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"1","ProductStatuses":[{"ProductID":["18469-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[],"RevisionHistory":[{"Date":"2025-09-03T22:48:37","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-02-18T14:50:03","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18469-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18469-17084"],"Type":3}],"Title":{"Value":"The __hash_open function in hash.c:229 in Mozilla Network Security Services (NSS) allows context-dependent attackers to cause a denial of service (floating point exception and crash) via a crafted cert8.db file."}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://www.linkedin.com/in/víctor-portal-gonzález-38675357\">Víctor Portal González</a>"}],"URL":[""]}],"CVE":"CVE-2017-11885","CVSSScoreSets":[{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10789"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10788"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11453"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11454"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11466"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in RPC if the server has Routing and Remote Access enabled. An attacker who successfully exploited this vulnerability could execute code on the target system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>To exploit this vulnerability, an attacker would need to run a specially crafted application against an RPC server which has Routing and Remote Access enabled. Routing and Remote Access is a non-default configuration; systems without it enabled are not vulnerable.</p>\n<p>The security update addresses the vulnerability by correcting how the Routing and Remote Access service handles requests.</p>\n"},{"Ordinal":"20","Title":"Microsoft Windows","Type":7,"Value":"Microsoft Windows"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"}],"Ordinal":"2","ProductStatuses":[{"ProductID":["10951","10952","10729","10735","10789","10788","10852","10853","10816","10855","10047","10048","10481","10482","10484","10287","9311","9318","9344","10050","10051","10049","10378","10379","10483","10543","11453","11454","11466"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053580"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048954","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053580"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053581"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048956","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053581"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053578"},"ProductID":["10789","10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048952","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053578"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053579"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048953","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053579"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054518"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048957","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054518"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054521"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054521"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054519"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048958","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054519"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054522"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054522"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054519"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048958","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4052303"},"ProductID":["10287","9311","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4052303"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054520"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048959","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054520"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054523"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054523"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054517"},"ProductID":["11453","11454","11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048955","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054517"}],"RevisionHistory":[{"Date":"2017-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows RRAS Service Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Liu Long of <a href=\"http://www.360.com/\">Qihoo 360 Vulcan Team</a>"}],"URL":[""]},{"Name":[{"Value":"Qixun Zhao of <a href=\"http://www.360.com/\">Qihoo 360 Vulcan Team</a>"}],"URL":[""]},{"Name":[{"Value":"Anonymous working with <a href=\"http://www.zerodayinitiative.com/\">Trend Micro's Zero Day Initiative</a>"}],"URL":[""]}],"CVE":"CVE-2017-11889","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11453"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11454"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10729"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10735"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10789"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10788"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10852"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10816"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"}],"Ordinal":"3","ProductStatuses":[{"ProductID":["11447","10724-10951","10724-10952","10724-11453","10724-11454","10724-10729","10724-10735","10724-10789","10724-10788","10724-10852","10724-10853","10724-10816"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.7.5"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053580"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048954","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053580"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054517"},"ProductID":["10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048955","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054517"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053581"},"ProductID":["10724-10729","10724-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048956","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053581"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053578"},"ProductID":["10724-10789","10724-10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048952","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053578"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053579"},"ProductID":["10724-10852","10724-10853","10724-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048953","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053579"}],"RevisionHistory":[{"Date":"2017-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10724-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Ivan Fratric of <a href=\"https://www.google.com\">Google Project Zero</a>"}],"URL":[""]}],"CVE":"CVE-2017-11890","CVSSScoreSets":[{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10555-10378"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10336-9312"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10336-9318"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10951"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10952"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11453"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11454"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10729"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10735"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10789"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10788"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10852"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10853"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10816"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10047"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10048"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10481"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10482"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10484"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10051"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10483"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"}],"Ordinal":"4","ProductStatuses":[{"ProductID":["10555-10378","10336-9312","10336-9318","10486-10951","10486-10952","10486-11453","10486-11454","10486-10729","10486-10735","10486-10789","10486-10788","10486-10852","10486-10853","10486-10816","10486-10047","10486-10048","10486-10481","10486-10482","10486-10484","10486-10051","10486-10483"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054520"},"ProductID":["10555-10378"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048959","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054520"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4052978"},"ProductID":["10555-10378","10336-9312","10336-9318","10486-10047","10486-10048","10486-10481","10486-10482","10486-10051","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"IE Cumulative","Supercedence":"4047206","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4052978"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053580"},"ProductID":["10486-10951","10486-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048954","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053580"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054517"},"ProductID":["10486-11453","10486-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048955","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054517"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053581"},"ProductID":["10486-10729","10486-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048956","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053581"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053578"},"ProductID":["10486-10789","10486-10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048952","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053578"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053579"},"ProductID":["10486-10852","10486-10853","10486-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048953","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053579"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054518"},"ProductID":["10486-10047","10486-10048","10486-10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048957","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054518"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054519"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048958","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054519"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054519"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048958","Type":2,"URL":""}],"RevisionHistory":[{"Date":"2017-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2018-01-26T08:00:00","Description":{"Value":"<p>Updated CVE description. This is an informational change only.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10555-10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10336-9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10336-9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10555-10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10336-9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10336-9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Lokihardt of <a href=\"https://www.google.com/\">Google Project Zero</a>"}],"URL":[""]}],"CVE":"CVE-2017-11893","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10789"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10788"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10852"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10816"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11453"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11454"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"}],"Ordinal":"5","ProductStatuses":[{"ProductID":["11447","10724-10951","10724-10952","10724-10789","10724-10788","10724-10852","10724-10853","10724-10816","10724-11453","10724-11454"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.7.5"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053580"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048954","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053580"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053578"},"ProductID":["10724-10789","10724-10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048952","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053578"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053579"},"ProductID":["10724-10852","10724-10853","10724-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048953","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053579"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054517"},"ProductID":["10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048955","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054517"}],"RevisionHistory":[{"Date":"2017-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10724-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://www.weibo.com/babyboaes/\">Qixan Zhao</a> of <a href=\"https://www.360.com/\">Qihoo 360 Vulcan Team</a>"}],"URL":[""]}],"CVE":"CVE-2017-11895","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11453"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11454"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10729"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10735"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10789"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10788"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10852"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10816"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10951"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10952"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11453"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11454"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10729"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10735"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10789"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10788"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10852"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10853"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10816"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10047"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10048"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10481"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10482"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10484"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10051"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10483"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website designed to exploit the vulnerability through a Microsoft browser and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the browser rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"}],"Ordinal":"6","ProductStatuses":[{"ProductID":["11447","10724-10951","10724-10952","10724-11453","10724-11454","10724-10729","10724-10735","10724-10789","10724-10788","10724-10852","10724-10853","10724-10816","10486-10951","10486-10952","10486-11453","10486-11454","10486-10729","10486-10735","10486-10789","10486-10788","10486-10852","10486-10853","10486-10816","10486-10047","10486-10048","10486-10481","10486-10482","10486-10484","10486-10051","10486-10483"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.7.5"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053580"},"ProductID":["10724-10951","10724-10952","10486-10951","10486-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048954","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053580"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054517"},"ProductID":["10724-11453","10724-11454","10486-11453","10486-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048955","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054517"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053581"},"ProductID":["10724-10729","10724-10735","10486-10729","10486-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048956","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053581"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053578"},"ProductID":["10724-10789","10724-10788","10486-10789","10486-10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048952","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053578"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053579"},"ProductID":["10724-10852","10724-10853","10724-10816","10486-10852","10486-10853","10486-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048953","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053579"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054518"},"ProductID":["10486-10047","10486-10048","10486-10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048957","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054518"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4052978"},"ProductID":["10486-10047","10486-10048","10486-10481","10486-10482","10486-10051","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"IE Cumulative","Supercedence":"4047206","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4052978"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054519"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048958","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054519"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054519"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048958","Type":2,"URL":""}],"RevisionHistory":[{"Date":"2017-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10724-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"James Forshaw of <a href=\"https://www.google.com/\">Google Project Zero</a>"}],"URL":[""]}],"CVE":"CVE-2017-11899","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11453"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11454"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11466"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10789"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10788"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A security feature bypass exists when Device Guard incorrectly validates an untrusted file. An attacker who successfully exploited this vulnerability could make an unsigned file appear to be signed. Because Device Guard relies on the signature to determine the file is non-malicious, Device Guard could then allow a malicious file to execute.</p>\n<p>In an attack scenario, an attacker could make an untrusted file appear to be a trusted file.</p>\n<p>The update addresses the vulnerability by correcting how Device Guard handles untrusted files.</p>\n"},{"Ordinal":"20","Title":"Device Guard","Type":7,"Value":"Device Guard"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"}],"Ordinal":"7","ProductStatuses":[{"ProductID":["11453","11454","11466","10951","10952","10729","10735","10789","10788","10852","10853","10816","10855"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054517"},"ProductID":["11453","11454","11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048955","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054517"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053580"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048954","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053580"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053581"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048956","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053581"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053578"},"ProductID":["10789","10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048952","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053578"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053579"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048953","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053579"}],"RevisionHistory":[{"Date":"2018-01-25T08:00:00","Description":{"Value":"<p>Updated CVE title. This is an informational change only.</p>\n"},"Number":"1.1"},{"Date":"2017-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Device Guard Security Feature Bypass Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Anonymous working with <a href=\"https://www.zerodayinitiative.com/\">Trend Micro's Zero Day Initiative</a>"}],"URL":[""]}],"CVE":"CVE-2017-11901","CVSSScoreSets":[{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10555-10378"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10951"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10952"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11453"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11454"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10729"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10735"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10789"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10788"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10852"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10853"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10816"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10047"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10048"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10481"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10482"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10484"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10051"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10483"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"}],"Ordinal":"8","ProductStatuses":[{"ProductID":["10555-10378","10486-10951","10486-10952","10486-11453","10486-11454","10486-10729","10486-10735","10486-10789","10486-10788","10486-10852","10486-10853","10486-10816","10486-10047","10486-10048","10486-10481","10486-10482","10486-10484","10486-10051","10486-10483"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054520"},"ProductID":["10555-10378"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048959","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054520"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4052978"},"ProductID":["10555-10378","10486-10047","10486-10048","10486-10481","10486-10482","10486-10051","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"IE Cumulative","Supercedence":"4047206","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4052978"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053580"},"ProductID":["10486-10951","10486-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048954","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053580"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054517"},"ProductID":["10486-11453","10486-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048955","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054517"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053581"},"ProductID":["10486-10729","10486-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048956","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053581"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053578"},"ProductID":["10486-10789","10486-10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048952","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053578"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053579"},"ProductID":["10486-10852","10486-10853","10486-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048953","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053579"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054518"},"ProductID":["10486-10047","10486-10048","10486-10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048957","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054518"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054519"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048958","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054519"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054519"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048958","Type":2,"URL":""}],"RevisionHistory":[{"Date":"2017-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2018-01-26T08:00:00","Description":{"Value":"<p>Updated CVE description. This is an informational change only.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10555-10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10555-10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Ivan Fratric of <a href=\"https://www.google.com\">Google Project Zero</a>"}],"URL":[""]}],"CVE":"CVE-2017-11903","CVSSScoreSets":[{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10555-10378"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10336-9312"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10336-9318"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10951"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10952"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10729"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10735"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10789"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10788"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10852"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10853"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10816"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10047"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10048"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10481"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10482"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10484"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10051"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10483"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11453"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11454"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"}],"Ordinal":"9","ProductStatuses":[{"ProductID":["10555-10378","10336-9312","10336-9318","10486-10951","10486-10952","10486-10729","10486-10735","10486-10789","10486-10788","10486-10852","10486-10853","10486-10816","10486-10047","10486-10048","10486-10481","10486-10482","10486-10484","10486-10051","10486-10483","10486-11453","10486-11454"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054520"},"ProductID":["10555-10378"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048959","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054520"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4052978"},"ProductID":["10555-10378","10336-9312","10336-9318","10486-10047","10486-10048","10486-10481","10486-10482","10486-10051","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"IE Cumulative","Supercedence":"4047206","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4052978"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053580"},"ProductID":["10486-10951","10486-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048954","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053580"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053581"},"ProductID":["10486-10729","10486-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048956","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053581"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053578"},"ProductID":["10486-10789","10486-10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048952","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053578"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053579"},"ProductID":["10486-10852","10486-10853","10486-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048953","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053579"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054518"},"ProductID":["10486-10047","10486-10048","10486-10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048957","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054518"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054519"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048958","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054519"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054519"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048958","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054517"},"ProductID":["10486-11453","10486-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048955","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054517"}],"RevisionHistory":[{"Date":"2017-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2018-01-26T08:00:00","Description":{"Value":"<p>Updated CVE description. This is an informational change only.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10555-10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10336-9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10336-9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10555-10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10336-9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10336-9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Ivan Fratric of <a href=\"https://www.google.com\">Google Project Zero</a>"}],"URL":[""]}],"CVE":"CVE-2017-11906","CVSSScoreSets":[{"BaseScore":2.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10555-10378"],"TemporalScore":2.2,"Vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":2.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10336-9312"],"TemporalScore":2.2,"Vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":2.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10336-9318"],"TemporalScore":2.2,"Vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10951"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10952"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10729"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10735"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10789"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10788"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10852"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10853"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":2.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10816"],"TemporalScore":2.2,"Vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10047"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10048"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10481"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10482"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10484"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":2.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10051"],"TemporalScore":2.2,"Vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":2.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10483"],"TemporalScore":2.2,"Vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11453"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11454"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p>\n<p>To exploit the vulnerability, in a web-based attack scenario, an attacker could host a website in an attempt to exploit the vulnerability. In addition, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action. For example, an attacker could trick a user into clicking a link that takes the user to the attacker's site.</p>\n<p>The security update addresses the vulnerability by modifying how Internet Explorer handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"}],"Ordinal":"10","ProductStatuses":[{"ProductID":["10555-10378","10336-9312","10336-9318","10486-10951","10486-10952","10486-10729","10486-10735","10486-10789","10486-10788","10486-10852","10486-10853","10486-10816","10486-10047","10486-10048","10486-10481","10486-10482","10486-10484","10486-10051","10486-10483","10486-11453","10486-11454"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054520"},"ProductID":["10555-10378"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048959","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054520"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4052978"},"ProductID":["10555-10378","10336-9312","10336-9318","10486-10047","10486-10048","10486-10481","10486-10482","10486-10051","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"IE Cumulative","Supercedence":"4047206","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4052978"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053580"},"ProductID":["10486-10951","10486-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048954","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053580"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053581"},"ProductID":["10486-10729","10486-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048956","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053581"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053578"},"ProductID":["10486-10789","10486-10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048952","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053578"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053579"},"ProductID":["10486-10852","10486-10853","10486-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048953","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053579"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054518"},"ProductID":["10486-10047","10486-10048","10486-10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048957","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054518"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054519"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048958","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054519"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054519"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048958","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054517"},"ProductID":["10486-11453","10486-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048955","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054517"}],"RevisionHistory":[{"Date":"2017-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10555-10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10336-9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10336-9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10555-10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10336-9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10336-9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10486-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10486-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10486-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Internet Explorer Information Disclosure Vulnerability"}},{"Acknowledgments":[],"CVE":"CVE-2017-11908","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11453"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11454"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"}],"Ordinal":"11","ProductStatuses":[{"ProductID":["11447","10724-11453","10724-11454"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.7.5"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054517"},"ProductID":["10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048955","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054517"}],"RevisionHistory":[{"Date":"2017-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Lokihardt of <a href=\"https://www.google.com/\">Google Project Zero</a>"}],"URL":[""]}],"CVE":"CVE-2017-11909","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10789"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10788"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10852"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10816"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11453"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11454"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"}],"Ordinal":"12","ProductStatuses":[{"ProductID":["11447","10724-10951","10724-10952","10724-10789","10724-10788","10724-10852","10724-10853","10724-10816","10724-11453","10724-11454"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.7.5"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053580"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048954","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053580"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053578"},"ProductID":["10724-10789","10724-10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048952","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053578"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053579"},"ProductID":["10724-10852","10724-10853","10724-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048953","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053579"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054517"},"ProductID":["10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048955","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054517"}],"RevisionHistory":[{"Date":"2017-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10724-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[],"CVE":"CVE-2017-11910","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10729"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10735"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10789"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10788"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10852"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10816"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11453"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11454"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"}],"Ordinal":"13","ProductStatuses":[{"ProductID":["11447","10724-10951","10724-10952","10724-10729","10724-10735","10724-10789","10724-10788","10724-10852","10724-10853","10724-10816","10724-11453","10724-11454"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.7.5"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053580"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048954","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053580"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053581"},"ProductID":["10724-10729","10724-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048956","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053581"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053578"},"ProductID":["10724-10789","10724-10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048952","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053578"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053579"},"ProductID":["10724-10852","10724-10853","10724-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048953","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053579"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054517"},"ProductID":["10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048955","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054517"}],"RevisionHistory":[{"Date":"2017-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10724-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Lokihardt of <a href=\"https://www.google.com/\">Google Project Zero</a>"}],"URL":[""]}],"CVE":"CVE-2017-11911","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11453"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11454"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10789"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10788"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10852"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10816"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"}],"Ordinal":"14","ProductStatuses":[{"ProductID":["11447","10724-11453","10724-11454","10724-10951","10724-10952","10724-10789","10724-10788","10724-10852","10724-10853","10724-10816"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.7.5"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054517"},"ProductID":["10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048955","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054517"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053580"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048954","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053580"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053578"},"ProductID":["10724-10789","10724-10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048952","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053578"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053579"},"ProductID":["10724-10852","10724-10853","10724-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048953","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053579"}],"RevisionHistory":[{"Date":"2017-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10724-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[],"CVE":"CVE-2017-11912","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10729"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10735"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10789"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10788"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10852"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10816"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11453"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11454"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11453"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11454"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10555-10378"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10336-9312"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10336-9318"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10951"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10952"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10729"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10735"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10789"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10788"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10852"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10853"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10816"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10047"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10048"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10481"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10482"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10484"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10051"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10483"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website designed to exploit the vulnerability through a Microsoft browser and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the browser rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"}],"Ordinal":"15","ProductStatuses":[{"ProductID":["11447","10724-10951","10724-10952","10724-10729","10724-10735","10724-10789","10724-10788","10724-10852","10724-10853","10724-10816","10724-11453","10724-11454","10486-11453","10486-11454","10555-10378","10336-9312","10336-9318","10486-10951","10486-10952","10486-10729","10486-10735","10486-10789","10486-10788","10486-10852","10486-10853","10486-10816","10486-10047","10486-10048","10486-10481","10486-10482","10486-10484","10486-10051","10486-10483"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.7.5"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053580"},"ProductID":["10724-10951","10724-10952","10486-10951","10486-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048954","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053580"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053581"},"ProductID":["10724-10729","10724-10735","10486-10729","10486-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048956","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053581"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053578"},"ProductID":["10724-10789","10724-10788","10486-10789","10486-10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048952","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053578"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053579"},"ProductID":["10724-10852","10724-10853","10724-10816","10486-10852","10486-10853","10486-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048953","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053579"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054517"},"ProductID":["10724-11453","10724-11454","10486-11453","10486-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048955","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054517"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054520"},"ProductID":["10555-10378"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048959","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054520"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4052978"},"ProductID":["10555-10378","10336-9312","10336-9318","10486-10047","10486-10048","10486-10481","10486-10482","10486-10051","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"IE Cumulative","Supercedence":"4047206","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4052978"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054518"},"ProductID":["10486-10047","10486-10048","10486-10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048957","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054518"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054519"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048958","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054519"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054519"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048958","Type":2,"URL":""}],"RevisionHistory":[{"Date":"2017-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10555-10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10336-9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10336-9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10724-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10555-10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10336-9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10336-9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Anonymous working with <a href=\"https://www.zerodayinitiative.com/\">Trend Micro's Zero Day Initiative</a>"}],"URL":[""]},{"Name":[{"Value":"Yuki Chen of <a href=\"http://www.360.com/\">Qihoo 360 Vulcan Team</a>"}],"URL":[""]}],"CVE":"CVE-2017-11913","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11453"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11454"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10555-10378"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10336-9312"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10336-9318"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10951"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10952"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10729"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10735"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10789"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10788"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10852"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10853"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10816"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10047"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10048"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10481"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10482"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10484"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10051"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10483"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"}],"Ordinal":"16","ProductStatuses":[{"ProductID":["10486-11453","10486-11454","10555-10378","10336-9312","10336-9318","10486-10951","10486-10952","10486-10729","10486-10735","10486-10789","10486-10788","10486-10852","10486-10853","10486-10816","10486-10047","10486-10048","10486-10481","10486-10482","10486-10484","10486-10051","10486-10483"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054517"},"ProductID":["10486-11453","10486-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048955","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054517"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054520"},"ProductID":["10555-10378"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048959","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054520"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4052978"},"ProductID":["10555-10378","10336-9312","10336-9318","10486-10047","10486-10048","10486-10481","10486-10482","10486-10051","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"IE Cumulative","Supercedence":"4047206","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4052978"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053580"},"ProductID":["10486-10951","10486-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048954","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053580"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053581"},"ProductID":["10486-10729","10486-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048956","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053581"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053578"},"ProductID":["10486-10789","10486-10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048952","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053578"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053579"},"ProductID":["10486-10852","10486-10853","10486-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048953","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053579"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054518"},"ProductID":["10486-10047","10486-10048","10486-10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048957","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054518"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054519"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048958","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054519"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054519"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048958","Type":2,"URL":""}],"RevisionHistory":[{"Date":"2017-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2018-01-26T08:00:00","Description":{"Value":"<p>Updated CVE description. This is an informational change only.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10555-10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10336-9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10336-9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10555-10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10336-9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10336-9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10486-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10486-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10486-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Lokihardt of <a href=\"https://www.google.com/\">Google Project Zero</a>"}],"URL":[""]}],"CVE":"CVE-2017-11914","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11453"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11454"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10789"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10788"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10852"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10816"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"}],"Ordinal":"17","ProductStatuses":[{"ProductID":["11447","10724-10951","10724-10952","10724-11453","10724-11454","10724-10789","10724-10788","10724-10852","10724-10853","10724-10816"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.7.5"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053580"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048954","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053580"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054517"},"ProductID":["10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048955","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054517"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053578"},"ProductID":["10724-10789","10724-10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048952","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053578"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053579"},"ProductID":["10724-10852","10724-10853","10724-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048953","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053579"}],"RevisionHistory":[{"Date":"2017-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10724-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Lokihardt of <a href=\"https://www.google.com/\">Google Project Zero</a>"}],"URL":[""]}],"CVE":"CVE-2017-11918","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11453"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11454"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10729"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10735"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10789"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10788"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10852"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10816"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"}],"Ordinal":"18","ProductStatuses":[{"ProductID":["11447","10724-10951","10724-10952","10724-11453","10724-11454","10724-10729","10724-10735","10724-10789","10724-10788","10724-10852","10724-10853","10724-10816"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.7.5"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053580"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048954","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053580"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054517"},"ProductID":["10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048955","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054517"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053581"},"ProductID":["10724-10729","10724-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048956","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053581"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053578"},"ProductID":["10724-10789","10724-10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048952","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053578"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053579"},"ProductID":["10724-10852","10724-10853","10724-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048953","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053579"}],"RevisionHistory":[{"Date":"2017-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10724-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Soroush Dalili from NCC Group"}],"URL":[""]}],"CVE":"CVE-2017-11927","CVSSScoreSets":[{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10789"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10788"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11453"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11454"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11466"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An information disclosure vulnerability exists when the Windows its:// protocol handler unnecessarily sends traffic to a remote site in order to determine the zone of a provided URL. This could potentially result in the disclosure of sensitive information to a malicious site.</p>\n<p>To exploit the vulnerability an attacker would have to trick a user into browsing to a malicious website or to an SMB or UNC path destination. An attacker who successfully tricked a user into disclosing the user's NTLM hash could attempt a brute-force attack to disclose the corresponding hash password.</p>\n<p>The security update addresses the vulnerability by correcting how the Windows its:// protocol handler determines the zone of a request.</p>\n"},{"Ordinal":"20","Title":"Microsoft Windows","Type":7,"Value":"Microsoft Windows"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"}],"Ordinal":"19","ProductStatuses":[{"ProductID":["10951","10952","10729","10735","10789","10788","10852","10853","10816","10855","10047","10048","10481","10482","10484","9312","10287","9311","9318","9344","10050","10051","10049","10378","10379","10483","10543","11453","11454","11466"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4103731"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4093107","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4103731"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4103716"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4093111","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4103716"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053578"},"ProductID":["10789","10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048952","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053578"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4103723"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4093119","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4103723"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4103718"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4093118","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4103718"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4103712"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4103712"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4103725"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4093114","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4103725"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4103715"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4103715"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4103725"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4093114","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4130957"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4130957"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4103730"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4093123","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4103730"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4103726"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4103726"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4103727"},"ProductID":["11453","11454","11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4093112","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4103727"}],"RevisionHistory":[{"Date":"2017-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2018-05-08T07:00:00","Description":{"Value":"<p>To comprehensively address CVE-2017-11927, Microsoft is releasing the May Cumulative Updates, Monthly Rollups, and Security Only Updates. Update 4130957 is being released for all Windows Server 2008 Service Pack 2 versions. Microsoft recommends that customers running these versions of Windows install the updates to be protected from this vulnerability.</p>\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Windows Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Huang Anwen <a href=https://www.ichunqiu.com/>ichunqiu Ker Team</a>"}],"URL":[""]}],"CVE":"CVE-2017-11930","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10951"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10952"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10729"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10735"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10789"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10788"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10852"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10853"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10816"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10047"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10048"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10481"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10482"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10484"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10051"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10483"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11453"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11454"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website designed to exploit the vulnerability through a Microsoft browser and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the browser rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"}],"Ordinal":"20","ProductStatuses":[{"ProductID":["11447","10486-10951","10486-10952","10486-10729","10486-10735","10486-10789","10486-10788","10486-10852","10486-10853","10486-10816","10486-10047","10486-10048","10486-10481","10486-10482","10486-10484","10486-10051","10486-10483","10486-11453","10486-11454"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.7.5"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053580"},"ProductID":["10486-10951","10486-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048954","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053580"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053581"},"ProductID":["10486-10729","10486-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048956","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053581"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053578"},"ProductID":["10486-10789","10486-10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048952","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053578"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053579"},"ProductID":["10486-10852","10486-10853","10486-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048953","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053579"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054518"},"ProductID":["10486-10047","10486-10048","10486-10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048957","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054518"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4052978"},"ProductID":["10486-10047","10486-10048","10486-10481","10486-10482","10486-10051","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"IE Cumulative","Supercedence":"4047206","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4052978"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054519"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048958","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054519"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054519"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048958","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054517"},"ProductID":["10486-11453","10486-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048955","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054517"}],"RevisionHistory":[{"Date":"2017-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[],"CVE":"CVE-2017-11932","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web App (OWA) fails to properly handle web requests. An attacker who successfully exploited the vulnerability could perform script or content injection attacks, and attempt to trick the user into disclosing sensitive information. An attacker could also redirect the user to a malicious website that could spoof content or the vulnerability could be used as a pivot to chain an attack with other vulnerabilities in web services.</p>\n<p>To exploit the vulnerability, an attacker could send a specially crafted email containing a malicious link to a user. An attacker could also use a chat client to social engineer a user into clicking the malicious link. However, in both examples the user must click the malicious link.</p>\n<p>The security update addresses the vulnerability by correcting how OWA validates web requests.</p>\n"},{"Ordinal":"20","Title":"Microsoft Exchange Server","Type":7,"Value":"Microsoft Exchange Server"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"}],"Ordinal":"21","ProductStatuses":[{"ProductID":["11450","11469"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4045655"},"ProductID":["11450","11469"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4036108","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=572eec81-2998-48a3-be54-f4a2d067f268"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4045655"},"ProductID":["11450","11469"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=c7db6072-e1be-4439-bbb3-b0cc13072fb7"}],"RevisionHistory":[{"Date":"2017-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11450"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11469"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11450"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11469"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Exchange Spoofing Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"The UK's National Cyber Security Centre (NCSC)"}],"URL":[""]}],"CVE":"CVE-2017-11937","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption. An attacker who successfully exploited this vulnerability could execute arbitrary code in the security context of the LocalSystem account and take control of the system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>To exploit this vulnerability, a specially crafted file must be scanned by an affected version of the Microsoft Malware Protection Engine. There are many ways that an attacker could place a specially crafted file in a location that is scanned by the Microsoft Malware Protection Engine. For example, an attacker could use a website to deliver a specially crafted file to the victim's system that is scanned when the website is viewed by the user. An attacker could also deliver a specially crafted file via an email message or in an Instant Messenger message that is scanned when the file is opened. In addition, an attacker could take advantage of websites that accept or host user-provided content, to upload a specially crafted file to a shared location that is scanned by the Malware Protection Engine running on the hosting server.</p>\n<p>If the affected antimalware software has real-time protection turned on, the Microsoft Malware Protection Engine will scan files automatically, leading to exploitation of the vulnerability when the specially crafted file is scanned. If real-time scanning is not enabled, the attacker would need to wait until a scheduled scan occurs in order for the vulnerability to be exploited. All systems running an affected version of antimalware software are primarily at risk.</p>\n<p>The update addresses the vulnerability by correcting the manner in which the Microsoft Malware Protection Engine scans specially crafted files.</p>\n<p>Note: Typically, no action is required of enterprise administrators or end users to install updates for the Microsoft Malware Protection Engine, because the built-in mechanism for the automatic detection and deployment of updates will apply the update within 48 hours of release. The exact time frame depends on the software used, Internet connection, and infrastructure configuration.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<table>\n<thead>\n<tr>\n<th>References</th>\n<th>Identification</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Last version of the Microsoft Malware Protection Engine affected by this vulnerability</td>\n<td>Version 1.1.14306.0</td>\n</tr>\n<tr>\n<td>First version of the Microsoft Malware Protection Engine with this vulnerability addressed</td>\n<td>Version 1.1.14405.2</td>\n</tr>\n</tbody>\n</table>\n<p><strong>Were active attacks detected using this vulnerability?</strong>\nMicrosoft is not aware of active attacks using this vulnerability.</p>\n<p><strong>Why was this released before the normal December Security Update Release on December 12, 2017</strong>\nThe Microsoft Malware Protection Engine is released along with anitmalware signatures. These releases don’t always contain security updates and are not bound to a monthly cadence.</p>\n<p><strong>Why is no action required to install this update?</strong>\nIn response to a constantly changing threat landscape, Microsoft frequently updates malware definitions and the Microsoft Malware Protection Engine. In order to be effective in helping protect against new and prevalent threats, antimalware software must be kept up to date with these updates in a timely manner.</p>\n<p>For enterprise deployments as well as end users, the default configuration in Microsoft antimalware software helps ensure that malware definitions and the Microsoft Malware Protection Engine are kept up to date automatically. Product documentation also recommends that products are configured for automatic updating.</p>\n<p>Best practices recommend that customers regularly verify whether software distribution, such as the automatic deployment of Microsoft Malware Protection Engine updates and malware definitions, is working as expected in their environment.</p>\n<p><strong>How often are the Microsoft Malware Protection Engine and malware definitions updated?</strong>\nMicrosoft typically releases an update for the Microsoft Malware Protection Engine once a month or as needed to protect against new threats. Microsoft also typically updates the malware definitions three times daily and can increase the frequency when needed.</p>\n<p>Depending on which Microsoft antimalware software is used and how it is configured, the software may search for engine and definition updates every day when connected to the Internet, up to multiple times daily. Customers can also choose to manually check for updates at any time.</p>\n<p><strong>What is the Microsoft Malware Protection Engine?</strong>\nThe Microsoft Malware Protection Engine, mpengine.dll, provides the scanning, detection, and cleaning capabilities for Microsoft antivirus and antispyware software.</p>\n<p><strong>Does this update contain any additional security-related changes to functionality?</strong>\nYes. In addition to the changes that are listed for this vulnerability, this update includes defense-in-depth updates to help improve security-related features.</p>\n<p><strong>Where can I find more information about Microsoft antimalware technology?</strong>\nFor more information, visit the <a href=\"https://www.microsoft.com/security/portal/\">Microsoft Malware Protection Center</a> website.</p>\n<p><strong>Suggested Actions</strong></p>\n<p><strong>Verify that the update is installed</strong>\nCustomers should verify that the latest version of the Microsoft Malware Protection Engine and definition updates are being actively downloaded and installed for their Microsoft antimalware products.</p>\n<p>For more information on how to verify the version number for the Microsoft Malware Protection Engine that your software is currently using, see the section, &quot;Verifying Update Installation&quot;, in <a href=\"https://support.microsoft.com/kb/2510781\">Microsoft Knowledge Base Article 2510781</a>.</p>\n<p>For affected software, verify that the Microsoft Malware Protection Engine version is 1.1.14405.2 or later.</p>\n<p><strong>If necessary, install the update</strong>\nAdministrators of enterprise antimalware deployments should ensure that their update management software is configured to automatically approve and distribute engine updates and new malware definitions. Enterprise administrators should also verify that the latest version of the Microsoft Malware Protection Engine and definition updates are being actively downloaded, approved and deployed in their environment.</p>\n<p>For end-users, the affected software provides built-in mechanisms for the automatic detection and deployment of this update. For these customers, the update will be applied within 48 hours of its availability. The exact time frame depends on the software used, Internet connection, and infrastructure configuration. End users that do not wish to wait can manually update their antimalware software.</p>\n<p>For more information on how to manually update the Microsoft Malware Protection Engine and malware definitions, refer to<a href=\"https://support.microsoft.com/kb/2510781\"> Microsoft Knowledge Base Article 2510781</a>.</p>\n"},{"Ordinal":"20","Title":"Microsoft Malware Protection Engine","Type":7,"Value":"Microsoft Malware Protection Engine"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"}],"Ordinal":"22","ProductStatuses":[{"ProductID":["11431","11432","10804","10431","10013","10334","251-10951","251-10952","251-10729","251-10735","251-10789","251-10788","251-10852","251-10853","251-10816","251-10855","251-10047","251-10048","251-10481","251-10482","251-10484","251-11453","251-11454","251-11466"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[],"RevisionHistory":[{"Date":"2017-12-06T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2017-12-12T08:00:00","Description":{"Value":"<p>Changed Microsoft Forefront Endpoint Protection to Microsoft System Center Endpoint Protection in the Affected Products table.</p>\n"},"Number":"1.2"},{"Date":"2017-12-08T08:00:00","Description":{"Value":"<p>Added information to the Frequently Asked Questions.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11431"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11432"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10804"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10431"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10013"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10334"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["251-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["251-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["251-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["251-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["251-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["251-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["251-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["251-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["251-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["251-10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["251-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["251-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["251-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["251-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["251-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["251-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["251-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["251-11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11431"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11432"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10804"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10431"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10013"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10334"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["251-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["251-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["251-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["251-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["251-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["251-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["251-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["251-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["251-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["251-10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["251-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["251-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["251-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["251-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["251-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["251-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["251-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["251-11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Malware Protection Engine Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Saif El-Sherei, and Etienne Stalmans"}],"URL":[""]},{"Name":[{"Value":"<a href=\"mailto:international@cert.gov.il\">CERT-IL</a>"}],"URL":[""]}],"CVE":"ADV170021","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>Microsoft has released an update for Microsoft Office that provides enhanced security as a defense-in-depth measure. The update disables the Dynamic Data Exchange protocol (DDE) in all supported editions of Microsoft Word.</p>\n<p>Microsoft is continuing to investigate this issue and will update this advisory as further updates become available. If you are unable to install the update, or if you need to disable the DDE protocol in other Office applications, see <a href=\"https://docs.microsoft.com/en-us/security-updates/securityadvisories/2017/4053440\">Microsoft Security Advisory 4053440</a>. Note that the mitigations listed in the advisory will not disable DDE, but will disable auto-update for any linked fields, including DDE.</p>\n<p>If you need to change DDE functionality in Word after installing the update, follow these steps:</p>\n<ol>\n<li>In the Registry Editor navigate to \\HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\&lt;version&gt;\\Word\\Security<br />\nAllowDDE(DWORD)</li>\n<li>Set the DWORD value based on your requirements as follows:</li>\n</ol>\n<ul>\n<li>AllowDDE(DWORD) = 0: To disable DDE. This is the default setting after you install the update.</li>\n<li>AllowDDE(DWORD) = 1: To allow DDE requests to an already running program, but prevent DDE requests that require another executable program to be launched.</li>\n<li>AllowDDE(DWORD) = 2: To fully allow DDE requests.</li>\n</ul>\n<p><strong>Update:</strong> On 1/9/2018, Microsoft released an update for Microsoft Office that adds defense-in-depth configuration options to selectively disable the DDE protocol in all supported editions of Microsoft Excel.</p>\n<p>If you need to change DDE functionality in Excel after installing the update, follow these steps:</p>\n<ol>\n<li>In the Registry Editor navigate to \\HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\&lt;version&gt;\\Excel\\Security\nDisableDDEServerLaunch(DWORD)</li>\n<li>Set the DWORD value based on your requirements as follows:</li>\n</ol>\n<ul>\n<li>DisableDDEServerLaunch = 0: Keep DDE server launch settings unchanged from their initial behavior. This is the default setting after you install the update.</li>\n<li>DisableDDEServerLaunch = 1: Do not display the dialog that allows users to choose whether to launch a specific DDE server. Instead, behave automatically as though the user chose the default choice of NO.</li>\n</ul>\n<ol start=\"3\">\n<li>In the Registry Editor navigate to \\HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\&lt;version&gt;\\Excel\\Security\nDisableDDEServerLookup(DWORD)</li>\n<li>Set the DWORD value based on your requirements as follows:</li>\n</ol>\n<ul>\n<li>DisableDDEServerLookup = 0: Keep DDE server lookup settings unchanged from their initial behavior. This is the default setting after you install the update.</li>\n<li>DisableDDEServerLookup = 1: Disable querying for DDE Server availability – no query attempt will be made to find DDE servers.</li>\n</ul>\n<p><strong>Update:</strong> On 8/13/2019 Excel for Office 365 clients (&gt;= 1902) disable DDE Server Launch by default, protecting customers out of the box from attacks targeting DDE, even if this defense-in-depth update has not been applied.</p>\n<p>In addition to registry entries that can be configured to control DDE, Office 365 Excel clients now support:</p>\n<ol>\n<li>Two new user controls in Trust Center to configure DDE in Excel. This can help users easily configure DDE behavior without needing to update registry.</li>\n<li>Two new Group Policy controls to configure DDE in Excel. This can help enterprise administrators enforce granular security control on DDE behavior. Following is the policy information:</li>\n</ol>\n<table>\n<thead>\n<tr>\n<th>Policy path</th>\n<th>Setting Name</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>User\\Microsoft Excel 2016\\Excel Options\\Security\\Trust Center\\External Content\\</td>\n<td>Don't allow Dynamic Data Exchange (DDE) server launch in Excel</td>\n</tr>\n<tr>\n<td>User\\Microsoft Excel 2016\\Excel Options\\Security\\Trust Center\\External Content\\</td>\n<td>Don't allow Dynamic Data Exchange (DDE) server lookup in Excel</td>\n</tr>\n</tbody>\n</table>\n<p>These policy controls should now be available in the latest Office policy templates published at: <a href=\"https://www.microsoft.com/download/details.aspx?id=49030\">https://www.microsoft.com/download/details.aspx?id=49030</a>.</p>\n<p>They can also be configured using the <a href=\"https://docs.microsoft.com/en-us/DeployOffice/overview-office-cloud-policy-service\">Office cloud policy service</a>.</p>\n<p><strong>Update:</strong> On 1/11/2022 Microsoft released an update for all supported versions of Excel that disables DDE Server Launch by default, protecting customers out of the box from attacks targeting DDE.\nDDE Server Launch can be enabled by setting the DisableDDEServerLaunch registry value to 0. Administrators can enable DDE Server Launch for Office 2016 and later by using the Group Policy template; administrators should be aware that users cannot disable DDE Server Launch if an administrator has enabled it via Group Policy. For more information see <a href=\"https://support.microsoft.com/help/5010321\">Microsoft Excel security enhancements in the January 2022 update</a>.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>I have Microsoft Word 2010 installed. Why am I not being offered the 4011612 update?</strong>\nThe 4011612 update only applies to systems running specific configurations of Microsoft Office 2010. Some configurations will not be offered the update.</p>\n<p><strong>I am being offered this update for software that is not specifically indicated as being affected in the Affected Software and Vulnerability Severity Ratings table. Why am I being offered this update?</strong>\nWhen updates address vulnerable code that exists in a component that is shared between multiple Microsoft Office products or shared between multiple versions of the same Microsoft Office product, the update is considered to be applicable to all supported products and versions that contain the vulnerable component.</p>\n<p>For example, when an update applies to Microsoft Office 2007 products, only Microsoft Office 2007 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2007, Microsoft Excel 2007, Microsoft Visio 2007, Microsoft Compatibility Pack, Microsoft Excel Viewer, or any other Microsoft Office 2007 product that is not specifically listed in the Affected Software table. Furthermore, when an update applies to Microsoft Office 2010 products, only Microsoft Office 2010 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2010, Microsoft Excel 2010, Microsoft Visio 2010, Microsoft Visio Viewer, or any other Microsoft Office 2010 product that is not specifically listed in the Affected Software table.</p>\n<p>For more information on this behavior and recommended actions, see <a href=\"https://support.microsoft.com/kb/830335\">Microsoft Knowledge Base Article 830335</a>. For a list of Microsoft Office products that an update may apply to, refer to the Microsoft Knowledge Base Article associated with the specific update.</p>\n"},{"Ordinal":"20","Title":"Microsoft Office","Type":7,"Value":"Microsoft Office"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"}],"Ordinal":"23","ProductStatuses":[{"ProductID":["10739","10740","10746","10747","10905","10906","10152","10489","10490","10656","10654","10655","10279","10521","10522","4497","10162","10513","10514","10606","10604","10605"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011627"},"ProductID":["10739","10740"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011220","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=6d682358-aaba-411e-adb6-884283abf193"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011627"},"ProductID":["10739","10740"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011220","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=eb27e943-afc0-4df0-8ea8-0962f04ef2b7"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011575"},"ProductID":["10746","10747"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011242","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=45e2924e-0398-4aca-8971-95defd6fd731"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011575"},"ProductID":["10746","10747"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011242","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=5f675e95-a075-4cad-8f1f-90b0268fca7a"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Click to Run"},"ProductID":["10905","10906"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011602"},"ProductID":["10152"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011199","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=f1afffcc-b6d4-4c0a-9961-e19a965d80c4"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011660"},"ProductID":["10489","10490"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011197","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=d0623e9e-d97d-4337-8b9e-5e123b0c1cec"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011660"},"ProductID":["10489","10490"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011197","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=45767755-c58e-4c2e-834e-f9dfc41c9a7b"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011639"},"ProductID":["10656","10654","10655"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011233","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011639"},"ProductID":["10656","10654","10655"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011233","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=5b6a745f-59af-4475-ab9a-8695ce52f838"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011639"},"ProductID":["10656","10654","10655"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011233","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=47582b44-ec8a-4efe-967c-51980cdf47ef"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011606"},"ProductID":["10279"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011206","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=37f29c56-64a0-472e-bd09-793208a6466c"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011612"},"ProductID":["10521","10522"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011268","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=60cbaeac-b79a-400e-b313-b6b82067177b"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011612"},"ProductID":["10521","10522"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011268","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=5bb1788a-9c58-41bc-9d5a-e0a58d04bbdc"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011605"},"ProductID":["4497"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011205","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=b2552319-092b-4f63-9baa-c4175a8815d2"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011608"},"ProductID":["10162"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011266","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=0f7fc545-099c-474b-b45b-0b92552d9817"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011614"},"ProductID":["10513","10514"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011270","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=5a565fd4-473a-49ee-9500-03abe229b693"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011614"},"ProductID":["10513","10514"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011270","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=0ae7bfd9-05d0-4050-86f7-079203d7509b"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011590"},"ProductID":["10606","10604","10605"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011250","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011590"},"ProductID":["10606","10604","10605"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011250","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=4425c867-b27c-4efe-95e3-c3a319fb8ec6"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011590"},"ProductID":["10606","10604","10605"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011250","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=11adedec-fd39-4549-b0e2-b77ebfdf8087"}],"RevisionHistory":[{"Date":"2018-01-09T08:00:00","Description":{"Value":"<p>ADV170021 has been revised to add support for disabling the Dynamic Update Exchange protocol (DDE) in all supported editions of Microsoft Excel.</p>\n"},"Number":"2.0"},{"Date":"2017-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2019-08-13T07:00:00","Description":{"Value":"<p>ADV170021 has been revised to announce that the DDE Server is now disabled by default for certain versions of Office 365.</p>\n"},"Number":"3.0"},{"Date":"2022-01-11T08:00:00","Description":{"Value":"<p>ADV170021 has been revised to announce that with the installation of updates released on January 11, 2022 the DDE Server is now disabled by default for all supported versions of Microsoft Excel. See <a href=\"https://support.microsoft.com/help/5010321\">Microsoft Excel security enhancements in the January 2022 update</a> for more information.</p>\n"},"Number":"4.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10739"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10740"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10746"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10747"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10905"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10906"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10152"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10489"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10490"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10656"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10654"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10279"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10521"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10522"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["4497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10162"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10513"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10514"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10606"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10604"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10605"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"None"},"ProductID":["10739"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"None"},"ProductID":["10740"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"None"},"ProductID":["10746"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"None"},"ProductID":["10747"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"None"},"ProductID":["10905"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"None"},"ProductID":["10906"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"None"},"ProductID":["10152"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"None"},"ProductID":["10489"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"None"},"ProductID":["10490"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"None"},"ProductID":["10656"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"None"},"ProductID":["10654"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"None"},"ProductID":["10655"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"None"},"ProductID":["10279"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"None"},"ProductID":["10521"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"None"},"ProductID":["10522"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"None"},"ProductID":["4497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"None"},"ProductID":["10162"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"None"},"ProductID":["10513"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"None"},"ProductID":["10514"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"None"},"ProductID":["10606"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"None"},"ProductID":["10604"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"None"},"ProductID":["10605"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Office Defense in Depth Update"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://www.linkedin.com/in/rshupak\">Richard Shupak</a>"}],"URL":[""]}],"CVE":"ADV170023","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>Microsoft has released an update for Microsoft Exchange that provides enhanced security as a defense in depth measure.</p>\n"},{"Ordinal":"20","Title":"Microsoft Exchange Server","Type":7,"Value":"Microsoft Exchange Server"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"}],"Ordinal":"24","ProductStatuses":[{"ProductID":["11469","11449","11450","11470"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4045655"},"ProductID":["11469","11449","11450","11470"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=c7db6072-e1be-4439-bbb3-b0cc13072fb7"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4045655"},"ProductID":["11469","11449","11450","11470"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4036108","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=0fc11c77-5442-4a64-92c4-bce25675ad32"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4045655"},"ProductID":["11469","11449","11450","11470"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4036108","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=572eec81-2998-48a3-be54-f4a2d067f268"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4045655"},"ProductID":["11469","11449","11450","11470"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=9387fe84-723c-499b-b8b9-22e99aa910c0"}],"RevisionHistory":[{"Date":"2017-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["11469"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["11449"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["11450"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["11470"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"None"},"ProductID":["11469"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"None"},"ProductID":["11449"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"None"},"ProductID":["11450"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"None"},"ProductID":["11470"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Exchange Defense in Depth Update"}},{"Acknowledgments":[{"Name":[{"Value":"Hui Gao of <a href=\"https://www.paloaltonetworks.com/\">Palo Alto Networks</a>"}],"URL":[""]}],"CVE":"CVE-2017-11886","CVSSScoreSets":[{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10555-10378"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10336-9312"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10336-9318"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10951"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10952"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11453"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11454"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10729"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10735"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10789"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10788"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10852"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10853"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10816"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10047"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10048"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10481"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10482"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10484"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10051"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10483"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"}],"Ordinal":"25","ProductStatuses":[{"ProductID":["10555-10378","10336-9312","10336-9318","10486-10951","10486-10952","10486-11453","10486-11454","10486-10729","10486-10735","10486-10789","10486-10788","10486-10852","10486-10853","10486-10816","10486-10047","10486-10048","10486-10481","10486-10482","10486-10484","10486-10051","10486-10483"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054520"},"ProductID":["10555-10378"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048959","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054520"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4052978"},"ProductID":["10555-10378","10336-9312","10336-9318","10486-10047","10486-10048","10486-10481","10486-10482","10486-10051","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"IE Cumulative","Supercedence":"4047206","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4052978"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053580"},"ProductID":["10486-10951","10486-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048954","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053580"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054517"},"ProductID":["10486-11453","10486-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048955","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054517"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053581"},"ProductID":["10486-10729","10486-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048956","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053581"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053578"},"ProductID":["10486-10789","10486-10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048952","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053578"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053579"},"ProductID":["10486-10852","10486-10853","10486-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048953","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053579"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054518"},"ProductID":["10486-10047","10486-10048","10486-10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048957","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054518"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054519"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048958","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054519"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054519"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048958","Type":2,"URL":""}],"RevisionHistory":[{"Date":"2018-01-26T08:00:00","Description":{"Value":"<p>Updated CVE description. This is an informational change only.</p>\n"},"Number":"1.1"},{"Date":"2017-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10555-10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10336-9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10336-9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10555-10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10336-9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10336-9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Anonymous working with <a href=\"https://www.zerodayinitiative.com/\">Trend Micro's Zero Day Initiative</a>"}],"URL":[""]},{"Name":[{"Value":"Yuki Chen of <a href=\"http://www.360.com/\">Qihoo 360 Vulcan Team</a>"}],"URL":[""]}],"CVE":"CVE-2017-11887","CVSSScoreSets":[{"BaseScore":2.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10555-10378"],"TemporalScore":2.2,"Vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":2.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10336-9312"],"TemporalScore":2.2,"Vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":2.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10336-9318"],"TemporalScore":2.2,"Vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10951"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10952"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10729"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10735"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10789"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10788"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10852"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10853"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":2.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10816"],"TemporalScore":2.2,"Vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10047"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10048"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10481"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10482"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10484"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":2.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10051"],"TemporalScore":2.2,"Vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":2.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10483"],"TemporalScore":2.2,"Vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p>\n<p>To exploit the vulnerability, in a web-based attack scenario, an attacker could host a website in an attempt to exploit the vulnerability. In addition, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action. For example, an attacker could trick a user into clicking a link that takes the user to the attacker's site.</p>\n<p>The security update addresses the vulnerability by modifying how Internet Explorer handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"}],"Ordinal":"26","ProductStatuses":[{"ProductID":["10555-10378","10336-9312","10336-9318","10486-10951","10486-10952","10486-10729","10486-10735","10486-10789","10486-10788","10486-10852","10486-10853","10486-10816","10486-10047","10486-10048","10486-10481","10486-10482","10486-10484","10486-10051","10486-10483"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054520"},"ProductID":["10555-10378"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048959","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054520"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4052978"},"ProductID":["10555-10378","10336-9312","10336-9318","10486-10047","10486-10048","10486-10481","10486-10482","10486-10051","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"IE Cumulative","Supercedence":"4047206","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4052978"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053580"},"ProductID":["10486-10951","10486-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048954","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053580"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053581"},"ProductID":["10486-10729","10486-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048956","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053581"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053578"},"ProductID":["10486-10789","10486-10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048952","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053578"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053579"},"ProductID":["10486-10852","10486-10853","10486-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048953","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053579"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054518"},"ProductID":["10486-10047","10486-10048","10486-10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048957","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054518"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054519"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048958","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054519"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054519"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048958","Type":2,"URL":""}],"RevisionHistory":[{"Date":"2017-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10555-10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10336-9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10336-9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10555-10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10336-9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10336-9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10486-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10486-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10486-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Internet Explorer Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://twitter.com/debasishm89\">Debasish Mandal</a> of the McAfee Labs HIPS R&D"}],"URL":[""]},{"Name":[{"Value":"Marcin Towalski (<a href=\"https://twitter.com/mtowalski1\">@mtowalski1</a>)"}],"URL":[""]}],"CVE":"CVE-2017-11888","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11453"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11454"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10729"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10735"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10789"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10788"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10852"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10816"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>An attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge, and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by way of enticement in an email or Instant Messenger message, or by getting them to open an attachment sent through email.</p>\n<p>The security update addresses the vulnerability by modifying how Microsoft Edge handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Edge (HTML-based)","Type":7,"Value":"Microsoft Edge (HTML-based)"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"}],"Ordinal":"27","ProductStatuses":[{"ProductID":["10724-10951","10724-10952","10724-11453","10724-11454","10724-10729","10724-10735","10724-10789","10724-10788","10724-10852","10724-10853","10724-10816"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053580"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048954","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053580"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054517"},"ProductID":["10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048955","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054517"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053581"},"ProductID":["10724-10729","10724-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048956","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053581"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053578"},"ProductID":["10724-10789","10724-10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048952","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053578"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053579"},"ProductID":["10724-10852","10724-10853","10724-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048953","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053579"}],"RevisionHistory":[{"Date":"2017-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10724-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Edge Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Huang Anwen <a href=https://www.ichunqiu.com/>ichunqiu Ker Team</a>"}],"URL":[""]}],"CVE":"CVE-2017-11894","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10555-10378"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10336-9312"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10336-9318"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10951"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10952"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11453"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11454"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10729"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10735"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10789"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10788"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10852"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10853"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10816"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10047"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10048"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10481"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10482"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10484"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10051"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10483"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10729"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10735"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10789"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10788"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10852"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10816"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11453"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11454"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website designed to exploit the vulnerability through a Microsoft browser and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the browser rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"}],"Ordinal":"28","ProductStatuses":[{"ProductID":["11447","10555-10378","10336-9312","10336-9318","10486-10951","10486-10952","10486-11453","10486-11454","10486-10729","10486-10735","10486-10789","10486-10788","10486-10852","10486-10853","10486-10816","10486-10047","10486-10048","10486-10481","10486-10482","10486-10484","10486-10051","10486-10483","10724-10951","10724-10952","10724-10729","10724-10735","10724-10789","10724-10788","10724-10852","10724-10853","10724-10816","10724-11453","10724-11454"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.7.5"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054520"},"ProductID":["10555-10378"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048959","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054520"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4052978"},"ProductID":["10555-10378","10336-9312","10336-9318","10486-10047","10486-10048","10486-10481","10486-10482","10486-10051","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"IE Cumulative","Supercedence":"4047206","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4052978"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053580"},"ProductID":["10486-10951","10486-10952","10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048954","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053580"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054517"},"ProductID":["10486-11453","10486-11454","10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048955","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054517"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053581"},"ProductID":["10486-10729","10486-10735","10724-10729","10724-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048956","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053581"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053578"},"ProductID":["10486-10789","10486-10788","10724-10789","10724-10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048952","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053578"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053579"},"ProductID":["10486-10852","10486-10853","10486-10816","10724-10852","10724-10853","10724-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048953","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053579"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054518"},"ProductID":["10486-10047","10486-10048","10486-10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048957","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054518"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054519"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048958","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054519"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054519"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048958","Type":2,"URL":""}],"RevisionHistory":[{"Date":"2017-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10555-10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10336-9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10336-9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10555-10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10336-9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10336-9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10724-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Ivan Fratric of <a href=\"https://www.google.com\">Google Project Zero</a>"}],"URL":[""]}],"CVE":"CVE-2017-11907","CVSSScoreSets":[{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10555-10378"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10336-9312"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10336-9318"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10951"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10952"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10729"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10735"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10789"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10788"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10852"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10853"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10816"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10047"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10048"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10481"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10482"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10484"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10051"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10483"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11453"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11454"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"}],"Ordinal":"29","ProductStatuses":[{"ProductID":["10555-10378","10336-9312","10336-9318","10486-10951","10486-10952","10486-10729","10486-10735","10486-10789","10486-10788","10486-10852","10486-10853","10486-10816","10486-10047","10486-10048","10486-10481","10486-10482","10486-10484","10486-10051","10486-10483","10486-11453","10486-11454"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054520"},"ProductID":["10555-10378"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048959","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054520"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4052978"},"ProductID":["10555-10378","10336-9312","10336-9318","10486-10047","10486-10048","10486-10481","10486-10482","10486-10051","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"IE Cumulative","Supercedence":"4047206","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4052978"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053580"},"ProductID":["10486-10951","10486-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048954","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053580"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053581"},"ProductID":["10486-10729","10486-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048956","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053581"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053578"},"ProductID":["10486-10789","10486-10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048952","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053578"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053579"},"ProductID":["10486-10852","10486-10853","10486-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048953","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053579"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054518"},"ProductID":["10486-10047","10486-10048","10486-10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048957","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054518"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054519"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048958","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054519"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054519"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048958","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054517"},"ProductID":["10486-11453","10486-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048955","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054517"}],"RevisionHistory":[{"Date":"2018-01-26T08:00:00","Description":{"Value":"<p>Updated CVE description. This is an informational change only.</p>\n"},"Number":"1.1"},{"Date":"2017-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10555-10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10336-9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10336-9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10555-10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10336-9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10336-9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[],"CVE":"CVE-2017-11905","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11453"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11454"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10789"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10788"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10852"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10816"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"}],"Ordinal":"30","ProductStatuses":[{"ProductID":["11447","10724-10951","10724-10952","10724-11453","10724-11454","10724-10789","10724-10788","10724-10852","10724-10853","10724-10816"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.7.5"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053580"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048954","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053580"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054517"},"ProductID":["10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048955","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054517"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053578"},"ProductID":["10724-10789","10724-10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048952","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053578"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053579"},"ProductID":["10724-10852","10724-10853","10724-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048953","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053579"}],"RevisionHistory":[{"Date":"2017-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10724-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Lokihardt of <a href=\"https://www.google.com/\">Google Project Zero</a>"}],"URL":[""]}],"CVE":"CVE-2017-11916","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user.</p>\n<p>If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>The security update addresses the vulnerability by modifying how the ChakraCore scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"}],"Ordinal":"31","ProductStatuses":[{"ProductID":["11447"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.7.5"}],"RevisionHistory":[{"Date":"2017-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Wei of <a href=\"https://www.360.cn\">Qihoo 360 Vulcan Team</a>"}],"URL":[""]}],"CVE":"CVE-2017-11919","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10951"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10952"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11453"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11454"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10729"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10735"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10789"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10788"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10852"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10853"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10816"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10047"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10048"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10481"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10482"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10484"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10051"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10483"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11453"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11454"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10729"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10735"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10789"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10788"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10852"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10816"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft browsers. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p>\n<p>In a web-based attack scenario, an attacker could host a website in an attempt to exploit the vulnerability. In addition, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action. For example, an attacker could trick a user into clicking a link that takes the user to the attacker's site.</p>\n<p>The security update addresses the vulnerability by changing how the scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"}],"Ordinal":"32","ProductStatuses":[{"ProductID":["11447","10486-10951","10486-10952","10486-11453","10486-11454","10486-10729","10486-10735","10486-10789","10486-10788","10486-10852","10486-10853","10486-10816","10486-10047","10486-10048","10486-10481","10486-10482","10486-10484","10486-10051","10486-10483","10724-10951","10724-10952","10724-11453","10724-11454","10724-10729","10724-10735","10724-10789","10724-10788","10724-10852","10724-10853","10724-10816"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.7.5"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053580"},"ProductID":["10486-10951","10486-10952","10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048954","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053580"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054517"},"ProductID":["10486-11453","10486-11454","10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048955","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054517"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053581"},"ProductID":["10486-10729","10486-10735","10724-10729","10724-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048956","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053581"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053578"},"ProductID":["10486-10789","10486-10788","10724-10789","10724-10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048952","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053578"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053579"},"ProductID":["10486-10852","10486-10853","10486-10816","10724-10852","10724-10853","10724-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4048953","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053579"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054518"},"ProductID":["10486-10047","10486-10048","10486-10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048957","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054518"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4052978"},"ProductID":["10486-10047","10486-10048","10486-10481","10486-10482","10486-10051","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"IE Cumulative","Supercedence":"4047206","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4052978"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054519"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048958","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4054519"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4054519"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4048958","Type":2,"URL":""}],"RevisionHistory":[{"Date":"2017-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10486-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10486-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10486-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10724-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Dhanesh Kizhakkinan of <a href=”https://www.fireeye.com/)”>Fire Eye Inc.</a>\n"}],"URL":[""]}],"CVE":"CVE-2017-11934","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data.</p>\n<p>To exploit the vulnerability, an attacker could craft a special document file and then convince the user to open it. An attacker must know the memory address location where the object was created.</p>\n<p>The update addresses the vulnerability by changing the way certain functions handle objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Office","Type":7,"Value":"Microsoft Office"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"}],"Ordinal":"33","ProductStatuses":[{"ProductID":["10753","10754","10734","10905","10906","10603","10601","10602"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011095"},"ProductID":["10753","10754"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=d0c17df1-ea42-46f0-9221-9e003574b40b"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011095"},"ProductID":["10753","10754"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=83a5c529-ddc2-4a3f-86b3-7400967002b3"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"ProductID":["10734"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":"https://go.microsoft.com/fwlink/p/?linkid=831049"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Click to Run"},"ProductID":["10905","10906"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011277"},"ProductID":["10603","10601","10602"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"2975808","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011277"},"ProductID":["10603","10601","10602"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"2975808","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=06e79630-6601-4e46-a8a6-db96fea5e704"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011277"},"ProductID":["10603","10601","10602"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"2975808","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=91f18b74-6ff7-4155-b8f9-23faedaa877b"}],"RevisionHistory":[{"Date":"2018-01-25T08:00:00","Description":{"Value":"<p>Updated CVE title. This is an informational change only.</p>\n"},"Number":"1.1"},{"Date":"2017-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10753"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10754"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10734"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10905"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10906"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10603"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10601"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10602"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10753"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10754"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10734"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10905"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10906"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10603"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10601"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10602"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Office Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Dhanesh Kizhakkinan of <a href=\"https://www.fireeye.com/\">FireEye Inc</a>"}],"URL":[""]}],"CVE":"CVE-2017-11935","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the file could then take actions on behalf of the logged-on user with the same permissions as the current user.</p>\n<p>To exploit the vulnerability, a user must open a specially crafted file with an affected version of Microsoft Office software. In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file. In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) that contains a specially crafted file that is designed to exploit the vulnerability. However, an attacker would have no way to force the user to visit the website. Instead, an attacker would have to convince the user to click a link, typically by way of an enticement in an email or Instant Messenger message, and then convince the user to open the specially crafted file.</p>\n<p>The security update addresses the vulnerability by correcting how Microsoft Office handles files in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Office","Type":7,"Value":"Microsoft Office"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"}],"Ordinal":"34","ProductStatuses":[{"ProductID":["10905","10906"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Click to Run"},"ProductID":["10905","10906"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""}],"RevisionHistory":[{"Date":"2018-01-25T08:00:00","Description":{"Value":"<p>Updated CVE title. This is an informational change only.</p>\n"},"Number":"1.1"},{"Date":"2017-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10905"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10906"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10905"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10906"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Office Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://twitter.com/soaj1664ashar\">Ashar Javed</a> of Hyundai AutoEver Europe GmbH"}],"URL":[""]}],"CVE":"CVE-2017-11936","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.</p>\n<p>The attacker who successfully exploited the vulnerability could then perform cross-site scripting attacks on affected systems and run script in the security context of the current user. These attacks could allow the attacker to read content that the attacker is not authorized to read, use the victim's identity to take actions on the SharePoint site on behalf of the user, such as change permissions and delete content, and inject malicious content in the browser of the user.</p>\n<p>The security update addresses the vulnerability by helping to ensure that SharePoint Server properly sanitizes web requests.</p>\n"},{"Ordinal":"20","Title":"Microsoft Office","Type":7,"Value":"Microsoft Office"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"}],"Ordinal":"35","ProductStatuses":[{"ProductID":["10950"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011576"},"ProductID":["10950"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011244","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=dd16461c-5fec-4ec9-9c21-f48592d8ecfd"}],"RevisionHistory":[{"Date":"2017-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10950"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10950"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft SharePoint Elevation of Privilege Vulnerability"}},{"Acknowledgments":[],"CVE":"ADV170022","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This security update addresses the following vulnerability, which is described in Adobe Security Bulletin <a href=\"http://helpx.adobe.com/security/products/flash-player/apsb17-42.html\">APSB17-42</a>: CVE-2017-11305</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>How could an attacker exploit these vulnerabilities?</strong>\nIn a web-based attack scenario where the user is using Internet Explorer for the desktop, an attacker could host a specially crafted website that is designed to exploit any of these vulnerabilities through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit any of these vulnerabilities. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by clicking a link in an email message or in an Instant Messenger message that takes users to the attacker's website, or by opening an attachment sent through email.</p>\n<p>In a web-based attack scenario where the user is using Internet Explorer in the Windows 8-style UI, an attacker would first need to compromise a website already listed in the Compatibility View (CV) list. An attacker could then host a website that contains specially crafted Flash content designed to exploit any of these vulnerabilities through Internet Explorer and then convince a user to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by clicking a link in an email message or in an Instant Messenger message that takes users to the attacker's website, or by opening an attachment sent through email. For more information about Internet Explorer and the CV List, please see the MSDN Article, Developer Guidance for websites with content for Adobe Flash Player in Windows 8.</p>\n"},{"Ordinal":"20","Title":"Adobe Flash Player","Type":7,"Value":"Adobe Flash Player"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"}],"Ordinal":"36","ProductStatuses":[{"ProductID":["10384-10951","10384-10952","10384-11453","10384-11454","10384-11466","10384-10729","10384-10735","10384-10789","10384-10788","10384-10852","10384-10853","10384-10816","10384-10481","10384-10482","10384-10484","10384-10378","10384-10483"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4053577"},"ProductID":["10384-10951","10384-10952","10384-11453","10384-11454","10384-11466","10384-10729","10384-10735","10384-10789","10384-10788","10384-10852","10384-10853","10384-10816","10384-10481","10384-10482","10384-10484","10384-10378","10384-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4049179","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4053577"}],"RevisionHistory":[{"Date":"2017-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10384-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10384-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10384-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10384-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10384-11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10384-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10384-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10384-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10384-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10384-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10384-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10384-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10384-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10384-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10384-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10384-10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10384-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;DOS:N/A"},"Type":1}],"Title":{"Value":"December 2017 Flash Security Update"}},{"Acknowledgments":[{"Name":[{"Value":"Alex Harmon, Microsoft"}],"URL":[""]}],"CVE":"CVE-2017-11939","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An information disclosure vulnerability exists when Microsoft Outlook fails to enforce copy/paste permissions on DRM-protected emails. An attacker who successfully exploited the vulnerability could potentially extract plaintext content from DRM-protected draft emails.</p>\n<p>The attacker would have to use another vulnerability to gain access to the victim's Drafts folder, either locally on the victim's system or remotely via MAPI.</p>\n<p>The security update addresses the vulnerability by correcting how Microsoft Outlook enforces DRM copy/paste permissions.</p>\n"},{"Ordinal":"20","Title":"Microsoft Office","Type":7,"Value":"Microsoft Office"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"}],"Ordinal":"37","ProductStatuses":[{"ProductID":["10905","10906"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Click to Run"},"ProductID":["10905","10906"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""}],"RevisionHistory":[{"Date":"2017-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10905"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10906"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10905"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10906"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Office Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"The UK's National Cyber Security Centre (NCSC)"}],"URL":[""]}],"CVE":"CVE-2017-11940","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption. An attacker who successfully exploited this vulnerability could execute arbitrary code in the security context of the LocalSystem account and take control of the system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>To exploit this vulnerability, a specially crafted file must be scanned by an affected version of the Microsoft Malware Protection Engine. There are many ways that an attacker could place a specially crafted file in a location that is scanned by the Microsoft Malware Protection Engine. For example, an attacker could use a website to deliver a specially crafted file to the victim's system that is scanned when the website is viewed by the user. An attacker could also deliver a specially crafted file via an email message or in an Instant Messenger message that is scanned when the file is opened. In addition, an attacker could take advantage of websites that accept or host user-provided content, to upload a specially crafted file to a shared location that is scanned by the Malware Protection Engine running on the hosting server.</p>\n<p>If the affected antimalware software has real-time protection turned on, the Microsoft Malware Protection Engine will scan files automatically, leading to exploitation of the vulnerability when the specially crafted file is scanned. If real-time scanning is not enabled, the attacker would need to wait until a scheduled scan occurs in order for the vulnerability to be exploited. All systems running an affected version of antimalware software are primarily at risk.</p>\n<p>The update addresses the vulnerability by correcting the manner in which the Microsoft Malware Protection Engine scans specially crafted files.</p>\n<p>Note: Typically, no action is required of enterprise administrators or end users to install updates for the Microsoft Malware Protection Engine, because the built-in mechanism for the automatic detection and deployment of updates will apply the update within 48 hours of release. The exact time frame depends on the software used, Internet connection, and infrastructure configuration.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<table>\n<thead>\n<tr>\n<th>References</th>\n<th>Identification</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Last version of the Microsoft Malware Protection Engine affected by this vulnerability</td>\n<td>Version 1.1.14306.0</td>\n</tr>\n<tr>\n<td>First version of the Microsoft Malware Protection Engine with this vulnerability addressed</td>\n<td>Version 1.1.14405.2</td>\n</tr>\n</tbody>\n</table>\n<p><strong>Were active attacks detected using this vulnerability?</strong>\nMicrosoft is not aware of active attacks using this vulnerability.</p>\n<p><strong>Why was this released before the normal December Security Update Release on December 12, 2017</strong>\nThe Microsoft Malware Protection Engine is released along with anitmalware signatures. These releases don’t always contain security updates and are not bound to a monthly cadence.</p>\n<p><strong>Why is no action required to install this update?</strong>\nIn response to a constantly changing threat landscape, Microsoft frequently updates malware definitions and the Microsoft Malware Protection Engine. In order to be effective in helping protect against new and prevalent threats, antimalware software must be kept up to date with these updates in a timely manner.</p>\n<p>For enterprise deployments as well as end users, the default configuration in Microsoft antimalware software helps ensure that malware definitions and the Microsoft Malware Protection Engine are kept up to date automatically. Product documentation also recommends that products are configured for automatic updating.</p>\n<p>Best practices recommend that customers regularly verify whether software distribution, such as the automatic deployment of Microsoft Malware Protection Engine updates and malware definitions, is working as expected in their environment.</p>\n<p><strong>How often are the Microsoft Malware Protection Engine and malware definitions updated?</strong>\nMicrosoft typically releases an update for the Microsoft Malware Protection Engine once a month or as needed to protect against new threats. Microsoft also typically updates the malware definitions three times daily and can increase the frequency when needed.</p>\n<p>Depending on which Microsoft antimalware software is used and how it is configured, the software may search for engine and definition updates every day when connected to the Internet, up to multiple times daily. Customers can also choose to manually check for updates at any time.</p>\n<p><strong>What is the Microsoft Malware Protection Engine?</strong>\nThe Microsoft Malware Protection Engine, mpengine.dll, provides the scanning, detection, and cleaning capabilities for Microsoft antivirus and antispyware software.</p>\n<p><strong>Does this update contain any additional security-related changes to functionality?</strong>\nYes. In addition to the changes that are listed for this vulnerability, this update includes defense-in-depth updates to help improve security-related features.</p>\n<p><strong>Where can I find more information about Microsoft antimalware technology?</strong>\nFor more information, visit the <a href=\"https://www.microsoft.com/security/portal/\">Microsoft Malware Protection Center</a> website.</p>\n<p><strong>Suggested Actions</strong></p>\n<p><strong>Verify that the update is installed</strong>\nCustomers should verify that the latest version of the Microsoft Malware Protection Engine and definition updates are being actively downloaded and installed for their Microsoft antimalware products.</p>\n<p>For more information on how to verify the version number for the Microsoft Malware Protection Engine that your software is currently using, see the section, &quot;Verifying Update Installation&quot;, in <a href=\"https://support.microsoft.com/kb/2510781\">Microsoft Knowledge Base Article 2510781</a>.</p>\n<p>For affected software, verify that the Microsoft Malware Protection Engine version is 1.1.14405.2 or later.</p>\n<p><strong>If necessary, install the update</strong>\nAdministrators of enterprise antimalware deployments should ensure that their update management software is configured to automatically approve and distribute engine updates and new malware definitions. Enterprise administrators should also verify that the latest version of the Microsoft Malware Protection Engine and definition updates are being actively downloaded, approved and deployed in their environment.</p>\n<p>For end-users, the affected software provides built-in mechanisms for the automatic detection and deployment of this update. For these customers, the update will be applied within 48 hours of its availability. The exact time frame depends on the software used, Internet connection, and infrastructure configuration. End users that do not wish to wait can manually update their antimalware software.</p>\n<p>For more information on how to manually update the Microsoft Malware Protection Engine and malware definitions, refer to<a href=\"https://support.microsoft.com/kb/2510781\"> Microsoft Knowledge Base Article 2510781</a>.</p>\n"},{"Ordinal":"20","Title":"Microsoft Malware Protection Engine","Type":7,"Value":"Microsoft Malware Protection Engine"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"}],"Ordinal":"38","ProductStatuses":[{"ProductID":["11431","11432","10804","10431","10013","10334","251-10951","251-10952","251-10729","251-10735","251-10789","251-10788","251-10852","251-10853","251-10816","251-10855","251-10047","251-10048","251-10481","251-10482","251-10484","251-11453","251-11454"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[],"RevisionHistory":[{"Date":"2017-12-08T08:00:00","Description":{"Value":"<p>Added information to the Frequently Asked Questions.</p>\n"},"Number":"1.1"},{"Date":"2017-12-12T08:00:00","Description":{"Value":"<p>Changed Microsoft Forefront Endpoint Protection to Microsoft System Center Endpoint Protection in the Affected Products table.</p>\n"},"Number":"1.2"},{"Date":"2017-12-07T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11431"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11432"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10804"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10431"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10013"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10334"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["251-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["251-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["251-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["251-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["251-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["251-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["251-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["251-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["251-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["251-10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["251-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["251-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["251-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["251-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["251-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["251-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["251-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11431"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11432"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10804"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10431"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10013"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10334"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["251-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["251-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["251-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["251-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["251-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["251-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["251-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["251-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["251-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["251-10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["251-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["251-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["251-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["251-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["251-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["251-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["251-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Malware Protection Engine Remote Code Execution Vulnerability"}}]}
View Git Blame Copy Permalink