VULN/vuln-microsoft
1
0
Fork 0
Code Pull Requests Actions Activity
Files
main
vuln-microsoft/data/cvrf/2017/2017-Oct.json
T

2 lines
775 KiB
JSON
Raw Permalink Blame History

This file contains invisible Unicode characters
This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<p>The October security release consists of security updates for the following software:</p>\n<ul>\n<li>Internet Explorer</li>\n<li>Microsoft Edge</li>\n<li>Microsoft Windows</li>\n<li>Adobe Flash Player</li>\n<li>Microsoft Office and Microsoft Office Services and Web Apps</li>\n<li>Skype for Business and Lync</li>\n<li>Chakra Core</li>\n</ul>\n<p>Please note the following information regarding the security updates:</p>\n<ul>\n<li>ADV170016 was deprecated in lieu of CVE-2017-13080.</li>\n<li>Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the <a href=\"http://catalog.update.microsoft.com/v7/site/Home.aspx\">Microsoft Update Catalog</a>.</li>\n<li>Starting in March 2017, a delta package will be available on the Microsoft Update Catalog for Windows 10 version 1607 and newer. This delta package contains just the delta changes between the previous month and the current release.</li>\n<li>Updates for Windows RT 8.1 and Microsoft Office RT software are only available via <a href=\"http://go.microsoft.com/fwlink/?LinkId=21130\">Windows Update</a>.</li>\n<li>In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.</li>\n<li>For information on lifecycle and support dates for Windows 10 operating systems, please see <a href=\"https://support.microsoft.com/en-us/help/13853/windows-lifecycle-fact-sheet\">Windows Lifecycle Facts Sheet</a>.</li>\n</ul>\n<p><strong>Known Issues</strong></p>\n<ul>\n<li><a href=\"https://support.microsoft.com/en-us/help/4041691\">4041691</a></li>\n<li><a href=\"https://support.microsoft.com/en-us/help/4042895\">4042895</a></li>\n<li><a href=\"https://support.microsoft.com/en-us/help/4041676\">4041676</a></li>\n<li><a href=\"https://support.microsoft.com/en-us/help/4041681\">4041681</a></li>\n<li><a href=\"https://support.microsoft.com/en-us/help/4040685\">4040685</a></li>\n<li><a href=\"https://support.microsoft.com/en-us/help/4049179\">4049179</a></li>\n</ul>\n"},{"Audience":"Public","Ordinal":"1","Title":"Legal Disclaimer","Type":5,"Value":"The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply."}],"DocumentPublisher":{"ContactDetails":{"Value":"secure@microsoft.com"},"IssuingAuthority":{"Value":"The Microsoft Security Response Center (MSRC) identifies, monitors, resolves, and responds to security incidents and Microsoft software security vulnerabilities. For more information, see http://www.microsoft.com/security/msrc."},"Type":0},"DocumentTitle":{"Value":"October 2017 Security Updates"},"DocumentTracking":{"CurrentReleaseDate":"2026-11-10T01:02:52","Identification":{"Alias":{"Value":"2017-Oct"},"ID":{"Value":"2017-Oct"}},"InitialReleaseDate":"2017-10-10T07:00:00Z","RevisionHistory":[{"Date":"2026-11-10T01:02:52","Description":{"Value":"October 2017 Security Updates"},"Number":"53"}],"Status":2,"Version":"1.0"},"DocumentType":{"Value":"Security Update"},"ProductTree":{"Branch":[{"Items":[{"Items":[{"ProductID":"10951","Value":"Windows 10 Version 1703 for 32-bit Systems"},{"ProductID":"10952","Value":"Windows 10 Version 1703 for x64-based Systems"},{"ProductID":"10729","Value":"Windows 10 for 32-bit Systems"},{"ProductID":"10735","Value":"Windows 10 for x64-based Systems"},{"ProductID":"10789","Value":"Windows 10 Version 1511 for 32-bit Systems"},{"ProductID":"10788","Value":"Windows 10 Version 1511 for x64-based Systems"},{"ProductID":"10852","Value":"Windows 10 Version 1607 for 32-bit Systems"},{"ProductID":"10853","Value":"Windows 10 Version 1607 for x64-based Systems"},{"ProductID":"10816","Value":"Windows Server 2016"},{"ProductID":"10855","Value":"Windows Server 2016 (Server Core installation)"},{"ProductID":"10481","Value":"Windows 8.1 for 32-bit systems"},{"ProductID":"10482","Value":"Windows 8.1 for x64-based systems"},{"ProductID":"10484","Value":"Windows RT 8.1"},{"ProductID":"10483","Value":"Windows Server 2012 R2"},{"ProductID":"10543","Value":"Windows Server 2012 R2 (Server Core installation)"},{"ProductID":"10378","Value":"Windows Server 2012"},{"ProductID":"11453","Value":"Windows 10 Version 1709 for 32-bit Systems"},{"ProductID":"11454","Value":"Windows 10 Version 1709 for x64-based Systems"},{"ProductID":"10379","Value":"Windows Server 2012 (Server Core installation)"}],"Name":"Windows","Type":1},{"Items":[{"ProductID":"10047","Value":"Windows 7 for 32-bit Systems Service Pack 1"},{"ProductID":"10048","Value":"Windows 7 for x64-based Systems Service Pack 1"},{"ProductID":"9312","Value":"Windows Server 2008 for 32-bit Systems Service Pack 2"},{"ProductID":"10287","Value":"Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)"},{"ProductID":"9311","Value":"Windows Server 2008 for Itanium-Based Systems Service Pack 2"},{"ProductID":"9318","Value":"Windows Server 2008 for x64-based Systems Service Pack 2"},{"ProductID":"9344","Value":"Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)"},{"ProductID":"10050","Value":"Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1"},{"ProductID":"10051","Value":"Windows Server 2008 R2 for x64-based Systems Service Pack 1"},{"ProductID":"10336-9312","Value":"Internet Explorer 9 on Windows Server 2008 for 32-bit Systems Service Pack 2"},{"ProductID":"10336-9318","Value":"Internet Explorer 9 on Windows Server 2008 for x64-based Systems Service Pack 2"},{"ProductID":"10049","Value":"Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"}],"Name":"ESU","Type":1},{"Items":[{"ProductID":"11457","Value":"Microsoft Surface Studio"},{"ProductID":"10820","Value":"Microsoft Surface Pro 4"}],"Name":"Device","Type":1},{"Items":[{"ProductID":"11447","Value":"ChakraCore"},{"ProductID":"10724-10951","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for 32-bit Systems"},{"ProductID":"10724-10952","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for x64-based Systems"},{"ProductID":"10486-10951","Value":"Internet Explorer 11 on Windows 10 Version 1703 for 32-bit Systems"},{"ProductID":"10486-10952","Value":"Internet Explorer 11 on Windows 10 Version 1703 for x64-based Systems"},{"ProductID":"10486-10729","Value":"Internet Explorer 11 on Windows 10 for 32-bit Systems"},{"ProductID":"10486-10735","Value":"Internet Explorer 11 on Windows 10 for x64-based Systems"},{"ProductID":"10486-10789","Value":"Internet Explorer 11 on Windows 10 Version 1511 for 32-bit Systems"},{"ProductID":"10486-10788","Value":"Internet Explorer 11 on Windows 10 Version 1511 for x64-based Systems"},{"ProductID":"10486-10852","Value":"Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems"},{"ProductID":"10486-10853","Value":"Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems"},{"ProductID":"10486-10816","Value":"Internet Explorer 11 on Windows Server 2016"},{"ProductID":"10486-10047","Value":"Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1"},{"ProductID":"10486-10048","Value":"Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1"},{"ProductID":"10486-10481","Value":"Internet Explorer 11 on Windows 8.1 for 32-bit systems"},{"ProductID":"10486-10482","Value":"Internet Explorer 11 on Windows 8.1 for x64-based systems"},{"ProductID":"10486-10484","Value":"Internet Explorer 11 on Windows RT 8.1"},{"ProductID":"10486-10051","Value":"Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1"},{"ProductID":"10486-10483","Value":"Internet Explorer 11 on Windows Server 2012 R2"},{"ProductID":"10724-10729","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems"},{"ProductID":"10724-10735","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems"},{"ProductID":"10724-10789","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for 32-bit Systems"},{"ProductID":"10724-10788","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for x64-based Systems"},{"ProductID":"10724-10852","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems"},{"ProductID":"10724-10853","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems"},{"ProductID":"10724-10816","Value":"Microsoft Edge (EdgeHTML-based) on Windows Server 2016"},{"ProductID":"10555-10378","Value":"Internet Explorer 10 on Windows Server 2012"}],"Name":"Browser","Type":1},{"Items":[{"ProductID":"10521","Value":"Microsoft Office 2010 Service Pack 2 (32-bit editions)"},{"ProductID":"10522","Value":"Microsoft Office 2010 Service Pack 2 (64-bit editions)"},{"ProductID":"10603","Value":"Microsoft Office 2013 RT Service Pack 1"},{"ProductID":"10601","Value":"Microsoft Office 2013 Service Pack 1 (32-bit editions)"},{"ProductID":"10602","Value":"Microsoft Office 2013 Service Pack 1 (64-bit editions)"},{"ProductID":"10753","Value":"Microsoft Office 2016 (32-bit edition)"},{"ProductID":"10754","Value":"Microsoft Office 2016 (64-bit edition)"},{"ProductID":"10628","Value":"Microsoft Lync 2013 Service Pack 1 (32-bit)"},{"ProductID":"10630","Value":"Microsoft Lync 2013 Service Pack 1 (64-bit)"},{"ProductID":"10770","Value":"Skype for Business 2016 (32-bit)"},{"ProductID":"10771","Value":"Skype for Business 2016 (64-bit)"},{"ProductID":"10765","Value":"Microsoft Outlook 2016 (32-bit edition)"},{"ProductID":"10766","Value":"Microsoft Outlook 2016 (64-bit edition)"},{"ProductID":"10810","Value":"Microsoft Outlook 2013 Service Pack 1 (32-bit editions)"},{"ProductID":"10811","Value":"Microsoft Outlook 2013 Service Pack 1 (64-bit editions)"},{"ProductID":"10527","Value":"Microsoft Outlook 2010 Service Pack 2 (32-bit editions)"},{"ProductID":"10528","Value":"Microsoft Outlook 2010 Service Pack 2 (64-bit editions)"},{"ProductID":"10407","Value":"Microsoft Outlook 2013 RT Service Pack 1"},{"ProductID":"11099","Value":"Microsoft SharePoint Enterprise Server 2013 Service Pack 1"},{"ProductID":"10950","Value":"Microsoft SharePoint Enterprise Server 2016"},{"ProductID":"10734","Value":"Microsoft Office 2016 for Mac"},{"ProductID":"10905","Value":"Microsoft Office 2016 Click-to-Run (C2R) for 32-bit editions"},{"ProductID":"10906","Value":"Microsoft Office 2016 Click-to-Run (C2R) for 64-bit editions"},{"ProductID":"10748","Value":"Microsoft Office Online Server 2016"},{"ProductID":"10746","Value":"Microsoft Word 2016 (32-bit edition)"},{"ProductID":"10747","Value":"Microsoft Word 2016 (64-bit edition)"},{"ProductID":"4497","Value":"Microsoft Office Compatibility Pack Service Pack 3"},{"ProductID":"10649","Value":"Microsoft Office Web Apps Server 2010 Service Pack 2"},{"ProductID":"10611","Value":"Microsoft Office Web Apps Server 2013 Service Pack 1"},{"ProductID":"1160","Value":"Microsoft Office Word Viewer"},{"ProductID":"10162","Value":"Microsoft Word 2007 Service Pack 3"},{"ProductID":"10513","Value":"Microsoft Word 2010 Service Pack 2 (32-bit editions)"},{"ProductID":"10514","Value":"Microsoft Word 2010 Service Pack 2 (64-bit editions)"},{"ProductID":"10606","Value":"Microsoft Word 2013 RT Service Pack 1"},{"ProductID":"10604","Value":"Microsoft Word 2013 Service Pack 1 (32-bit editions)"},{"ProductID":"10605","Value":"Microsoft Word 2013 Service Pack 1 (64-bit editions)"},{"ProductID":"9432-10120","Value":"Word Automation Services on Microsoft SharePoint Server 2010 Service Pack 2"},{"ProductID":"9432-10607","Value":"Word Automation Services on Microsoft SharePoint Server 2013 Service Pack 1"}],"Name":"Microsoft Office","Type":1},{"Items":[{"ProductID":"10384-11453","Value":"Adobe Flash Player on Windows 10 Version 1709 for 32-bit Systems"},{"ProductID":"10384-11454","Value":"Adobe Flash Player on Windows 10 Version 1709 for x64-based Systems"},{"ProductID":"10384-10951","Value":"Adobe Flash Player on Windows 10 Version 1703 for 32-bit Systems"},{"ProductID":"10384-10952","Value":"Adobe Flash Player on Windows 10 Version 1703 for x64-based Systems"},{"ProductID":"10384-10729","Value":"Adobe Flash Player on Windows 10 for 32-bit Systems"},{"ProductID":"10384-10735","Value":"Adobe Flash Player on Windows 10 for x64-based Systems"},{"ProductID":"10384-10789","Value":"Adobe Flash Player on Windows 10 Version 1511 for 32-bit Systems"},{"ProductID":"10384-10788","Value":"Adobe Flash Player on Windows 10 Version 1511 for x64-based Systems"},{"ProductID":"10384-10852","Value":"Adobe Flash Player on Windows 10 Version 1607 for 32-bit Systems"},{"ProductID":"10384-10853","Value":"Adobe Flash Player on Windows 10 Version 1607 for x64-based Systems"},{"ProductID":"10384-10816","Value":"Adobe Flash Player on Windows Server 2016"},{"ProductID":"10384-10481","Value":"Adobe Flash Player on Windows 8.1 for 32-bit systems"},{"ProductID":"10384-10482","Value":"Adobe Flash Player on Windows 8.1 for x64-based systems"},{"ProductID":"10384-10484","Value":"Adobe Flash Player on Windows RT 8.1"},{"ProductID":"10384-10378","Value":"Adobe Flash Player on Windows Server 2012"},{"ProductID":"10384-10483","Value":"Adobe Flash Player on Windows Server 2012 R2"}],"Name":"Other","Type":1},{"Items":[{"ProductID":"16901-17084","Value":"azl3 sox 14.4.2.0-33 on Azure Linux 3.0"},{"ProductID":"16900-16823","Value":"cbl2 sox 14.4.2.0-33 on CBL Mariner 2.0"},{"ProductID":"16901-16817","Value":"azl3 sox 14.4.2.0-33 on Azure Linux 3.0"},{"ProductID":"16894-16820","Value":"cm1 apr 1.6.3-1 on CBL Mariner 1.0"},{"ProductID":"16886-16820","Value":"cm1 httpd 2.4.49-1 on CBL Mariner 1.0"},{"ProductID":"16889-16820","Value":"cm1 libvirt 6.1.0-1 on CBL Mariner 1.0"},{"ProductID":"16843-16820","Value":"cm1 qemu-kvm 4.2.0-13 on CBL Mariner 1.0"},{"ProductID":"16833-16820","Value":"cm1 moby-buildx 0.4.1+azure-3 on CBL Mariner 1.0"},{"ProductID":"16825-17084","Value":"azl3 teckit 2.5.12-4 on Azure Linux 3.0"},{"ProductID":"16826-17084","Value":"azl3 fltk 1.3.8-1 on Azure Linux 3.0"},{"ProductID":"16825-16817","Value":"azl3 teckit 2.5.12-4 on Azure Linux 3.0"},{"ProductID":"16826-16817","Value":"azl3 fltk 1.3.8-1 on Azure Linux 3.0"}],"Name":"Mariner","Type":1},{"Items":[{"ProductID":"21778-17084","Value":"azl3 golang 1.27.0-1 on Azure Linux 3.0"}],"Name":"Open Source Software","Type":1}],"Name":"Microsoft","Type":0}],"FullProductName":[{"ProductID":"10047","Value":"Windows 7 for 32-bit Systems Service Pack 1"},{"ProductID":"10048","Value":"Windows 7 for x64-based Systems Service Pack 1"},{"ProductID":"10049","Value":"Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"},{"ProductID":"10050","Value":"Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1"},{"ProductID":"10051","Value":"Windows Server 2008 R2 for x64-based Systems Service Pack 1"},{"ProductID":"10162","Value":"Microsoft Word 2007 Service Pack 3"},{"ProductID":"10287","Value":"Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)"},{"ProductID":"10336-9312","Value":"Internet Explorer 9 on Windows Server 2008 for 32-bit Systems Service Pack 2"},{"ProductID":"10336-9318","Value":"Internet Explorer 9 on Windows Server 2008 for x64-based Systems Service Pack 2"},{"ProductID":"10378","Value":"Windows Server 2012"},{"ProductID":"10379","Value":"Windows Server 2012 (Server Core installation)"},{"ProductID":"10384-10378","Value":"Adobe Flash Player on Windows Server 2012"},{"ProductID":"10384-10481","Value":"Adobe Flash Player on Windows 8.1 for 32-bit systems"},{"ProductID":"10384-10482","Value":"Adobe Flash Player on Windows 8.1 for x64-based systems"},{"ProductID":"10384-10483","Value":"Adobe Flash Player on Windows Server 2012 R2"},{"ProductID":"10384-10484","Value":"Adobe Flash Player on Windows RT 8.1"},{"ProductID":"10384-10729","Value":"Adobe Flash Player on Windows 10 for 32-bit Systems"},{"ProductID":"10384-10735","Value":"Adobe Flash Player on Windows 10 for x64-based Systems"},{"ProductID":"10384-10788","Value":"Adobe Flash Player on Windows 10 Version 1511 for x64-based Systems"},{"ProductID":"10384-10789","Value":"Adobe Flash Player on Windows 10 Version 1511 for 32-bit Systems"},{"ProductID":"10384-10816","Value":"Adobe Flash Player on Windows Server 2016"},{"ProductID":"10384-10852","Value":"Adobe Flash Player on Windows 10 Version 1607 for 32-bit Systems"},{"ProductID":"10384-10853","Value":"Adobe Flash Player on Windows 10 Version 1607 for x64-based Systems"},{"ProductID":"10384-10951","Value":"Adobe Flash Player on Windows 10 Version 1703 for 32-bit Systems"},{"ProductID":"10384-10952","Value":"Adobe Flash Player on Windows 10 Version 1703 for x64-based Systems"},{"ProductID":"10384-11453","Value":"Adobe Flash Player on Windows 10 Version 1709 for 32-bit Systems"},{"ProductID":"10384-11454","Value":"Adobe Flash Player on Windows 10 Version 1709 for x64-based Systems"},{"ProductID":"10407","Value":"Microsoft Outlook 2013 RT Service Pack 1"},{"ProductID":"10481","Value":"Windows 8.1 for 32-bit systems"},{"ProductID":"10482","Value":"Windows 8.1 for x64-based systems"},{"ProductID":"10483","Value":"Windows Server 2012 R2"},{"ProductID":"10484","Value":"Windows RT 8.1"},{"ProductID":"10486-10047","Value":"Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1"},{"ProductID":"10486-10048","Value":"Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1"},{"ProductID":"10486-10051","Value":"Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1"},{"ProductID":"10486-10481","Value":"Internet Explorer 11 on Windows 8.1 for 32-bit systems"},{"ProductID":"10486-10482","Value":"Internet Explorer 11 on Windows 8.1 for x64-based systems"},{"ProductID":"10486-10483","Value":"Internet Explorer 11 on Windows Server 2012 R2"},{"ProductID":"10486-10484","Value":"Internet Explorer 11 on Windows RT 8.1"},{"ProductID":"10486-10729","Value":"Internet Explorer 11 on Windows 10 for 32-bit Systems"},{"ProductID":"10486-10735","Value":"Internet Explorer 11 on Windows 10 for x64-based Systems"},{"ProductID":"10486-10788","Value":"Internet Explorer 11 on Windows 10 Version 1511 for x64-based Systems"},{"ProductID":"10486-10789","Value":"Internet Explorer 11 on Windows 10 Version 1511 for 32-bit Systems"},{"ProductID":"10486-10816","Value":"Internet Explorer 11 on Windows Server 2016"},{"ProductID":"10486-10852","Value":"Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems"},{"ProductID":"10486-10853","Value":"Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems"},{"ProductID":"10486-10951","Value":"Internet Explorer 11 on Windows 10 Version 1703 for 32-bit Systems"},{"ProductID":"10486-10952","Value":"Internet Explorer 11 on Windows 10 Version 1703 for x64-based Systems"},{"ProductID":"10513","Value":"Microsoft Word 2010 Service Pack 2 (32-bit editions)"},{"ProductID":"10514","Value":"Microsoft Word 2010 Service Pack 2 (64-bit editions)"},{"ProductID":"10521","Value":"Microsoft Office 2010 Service Pack 2 (32-bit editions)"},{"ProductID":"10522","Value":"Microsoft Office 2010 Service Pack 2 (64-bit editions)"},{"ProductID":"10527","Value":"Microsoft Outlook 2010 Service Pack 2 (32-bit editions)"},{"ProductID":"10528","Value":"Microsoft Outlook 2010 Service Pack 2 (64-bit editions)"},{"ProductID":"10543","Value":"Windows Server 2012 R2 (Server Core installation)"},{"ProductID":"10555-10378","Value":"Internet Explorer 10 on Windows Server 2012"},{"ProductID":"10601","Value":"Microsoft Office 2013 Service Pack 1 (32-bit editions)"},{"ProductID":"10602","Value":"Microsoft Office 2013 Service Pack 1 (64-bit editions)"},{"ProductID":"10603","Value":"Microsoft Office 2013 RT Service Pack 1"},{"ProductID":"10604","Value":"Microsoft Word 2013 Service Pack 1 (32-bit editions)"},{"ProductID":"10605","Value":"Microsoft Word 2013 Service Pack 1 (64-bit editions)"},{"ProductID":"10606","Value":"Microsoft Word 2013 RT Service Pack 1"},{"ProductID":"10611","Value":"Microsoft Office Web Apps Server 2013 Service Pack 1"},{"ProductID":"10628","Value":"Microsoft Lync 2013 Service Pack 1 (32-bit)"},{"ProductID":"10630","Value":"Microsoft Lync 2013 Service Pack 1 (64-bit)"},{"ProductID":"10649","Value":"Microsoft Office Web Apps Server 2010 Service Pack 2"},{"ProductID":"10724-10729","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems"},{"ProductID":"10724-10735","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems"},{"ProductID":"10724-10788","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for x64-based Systems"},{"ProductID":"10724-10789","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for 32-bit Systems"},{"ProductID":"10724-10816","Value":"Microsoft Edge (EdgeHTML-based) on Windows Server 2016"},{"ProductID":"10724-10852","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems"},{"ProductID":"10724-10853","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems"},{"ProductID":"10724-10951","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for 32-bit Systems"},{"ProductID":"10724-10952","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for x64-based Systems"},{"ProductID":"10729","Value":"Windows 10 for 32-bit Systems"},{"ProductID":"10734","Value":"Microsoft Office 2016 for Mac"},{"ProductID":"10735","Value":"Windows 10 for x64-based Systems"},{"ProductID":"10746","Value":"Microsoft Word 2016 (32-bit edition)"},{"ProductID":"10747","Value":"Microsoft Word 2016 (64-bit edition)"},{"ProductID":"10748","Value":"Microsoft Office Online Server 2016"},{"ProductID":"10753","Value":"Microsoft Office 2016 (32-bit edition)"},{"ProductID":"10754","Value":"Microsoft Office 2016 (64-bit edition)"},{"ProductID":"10765","Value":"Microsoft Outlook 2016 (32-bit edition)"},{"ProductID":"10766","Value":"Microsoft Outlook 2016 (64-bit edition)"},{"ProductID":"10770","Value":"Skype for Business 2016 (32-bit)"},{"ProductID":"10771","Value":"Skype for Business 2016 (64-bit)"},{"ProductID":"10788","Value":"Windows 10 Version 1511 for x64-based Systems"},{"ProductID":"10789","Value":"Windows 10 Version 1511 for 32-bit Systems"},{"ProductID":"10810","Value":"Microsoft Outlook 2013 Service Pack 1 (32-bit editions)"},{"ProductID":"10811","Value":"Microsoft Outlook 2013 Service Pack 1 (64-bit editions)"},{"ProductID":"10816","Value":"Windows Server 2016"},{"ProductID":"10820","Value":"Microsoft Surface Pro 4"},{"ProductID":"10852","Value":"Windows 10 Version 1607 for 32-bit Systems"},{"ProductID":"10853","Value":"Windows 10 Version 1607 for x64-based Systems"},{"ProductID":"10855","Value":"Windows Server 2016 (Server Core installation)"},{"ProductID":"10905","Value":"Microsoft Office 2016 Click-to-Run (C2R) for 32-bit editions"},{"ProductID":"10906","Value":"Microsoft Office 2016 Click-to-Run (C2R) for 64-bit editions"},{"ProductID":"10950","Value":"Microsoft SharePoint Enterprise Server 2016"},{"ProductID":"10951","Value":"Windows 10 Version 1703 for 32-bit Systems"},{"ProductID":"10952","Value":"Windows 10 Version 1703 for x64-based Systems"},{"ProductID":"11099","Value":"Microsoft SharePoint Enterprise Server 2013 Service Pack 1"},{"ProductID":"11447","Value":"ChakraCore"},{"ProductID":"11453","Value":"Windows 10 Version 1709 for 32-bit Systems"},{"ProductID":"11454","Value":"Windows 10 Version 1709 for x64-based Systems"},{"ProductID":"11457","Value":"Microsoft Surface Studio"},{"ProductID":"1160","Value":"Microsoft Office Word Viewer"},{"CPE":"cpe:2.3:a:microsoft:azl3_teckit_2.5.12-4:*:*:*:*:*:*:*:*","ProductID":"16825-16817","Value":"azl3 teckit 2.5.12-4 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_teckit_2.5.12-4:*:*:*:*:*:*:*:*","ProductID":"16825-17084","Value":"azl3 teckit 2.5.12-4 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_fltk_1.3.8-1:*:*:*:*:*:*:*:*","ProductID":"16826-16817","Value":"azl3 fltk 1.3.8-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_fltk_1.3.8-1:*:*:*:*:*:*:*:*","ProductID":"16826-17084","Value":"azl3 fltk 1.3.8-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_moby-buildx_0.4.1+azure-3:*:*:*:*:*:*:*:*","ProductID":"16833-16820","Value":"cm1 moby-buildx 0.4.1+azure-3 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_qemu-kvm_4.2.0-13:*:*:*:*:*:*:*:*","ProductID":"16843-16820","Value":"cm1 qemu-kvm 4.2.0-13 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_syslinux_6.04-11:*:*:*:*:*:*:*:*","ProductID":"16848-17084","Value":"azl3 syslinux 6.04-11 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_httpd_2.4.49-1:*:*:*:*:*:*:*:*","ProductID":"16886-16820","Value":"cm1 httpd 2.4.49-1 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_libvirt_6.1.0-1:*:*:*:*:*:*:*:*","ProductID":"16889-16820","Value":"cm1 libvirt 6.1.0-1 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_apr_1.6.3-1:*:*:*:*:*:*:*:*","ProductID":"16894-16820","Value":"cm1 apr 1.6.3-1 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_sox_14.4.2.0-33:*:*:*:*:*:*:*:*","ProductID":"16900-16823","Value":"cbl2 sox 14.4.2.0-33 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_sox_14.4.2.0-33:*:*:*:*:*:*:*:*","ProductID":"16901-16817","Value":"azl3 sox 14.4.2.0-33 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_sox_14.4.2.0-33:*:*:*:*:*:*:*:*","ProductID":"16901-17084","Value":"azl3 sox 14.4.2.0-33 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_cmake_3.21.4-17:*:*:*:*:*:*:*:*","ProductID":"17098-17086","Value":"cbl2 cmake 3.21.4-17 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_syslinux_6.04-10:*:*:*:*:*:*:*:*","ProductID":"18434-17086","Value":"cbl2 syslinux 6.04-10 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_golang_1.22.7-3:*:*:*:*:*:*:*:*","ProductID":"18444-17086","Value":"cbl2 golang 1.22.7-3 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_golang_1.24.3-1:*:*:*:*:*:*:*:*","ProductID":"19697-17084","Value":"azl3 golang 1.24.3-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_msft-golang_1.24.1-2:*:*:*:*:*:*:*:*","ProductID":"19730-17086","Value":"cbl2 msft-golang 1.24.1-2 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_rubygem-mini_portile2_2.8.4-1:*:*:*:*:*:*:*:*","ProductID":"19746-17084","Value":"azl3 rubygem-mini_portile2 2.8.4-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_golang_1.22.7-3:*:*:*:*:*:*:*:*","ProductID":"19747-17086","Value":"cbl2 golang 1.22.7-3 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_rubygem-mini_portile2_2.8.0-1:*:*:*:*:*:*:*:*","ProductID":"19752-17086","Value":"cbl2 rubygem-mini_portile2 2.8.0-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_cmake_3.21.4-17:*:*:*:*:*:*:*:*","ProductID":"19756-17086","Value":"cbl2 cmake 3.21.4-17 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_mariadb-connector-c_3.1.10-6:*:*:*:*:*:*:*:*","ProductID":"19766-17086","Value":"cbl2 mariadb-connector-c 3.1.10-6 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_syslinux_6.04-10:*:*:*:*:*:*:*:*","ProductID":"19771-17086","Value":"cbl2 syslinux 6.04-10 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_golang_1.18.8-7:*:*:*:*:*:*:*:*","ProductID":"19785-17086","Value":"cbl2 golang 1.18.8-7 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_golang_1.27.0-1:*:*:*:*:*:*:*:*","ProductID":"21778-17084","Value":"azl3 golang 1.27.0-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_golang_1.27.1-1:*:*:*:*:*:*:*:*","ProductID":"21809-17084","Value":"azl3 golang 1.27.1-1 on Azure Linux 3.0"},{"ProductID":"4497","Value":"Microsoft Office Compatibility Pack Service Pack 3"},{"ProductID":"9311","Value":"Windows Server 2008 for Itanium-Based Systems Service Pack 2"},{"ProductID":"9312","Value":"Windows Server 2008 for 32-bit Systems Service Pack 2"},{"ProductID":"9318","Value":"Windows Server 2008 for x64-based Systems Service Pack 2"},{"ProductID":"9344","Value":"Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)"},{"ProductID":"9432-10120","Value":"Word Automation Services on Microsoft SharePoint Server 2010 Service Pack 2"},{"ProductID":"9432-10607","Value":"Word Automation Services on Microsoft SharePoint Server 2013 Service Pack 1"}]},"Vulnerability":[{"Acknowledgments":[],"CVE":"CVE-2014-0047","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16833-16820"],"TemporalScore":7.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"0","ProductStatuses":[{"ProductID":["16833-16820"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"-","ProductID":["16833-16820"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16833-16820"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2021-07-16T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16833-16820"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["16833-16820"],"Type":3}],"Title":{"Value":"Docker before 1.5 allows local users to have unspecified impact via vectors involving unsafe /tmp usage."}},{"Acknowledgments":[],"CVE":"CVE-2015-2158","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16825-17084"],"TemporalScore":7.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16826-17084"],"TemporalScore":7.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16825-16817"],"TemporalScore":7.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16826-16817"],"TemporalScore":7.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"1","ProductStatuses":[{"ProductID":["16825-17084","16826-17084","16825-16817","16826-16817"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"2.5.12-4","ProductID":["16825-17084","16825-16817"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16825-17084","16825-16817"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.3.8-1","ProductID":["16826-17084","16826-16817"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16826-17084","16826-16817"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2025-03-14T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-08-12T21:38:13","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.0"},{"Date":"2026-02-18T02:14:10","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16825-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16826-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16825-16817"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16826-16817"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["16825-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["16826-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["16825-16817"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["16826-16817"],"Type":3}],"Title":{"Value":"Off-by-one error in the pngcrush_measure_idat function in pngcrush.c in pngcrush before 1.7.84 allows remote attackers to cause a denial of service"}},{"Acknowledgments":[],"CVE":"CVE-2015-7504","CVSSScoreSets":[{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16843-16820"],"TemporalScore":8.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-787","Value":"Out-of-bounds Write"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"2","ProductStatuses":[{"ProductID":["16843-16820"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"4.2.0-13","ProductID":["16843-16820"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16843-16820"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2020-09-25T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16843-16820"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["16843-16820"],"Type":3}],"Title":{"Value":"Heap-based buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU allows guest OS administrators to cause a denial of service (instance crash) or possibly execute arbitrary code via a series of packets in loopback mode."}},{"Acknowledgments":[],"CVE":"CVE-2017-1000097","CVSSScoreSets":[{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["21778-17084"],"TemporalScore":7.4,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"}],"CWE":[{"ID":"CWE-295","Value":"Improper Certificate Validation"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"3","ProductStatuses":[{"ProductID":["21778-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["21778-17084"],"RestartRequired":{},"SubType":"Security Update","Type":2,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["21778-17084"],"Type":3}],"RevisionHistory":[{"Date":"2026-02-18T14:37:50","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"},{"Date":"2026-08-17T21:35:19","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"},{"Date":"2026-09-17T01:55:48","Description":{"Value":"<p>Information published.</p>\n"},"Number":"6.0"},{"Date":"2025-09-03T21:38:46","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-09-03T01:13:54","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.0"},{"Date":"2026-09-08T14:50:26","Description":{"Value":"<p>Information published.</p>\n"},"Number":"4.0"},{"Date":"2026-09-09T15:01:21","Description":{"Value":"<p>Information published.</p>\n"},"Number":"5.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["21778-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["21778-17084"],"Type":3}],"Title":{"Value":"On Darwin, user's trust preferences for root certificates were not honored. If the user had a root certificate loaded in their Keychain that was explicitly not trusted, a Go program would still verify a connection using that root certificate."}},{"Acknowledgments":[],"CVE":"CVE-2017-1000098","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["21778-17084"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-769","Value":"DEPRECATED: Uncontrolled File Descriptor Consumption"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"4","ProductStatuses":[{"ProductID":["21778-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["21778-17084"],"RestartRequired":{},"SubType":"Security Update","Type":2,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["21778-17084"],"Type":3}],"RevisionHistory":[{"Date":"2026-08-17T21:23:43","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"},{"Date":"2026-09-07T01:49:39","Description":{"Value":"<p>Information published.</p>\n"},"Number":"4.0"},{"Date":"2026-09-17T01:54:31","Description":{"Value":"<p>Information published.</p>\n"},"Number":"6.0"},{"Date":"2025-09-03T20:55:50","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-02-18T01:38:47","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"},{"Date":"2026-09-03T01:11:08","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.0"},{"Date":"2026-09-09T14:56:46","Description":{"Value":"<p>Information published.</p>\n"},"Number":"5.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["21778-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["21778-17084"],"Type":3}],"Title":{"Value":"The net/http package's Request.ParseMultipartForm method starts writing to temporary files once the request body size surpasses the given \"maxMemory\" limit. It was possible for an attacker to generate a multipart request crafted such that the server ran out of file descriptors."}},{"Acknowledgments":[],"CVE":"CVE-2017-1000118","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16886-16820"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"5","ProductStatuses":[{"ProductID":["16886-16820"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"2.4.49-1","ProductID":["16886-16820"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16886-16820"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2020-09-25T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-11-10T01:02:52","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16886-16820"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["16886-16820"],"Type":3}],"Title":{"Value":"Akka HTTP versions <= 10.0.5 Illegal Media Range in Accept Header Causes StackOverflowError Leading to Denial of Service"}},{"Acknowledgments":[],"CVE":"CVE-2017-1000256","CVSSScoreSets":[{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16889-16820"],"TemporalScore":8.1,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-295","Value":"Improper Certificate Validation"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"6","ProductStatuses":[{"ProductID":["16889-16820"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"6.1.0-1","ProductID":["16889-16820"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16889-16820"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2020-09-25T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16889-16820"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["16889-16820"],"Type":3}],"Title":{"Value":"libvirt version 2.3.0 and later is vulnerable to a bad default configuration of \"verify-peer=no\" passed to QEMU by libvirt resulting in a failure to validate SSL/TLS certificates by default."}},{"Acknowledgments":[],"CVE":"CVE-2017-12613","CVSSScoreSets":[{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16894-16820"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"}],"CWE":[{"ID":"CWE-125","Value":"Out-of-bounds Read"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"apache","Type":8,"Value":"apache"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"7","ProductStatuses":[{"ProductID":["16894-16820"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.6.3-1","ProductID":["16894-16820"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16894-16820"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2025-10-01T23:10:55","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16894-16820"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["16894-16820"],"Type":3}],"Title":{"Value":"When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input."}},{"Acknowledgments":[],"CVE":"CVE-2017-15042","CVSSScoreSets":[{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["21778-17084"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"}],"CWE":[{"ID":"CWE-319","Value":"Cleartext Transmission of Sensitive Information"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"8","ProductStatuses":[{"ProductID":["21778-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["21778-17084"],"RestartRequired":{},"SubType":"Security Update","Type":2,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["21778-17084"],"Type":3}],"RevisionHistory":[{"Date":"2025-09-03T22:44:27","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-02-18T14:49:38","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"},{"Date":"2026-08-17T20:41:45","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.0"},{"Date":"2026-09-09T14:46:34","Description":{"Value":"<p>Information published.</p>\n"},"Number":"6.0"},{"Date":"2026-09-17T01:48:50","Description":{"Value":"<p>Information published.</p>\n"},"Number":"7.0"},{"Date":"2026-09-03T01:04:31","Description":{"Value":"<p>Information published.</p>\n"},"Number":"4.0"},{"Date":"2026-09-05T02:10:03","Description":{"Value":"<p>Information published.</p>\n"},"Number":"5.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["21778-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["21778-17084"],"Type":3}],"Title":{"Value":"An unintended cleartext issue exists in Go before 1.8.4 and 1.9.x before 1.9.1. RFC 4954 requires that, during SMTP, the PLAIN auth scheme must only be used on network connections secured with TLS. The original implementation of smtp.PlainAuth in Go 1.0 enforced this requirement, and it was documented to do so. In 2013, upstream issue #5184, this was changed so that the server may decide whether PLAIN is acceptable. The result is that if you set up a man-in-the-middle SMTP server that doesn't advertise STARTTLS and does advertise that PLAIN auth is OK, the smtp.PlainAuth implementation sends the username and password."}},{"Acknowledgments":[],"CVE":"CVE-2017-15370","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16901-17084"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16900-16823"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16901-16817"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-119","Value":"Improper Restriction of Operations within the Bounds of a Memory Buffer"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"9","ProductStatuses":[{"ProductID":["16901-17084","16900-16823","16901-16817"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"14.4.2.0-33","ProductID":["16901-17084","16900-16823","16901-16817"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16901-17084","16900-16823","16901-16817"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2024-07-23T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2024-08-16T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"},{"Date":"2024-08-17T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.2"},{"Date":"2024-08-18T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.3"},{"Date":"2024-08-19T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.4"},{"Date":"2024-08-20T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.5"},{"Date":"2024-08-21T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.6"},{"Date":"2024-08-22T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.7"},{"Date":"2024-08-23T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.8"},{"Date":"2024-08-24T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.9"},{"Date":"2024-08-25T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"},{"Date":"2024-08-26T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.1"},{"Date":"2024-08-27T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.2"},{"Date":"2024-08-28T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.3"},{"Date":"2024-08-29T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.4"},{"Date":"2024-08-30T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.5"},{"Date":"2024-08-31T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.6"},{"Date":"2024-09-01T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.7"},{"Date":"2024-09-02T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.8"},{"Date":"2024-09-03T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.9"},{"Date":"2024-09-05T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.0"},{"Date":"2024-09-06T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.1"},{"Date":"2024-09-07T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.2"},{"Date":"2024-09-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.3"},{"Date":"2024-09-11T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.4"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16901-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16900-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16901-16817"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["16901-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["16900-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["16901-16817"],"Type":3}],"Title":{"Value":"There is a heap-based buffer overflow in the ImaExpandS function of ima_rw.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file."}},{"Acknowledgments":[],"CVE":"CVE-2017-15371","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16901-17084"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16900-16823"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16901-16817"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-617","Value":"Reachable Assertion"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"10","ProductStatuses":[{"ProductID":["16901-17084","16900-16823","16901-16817"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"14.4.2.0-33","ProductID":["16901-17084","16900-16823","16901-16817"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16901-17084","16900-16823","16901-16817"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2024-07-23T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2024-08-16T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"},{"Date":"2024-08-17T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.2"},{"Date":"2024-08-18T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.3"},{"Date":"2024-08-19T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.4"},{"Date":"2024-08-20T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.5"},{"Date":"2024-08-21T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.6"},{"Date":"2024-08-22T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.7"},{"Date":"2024-08-23T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.8"},{"Date":"2024-08-24T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.9"},{"Date":"2024-08-25T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"},{"Date":"2024-08-26T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.1"},{"Date":"2024-08-27T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.2"},{"Date":"2024-08-28T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.3"},{"Date":"2024-08-29T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.4"},{"Date":"2024-08-30T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.5"},{"Date":"2024-08-31T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.6"},{"Date":"2024-09-01T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.7"},{"Date":"2024-09-02T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.8"},{"Date":"2024-09-03T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.9"},{"Date":"2024-09-05T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.0"},{"Date":"2024-09-06T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.1"},{"Date":"2024-09-07T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.2"},{"Date":"2024-09-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.3"},{"Date":"2024-09-11T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.4"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16901-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16900-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16901-16817"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["16901-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["16900-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["16901-16817"],"Type":3}],"Title":{"Value":"There is a reachable assertion abort in the function sox_append_comment() in formats.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file."}},{"Acknowledgments":[{"Name":[{"Value":"hungtt28 & nyancat working with <a href=\"http://www.zerodayinitiative.com/\">Trend Micro's Zero Day Initiative</a>"}],"URL":[""]},{"Name":[{"Value":"<a href=\"http://weibo.com/pgboy1988\">pgboy</a> and <a href=\"http://weibo.com/2641521260\">zhong_sf</a> of <a href=\"http://www.360.cn/\">Qihoo 360 Vulcan Team</a>"}],"URL":[""]}],"CVE":"CVE-2017-8689","CVSSScoreSets":[{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10789"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10788"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application to take control of an affected system.</p>\n<p>The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Windows Kernel-Mode Drivers","Type":7,"Value":"Windows Kernel-Mode Drivers"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"11","ProductStatuses":[{"ProductID":["10951","10952","10729","10735","10789","10788","10852","10853","10816","10855","10047","10048","10481","10482","10484","9312","10287","9311","9318","9344","10050","10051","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10789","10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041681"},"ProductID":["10047","10048","10050","10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038777","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041681"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041678"},"ProductID":["10047","10048","10050","10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041678"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041693"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038792","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041693"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041687"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041687"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042120"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042120"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Kernel Elevation of Privilege Vulnerability"}},{"Acknowledgments":[],"CVE":"ADV170012","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<h2>Executive Summary</h2>\n<p>This advisory addresses CVE-2017-15361, also referred to as &quot;Return of Coppersmith's Attack&quot; (ROCA).</p>\n<p>A security vulnerability exists in certain Trusted Platform Module (TPM) chipsets. The vulnerability weakens key strength. It is important to note that this is a firmware vulnerability, and not a vulnerability in the operating system or a specific application. After you have installed software and/or firmware updates, you will need to re-enroll in any security services you are running to remediate those services. For more details contact the TPM manufacturer - https://www.infineon.com/TPM-update. For specific services and use cases that are rendered insecure, see &quot;Step 5 - Remediate services/(Use cases)&quot; under <strong>Recommended Actions</strong>.</p>\n<h2>Advisory Details</h2>\n<p><strong>Important</strong> This vulnerability is present in a specific vendor’s TPM firmware that is based on Trusted Computing Guidelines (TCG) specification family 1.2 and 2.0, not in the TPM standard or in Microsoft Windows. Some Windows security features and potentially third-party software rely on keys generated by the TPM (if available on the system). Microsoft is releasing Windows security updates to help work around the vulnerability by logging events and by allowing the generation of software based keys. Even after the operating system and/or TPM firmware updates are installed, you will need to carry out additional remediation steps to force regeneration of previously created weak TPM keys, depending on the applicable services you are running and on your particular use-cases. See Step 5 - &quot;Remediate services based on your particular use cases&quot; under <strong>Recommended Actions</strong>.</p>\n<h2>FAQ</h2>\n<p><strong>1. What systems are at risk from these vulnerabilities?</strong></p>\n<ul>\n<li><strong>Client Operating Systems</strong> Windows client systems are at increased risk due to the prevalence of TPM on client hardware systems. There are distinct advantages to using hardware encryption modules.</li>\n<li><strong>Server Operating Systems</strong> Servers with TPM modules.</li>\n</ul>\n<p><strong>2. What is a TPM?</strong></p>\n<p>See <a href=\"https://technet.microsoft.com/en-us/library/jj131725%28v=ws.11%29\">Trusted Platform Module Technology Overview</a></p>\n<p><strong>3. What is the associated CVE for this vulnerability?</strong></p>\n<p>See <a href=\"https://www.infineon.com/TPM-update\">https://www.infineon.com/TPM-update</a></p>\n<p><strong>4. Have there been any active attacks detected?</strong></p>\n<p>No. When this security advisory was issued, Microsoft had not received any information to indicate that this vulnerability had been publicly used to attack customers.</p>\n<p><strong>5. Has this vulnerability been publicly disclosed?</strong></p>\n<p>No. Microsoft received information about the vulnerability through coordinated vulnerability disclosure.</p>\n<p><strong>6. What is the CVSS score?</strong></p>\n<p>See <a href=\"http://www.kb.cert.org/vuls/id/307015\">Vulnerability Note VU#307015:CVSS Metrics</a></p>\n<p><strong>7. What if a TPM firmware update is not available from my hardware OEM?</strong></p>\n<p>Hardware OEMs may release a TPM firmware update independently of the Microsoft software updates. The software updates are being released as a workaround to the vulnerability. To address the underlying issue, customers need to obtain and install a TPM firmware update. It is recommended that you contact your hardware manufacturer(s) for further guidance. TPM firmware updates may be combined with OEM system firmware updates or be delivered as a standalone tool by OEMs.</p>\n<p>In the event of a hardware OEM explicitly NOT issuing a firmware update, customers can:</p>\n<ul>\n<li>Decide that the operating system update (that generates software-based keys) is sufficient for your services and use-cases. <strong>Note</strong> Services and use-case remediation will still be necessary.</li>\n<li>Move critical roles and users to devices that have updated firmware</li>\n<li>Move critical roles and users to devices that are not impacted by this vulnerability</li>\n</ul>\n<p><strong>8. I am running Windows 7 or Windows Server 2008 R2. Why do these operating systems not appear on the Affected Products table?</strong></p>\n<p>Windows 7 services and use cases are limited to BitLocker. Bitlocker on Windows 7 cannot work around the hardware issue. Therefore, because the vulnerability is in the firmware, updates are only necessary for the firmware. When TPM-based protector is used to protect the operating system volume, the security of the BitLocker protection is affected only if the TPM firmware version is 1.2.</p>\n<p>For customers with affected devices that are running Windows 7, Microsoft suggests the following actions:</p>\n<ul>\n<li>Move critical roles and users to devices that have updated firmware</li>\n<li>Move critical roles and users to devices that are not affected by this vulnerability</li>\n</ul>\n<p>If you are using non-Microsoft apps that require a TPM, you should contact the app developer to see if the app is affected.</p>\n<p><strong>9. I am running Windows Server 2012, Windows Server 2012 R2, or Windows 8.1. Why are the security-only updates listed in the Affected Products table from September 2017?</strong></p>\n<p>The updates addressing this vulnerability are part of an industry-wide coordinated disclosure to remediate the issue. Microsoft released updates for this vulnerability in a phased approach, and some of these updates were released in September.</p>\n<p><strong>Important:</strong> Because the security-only updates are not cumulative, customers who install these updates must install the September 2017 security-only update to receive the changes for this vulnerability. The security-only updates released on October 10, 2017 do not contain updates for this vulnerability.</p>\n<p><strong>10. What do the security-only updates for Windows Server 2012, Windows Server 2012 R2, and Windows 8.1 contain?</strong></p>\n<p>The updates provide:</p>\n<ul>\n<li>Detection to determine if your device has a vulnerable TPM chipset.</li>\n<li>A Virtual Smart Card event log entry indicating that the TPM verification failed.</li>\n</ul>\n<p>Note that the monthly rollups are cumulative, while Security-only updates are not. Customers who install the October monthly rollup will receive the updates for this vulnerability.</p>\n<h2>Recommended Actions</h2>\n<p><strong>1. Apply the Windows operating system updates (see Affected Products table for specific package KB numbers) first</strong></p>\n<p><strong>WARNING:</strong> Do <strong>NOT</strong> apply the TPM firmware update prior to applying the Windows operating system mitigation update. Doing so will render your system unable to determine if your system is affected. You will need this information to conduct full remedation.</p>\n<ul>\n<li>The mitigation and detection update for Windows:\n<ul>\n<li>Addresses the vulnerability by preventing the generation of weak keys by the TPM hardware. New keys are generated using a software algorithm. Microsoft recommends that customers running systems that use affected TPM chipsets install the Windows security update as an interim measure until a firmware update is available from the system manufacturer.</li>\n<li>Generates event log entries when a vulnerable TPM is detected.</li>\n<li>Does NOT reduce BitLocker risk.</li>\n</ul>\n</li>\n</ul>\n<p>The majority of customers have automatic updating enabled and will not need to take any action because the updates will be downloaded and installed automatically. Customers who have not enabled automatic updating need to check for updates and install applicable updates manually. For administrators and enterprise installations, or end users who want to install the updates manually, Microsoft recommends applying the update immediately using update management software, or by checking for updates using the Microsoft Update service. For more information on how to manually apply this specific update, see the Affected Products table.</p>\n<p><strong>2. Determine devices in your organization that are affected</strong></p>\n<p>Because both mobile and stationary systems may be affected, mixing reactive and proactive measures may be best to determine affected devices. Depending on your use-case scenario, Microsoft recommends that you use one of the following methods to determine affected devices.</p>\n<p>a. Option 1 - Use event log entries.</p>\n<p>After the applicable Windows update is applied, the system will generate Event ID 1794 in the Event Viewer after each reboot under <strong>Windows Logs - System</strong> when vulnerable firmware is identified.</p>\n<table>\n<thead>\n<tr>\n<th>Type</th>\n<th>Value</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Event Log</td>\n<td>Windows Log/System</td>\n</tr>\n<tr>\n<td>Event Source</td>\n<td>TPM-WMI</td>\n</tr>\n<tr>\n<td>Event ID</td>\n<td>1794</td>\n</tr>\n</tbody>\n</table>\n<p><strong>NOTE</strong>: Microsoft recommends that enterprise or home office users leverage this step as a reactive method to identify affected software.</p>\n<p>b. Option 2 - Use a script (See <strong>Additional Context</strong>) to detect if firmware on your systems contain the vulnerability.</p>\n<p><strong>NOTE</strong>: Microsoft recommends that enterprise users leverage this step as a proactive method to identify affected software.</p>\n<p>c. Option 3 - Manually check the Trusted Platform Module (TPM) Management snap-in (TPM.MSC) on each Windows 10 device</p>\n<p>On devices running Windows 10 that have the October 2017 security update installed, in a CMD prompt, type &quot;TPM.MSC&quot; to open the Trusted Platform Module (TPM) Management snap-in. Devices with affected TPM modules will display the following error message:</p>\n<p>&quot;The TPM is ready for use.\nThe TPM firmware on this PC has a known security problem. Please contact your PC manufacturer to find out if an update is available. For more information please go to <a href=\"https://go.microsoft.com/fwlink/?linkid=852572\">https://go.microsoft.com/fwlink/?linkid=852572</a>.&quot;</p>\n<p><strong>NOTE</strong>: Microsoft recommends that consumers and Home office users leverage this step to identify affected software.</p>\n<p><strong>3. If you determine that devices in your organization are affected, analyze your risk tolerance and create short and long term resolution plans</strong></p>\n<p>A firmware update may or may not be available at the time of advisory release. Furthermore, the affected devices may represent a only small portion of your overall resources. Even though the Windows update is not a true replacement for fixing the firmware flaw it can be used as a temporary mitigation. However, even after the operating system and TPM firmware updates are installed, you will need to assess your TPM usage scenarios and take manual actions to force new keys to be generated.</p>\n<table>\n<thead>\n<tr>\n<th>Action</th>\n<th>Pros</th>\n<th>Cons</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Keep keys generated by an at-risk TPM</td>\n<td>Secrets cannot be “pried” from local machine</td>\n<td>Persists known vulnerability and creates risk, especially for high value targets and data</td>\n</tr>\n<tr>\n<td>Transition to software generated keys</td>\n<td>Cryptographically strong, and potential temporary solution while waiting for firmware updates</td>\n<td>Stored in software in local machine, and not supported by pre-Windows 8.1 / Windows Server 2012 clients and servers</td>\n</tr>\n</tbody>\n</table>\n<p><strong>4. Apply applicable firmware updates</strong></p>\n<ul>\n<li><p>If your hardware is a Surface device, please see the following article for additional information:</p>\n<p><a href=\"https://support.microsoft.com/en-us/help/4073006\">Microsoft Knowledge Base Article 4073006</a></p>\n</li>\n<li><p>If your device is not from Microsoft, apply the firmware provided by the OEM.</p>\n</li>\n<li><p>If your device OEM is not listed in the following table, please contact the OEM's Customer Support.</p>\n</li>\n</ul>\n<table>\n<thead>\n<tr>\n<th>OEM</th>\n<th>Link for firmware update</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>TPM OEM</td>\n<td><a href=\"https://www.infineon.com/TPM-update\">https://www.infineon.com/TPM-update</a></td>\n</tr>\n<tr>\n<td>Acer</td>\n<td><a href=\"https://us.answers.acer.com/app/answers/detail/a_id/51137\">https://us.answers.acer.com/app/answers/detail/a_id/51137</a></td>\n</tr>\n<tr>\n<td>Fujitsu</td>\n<td><a href=\"http://www.fujitsu.com/global/support/products/software/security/products-f/ifsa-201701e.html\">http://www.fujitsu.com/global/support/products/software/security/products-f/ifsa-201701e.html</a></td>\n</tr>\n<tr>\n<td>HP Customer Support</td>\n<td><a href=\"https://support.hp.com/us-en/document/c05792935\">https://support.hp.com/us-en/document/c05792935</a></td>\n</tr>\n<tr>\n<td>HP Enterprise Support</td>\n<td><a href=\"https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03789en_us\">https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03789en_us</a></td>\n</tr>\n<tr>\n<td>Lenovo</td>\n<td><a href=\"https://support.lenovo.com/us/en/product_security/LEN-15552\">https://support.lenovo.com/us/en/product_security/LEN-15552</a></td>\n</tr>\n<tr>\n<td>Panasonic</td>\n<td><a href=\"http://pc-dl.panasonic.co.jp/itn/info/osinfo20171026.html\">http://pc-dl.panasonic.co.jp/itn/info/osinfo20171026.html</a></td>\n</tr>\n<tr>\n<td>Toshiba</td>\n<td><a href=\"http://go.toshiba.com/tpmsecuritynotice\">http://go.toshiba.com/tpmsecuritynotice</a></td>\n</tr>\n</tbody>\n</table>\n<p><strong>5. Remediate services based on your particular use cases</strong></p>\n<p>Microsoft will continue to provide additional support to help identify and remediate this issue as it becomes available. The following table contains a list of services that you may be running on your device and a link to instructions for applying remediation steps for that service.</p>\n<p><strong>IMPORTANT</strong> BEFORE any remedition steps can be taken, Microsoft strongly recommends that a firmware update be applied. This is not a simple one-step procedure and you should fully understand the scope of the impact to you before proceeding.</p>\n<table>\n<thead>\n<tr>\n<th>SERVICE</th>\n<th>REMEDIATION STEPS</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Active Directory Certificate Services (ADCS)</td>\n<td><a href=\"https://support.microsoft.com/en-us/help/4047409\">https://support.microsoft.com/en-us/help/4047409</a></td>\n</tr>\n<tr>\n<td>Active Directory Directory Services (ADDS)</td>\n<td><a href=\"https://support.microsoft.com/en-us/help/4046462\">https://support.microsoft.com/en-us/help/4046462</a></td>\n</tr>\n<tr>\n<td>BitLocker</td>\n<td><a href=\"https://support.microsoft.com/en-us/help/4046783\">https://support.microsoft.com/en-us/help/4046783</a></td>\n</tr>\n<tr>\n<td>Credential Guard/DPAPI/Windows Information Protection</td>\n<td><a href=\"https://docs.microsoft.com/en-us/windows/access-protection/credential-guard/credential-guard-considerations#clearing-tpm-considerations\">https://docs.microsoft.com/en-us/windows/access-protection/credential-guard/credential-guard-considerations#clearing-tpm-considerations</a></td>\n</tr>\n<tr>\n<td>Device Health Attestation Service (DHA)</td>\n<td>This vulnerability may impact the validity of the DHA-report that is issued by Device Health Attestation Service. The DHA-report cannot be trusted when the originating device is Jailbroken and DHA-Service is configured to perform attestation in “AIKCert validation mode”. To address the issue please use DHA-Cloud or configure your organization's On Premise DHA-Service to run in “ EKCert validation” mode, and update your TPM firmware to address the root cause of the vulnerability.</td>\n</tr>\n<tr>\n<td>VSC - Virtual Smart Card</td>\n<td><a href=\"https://support.microsoft.com/en-us/help/4046784\">https://support.microsoft.com/en-us/help/4046784</a></td>\n</tr>\n<tr>\n<td>Windows Hello For Business and Azure Active Directory</td>\n<td> <a href=\"https://support.microsoft.com/en-us/help/4046168\">https://support.microsoft.com/en-us/help/4046168</a></td>\n</tr>\n<tr>\n<td>Windows Hello (and Microsoft Accounts (MSA))</td>\n<td>Affected Microsoft account users should apply the latest Windows update and reset their PIN. To find out if you are affected, follow the instructions in Step 2: Determine devices in your organization that are affected, under Recommended Actions.</td>\n</tr>\n<tr>\n<td>Windows Server 2016 Domain-joined device public key authentication</td>\n<td><a href=\"https://docs.microsoft.com/en-us/windows-server/security/kerberos/domain-joined-device-public-key-authentication\">Domain-joined Device Public Key Authentication</a></td>\n</tr>\n</tbody>\n</table>\n<p><strong>6. Clear TPM</strong></p>\n<p><strong>Important</strong>: Before using one of these methods for clearing TPM, please take note of the following:</p>\n<ul>\n<li><p>If there is any data protected by a TPM key, clearing the TPM without a data recovery plan or suspension of the protection will cause the data to become unavailable. Microsoft recommends reviewing your current data protection scheme before clearing TPM.</p>\n</li>\n<li><p>Be aware that clearing a TPM will render ALL services that use TPM keys unusable until you complete any required remeditation steps. You may need to contact any third-party service vendors for those steps.</p>\n</li>\n<li><p>For systems running Windows 7, you must suspend BitLocker protection before clearing TPM from the operating system. See <a href=\"https://technet.microsoft.com/en-us/library/jj649830(v=wps.630).aspx\">Suspend-BitLocker</a></p>\n</li>\n<li><p>For systems running Windows Server 2012, Windows Server 2012 R2, or Windows 8.1, it is not necessary to suspend BitLocker before clearing TPM from the operating system. It is not recommended that you clear the TPM from a firmware menu because if you have activated Device Encryption, you will be unable to suspend it in the operating system. Additionally, you will need to retrieve your Device Encryption Recovery Key from the MSA cloud to boot after clearing the TPM.</p>\n</li>\n<li><p>Devices running Windows 10 that are protected by Credential Guard will lose secrets. For more information, see <a href=\"https://docs.microsoft.com/en-us/windows/access-protection/credential-guard/credential-guard-considerations#clearing-tpm-considerations\">Credential Guard Considerations: Clearing TPM considerations</a>.</p>\n</li>\n<li><p>To clear TPM via PowerShell, see the following:</p>\n</li>\n<li><p>For Windows Server 2012, Windows 8.1, and Windows Server 2012 R2: <a href=\"https://technet.microsoft.com/library/jj603122(v=wps.630).aspx\">Clear-Tpm</a></p>\n</li>\n<li><p>For Windows 10 and Server 2016: <a href=\"https://docs.microsoft.com/en-us/powershell/module/trustedplatformmodule/clear-tpm?view=win10-ps\">Clear-Tpm</a></p>\n</li>\n<li><p>To clear TPM via GUI, see the following:</p>\n</li>\n<li><p>For Windows 7 and Windows Server 2008 R2: <a href=\"https://technet.microsoft.com/en-us/library/cc753694(v=ws.11).aspx\">Clear the TPM</a></p>\n</li>\n<li><p>For Windows Server 2012, Windows 8.1, and Windows Server 2012 R2: <a href=\"https://technet.microsoft.com/en-us/library/dn466538(v=ws.11).aspx#BKMK_clear1\">Clear all the keys from the TPM</a></p>\n</li>\n<li><p>For Windows 10 and Windows Server 2016: <a href=\"https://docs.microsoft.com/en-us/windows/device-security/tpm/initialize-and-configure-ownership-of-the-tpm#clear-all-the-keys-from-the-tpm\">Clear all the keys from the TPM</a></p>\n</li>\n</ul>\n<h2>Additional context</h2>\n<ul>\n<li>Azure AD - <a href=\"https://docs.microsoft.com/en-us/azure/active-directory/active-directory-whatis\">What is Azure Active Directory?</a></li>\n<li>Bitlocker suspension - <a href=\"https://technet.microsoft.com/en-us/library/jj649830(v=wps.630).aspx\">Suspend-BitLocker</a></li>\n<li>Credential Guard: Clearing TPM considerations - <a href=\"https://docs.microsoft.com/en-us/windows/access-protection/credential-guard/credential-guard-considerations#clearing-tpm-considerations\">Clearing TPM Considerations</a></li>\n<li>Domain-joined Device Public Key Authentication - <a href=\"https://docs.microsoft.com/en-us/windows-server/security/kerberos/domain-joined-device-public-key-authentication#automatic-public-key-provisioning\">Automatic public key provisioning</a></li>\n<li>MSA Microsoft Account- <a href=\"https://technet.microsoft.com/en-us/library/dn579254(v=ws.11).aspx\">Microsoft Accounts</a></li>\n<li>TPM - <a href=\"https://technet.microsoft.com/en-us/library/cc749022%40v=ws.10%41.aspx\">Windows Trusted Platform Module Management Step-by-Step Guide</a></li>\n<li>TPM Key Attestation - <a href=\"https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/manage/component-updates/tpm-key-attestation\">TPM Key Attestation</a></li>\n<li>Virtual Smart Card overview - <a href=\"https://technet.microsoft.com/en-us/library/dn593708(v=ws.11).aspx\">Virtual Smart Card Overview</a></li>\n<li>Windows hello / Next Gen Credential - <a href=\"https://docs.microsoft.com/en-us/windows/access-protection/hello-for-business/hello-identity-verification\">Windows Hello for Business</a></li>\n</ul>\n<p>Quick methods for determining the firmware version:</p>\n<ul>\n<li>Use PowerShell cmd: Get-TPM (run as an administrator) on each device.</li>\n<li>Use the following PowerShell script, run as an administrator. <strong>Failing to run the script as an administrator will return incorrect results.</strong> In an enterprise setting, if you need to run the script remotely to check several devices, see the following:\n<ul>\n<li>PowerShell remoting setup: <a href=\"https://technet.microsoft.com/en-us/library/ff700227.aspx\">Tip: Enable and Use Remote Commands in Windows PowerShell</a></li>\n<li>PowerShell remoting usage: <a href=\"https://docs.microsoft.com/en-us/powershell/scripting/core-powershell/running-remote-commands?view=powershell-5.1\">PowerShell 5.1:Running Remote Commands</a></li>\n</ul>\n</li>\n</ul>\n<pre><code>$IfxManufacturerIdInt = 0x49465800 # 'IFX'\n\t\t\n\t\tfunction IsInfineonFirmwareVersionAffected ($FirmwareVersion)\n\t\t{\n\t\t\t$FirmwareMajor = $FirmwareVersion[0]\n\t\t\t$FirmwareMinor = $FirmwareVersion[1]\n\t\t\tswitch ($FirmwareMajor)\n\t\t\t{\n\t\t\t\t4 { return $FirmwareMinor -le 33 -or ($FirmwareMinor -ge 40 -and $FirmwareMinor -le 42) }\n\t\t\t\t5 { return $FirmwareMinor -le 61 }\n\t\t\t\t6 { return $FirmwareMinor -le 42 }\n\t\t\t\t7 { return $FirmwareMinor -le 61 }\n\t\t\t\t133 { return $FirmwareMinor -le 32 }\n\t\t\t\tdefault { return $False }\n\t\t\t}\n\t\t}\n\t\t\n\t\tfunction IsInfineonFirmwareVersionSusceptible ($FirmwareMajor)\n\t\t{\n\t\t\tswitch ($FirmwareMajor)\n\t\t\t{\n\t\t\t\t4 { return $True }\n\t\t\t\t5 { return $True }\n\t\t\t\t6 { return $True }\n\t\t\t\t7 { return $True }\n\t\t\t\t133 { return $True }\n\t\t\t\tdefault { return $False }\n\t\t\t}\n\t\t}\n\t\t\n\t\t$Tpm = Get-Tpm\n\t\t$ManufacturerIdInt = $Tpm.ManufacturerId\n\t\t$FirmwareVersion = $Tpm.ManufacturerVersion -split &quot;\\.&quot;\n\t\t$FirmwareVersionAtLastProvision = (Get-ItemProperty -Path &quot;HKLM:\\SYSTEM\\CurrentControlSet\\Services\\TPM\\WMI&quot; -Name &quot;FirmwareVersionAtLastProvision&quot; -ErrorAction SilentlyContinue).FirmwareVersionAtLastProvision\n\t\t\n\t\tif (!$Tpm)\n\t\t{\n\t\t\tWrite-Host &quot;No TPM found on this system, so the issue does not apply here.&quot;\n\t\t}\n\t\telse\n\t\t{\n\t\t\tif ($ManufacturerIdInt -ne $IfxManufacturerIdInt)\n\t\t\t{\n\t\t\t\tWrite-Host &quot;This non-Infineon TPM is not affected by the issue.&quot;\n\t\t\t}\n\t\t\telse\n\t\t\t{\n\t\t\t\tif ($FirmwareVersion.Length -lt 2)\n\t\t\t\t{\n\t\t\t\t\tWrite-Error &quot;Could not get TPM firmware version from this TPM.&quot;\n\t\t\t\t}\n\t\t\t\telse\n\t\t\t\t{\n\t\t\t\t\tif (IsInfineonFirmwareVersionSusceptible($FirmwareVersion[0]))\n\t\t\t\t\t{\n\t\t\t\t\t\tif (IsInfineonFirmwareVersionAffected($FirmwareVersion))\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\tWrite-Host (&quot;This Infineon firmware version {0}.{1} TPM is not safe. Please update your firmware.&quot; -f [int]$FirmwareVersion[0], [int]$FirmwareVersion[1])\n\t\t\t\t\t\t}\n\t\t\t\t\t\telse\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\tWrite-Host (&quot;This Infineon firmware version {0}.{1} TPM is safe.&quot; -f [int]$FirmwareVersion[0], [int]$FirmwareVersion[1])\n\t\t\t\t\t\t\tif (!$FirmwareVersionAtLastProvision)\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\tWrite-Host (&quot;We cannot determine what the firmware version was when the TPM was last cleared. Please clear your TPM now that the firmware is safe.&quot;)\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\telseif ($FirmwareVersion -ne $FirmwareVersionAtLastProvision)\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\tWrite-Host (&quot;The firmware version when the TPM was last cleared was different from the current firmware version. Please clear your TPM now that the firmware is safe.&quot;)\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t\telse\n\t\t\t\t\t{\n\t\t\t\t\t\tWrite-Host (&quot;This Infineon firmware version {0}.{1} TPM is safe.&quot; -f [int]$FirmwareVersion[0], [int]$FirmwareVersion[1])\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n</code></pre>\n"},{"Ordinal":"20","Title":"Windows TPM","Type":7,"Value":"Windows TPM"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"12","ProductStatuses":[{"ProductID":["10951","10952","10729","10735","10789","10788","10852","10853","10816","10481","10482","10484","10378","10483","11457","10820","11453","11454"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10789","10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10852","10853","10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041693"},"ProductID":["10481","10482","10484","10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038792","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041693"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4038793"},"ProductID":["10481","10482"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4038793"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041690"},"ProductID":["10378"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038799","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041690"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041679"},"ProductID":["10378"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041679"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041687"},"ProductID":["10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041687"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4023490"},"ProductID":["11457"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4023489"},"ProductID":["10820"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4048955"},"ProductID":["11453","11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4042198","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4048955"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>To keep the information in the advisory up-to-date, made several corrections: corrected link to HP OEM site, added link to Lenovo OEM site, added note that failure to run the PowerShell script as an administrator will return incorrect results. These are all informational changes only.</p>\n"},"Number":"1.1"},{"Date":"2017-10-12T07:00:00Z","Description":{"Value":"<p>Added information about how to use the PowerShell script to remotely check devices for affected TPMs. Clarified that BitLocker protection is affected only if the TPM firmware version is 1.2. These are informational changes only.</p>\n"},"Number":"1.2"},{"Date":"2017-10-17T07:00:00Z","Description":{"Value":"<p>The following revisions are informational changes only:</p>\n<ul>\n<li>Added CVE number and vulnerability name.</li>\n<li>Added links for OEM information for HPE and Toshiba to the table under Step 4: Apply applicable firmware updates.</li>\n<li>Added information for MSA to the table under Step 5: Remediate services based on your particular use cases.</li>\n</ul>\n"},"Number":"1.3"},{"Date":"2017-10-18T07:00:00Z","Description":{"Value":"<p>The following revisions added under Step 4: Apply applicable firmware updates are informational only:</p>\n<ul>\n<li>Added list of affected Microsoft Surface devices.</li>\n<li>Added link for Acer to the table of OEM information.</li>\n</ul>\n"},"Number":"1.4"},{"Date":"2017-10-26T07:00:00Z","Description":{"Value":"<p>The following revisions are informational changes only: * Added link for OEM information for Panasonic to the table under Step 4: Apply applicable firmware updates. * Revised Windows Hello information in the table under Step 5: Remediate services based on your particular use cases.</p>\n"},"Number":"1.6"},{"Date":"2017-11-16T08:00:00Z","Description":{"Value":"<p>Revised the Affected Products table to include Windows 10 Version 1709 for 32-bit Systems and Windows 10 Version 1709 for x64-based Systems because they are affected by CVE-2017-15361, described in this advisory. In addition, the following informational-only changes have been made: *Under Recommended Action #4, Revised the list of affected Surface devices to indicate that Surface Hub is not affected by this vulnerability. *Under Recommended Action #6, updated the links for information about clearing the TPM.</p>\n"},"Number":"2.0"},{"Date":"2018-01-11T08:00:00Z","Description":{"Value":"<p>Under Recommended Action #4, replaced the information for Surface products with a link to Microsoft Knowledge Base Article 4073006. Customers with Surface devices should refer to the article for the latest update information.</p>\n"},"Number":"2.1"},{"Date":"2017-10-20T07:00:00Z","Description":{"Value":"<p>Removed the October security-only updates for Windows Server 2012, Windows Server 2012 R2, and Windows 8.1 from the Affected Products table because these updates do not address the vulnerability discussed in this advisory. Clarified in FAQ 9 and 10 that customers running these versions of Windows who install security-only updates must install the either September security-only updates or the October monthly rollup to receive the changes for this vulnerability. These are informational changes only.</p>\n"},"Number":"1.5"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11457"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10820"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11457"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10820"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Vulnerability in TPM could allow Security Feature Bypass"}},{"Acknowledgments":[],"CVE":"ADV170014","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>Microsoft is releasing an optional security enhancement to NT LAN Manager (NTLM), limiting which network resources various clients in the Windows 10 or the Windows Server 2016 operating systems can use NTLM Single Sign On(SSO) as an authentication method. When you deploy the new security enhancement with a Network Isolation Policy defining your organization's resources, attackers can no longer redirect a user to a malicious resource outside your organization to obtain the NTLM authentication messages. This new behavior is optional, and requires customers who wish to enable it to opt in via a Windows Registry Setting or other means described below.</p>\n<p>Customers should be aware that enabling this new behavior will prevent NTLM SSO authentication with resources that are not marked as internal by the Windows Firewall. This may break some functionality by preventing NTLM SSO authentication to resources marked external, though other authentication methods will remain available. Examples where NTLM SSO authentication appear would be Internet Explorer or Edge, or a service calling WinHTTP to access a web resource; a user trying to connect to an SMB file share; or processes making RPC calls. Microsoft is releasing this new functionality as a mitigation to NTLM dictionary attacks. Microsoft continues to recommend that customers move to public key authentication methods for applications which do not support modern authentication, and use negotiate with Kerberos authentication whenever possible.</p>\n<p>The new functionality works by denying NTLM SSO authentication as a method for public resources. This is achieved when the NTLM client leverages the Windows Firewall’s ability to determine if a resource is a Public, Private, or Enterprise resource as defined by the customer-configured Windows Information Protection settings. Depending on this determination, the connection will either be allowed or denied.</p>\n<h2>FAQ</h2>\n<p><strong>1. Which registry setting should I set to enable this behavior?</strong></p>\n<p>Customers can add a DWORD32 key named “EnterpriseAccountSSO” to the Windows Registry location HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Lsa\\MSV1_0 with the following options:</p>\n<ul>\n<li>2 – Always allow SSO. (This is the default state.)</li>\n<li>1 – Deny SSO if the resource is public. Allow if the resource is private or enterprise. <strong>Allow</strong> SSO if the resource is unspecified.</li>\n<li>0 – Deny SSO if the resource is public. Allow if the resource is private or enterprise. <strong>Deny</strong> SSO if the resource is unspecified.</li>\n</ul>\n<p><strong>2. Is any other configuration necessary for this new behavior?</strong></p>\n<p>Yes. Customers need to configure a Network Isolation Policy(NIP) that defines which networks should be considered internal/enterprise and thus will permit NTLM as an SSO Authentication method. A correctly configured NIP is critical for NTLM SSO to continue to function.</p>\n<p><strong>3. Which operating systems are vulnerable to this type of attack?</strong></p>\n<p>All versions of Windows that use NTLM are susceptible to this type of attack. Microsoft is releasing this new behavior only on the Windows 10 and Server 2016 platforms due to limitations in the older versions of the Windows Firewall, which preclude older operating systems from using this new behavior. Microsoft recommends customers upgrade to the newest, and most secure offerings.</p>\n<p><strong>4. Where can I find more information about Windows Information Protection?</strong></p>\n<ul>\n<li>For general information, see <a href=\"https://blogs.technet.microsoft.com/windowsitpro/2016/06/29/introducing-windows-information-protection/\">Introducing Windows Information Protection</a></li>\n<li>For configuration deatils, please see the &quot;Choose where apps can access enterprise data&quot; section of: <a href=\"https://docs.microsoft.com/en-us/windows/threat-protection/windows-information-protection/create-wip-policy-using-sccm\">Create and deploy a Windows Information Protection (WIP) policy using System Center Configuration Manager</a></li>\n</ul>\n<p><strong>5. Where can I find details about enabling this functionality through Group Policy?</strong></p>\n<p>See [https://docs.microsoft.com/en-us/windows/access-protection/windows-firewall/isolating-apps-on-your-network#step-1-define-your-network](See https://docs.microsoft.com/en-us/windows/access-protection/windows-firewall/isolating-apps-on-your-network#step-1-define-your-network)</p>\n<p><strong>6. Are there other ways to opt-in to this new behavior?</strong></p>\n<p>Yes. Both the Group Policy network isolation settings and Windows Information Protection cover the same area, both for Apps and for NTLM SSO Authentication. Using either is equally effective at mitigating NTLM SSO hash theft, but customers should select between these options. Mixing various means could create unexpected behavior.</p>\n<p><strong>7. Is a reboot required to enable this new behavior?</strong></p>\n<p>A reboot will be required to install the security update. When you then enable this new behavior with a Windows Registry change, the new behavior will be immediately take effect and not require a reboot. The changes to the Windows Firewall will have a varied delay depending on whether WIP or GP was used, and when this configuration is refreshed.</p>\n<p><strong>8. My enterprise has enabled this behavior, and now users are being prompted for credentials where they previously were not. Why is this happening?</strong></p>\n<p>This is an indication that the resource is marked as public or that its designation is uncertain, if the strictest mode has been enabled. This is most likely a symptom of the resource being inaccurately represented in your enterprise’s NIP, or you have configured 0 and the application is not using SMB, RPC, or HTTP.</p>\n<p>To check whether a resource is public, please enable the “Network Isolation Operational” logs under Windows Firewall with Advanced Security in Event Viewer. For the purposes of the log, enterprise resources are considered private. Please note that Network Isolation policies from Group Policy and WIP settings only affect networks whose profile is “Domain”. For more information about network profiles, please see: <a href=\"https://technet.microsoft.com/en-us/library/cc731634(v=ws.11).aspx\">Understanding Firewall Profiles</a>.</p>\n"},{"Ordinal":"20","Title":"Windows NTLM","Type":7,"Value":"Windows NTLM"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"13","ProductStatuses":[{"ProductID":["10816","10951","10952","10729","10735","10789","10788","10852","10853","10855"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10816","10852","10853","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10789","10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Optional Windows NTLM SSO authentication changes"}},{"Acknowledgments":[{"Name":[{"Value":"Huang Anwen <a href=\"https://www.ichunqiu.com/\">ichunqiu Ker Team</a>"}],"URL":[""]}],"CVE":"CVE-2017-11821","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"14","ProductStatuses":[{"ProductID":["11447","10724-10951","10724-10952"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.7.3"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Hui Gao of <a href=\"https://www.paloaltonetworks.com/\">Palo Alto Networks</a> and Heige (a.k.a. SuperHei) of Knownsec 404 Security Team"}],"URL":[""]}],"CVE":"CVE-2017-11822","CVSSScoreSets":[{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10336-9312"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10336-9318"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10951"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10952"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10729"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10735"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10789"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10788"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10852"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10853"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10816"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10047"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10048"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10481"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10482"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10484"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10051"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10483"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>An attacker could host a specially crafted website designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p>\n<p>The security update addresses the vulnerability by modifying how Internet Explorer handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Internet Explorer","Type":7,"Value":"Internet Explorer"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"15","ProductStatuses":[{"ProductID":["10336-9312","10336-9318","10486-10951","10486-10952","10486-10729","10486-10735","10486-10789","10486-10788","10486-10852","10486-10853","10486-10816","10486-10047","10486-10048","10486-10481","10486-10482","10486-10484","10486-10051","10486-10483"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4040685"},"ProductID":["10336-9312","10336-9318","10486-10047","10486-10048","10486-10481","10486-10482","10486-10051","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"IE Cumulative","Supercedence":"4036586","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4040685"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10486-10951","10486-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10486-10729","10486-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10486-10789","10486-10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10486-10852","10486-10853","10486-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041681"},"ProductID":["10486-10047","10486-10048","10486-10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038777","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041681"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041693"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038792","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041693"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10336-9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10336-9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10336-9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10336-9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Internet Explorer Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"James Forshaw of <a href=\"https://www.google.com/\">Google Project Zero</a>"}],"URL":[""]}],"CVE":"CVE-2017-11823","CVSSScoreSets":[{"BaseScore":6.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H"},{"BaseScore":6.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H"},{"BaseScore":6.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H"},{"BaseScore":6.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H"},{"BaseScore":6.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10789"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H"},{"BaseScore":6.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10788"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H"},{"BaseScore":6.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H"},{"BaseScore":6.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H"},{"BaseScore":6.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H"},{"BaseScore":6.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session. An attacker who successfully exploited this vulnerability could inject code into a trusted PowerShell process to bypass the Device Guard Code Integrity policy on the local machine.</p>\n<p>To exploit the vulnerability, an attacker would first have to access the local machine, and then inject malicious code into a script that is trusted by the Code Integrity policy. The injected code would then run with the same trust level as the script and bypass the Code Integrity policy.</p>\n<p>The update addresses the vulnerability by correcting how PowerShell exposes functions and processes user supplied code.</p>\n"},{"Ordinal":"20","Title":"Device Guard","Type":7,"Value":"Device Guard"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"16","ProductStatuses":[{"ProductID":["10951","10952","10729","10735","10789","10788","10852","10853","10816","10855"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10789","10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Device Guard Code Integrity Policy Security Feature Bypass Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<li><a href=\"http://eskamation.de/\">Stefan Kanthak</a></li>"}],"URL":[""]}],"CVE":"ADV170017","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>Microsoft has released an update for Microsoft Office that provides enhanced security as a defense in depth measure.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>1. How should this update be deployed?</strong></p>\n<p>The update can be applied from Microsoft Update or the Download Center to existing Office installations by following the links in the KB articles listed in the <strong>Affected Products</strong> table. In addition, the update can be deployed in a new installation of Office by placing the Office setup files in the Updates folder in the Office installation image as follows:</p>\n<ol>\n<li><p>Download OfficeSetupFiles2.zip from the following link: <a href=\"http://download.microsoft.com/download/5/C/0/5C08695C-D518-4FF2-A9CF-B0180B828965/OfficeSetupFiles2.ZIP\">OfficeSetupFiles</a>.</p>\n</li>\n<li><p>Extract the files from OfficeSetupFiles2.zip. There are x86 and x64 versions of OSE.EXE and OSETUP.DLL for Office 2013 and Office 2016, and OSE.EXE, OSETUP.DLL, and PSETUP.DLL for Office 2010.</p>\n</li>\n<li><p>Copy the files for the appropriate Office version and architecture into the Updates folder in the installation image. If the Updates folder already contains older versions of the same files, replace the old files with the new ones.</p>\n</li>\n<li><p>Extract the .msp patch files from the download EXEs linked in the <strong>Affected Products</strong> table and place them in the Updates folder in the installation image by following these steps:</p>\n<ol>\n<li><p>Download the EXE files for the desired Office version listed in the <strong>Affected Products</strong> table.</p>\n</li>\n<li><p>At the command prompt, type the name of the download EXE with the /extract switch and the path to where you want to extract the files. For example:</p>\n<pre><code> osetup2013-kb4011254-fullfile-x86-glb.exe /extract:&quot;c:\\ExtractFiles&quot;\n</code></pre>\n</li>\n<li><p>Copy the extracted .msp files to the Updates folder in the installation image. If the Updates folder already contains older versions of the same files, replace the old files with the new ones.</p>\n</li>\n<li><p>Install Office.</p>\n</li>\n</ol>\n</li>\n</ol>\n<p><strong>Note:</strong> If you are installing the original release of Office 2010 or 2013, and not the service pack re-release, then you must also include the service pack .msp files in the Updates folder of the installation image. Do this as follows:</p>\n<ol>\n<li><p>Download Office 2010 Service Pack 2 or Office 2013 Service Pack 1 from the following links:</p>\n<ul>\n<li><a href=\"https://www.microsoft.com/download/details.aspx?id=39667\">Office 2010 Service Pack 2 – 32-bit Edition</a></li>\n<li><a href=\"https://www.microsoft.com/download/details.aspx?id=39647\">Office 2010 Service Pack 2 – 64-bit Edition</a></li>\n<li><a href=\"https://www.microsoft.com/download/details.aspx?id=42017\">Office 2013 Service Pack 1 – 32-bit Edition</a></li>\n<li><a href=\"https://www.microsoft.com/download/details.aspx?id=42006\">Office 2013 Service Pack 1 – 64-bit Edition</a></li>\n</ul>\n</li>\n<li><p>Extract the .msp patch files from the service pack download EXEs and place them in the Updates folder, following the instructions in step 4 in the preceding section.</p>\n</li>\n</ol>\n<p><strong>2. Are there any other mitigations for installing Office products that I should be aware of?</strong></p>\n<p>Yes. To use Microsoft Office self-extracting executable installers (.exe files), such as Office tools and updates downloaded from the Microsoft Download Center, in a safe manner Microsoft recommends that you:</p>\n<ol>\n<li>Create a new empty directory and restrict permissions to the directory so that only administrators can modify it.</li>\n<li>Download or copy the self-extracting installer to the directory.</li>\n<li>Run the installer from the directory.</li>\n</ol>\n<p>For Click-to-Run versions of Office 2013 and 2016:</p>\n<p>Use the most recent version of the Office Deployment Tool for Click-to-Run, which can be downloaded from the following locations:</p>\n<ul>\n<li><a href=\"https://www.microsoft.com/en-us/download/details.aspx?id=36778\">Microsoft Office 2013 Deployment Tool for Click-to-Run</a></li>\n<li><a href=\"https://www.microsoft.com/en-us/download/details.aspx?id=49117\">Microsoft Office 2016 Deployment Tool for Click-to-Run</a></li>\n</ul>\n"},{"Ordinal":"20","Title":"Microsoft Office","Type":7,"Value":"Microsoft Office"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"17","ProductStatuses":[{"ProductID":["10521","10522","10603","10601","10602","10753","10754"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4022206"},"ProductID":["10521","10522"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011274","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=b4016c8c-9fa6-40c0-ae74-93b3a66e6c0d"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4022208"},"ProductID":["10521","10522"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=c9e5660e-9c33-4303-b82a-fe62be624ad1"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4022188"},"ProductID":["10603","10601","10602"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011253","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4022189"},"ProductID":["10603","10601","10602"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011254","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4022176"},"ProductID":["10753","10754"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011237","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=0ca6d983-81cf-4cb5-9ba4-99e54d174546"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4022172"},"ProductID":["10753","10754"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011239","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=8efb58d2-31a8-4244-87fc-b45a4e99dd88"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2018-05-08T07:00:00Z","Description":{"Value":"<p>To further protect customers, Microsoft is announcing the release of new updates for ADV170017 for supported editions of Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016. Microsoft recommends that customers follow the instructions in FAQ #1, which has been revised to clarify the deployment procedure, to download and install the new updates. In addition, FAQ #2 has been added to explain how customers can safely use Microsoft Office self-extracting executable installers (.exe files).</p>\n"},"Number":"2.0"},{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"<p>Microsoft is announcing the release of new updates for ADV170017 that further enhance security for supported editions of Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016. Microsoft recommends that customers follow the instructions in FAQ #1 to download and install the updates.</p>\n"},"Number":"3.0"},{"Date":"2021-04-06T07:00:00Z","Description":{"Value":"<p>Updated details in the table in the description. This is an informational change only.</p>\n"},"Number":"3.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10521"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10522"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10603"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10601"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10602"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10753"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10754"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"None"},"ProductID":["10521"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"None"},"ProductID":["10522"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"None"},"ProductID":["10603"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"None"},"ProductID":["10601"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"None"},"ProductID":["10602"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"None"},"ProductID":["10753"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"None"},"ProductID":["10754"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Office Defense in Depth Update"}},{"Acknowledgments":[{"Name":[{"Value":"Jerry Decime, <a href=\"https://www.hpe.com\">Hewlett Packard Enterprise</a>"}],"URL":[""]}],"CVE":"CVE-2017-11786","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An elevation of privilege vulnerability exists when Skype for Business fails to properly handle specific authentication requests.</p>\n<p>An authenticated attacker who successfully exploited this vulnerability could steal an authentication hash that can be reused elsewhere. The attacker could then take any action that the user had permissions for, causing possible outcomes that could vary between users.</p>\n<p>To exploit the vulnerability, an attacker could invite a user to an instant message session while using a malicious profile image.</p>\n<p>The security update addresses the vulnerability by correcting how Skype for Business handles authentication requests.</p>\n"},{"Ordinal":"20","Title":"Microsoft Office","Type":7,"Value":"Microsoft Office"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"18","ProductStatuses":[{"ProductID":["10628","10630","10770","10771"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011179"},"ProductID":["10628","10630"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011107","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=324ec226-c71e-403e-bdea-e888d2820611"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011159"},"ProductID":["10770","10771"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011040","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=34bb089a-523e-4d73-97da-63784f269e19"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10628"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10630"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10770"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10771"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10628"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10630"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10770"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10771"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely;DOS:N/A"},"Type":1}],"Title":{"Value":"Skype for Business Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Enrique Nissim of IOActive"}],"URL":[""]}],"CVE":"CVE-2017-8693","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10789"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10788"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p>\n<p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.</p>\n<p>The update addresses the vulnerability by correcting the way in which the Windows Graphics Component handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Graphics Component","Type":7,"Value":"Microsoft Graphics Component"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"19","ProductStatuses":[{"ProductID":["10951","10952","10729","10735","10789","10788","10852","10853","10816","10855"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10789","10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Graphics Component Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"bear13oy of DBAPP Security"}],"URL":[""]}],"CVE":"CVE-2017-8694","CVSSScoreSets":[{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10789"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10788"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application to take control of an affected system.</p>\n<p>The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Windows Kernel-Mode Drivers","Type":7,"Value":"Windows Kernel-Mode Drivers"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"20","ProductStatuses":[{"ProductID":["10951","10952","10729","10735","10789","10788","10852","10853","10816","10855","10047","10048","10481","10482","10484","9312","10287","9311","9318","9344","10050","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10789","10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041681"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038777","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041681"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041678"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041678"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041693"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038792","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041693"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041687"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041687"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042120"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042120"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041690"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038799","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041690"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041679"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041679"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Kernel Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Tianyang Yang"}],"URL":[""]},{"Name":[{"Value":"Noam Kushinsky"}],"URL":[""]}],"CVE":"CVE-2017-8703","CVSSScoreSets":[{"BaseScore":5.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":4.3,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:R"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A denial of service vulnerability exists when Windows Subsystem for Linux improperly handles objects in memory. An attacker who successfully exploited this vulnerability could cause a denial of service against the local system.</p>\n<p>A attacker could exploit this vulnerability by running a specially crafted application.</p>\n<p>The update addresses the vulnerability by correcting how Windows Subsystem for Linux handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Windows Subsystem for Linux","Type":7,"Value":"Windows Subsystem for Linux"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"21","ProductStatuses":[{"ProductID":["10952"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Subsystem for Linux Denial of Service Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Matt Nelson (<a href=\"https://twitter.com/enigma0x3\">@enigma0x3</a>) of <a href=\"https://www.specterops.io/\">SpecterOps</a>"}],"URL":[""]}],"CVE":"CVE-2017-8715","CVSSScoreSets":[{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10789"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10788"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session. An attacker who successfully exploited this vulnerability could inject code into a trusted PowerShell process to bypass the Device Guard Code Integrity policy on the local machine.</p>\n<p>To exploit the vulnerability, an attacker would first have to access the local machine, and then inject malicious code into a script that is trusted by the Code Integrity policy. The injected code would then run with the same trust level as the script and bypass the Code Integrity policy.</p>\n<p>The update addresses the vulnerability by correcting how PowerShell exposes functions and processes user supplied code.</p>\n"},{"Ordinal":"20","Title":"Device Guard","Type":7,"Value":"Device Guard"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"22","ProductStatuses":[{"ProductID":["10951","10952","10729","10735","10789","10788","10852","10853","10816","10855"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10789","10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Device Guard Code Integrity Policy Security Feature Bypass Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Zhou Yu working with <a href=\"http://www.zerodayinitiative.com/\">Trend Micro's Zero Day Initiative</a>"}],"URL":[""]}],"CVE":"CVE-2017-8717","CVSSScoreSets":[{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10789"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10788"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system. An attacker who successfully exploited this vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p>\n<p>To exploit the vulnerability, a user must open or preview a specially crafted Excel file while using an affected version of Microsoft Windows. In an email attack scenario, an attacker could exploit the vulnerability by sending a specially crafted Excel file to the user, and then convincing the user to open the file.</p>\n<p>The security update addresses the vulnerability by modifying how the Microsoft JET Database Engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft JET Database Engine","Type":7,"Value":"Microsoft JET Database Engine"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"23","ProductStatuses":[{"ProductID":["10951","10952","10729","10735","10789","10788","10852","10853","10816","10855","10047","10048","10481","10482","10484","9312","10287","9311","9318","9344","10050","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10789","10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041681"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038777","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041681"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041678"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041678"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041693"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038792","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041693"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041687"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041687"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042007"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"None","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042007"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041690"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038799","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041690"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041679"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041679"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft JET Database Engine Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Zhou Yu working with <a href=\"http://www.zerodayinitiative.com/\">Trend Micro's Zero Day Initiative</a>"}],"URL":[""]}],"CVE":"CVE-2017-8718","CVSSScoreSets":[{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10789"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10788"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":6.4,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system. An attacker who successfully exploited this vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p>\n<p>To exploit the vulnerability, a user must open or preview a specially crafted Excel file while using an affected version of Microsoft Windows. In an email attack scenario, an attacker could exploit the vulnerability by sending a specially crafted Excel file to the user, and then convincing the user to open the file.</p>\n<p>The security update addresses the vulnerability by modifying how the Microsoft JET Database Engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft JET Database Engine","Type":7,"Value":"Microsoft JET Database Engine"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"24","ProductStatuses":[{"ProductID":["10951","10952","10729","10735","10789","10788","10852","10853","10816","10855","10047","10048","10481","10482","10484","9312","10287","9311","9318","9344","10050","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10789","10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041681"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038777","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041681"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041678"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041678"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041693"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038792","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041693"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041687"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041687"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4050795"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4042007","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4050795"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041690"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038799","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041690"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041679"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041679"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2017-11-14T08:00:00Z","Description":{"Value":"<p>Security Update 4050795 is available as a replacement update for Security Update 4042007, which caused problems in certain environments. Microsoft recommends installing Security Update 4050795.</p>\n"},"Number":"2.0"},{"Date":"2017-11-29T08:00:00Z","Description":{"Value":"<p>Corrected several links in the Affected Products table for Microsoft Windows 8.1.</p>\n"},"Number":"2.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft JET Database Engine Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Abdulrahman Alqabandi (<a href=\"https://twitter.com/Qab\">@qab</a>)"}],"URL":[""]}],"CVE":"CVE-2017-8726","CVSSScoreSets":[{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10729"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10735"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10789"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10788"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10852"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10853"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10816"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An information disclosure vulnerability exists when Microsoft Edge based on Edge HTML improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p>\n<p>To exploit the vulnerability, in a web-based attack scenario, an attacker could host a website in an attempt to exploit the vulnerability. In addition, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action. For example, an attacker could trick a user into clicking a link that takes the user to the attacker's site.</p>\n<p>The update addresses the vulnerability by modifying how Microsoft Edge based on Edge HTML handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Edge (HTML-based)","Type":7,"Value":"Microsoft Edge (HTML-based)"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"25","ProductStatuses":[{"ProductID":["10724-10951","10724-10952","10724-10729","10724-10735","10724-10789","10724-10788","10724-10852","10724-10853","10724-10816"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10724-10729","10724-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10724-10789","10724-10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10724-10852","10724-10853","10724-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10724-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Edge based on Edge HTML Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Zhang Yunhai of <a href=\"http://www.nsfocus.com/\">NSFOCUS</a>"}],"URL":[""]}],"CVE":"CVE-2017-8727","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10789"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10788"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory via the Microsoft Windows Text Services Framework. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>An attacker could host a specially crafted website designed to exploit the vulnerability through Internet Explorer, and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by an enticement in an email or instant message, or by getting them to open an attachment sent through email.</p>\n<p>The security update addresses the vulnerability by modifying how the Microsoft Windows Text Services Framework handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Windows Shell","Type":7,"Value":"Windows Shell"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"26","ProductStatuses":[{"ProductID":["10951","10952","10729","10735","10789","10788","10852","10853","10816","10855","10047","10048","10481","10482","10484","9312","10287","9311","9318","9344","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10789","10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041681"},"ProductID":["10047","10048"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038777","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041681"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041678"},"ProductID":["10047","10048"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041678"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041693"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038792","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041693"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041687"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041687"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042123"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042123"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041690"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038799","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041690"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041679"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041679"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Internet Explorer Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Jaanus Kp of Clarified Security working with <a href=\"http://www.zerodayinitiative.com/\">Trend Micro's Zero Day Initiative</a>"}],"URL":[""]}],"CVE":"CVE-2017-11762","CVSSScoreSets":[{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10789"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10788"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p>\n<p>There are multiple ways an attacker could exploit the vulnerability:</p>\n<ul>\n<li>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability and then convince users to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by getting them to click a link in an email or instant message that takes users to the attacker's website, or by opening an attachment sent through email.</li>\n<li>In a file-sharing attack scenario, an attacker could provide a specially crafted document file designed to exploit the vulnerability and then convince users to open the document file.</li>\n</ul>\n<p>The security update addresses the vulnerability by correcting how the Windows font library handles embedded fonts.</p>\n"},{"Ordinal":"20","Title":"Microsoft Graphics Component","Type":7,"Value":"Microsoft Graphics Component"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"27","ProductStatuses":[{"ProductID":["10951","10952","10729","10735","10789","10788","10852","10853","10816","10855","10047","10048","10481","10482","10484","9312","10287","9311","9318","9344","10050","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10789","10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041681"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038777","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041681"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041678"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041678"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041693"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038792","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041693"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041687"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041687"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042122"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042122"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041690"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038799","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041690"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041679"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041679"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Graphics Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Wayne Low (<a href=\"https://twitter.com/x9090\">@x9090</a>) of <a href=\"http://www.fortiguard.com/\">Fortinet’s FortiGuard Lab</a>"}],"URL":[""]}],"CVE":"CVE-2017-11763","CVSSScoreSets":[{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10789"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10788"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p>\n<p>There are multiple ways an attacker could exploit the vulnerability:</p>\n<ul>\n<li>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability and then convince users to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by getting them to click a link in an email or instant message that takes users to the attacker's website, or by opening an attachment sent through email.</li>\n<li>In a file-sharing attack scenario, an attacker could provide a specially crafted document file designed to exploit the vulnerability and then convince users to open the document file.</li>\n</ul>\n<p>The security update addresses the vulnerability by correcting how the Windows font library handles embedded fonts.</p>\n"},{"Ordinal":"20","Title":"Microsoft Graphics Component","Type":7,"Value":"Microsoft Graphics Component"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"28","ProductStatuses":[{"ProductID":["10951","10952","10729","10735","10789","10788","10852","10853","10816","10855","10047","10048","10481","10482","10484","9312","10287","9311","9318","9344","10050","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10789","10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041681"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038777","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041681"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041678"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041678"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041693"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038792","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041693"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041687"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041687"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042122"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042122"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041690"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038799","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041690"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041679"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041679"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Graphics Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"WenQunWang of <a href=\"http://www.tencent.com/\">Tencent's Xuanwu LAB</a>"}],"URL":[""]}],"CVE":"CVE-2017-11765","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10789"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10788"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p>\n<p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The vulnerability would not allow an attacker to execute code or to elevate user rights directly, but it could be used to obtain information that could be used to try to further compromise the affected system.</p>\n<p>The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Windows Kernel","Type":7,"Value":"Windows Kernel"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"29","ProductStatuses":[{"ProductID":["10951","10952","10729","10735","10789","10788","10852","10853","10816","10855","10047","10048","10481","10482","10484","9312","10287","9311","9318","9344","10050","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10789","10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041681"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038777","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041681"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041678"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041678"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041693"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038792","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041693"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041687"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041687"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042120"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042120"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041690"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038799","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041690"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041679"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041679"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Kernel Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<li><a href=\"https://www.linkedin.com/in/rshupak\">Richard Shupak</a></li>"}],"URL":[""]}],"CVE":"CVE-2017-11769","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10789"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10788"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that certain Windows components handle the loading of DLL files. An attacker who successfully exploited this vulnerability could take complete control of an affected system.</p>\n<p>An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p>\n"},{"Ordinal":"20","Title":"Microsoft Windows","Type":7,"Value":"Microsoft Windows"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"30","ProductStatuses":[{"ProductID":["10951","10952","10729","10735","10789","10788","10852","10853","10816","10855"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10789","10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"TRIE Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Gabriel Negreira Barbosa & Ditmar Wendt"}],"URL":[""]}],"CVE":"CVE-2017-11771","CVSSScoreSets":[{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10789"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10788"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists when Windows Search handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>To exploit the vulnerability, the attacker could send specially crafted messages to the Windows Search service. An attacker with access to a target computer could exploit this vulnerability to elevate privileges and take control of the computer. Additionally, in an enterprise scenario, a remote unauthenticated attacker could remotely trigger the vulnerability through an SMB connection and then take control of a target computer.</p>\n<p>The security update addresses the vulnerability by correcting how Windows Search handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Windows Search Component","Type":7,"Value":"Microsoft Windows Search Component"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"31","ProductStatuses":[{"ProductID":["10951","10952","10729","10735","10789","10788","10852","10853","10816","10855","10047","10048","10481","10482","10484","9312","10287","9311","9318","9344","10050","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10789","10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041681"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038777","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041681"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041678"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041678"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041693"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038792","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041693"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041687"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041687"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042067"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042067"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041690"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038799","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041690"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041679"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041679"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"<p><strong>Disable WSearch service</strong></p>\n<p><strong>Interactive workaround deployment steps</strong></p>\n<ol>\n<li>Click <strong>Start</strong>, click <strong>Run</strong>, type &quot;regedit&quot; (without the quotation marks), and then click <strong>OK</strong>.</li>\n<li>Expand <strong>HKEY_LOCAL_MACHINE</strong></li>\n<li>Expand <strong>System</strong>, then <strong>CurrentControlSet</strong>, then <strong>Services</strong></li>\n<li>Click on <strong>WSearch</strong></li>\n<li>Click the <strong>File</strong> menu and select <strong>Export</strong>.</li>\n<li>In the Export Registry File dialog type “WSearch_configuration_backup.reg” and press <strong>Save</strong>.</li>\n<li>Double-click the value named <strong>Start</strong> and change the <strong>Value</strong> data field to 4</li>\n<li>Click <strong>OK</strong></li>\n<li>Run the following command at a command prompt running as an administrator:\n<code>sc stop WSearch</code></li>\n</ol>\n<p><strong>Impact of workaround</strong>\nThe Windows Search functionality will not be available to applications that use it for searches.</p>\n<p><strong>How do undo the workaround</strong>\nClick <strong>Start</strong> , click <strong>Run</strong> , type &quot;regedit &quot; (without the quotation marks), and then click <strong>OK</strong>.\nClick the <strong>File</strong> menu and select <strong>Import</strong>.\nIn the <strong>Import Registry File</strong> dialog select “WSearch_configuration_backup.reg” and press <strong>Open</strong>.</p>\n<p><strong>Managed workaround deployment steps</strong></p>\n<ol>\n<li>First a backup copy of the registry keys can be made from a managed deployment script with the following command:\nregedit /e WSearch_configuration_backup.reg HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WSearch</li>\n<li>Next save the following to a file with a .REG extension (e.g. Disable_WSearch.reg)</li>\n</ol>\n<pre><code>[HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WSearch]\n\t&quot;Start&quot;=dword:00000004\n</code></pre>\n<ol start=\"3\">\n<li>Run the registry script created in step 2 on the target machine with the following command:\nregedit /s Disable_WSearch .reg</li>\n<li>Run the following command at a command prompt running as an administrator:\nsc stop WSearch</li>\n</ol>\n<p><strong>Impact of workaround</strong>\nThe Windows Search functionality will not be available to applications that use it for searches.</p>\n<p><strong>How to undo the workaround</strong>\nRestore the original state by running the following command:\nregedit /s WSearch_configuration_backup.reg</p>\n"},"Type":0}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Search Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Gabriel Negreira Barbosa & Ditmar Wendt"}],"URL":[""]}],"CVE":"CVE-2017-11772","CVSSScoreSets":[{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":5.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":5.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":5.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":5.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10789"],"TemporalScore":5.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10788"],"TemporalScore":5.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":5.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":5.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":5.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":5.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":5.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":5.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":5.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":5.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":5.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":5.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":5.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":5.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":5.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":5.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":5.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":5.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":5.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":5.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":5.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An Information disclosure vulnerability exists when Windows Search improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p>\n<p>To exploit the vulnerability, the attacker could send specially crafted messages to the Windows Search service. Additionally, in an enterprise scenario, a remote unauthenticated attacker could trigger the vulnerability through an SMB connection.</p>\n<p>The security update addresses the vulnerability by correcting how Windows Search handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Windows Search Component","Type":7,"Value":"Microsoft Windows Search Component"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"32","ProductStatuses":[{"ProductID":["10951","10952","10729","10735","10789","10788","10852","10853","10816","10855","10047","10048","10481","10482","10484","9312","10287","9318","9344","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10789","10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041681"},"ProductID":["10047","10048","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038777","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041681"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041678"},"ProductID":["10047","10048","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041678"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041693"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038792","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041693"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041687"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041687"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042067"},"ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042067"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041690"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038799","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041690"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041679"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041679"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Search Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Etienne Stalmans of <a href=\" https://sensepost.com\">SensePost</a>"}],"URL":[""]}],"CVE":"CVE-2017-11774","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A security feature bypass vulnerability exists when Microsoft Outlook improperly handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary commands.</p>\n<p>In a file-sharing attack scenario, an attacker could provide a specially crafted document file designed to exploit the vulnerability, and then convince users to open the document file and interact with the document.</p>\n<p>The security update addresses the vulnerability by correcting how Microsoft Outlook handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Office","Type":7,"Value":"Microsoft Office"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"33","ProductStatuses":[{"ProductID":["10765","10766","10810","10811","10527","10528","10407"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011162"},"ProductID":["10765","10766"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011091","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=982a95fa-4f1a-47f3-b862-cdc9b5a3967d"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011178"},"ProductID":["10810","10811","10407"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011090","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=8c8acad9-f961-45d8-83cb-10a7df2f1692"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011196"},"ProductID":["10527","10528"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011089","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=dcb51340-7b39-4651-b382-045a5a1ddbba"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Corrected the affected Microsoft Office component in the CVE description. This is an informational change only.</p>\n"},"Number":"1.1"},{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10765"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10766"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10810"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10811"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10527"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10528"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10407"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10765"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10766"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10810"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10811"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10527"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10528"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10407"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Outlook Security Feature Bypass Vulnerability"}},{"Acknowledgments":[],"CVE":"CVE-2017-11775","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.</p>\n<p>The attacker who successfully exploited the vulnerability could then perform cross-site scripting attacks on affected systems and run script in the security context of the current user. These attacks could allow the attacker to read content that the attacker is not authorized to read, use the victim's identity to take actions on the SharePoint site on behalf of the user, such as change permissions and delete content, and inject malicious content in the browser of the user.</p>\n<p>The security update addresses the vulnerability by helping to ensure that SharePoint Server properly sanitizes web requests.</p>\n"},{"Ordinal":"20","Title":"Microsoft Office","Type":7,"Value":"Microsoft Office"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"34","ProductStatuses":[{"ProductID":["11099","10950"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011170"},"ProductID":["11099"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011113","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=9ff8330f-ef19-4984-971b-560cb469027e"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011217"},"ProductID":["10950"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011127","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=88dfde83-b64a-4931-9c73-34b5c4fb70f7"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2017-10-16T07:00:00Z","Description":{"Value":"<p>Corrected the KB number for security update 4011157 to 4011217. This is an informational change only. Customers who have already successfully installed the update do not need to take any further action.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10950"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10950"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft SharePoint Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://twitter.com/FloGatt\">Florian Gattermeier</a> and Heinrich Wiederkehr of <a href=\"https://www.ernw.de/\">ERNW GmbH</a>"}],"URL":[""]},{"Name":[{"Value":"Simon Hofer and Stefan Viehböck of <a href=\"https://www.sec-consult.com/\">SEC Consult Vulnerability Lab</a>"}],"URL":[""]}],"CVE":"CVE-2017-11776","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An information disclosure vulnerability exists when Microsoft Outlook fails to establish a secure connection.</p>\n<p>An attacker who exploited the vulnerability could use it to obtain the email content of a user.</p>\n<p>The security update addresses the vulnerability by preventing Outlook from disclosing user email content.</p>\n"},{"Ordinal":"20","Title":"Microsoft Office","Type":7,"Value":"Microsoft Office"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"35","ProductStatuses":[{"ProductID":["10765","10766"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011162"},"ProductID":["10765","10766"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011091","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=982a95fa-4f1a-47f3-b862-cdc9b5a3967d"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10765"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10766"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10765"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10766"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Outlook Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Marco Pizer and Sven Engel of <a href=\"http://www.stihl.de/\">STIHL</a>"}],"URL":[""]}],"CVE":"CVE-2017-11777","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.</p>\n<p>The attacker who successfully exploited the vulnerability could then perform cross-site scripting attacks on affected systems and run script in the security context of the current user. These attacks could allow the attacker to read content that the attacker is not authorized to read, use the victim's identity to take actions on the SharePoint site on behalf of the user, such as change permissions and delete content, and inject malicious content in the browser of the user.</p>\n<p>The security update addresses the vulnerability by helping to ensure that SharePoint Server properly sanitizes web requests.</p>\n"},{"Ordinal":"20","Title":"Microsoft Office","Type":7,"Value":"Microsoft Office"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"36","ProductStatuses":[{"ProductID":["11099","10950"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011170"},"ProductID":["11099"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011113","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=9ff8330f-ef19-4984-971b-560cb469027e"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011217"},"ProductID":["10950"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011127","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=88dfde83-b64a-4931-9c73-34b5c4fb70f7"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2017-10-16T07:00:00Z","Description":{"Value":"<p>Corrected the KB number for security update 4011157 to 4011217. This is an informational change only. Customers who have already successfully installed the update do not need to take any further action.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10950"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10950"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft SharePoint Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Nick Freeman of <a href=\"https://www.bishopfox.com\">Bishop Fox</a>"}],"URL":[""]},{"Name":[{"Value":"Nelson William Gamazo Sanchez - Trend Micro working with <a href=\"http://www.zerodayinitiative.com/\">Trend Micro's Zero Day Initiative</a>"}],"URL":[""]}],"CVE":"CVE-2017-11779","CVSSScoreSets":[{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10789"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10788"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in Windows <a href=\"https://technet.microsoft.com/en-us/library/security/dn848375.aspx#DNS\">Domain Name System (DNS)</a> DNSAPI.dll when it fails to properly handle DNS responses. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the Local System Account.</p>\n<p>To exploit the vulnerability, the attacker would use a malicious DNS server to send corrupted DNS responses to the target.</p>\n<p>The update addresses the vulnerability by modifying how Windows DNSAPI.dll handles DNS responses.</p>\n"},{"Ordinal":"20","Title":"Microsoft Windows DNS","Type":7,"Value":"Microsoft Windows DNS"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"37","ProductStatuses":[{"ProductID":["10729","10735","10789","10788","10852","10853","10481","10482","10484","10378","10379","10483","10543","10816","10855","10951","10952"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10789","10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041693"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038792","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041693"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041687"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041687"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041690"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038799","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041690"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041679"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041679"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows DNSAPI Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Nicolas Joly of MSRC Vulnerabilities & Mitigations"}],"URL":[""]}],"CVE":"CVE-2017-11780","CVSSScoreSets":[{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10789"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10788"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":7.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server.</p>\n<p>To exploit the vulnerability, in most situations, an authenticated attacker could send a specially crafted packet to a targeted SMBv1 server.</p>\n<p>The security update addresses the vulnerability by correcting how SMBv1 handles these specially crafted requests.</p>\n"},{"Ordinal":"20","Title":"Windows SMB Server","Type":7,"Value":"Windows SMB Server"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"38","ProductStatuses":[{"ProductID":["10951","10952","10729","10735","10789","10788","10852","10853","10816","10855","10047","10048","10481","10482","10484","9312","10287","9311","9318","9344","10050","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10789","10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041681"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038777","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041681"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041678"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041678"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041693"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038792","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041693"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041687"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041687"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041995"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041995"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041690"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038799","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041690"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041679"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041679"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"<p>The following <a href=\"https://technet.microsoft.com/library/security/dn848375.aspx\">mitigating factors</a> may be helpful in your situation:\nThe file sharing protocol SMB is often disabled on the perimeter firewall. This limits the potential attack vectors for this vulnerability. Please see <a href=\"https://support.microsoft.com/en-us/help/2696547/how-to-detect-enable-and-disable-smbv1-smbv2-and-smbv3-in-windows-and\">2696547</a> for more information.</p>\n"},"Type":1}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows SMB Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"pesante working with <a href=\"http://www.zerodayinitiative.com/\">Trend Micro's Zero Day Initiative</a>"}],"URL":[""]}],"CVE":"CVE-2017-11781","CVSSScoreSets":[{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10789"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10788"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A denial of service vulnerability exists in the Microsoft Server Block Message (SMB) when an authenticated attacker sends specially crafted requests to the server. An attacker who exploited this vulnerability could cause the affected system to crash. To attempt to exploit this issue, an attacker would need to send specially crafted SMB requests to the target system.</p>\n<p>Note that the denial of service vulnerability would not allow an attacker to execute code or to elevate their user rights, but it could cause the affected system to stop accepting requests.</p>\n<p>The security update addresses the vulnerability by correcting the manner in which SMB handles specially crafted client requests.</p>\n"},{"Ordinal":"20","Title":"Windows SMB Server","Type":7,"Value":"Windows SMB Server"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"39","ProductStatuses":[{"ProductID":["10951","10952","10729","10735","10789","10788","10852","10853","10816","10855","10047","10048","10481","10482","10484","9312","10287","9311","9318","9344","10050","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10789","10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041681"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038777","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041681"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041678"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041678"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041693"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038792","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041693"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041687"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041687"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041995"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041995"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041690"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038799","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041690"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041679"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041679"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely;DOS:N/A"},"Type":1}],"Title":{"Value":"W - SMB - DOS Authenticated"}},{"Acknowledgments":[],"CVE":"CVE-2017-11782","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An elevation of privilege vulnerability exists in the default Windows SMB Server configuration which allows anonymous users to remotely access certain named pipes that are also configured to allow anonymous access to users who are logged on locally. An unauthenticated attacker who successfully exploits this configuration error could remotely send specially crafted requests to certain services that accept requests via named pipes.</p>\n<p>To exploit the vulnerability, an attacker would have to be able to send SMB messages to an impacted Windows SMB Server for which the attacker does not already have valid credentials, and then identify an unpatched vulnerability in the handling of named pipe requests in one of the impacted services.</p>\n<p>The update addresses the vulnerability by correcting the Windows SMB Server default configuration.</p>\n"},{"Ordinal":"20","Title":"Windows SMB Server","Type":7,"Value":"Windows SMB Server"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"40","ProductStatuses":[{"ProductID":["10852","10853","10816","10855"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows SMB Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Clement Rouault (<a href=\"https://twitter.com/hakril\">@hakril</a>) and Thomas Imbert (<a href=\"https://twitter.com/masthoon\">@masthoon</a>) from <a href=\"http://esec-lab.sogeti.com/\">Sogeti ESEC R&D</a>"}],"URL":[""]}],"CVE":"CVE-2017-11783","CVSSScoreSets":[{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10789"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10788"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).</p>\n<p>An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control over an affected system.</p>\n<p>The update addresses the vulnerability by correcting how Windows handles calls to ALPC.</p>\n"},{"Ordinal":"20","Title":"Microsoft Windows","Type":7,"Value":"Microsoft Windows"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"41","ProductStatuses":[{"ProductID":["10951","10952","10729","10735","10789","10788","10852","10853","10816","10855","10481","10482","10484","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10789","10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041693"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038792","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041693"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041687"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041687"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows ALPC Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Mateusz Jurczyk of <a href=\"https://www.google.com\">Google Project Zero</a>"}],"URL":[""]}],"CVE":"CVE-2017-11784","CVSSScoreSets":[{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a <a href=\"https://technet.microsoft.com/en-us/library/security/dn848375.aspx#ASLR\">Kernel Address Space Layout Randomization (ASLR)</a> bypass. An attacker who successfully exploited the vulnerability could retrieve the memory address of a kernel object.</p>\n<p>To exploit the vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.</p>\n<p>The security update addresses the vulnerability by correcting how the Windows kernel handles memory addresses.</p>\n"},{"Ordinal":"20","Title":"Windows Kernel","Type":7,"Value":"Windows Kernel"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"42","ProductStatuses":[{"ProductID":["10729","10735","10047","10048","10481","10482","10484","9312","10287","9311","9318","9344","10050","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041681"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038777","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041681"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041678"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041678"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041693"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038792","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041693"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041687"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041687"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041671"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"None","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041671"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041690"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038799","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041690"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041679"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041679"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Kernel Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Mateusz Jurczyk of <a href=\"https://www.google.com\">Google Project Zero</a>"}],"URL":[""]}],"CVE":"CVE-2017-11785","CVSSScoreSets":[{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10789"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10788"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a <a href=\"https://technet.microsoft.com/en-us/library/security/dn848375.aspx#ASLR\">Kernel Address Space Layout Randomization (ASLR)</a> bypass. An attacker who successfully exploited the vulnerability could retrieve the memory address of a kernel object.</p>\n<p>To exploit the vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.</p>\n<p>The security update addresses the vulnerability by correcting how the Windows kernel handles memory addresses.</p>\n"},{"Ordinal":"20","Title":"Windows Kernel","Type":7,"Value":"Windows Kernel"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"43","ProductStatuses":[{"ProductID":["10951","10952","10729","10735","10789","10788","10852","10853","10816","10855","10047","10048","10481","10482","10484","9312","10287","9311","9318","9344","10050","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10789","10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041681"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038777","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041681"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041678"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041678"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041693"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038792","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041693"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041687"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041687"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041671"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"None","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041671"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041690"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038799","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041690"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041679"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041679"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Kernel Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Anonymous working with <a href=\"http://www.zerodayinitiative.com/\">Trend Micro's Zero Day Initiative</a>"}],"URL":[""]},{"Name":[{"Value":"Jaanus Kp Clarified Security working with <a href=\"http://www.zerodayinitiative.com/\">Trend Micro's Zero Day Initiative</a>\nInitiative"}],"URL":[""]},{"Name":[{"Value":"Dmitri Kaslov, Telspace Systems"}],"URL":[""]}],"CVE":"CVE-2017-11790","CVSSScoreSets":[{"BaseScore":2.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10555-10378"],"TemporalScore":1.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":2.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10336-9312"],"TemporalScore":1.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":2.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10336-9318"],"TemporalScore":1.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":3.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10951"],"TemporalScore":2.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":3.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10952"],"TemporalScore":2.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":3.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10729"],"TemporalScore":2.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":3.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10735"],"TemporalScore":2.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":3.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10789"],"TemporalScore":2.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":3.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10788"],"TemporalScore":2.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":3.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10852"],"TemporalScore":2.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":3.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10853"],"TemporalScore":2.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":2.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10816"],"TemporalScore":1.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":3.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10047"],"TemporalScore":2.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":3.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10048"],"TemporalScore":2.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":3.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10481"],"TemporalScore":2.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":3.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10482"],"TemporalScore":2.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":3.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10484"],"TemporalScore":2.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":2.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10051"],"TemporalScore":1.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":2.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10483"],"TemporalScore":1.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p>\n<p>To exploit the vulnerability, in a web-based attack scenario, an attacker could host a website in an attempt to exploit the vulnerability. In addition, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action. For example, an attacker could trick a user into clicking a link that takes the user to the attacker's site.</p>\n<p>The security update addresses the vulnerability by modifying how Internet Explorer handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Internet Explorer","Type":7,"Value":"Internet Explorer"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"44","ProductStatuses":[{"ProductID":["10555-10378","10336-9312","10336-9318","10486-10951","10486-10952","10486-10729","10486-10735","10486-10789","10486-10788","10486-10852","10486-10853","10486-10816","10486-10047","10486-10048","10486-10481","10486-10482","10486-10484","10486-10051","10486-10483"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041690"},"ProductID":["10555-10378"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038799","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041690"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4040685"},"ProductID":["10555-10378","10336-9312","10336-9318","10486-10047","10486-10048","10486-10481","10486-10482","10486-10051","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"IE Cumulative","Supercedence":"4036586","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4040685"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10486-10951","10486-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10486-10729","10486-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10486-10789","10486-10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10486-10852","10486-10853","10486-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041681"},"ProductID":["10486-10047","10486-10048","10486-10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038777","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041681"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041693"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038792","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041693"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10555-10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10336-9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10336-9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10555-10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10336-9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10336-9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10486-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10486-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10486-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;DOS:N/A"},"Type":1}],"Title":{"Value":"Internet Explorer Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Microsoft ChakraCore Team"}],"URL":[""]}],"CVE":"CVE-2017-11792","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"45","ProductStatuses":[{"ProductID":["11447","10724-10951","10724-10952"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.7.3"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Ivan Fratric of <a href=\"https://www.google.com\">Google Project Zero</a>"}],"URL":[""]},{"Name":[{"Value":"Hui Gao of <a href=\"https://www.paloaltonetworks.com/\">Palo Alto Networks</a> and Yixiang Zhu of National Engineering Lab for Mobile Internet System and Application Security, China"}],"URL":[""]}],"CVE":"CVE-2017-11793","CVSSScoreSets":[{"BaseScore":3.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10555-10378"],"TemporalScore":2.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":3.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10336-9312"],"TemporalScore":2.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":3.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10336-9318"],"TemporalScore":2.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10729"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10735"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10789"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10788"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10852"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":3.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10816"],"TemporalScore":2.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10047"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10048"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10481"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10482"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10484"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":3.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10051"],"TemporalScore":2.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":3.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10483"],"TemporalScore":2.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"46","ProductStatuses":[{"ProductID":["10555-10378","10336-9312","10336-9318","10486-10951","10486-10952","10486-10729","10486-10735","10486-10789","10486-10788","10486-10852","10486-10853","10486-10816","10486-10047","10486-10048","10486-10481","10486-10482","10486-10484","10486-10051","10486-10483"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041690"},"ProductID":["10555-10378"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038799","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041690"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4040685"},"ProductID":["10555-10378","10336-9312","10336-9318","10486-10047","10486-10048","10486-10481","10486-10482","10486-10051","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"IE Cumulative","Supercedence":"4036586","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4040685"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10486-10951","10486-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10486-10729","10486-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10486-10789","10486-10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10486-10852","10486-10853","10486-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041681"},"ProductID":["10486-10047","10486-10048","10486-10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038777","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041681"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041693"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038792","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041693"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10555-10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10336-9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10336-9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10555-10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10336-9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10336-9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Anonymous working with <a href=\"http://www.zerodayinitiative.com/\">Trend Micro's Zero Day Initiative</a>"}],"URL":[""]}],"CVE":"CVE-2017-11794","CVSSScoreSets":[{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An information disclosure vulnerability exists when Microsoft Edge based on Edge HTML improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p>\n<p>To exploit the vulnerability, in a web-based attack scenario, an attacker could host a website in an attempt to exploit the vulnerability. In addition, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action. For example, an attacker could trick a user into clicking a link that takes the user to the attacker's site.</p>\n<p>The update addresses the vulnerability by modifying how Microsoft Edge based on Edge HTML handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Edge (HTML-based)","Type":7,"Value":"Microsoft Edge (HTML-based)"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"47","ProductStatuses":[{"ProductID":["10724-10951","10724-10952"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Edge based on Edge HTML Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Microsoft ChakraCore Team"}],"URL":[""]}],"CVE":"CVE-2017-11796","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"48","ProductStatuses":[{"ProductID":["11447","10724-10951","10724-10952"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.7.3"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Microsoft ChakraCore Team"}],"URL":[""]}],"CVE":"CVE-2017-11797","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user.</p>\n<p>If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>The security update addresses the vulnerability by modifying how the ChakraCore scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"49","ProductStatuses":[{"ProductID":["11447"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.7.3"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Huang Anwen <a href=\"https://www.ichunqiu.com/\">ichunqiu Ker Team</a>"}],"URL":[""]}],"CVE":"CVE-2017-11798","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10729"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10735"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10789"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10788"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10852"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":3.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10816"],"TemporalScore":2.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"50","ProductStatuses":[{"ProductID":["10724-10951","10724-10952","10724-10729","10724-10735","10724-10789","10724-10788","10724-10852","10724-10853","10724-10816"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10724-10729","10724-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10724-10789","10724-10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10724-10852","10724-10853","10724-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10724-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Lokihardt of <a href=\"https://www.google.com/\">Google Project Zero</a>"}],"URL":[""]}],"CVE":"CVE-2017-11799","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10729"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10735"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10789"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10788"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10852"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":3.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10816"],"TemporalScore":2.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"51","ProductStatuses":[{"ProductID":["11447","10724-10951","10724-10952","10724-10729","10724-10735","10724-10789","10724-10788","10724-10852","10724-10853","10724-10816"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.7.3"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10724-10729","10724-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10724-10789","10724-10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10724-10852","10724-10853","10724-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10724-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Anonymous working with <a href=\"http://www.zerodayinitiative.com/\">Trend Micro's Zero Day Initiative</a>"}],"URL":[""]}],"CVE":"CVE-2017-11800","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10729"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10735"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10789"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10788"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10852"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":3.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10816"],"TemporalScore":2.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"52","ProductStatuses":[{"ProductID":["10724-10729","10724-10735","10724-10789","10724-10788","10724-10852","10724-10853","10724-10816"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10724-10729","10724-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10724-10789","10724-10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10724-10852","10724-10853","10724-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10724-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Microsoft ChakraCore Team"}],"URL":[""]}],"CVE":"CVE-2017-11801","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user.</p>\n<p>If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>The security update addresses the vulnerability by modifying how the ChakraCore scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"53","ProductStatuses":[{"ProductID":["11447"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.7.3"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Hao Linan of <a href=\"https://www.360.com/\">Qihoo 360 Vulcan Team</a>"}],"URL":[""]},{"Name":[{"Value":"Lokihardt of <a href=\"https://www.google.com/\">Google Project Zero</a>"}],"URL":[""]}],"CVE":"CVE-2017-11802","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10729"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10735"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10789"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10788"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10852"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":3.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10816"],"TemporalScore":2.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"54","ProductStatuses":[{"ProductID":["11447","10724-10951","10724-10952","10724-10729","10724-10735","10724-10789","10724-10788","10724-10852","10724-10853","10724-10816"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.7.3"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10724-10729","10724-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10724-10789","10724-10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10724-10852","10724-10853","10724-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10724-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Microsoft ChakraCore Team"}],"URL":[""]}],"CVE":"CVE-2017-11804","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10729"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10735"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10789"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10788"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10852"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":3.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10816"],"TemporalScore":2.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"55","ProductStatuses":[{"ProductID":["11447","10724-10951","10724-10952","10724-10729","10724-10735","10724-10789","10724-10788","10724-10852","10724-10853","10724-10816"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.7.3"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10724-10729","10724-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10724-10789","10724-10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10724-10852","10724-10853","10724-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10724-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Microsoft ChakraCore Team"}],"URL":[""]}],"CVE":"CVE-2017-11805","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"56","ProductStatuses":[{"ProductID":["11447","10724-10951","10724-10952"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.7.3"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Microsoft ChakraCore Team"}],"URL":[""]}],"CVE":"CVE-2017-11806","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"57","ProductStatuses":[{"ProductID":["11447","10724-10951","10724-10952"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.7.3"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Microsoft ChakraCore Team"}],"URL":[""]}],"CVE":"CVE-2017-11807","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"58","ProductStatuses":[{"ProductID":["11447","10724-10951","10724-10952"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.7.3"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Microsoft ChakraCore Team"}],"URL":[""]}],"CVE":"CVE-2017-11808","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10729"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10735"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10789"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10788"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10852"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":3.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10816"],"TemporalScore":2.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"59","ProductStatuses":[{"ProductID":["11447","10724-10951","10724-10952","10724-10729","10724-10735","10724-10789","10724-10788","10724-10852","10724-10853","10724-10816"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.7.3"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10724-10729","10724-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10724-10789","10724-10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10724-10852","10724-10853","10724-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10724-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Lokihardt of <a href=\"https://www.google.com/\">Google Project Zero</a>"}],"URL":[""]}],"CVE":"CVE-2017-11809","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10729"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10735"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10789"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10788"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10852"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10816"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website designed to exploit the vulnerability through a Microsoft browser and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the browser rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"60","ProductStatuses":[{"ProductID":["11447","10724-10951","10724-10952","10724-10729","10724-10735","10724-10789","10724-10788","10724-10852","10724-10853","10724-10816"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.7.3"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10724-10729","10724-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10724-10789","10724-10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10724-10852","10724-10853","10724-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10724-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Ivan Fratric of <a href=\"https://www.google.com/\">Google Project Zero</a>"}],"URL":[""]}],"CVE":"CVE-2017-11810","CVSSScoreSets":[{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10555-10378"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10336-9312"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10336-9318"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10951"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10952"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10729"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10735"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10789"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10788"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10852"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10853"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10816"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10047"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10048"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10481"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10482"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10484"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10051"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10483"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Internet Explorer","Type":7,"Value":"Internet Explorer"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"61","ProductStatuses":[{"ProductID":["10555-10378","10336-9312","10336-9318","10486-10951","10486-10952","10486-10729","10486-10735","10486-10789","10486-10788","10486-10852","10486-10853","10486-10816","10486-10047","10486-10048","10486-10481","10486-10482","10486-10484","10486-10051","10486-10483"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041690"},"ProductID":["10555-10378"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038799","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041690"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4040685"},"ProductID":["10555-10378","10336-9312","10336-9318","10486-10047","10486-10048","10486-10481","10486-10482","10486-10051","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"IE Cumulative","Supercedence":"4036586","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4040685"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10486-10951","10486-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10486-10729","10486-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10486-10789","10486-10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10486-10852","10486-10853","10486-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041681"},"ProductID":["10486-10047","10486-10048","10486-10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038777","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041681"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041693"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038792","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041693"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10555-10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10336-9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10336-9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10555-10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10336-9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10336-9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Lokihardt of <a href=\"https://www.google.com/\">Google Project Zero</a>"}],"URL":[""]}],"CVE":"CVE-2017-11811","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10729"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10735"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10789"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10788"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10852"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10816"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"62","ProductStatuses":[{"ProductID":["11447","10724-10951","10724-10952","10724-10729","10724-10735","10724-10789","10724-10788","10724-10852","10724-10853","10724-10816"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.7.3"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10724-10729","10724-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10724-10789","10724-10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10724-10852","10724-10853","10724-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10724-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Simon Zuckerbraun working with <a href=\"http://www.zerodayinitiative.com/\">Trend Micro's Zero Day Initiative</a>"}],"URL":[""]},{"Name":[{"Value":"WanderingGlitch of <a href=\"http://www.zerodayinitiative.com/\">Trend Micro's Zero Day Initiative</a>"}],"URL":[""]},{"Name":[{"Value":"Microsoft ChakraCore Team"}],"URL":[""]}],"CVE":"CVE-2017-11812","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10789"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10788"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10852"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10816"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"63","ProductStatuses":[{"ProductID":["11447","10724-10951","10724-10952","10724-10789","10724-10788","10724-10852","10724-10853","10724-10816"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.7.3"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10724-10789","10724-10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10724-10852","10724-10853","10724-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"}],"RevisionHistory":[{"Date":"2017-10-11T07:00:00Z","Description":{"Value":"<p>Added an acknowledgement.</p>\n"},"Number":"1.1"},{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10724-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Atte Kettunen of F-Secure"}],"URL":[""]}],"CVE":"CVE-2017-11813","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10047"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10048"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10481"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10482"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10484"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10051"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10483"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>An attacker could host a specially crafted website designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p>\n<p>The security update addresses the vulnerability by modifying how Internet Explorer handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Internet Explorer","Type":7,"Value":"Internet Explorer"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"64","ProductStatuses":[{"ProductID":["10486-10047","10486-10048","10486-10481","10486-10482","10486-10484","10486-10051","10486-10483"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041681"},"ProductID":["10486-10047","10486-10048","10486-10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038777","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041681"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4040685"},"ProductID":["10486-10047","10486-10048","10486-10481","10486-10482","10486-10051","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"IE Cumulative","Supercedence":"4036586","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4040685"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041693"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038792","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041693"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Internet Explorer Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"WenQunWang of <a href=\"http://www.tencent.com/\">Tencent's Xuanwu LAB</a>"}],"URL":[""]}],"CVE":"CVE-2017-11814","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10789"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10788"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p>\n<p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The vulnerability would not allow an attacker to execute code or to elevate user rights directly, but it could be used to obtain information that could be used to try to further compromise the affected system.</p>\n<p>The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Windows Kernel","Type":7,"Value":"Windows Kernel"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"65","ProductStatuses":[{"ProductID":["10951","10952","10729","10735","10789","10788","10852","10853","10816","10855","10047","10048","10481","10482","10484","9312","10287","9311","9318","9344","10050","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10789","10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041681"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038777","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041681"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041678"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041678"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041693"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038792","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041693"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041687"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041687"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042120"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042120"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041690"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038799","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041690"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041679"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041679"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Kernel Information Disclosure Vulnerability"}},{"Acknowledgments":[],"CVE":"CVE-2017-11815","CVSSScoreSets":[{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10789"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10788"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests. An authenticated attacker who successfully exploited this vulnerability could craft a special packet, which could lead to information disclosure from the server.</p>\n<p>To exploit the vulnerability, an attacker would have to be able to authenticate and send SMB messages to an impacted Windows SMB Server</p>\n<p>The security update addresses the vulnerability by correcting how Windows SMB Server handles authenticated requests.</p>\n"},{"Ordinal":"20","Title":"Windows SMB Server","Type":7,"Value":"Windows SMB Server"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"66","ProductStatuses":[{"ProductID":["10951","10952","10729","10735","10789","10788","10852","10853","10816","10855","10047","10048","10481","10482","10484","9312","10287","9311","9318","9344","10050","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10789","10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041681"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038777","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041681"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041678"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041678"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041693"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038792","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041693"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041687"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041687"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041995"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041995"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041690"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038799","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041690"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041679"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041679"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2017-10-16T07:00:00Z","Description":{"Value":"<p>Added Exploitation ratings for this CVE. This is an informational change only.</p>\n"},"Number":"1.1"},{"Date":"2019-12-17T08:00:00Z","Description":{"Value":"<p>Added Security Only packages to Windows Server 2012 R2 security updates. This is an informational change only.</p>\n"},"Number":"1.2"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows SMB Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Symeon Paraschoudis of <a href=\"http://www.sensepost.com\">SensePost</a>"}],"URL":[""]}],"CVE":"CVE-2017-11816","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10789"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10788"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted system. By itself, the information disclosure does not allow arbitrary code execution; however, it could allow arbitrary code to be run if the attacker uses it in combination with another vulnerability.</p>\n<p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.</p>\n<p>The security update addresses the vulnerability by correcting how GDI handles memory addresses.</p>\n"},{"Ordinal":"20","Title":"Microsoft Graphics Component","Type":7,"Value":"Microsoft Graphics Component"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"67","ProductStatuses":[{"ProductID":["10951","10952","10729","10735","10789","10788","10852","10853","10816","10855","10047","10048","10481","10482","10484","9312","10287","9311","9318","9344","10050","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10789","10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041681"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038777","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041681"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041678"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041678"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041693"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038792","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041693"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041687"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041687"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042121"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042121"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041690"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038799","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041690"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041679"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041679"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows GDI Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Mateusz Jurczyk of <a href=\"https://www.google.com/\"> Google Project Zero </a>"}],"URL":[""]}],"CVE":"CVE-2017-11817","CVSSScoreSets":[{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10789"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10788"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.</p>\n<p>To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p>\n<p>The update addresses the vulnerability by correcting how the Windows kernel initializes objects in memory.</p>\n"},{"Ordinal":"20","Title":"Windows Kernel","Type":7,"Value":"Windows Kernel"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"68","ProductStatuses":[{"ProductID":["10951","10952","10729","10735","10789","10788","10852","10853","10816","10855","10047","10048","10481","10482","10484","9312","10287","9311","9318","9344","10050","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10789","10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041681"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038777","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041681"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041678"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041678"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041693"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038792","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041693"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041687"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041687"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041944"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041944"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041690"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038799","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041690"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041679"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041679"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Kernel Information Disclosure Vulnerability"}},{"Acknowledgments":[],"CVE":"CVE-2017-11818","CVSSScoreSets":[{"BaseScore":4.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":4.1,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":4.1,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":4.1,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":4.1,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10789"],"TemporalScore":4.1,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10788"],"TemporalScore":4.1,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":4.1,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":4.1,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":4.1,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":4.1,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":4.1,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":4.1,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":4.1,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":4.1,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":4.1,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":4.1,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":4.1,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An Security Feature bypass vulnerability exists in Microsoft Windows storage when it fails to validate an integrity-level check.</p>\n<p>An attacker who successfully exploited the vulnerability could allow an application with a certain integrity level to execute code at a different integrity level.</p>\n<p>The update addresses the vulnerability by correcting how Microsoft storage validates an integrity-level check.</p>\n"},{"Ordinal":"20","Title":"Microsoft Windows","Type":7,"Value":"Microsoft Windows"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"69","ProductStatuses":[{"ProductID":["10951","10952","10729","10735","10789","10788","10852","10853","10816","10855","10481","10482","10484","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10789","10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041693"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038792","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041693"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041687"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041687"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041690"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038799","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041690"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041679"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041679"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Storage Security Feature Bypass Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Zhong Zhaochen (<a href=\"http://asnine.com\">@asnine</a>) of <a href=\"http://www.neusoft.com/\">Neusoft</a>"}],"URL":[""]}],"CVE":"CVE-2017-11819","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists when Windows Shell improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code and take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a website used to attempt to exploit the vulnerability. In addition, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could exploit this vulnerability. An attacker would have no way to force users to visit a specially crafted website. Instead, an attacker would have to convince users to visit the website, typically by getting them to click a link in an email or instant message that takes them to the attacker's site.</p>\n<p>The security update fixes this vulnerability by correcting how Windows Shell handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Windows Shell","Type":7,"Value":"Windows Shell"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"70","ProductStatuses":[{"ProductID":["10047","10048"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041681"},"ProductID":["10047","10048"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038777","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041681"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041678"},"ProductID":["10047","10048"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041678"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2018-01-26T08:00:00Z","Description":{"Value":"<p>Updated CVE description. This is an informational change only.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Shell Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Andrew Watts & Adam Awan of <a href=\"http://eshare.co.uk\">eShare Ltd</a>"}],"URL":[""]}],"CVE":"CVE-2017-11820","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.</p>\n<p>The attacker who successfully exploited the vulnerability could then perform cross-site scripting attacks on affected systems and run script in the security context of the current user. These attacks could allow the attacker to read content that the attacker is not authorized to read, use the victim's identity to take actions on the SharePoint site on behalf of the user, such as change permissions and delete content, and inject malicious content in the browser of the user.</p>\n<p>The security update addresses the vulnerability by helping to ensure that SharePoint Server properly sanitizes web requests.</p>\n"},{"Ordinal":"20","Title":"Microsoft Office","Type":7,"Value":"Microsoft Office"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"71","ProductStatuses":[{"ProductID":["11099","10950"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011180"},"ProductID":["11099"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011117","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=ee3127d4-0e55-4fdf-b1b5-df65baff9e05"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011217"},"ProductID":["10950"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011127","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=88dfde83-b64a-4931-9c73-34b5c4fb70f7"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2017-10-16T07:00:00Z","Description":{"Value":"<p>Corrected the KB number for security update 4011157 to 4011217. This is an informational change only. Customers who have already successfully installed the update do not need to take any further action.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10950"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10950"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft SharePoint Elevation of Privilege Vulnerability"}},{"Acknowledgments":[],"CVE":"CVE-2017-11824","CVSSScoreSets":[{"BaseScore":0.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":0.0,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":0.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":0.0,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10789"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10788"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context.</p>\n<p>In a local attack scenario, an attacker could exploit this vulnerability by running a specially crafted application to take control over the affected system.</p>\n<p>The update addresses the vulnerability by correcting the way in which the Microsoft Graphics Component handles objects in memory and preventing unintended elevation from user mode.</p>\n"},{"Ordinal":"20","Title":"Microsoft Graphics Component","Type":7,"Value":"Microsoft Graphics Component"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"72","ProductStatuses":[{"ProductID":["10951","10952","10729","10735","10789","10788","10852","10853","10816","10855","10047","10048","10481","10482","10484","9312","10287","9311","9318","9344","10050","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10789","10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041681"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038777","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041681"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041678"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041678"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041693"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038792","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041693"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041687"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041687"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042120"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042120"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041690"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038799","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041690"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041679"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041679"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Graphics Component Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{}],"URL":[""]},{"Name":[{"Value":"<a href=\"https://www.mathyvanhoef.com/\">Mathy Vanhoef</a> (<a href=\"https://twitter.com/vanhoefm\">@vanhoefm</a>) of <a href=\"https://distrinet.cs.kuleuven.be/\">imec-DistriNet</a>, KU Leuven"}],"URL":[""]},{"Name":[{}],"URL":[""]}],"CVE":"CVE-2017-13080","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10789"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10788"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A spoofing vulnerability exists in the Windows implementation of wireless networking. An attacker who successfully exploited this vulnerability could potentially replay broadcast and/or multicast traffic to hosts on a WPA or WPA 2-protected wireless network.</p>\n<p>Multiple conditions would need to be met in order for an attacker to exploit the vulnerability – the attacker would need to be within the physical proximity of the targeted user, and the user's computer would need to have wireless networking enabled. The attacker would then need to execute a man-in-the-middle (<a href=\"https://technet.microsoft.com/en-us/library/security/dn848375.aspx#MiTM\">MitM</a>) attack to intercept traffic between the target computer and wireless access point.</p>\n<p>The security update addresses the vulnerability by changing how Windows verifies wireless group key handshakes.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>When did Microsoft release the security updates to address this vulnerability?</strong>\nMicrosoft released security updates on October 10, 2017 as part of Update Tuesday to resolve this vulnerability in all affected editions of Windows. Customers who have Windows Update enabled and who applied the latest security updates are protected automatically. The Security Update Guide was updated on October 16, 2017 to provide full disclosure on this vulnerability in accordance with a multi-vendor coordinated disclosure.</p>\n<p><strong>Why did Microsoft delay the disclosure of this vulnerability until October 16, 2017?</strong>\nMicrosoft updated quickly to protect customers as soon as possible, but as a responsible industry partner and to protect customers also using other platforms, we abided by coordinated vulnerability disclosure principles and withheld disclosure until other vendors could develop and release their own updates.</p>\n<p><strong>What is the scope of this multi-vendor coordinated vulnerability disclosure?</strong>\nIn partnership with the Industry Consortium for Advancement of Cybersecurity on the Internet (ICASI), Microsoft participated in a multi-vendor coordinated disclosure to acknowledge and describe several Wi-Fi Protected Access (WPA) Vulnerabilities. The vulnerabilities affect multiple platforms, devices, and drivers from partners across the industry, and ICASI is tracking the overall disclosure to provide background, guidance, and links to individual vendor documentation. The ICASI Multi-Vendor Vulnerability Disclosure statement can be found at this link: http://www.icasi.org/wi-fi-protected-access-wpa-vulnerabilities</p>\n<p><strong>Does this security update fully address the vulnerability on Microsoft Platforms, or do I need to perform any additional steps to be fully protected?</strong>\nThe provided security updates address the reported vulnerability; however, when affected Windows based systems enter a connected standby mode in low power situations, the vulnerable functionality may be offloaded to installed Wi-Fi hardware. To fully address this potential vulnerability, you are also encouraged to contact your Wi-Fi hardware vendor to obtain updated device drivers. For a listing of affected vendors with links to their documentation, review the ICASI Multi-Vendor Vulnerability Disclosure statement here: http://www.icasi.org/wi-fi-protected-access-wpa-vulnerabilities</p>\n<p><strong>Is this vulnerability related to Microsoft Security Advisory ADV170016?</strong>\nYes, the Windows Server 2008 platform requires individual update packages, so Microsoft released the advisory on October 10, 2017 to ensure its inclusion within the standard deployment tools, and to encourage customers to apply the update without impacting the multi-vendor disclosure.</p>\n<p><strong>How can an attacker exploit this vulnerability?</strong>\nAn attacker could potentially execute a man-in-the-middle attack to intercept traffic between the target computer and wireless access point. However, multiple conditions would first need to be met – the attacker would need to be within the physical proximity of the targeted user, and the user's computer would need to have wireless networking enabled.</p>\n<p><strong>Have there been any active attacks detected?</strong>\nNo. When this security advisory was issued, Microsoft had not received any information to indicate that this vulnerability had been publicly used to attack customers.</p>\n"},{"Ordinal":"20","Title":"Microsoft Windows","Type":7,"Value":"Microsoft Windows"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"73","ProductStatuses":[{"ProductID":["10951","10952","10729","10735","10789","10788","10852","10853","10816","10855","10047","10048","10481","10482","10484","9312","10287","9318","9344","10050","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042895"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038781","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042895"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041689"},"ProductID":["10789","10788"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038783","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041681"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038777","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041681"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041678"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041678"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041693"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038792","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041693"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041687"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041687"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4042723"},"ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4042723"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041690"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4038799","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041690"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041679"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041679"}],"RevisionHistory":[{"Date":"2017-10-16T07:00:00Z","Description":{"Value":"<p>CVE-2017-13080 has been added to the October 2017 security release in lieu of ADV170016, which has been deprecated. CVE-2017-13080 was released as part of a multi-vendor coordinated disclosure. Please see the FAQ for more information.</p>\n"},"Number":"1.0"},{"Date":"2017-10-17T07:00:00Z","Description":{"Value":"<p>Fixed a typo in the FAQ.</p>\n"},"Number":"1.1"},{"Date":"2017-10-18T07:00:00Z","Description":{"Value":"<p>Corrected FAQ 4 to clarify that the security updates released on October 10 fully address CVE-2017-13080.</p>\n"},"Number":"1.2"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Wireless WPA Group Key Reinstallation Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://www.cybellum.com\">Cybellum Technologies LTD</a>"}],"URL":[""]}],"CVE":"CVE-2017-11825","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the file could then take actions on behalf of the logged-on user with the same permissions as the current user.</p>\n<p>To exploit the vulnerability, a user must open a specially crafted file with an affected version of Microsoft Office software. In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file. In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) that contains a specially crafted file that is designed to exploit the vulnerability. However, an attacker would have no way to force the user to visit the website. Instead, an attacker would have to convince the user to click a link, typically by way of an enticement in an email or Instant Messenger message, and then convince the user to open the specially crafted file.</p>\n<p>The security update addresses the vulnerability by correcting how Microsoft Office handles files in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Office","Type":7,"Value":"Microsoft Office"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"74","ProductStatuses":[{"ProductID":["10734","10905","10906"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"ProductID":["10734"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":"https://go.microsoft.com/fwlink/p/?linkid=831049"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Click to Run"},"ProductID":["10905","10906"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10734"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10905"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10906"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10734"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10905"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10906"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Office Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Yang Kang, Ding Maoyin and Song Shenlei of Qihoo 360 Core Security (<a href=\"https://twitter.com/360CoreSec\">@360CoreSec</a>)"}],"URL":[""]},{"Name":[{}],"URL":[""]}],"CVE":"CVE-2017-11826","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p>\n<p>Exploitation of the vulnerability requires that a user open a specially crafted file with an affected version of Microsoft Office. In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file. In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) containing a specially crafted file designed to exploit the vulnerability. An attacker would have no way to force users to visit the website. Instead, an attacker would have to convince users to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.</p>\n<p>The security update addresses the vulnerability by correcting how Microsoft Office handles objects in memory.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>I have Microsoft Word 2010 installed. Why am I not being offered the 3213627 update?</strong>\nThe 3213627 update only applies to systems running specific configurations of Microsoft Office 2010. Some configurations will not be offered the update.\n<strong>I am being offered this update for software that is not specifically indicated as being affected in the Affected Software and Vulnerability Severity Ratings table. Why am I being offered this update?</strong>\nWhen updates address vulnerable code that exists in a component that is shared between multiple Microsoft Office products or shared between multiple versions of the same Microsoft Office product, the update is considered to be applicable to all supported products and versions that contain the vulnerable component.</p>\n<p>For example, when an update applies to Microsoft Office 2007 products, only Microsoft Office 2007 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2007, Microsoft Excel 2007, Microsoft Visio 2007, Microsoft Compatibility Pack, Microsoft Excel Viewer, or any other Microsoft Office 2007 product that is not specifically listed in the Affected Software table. Furthermore, when an update applies to Microsoft Office 2010 products, only Microsoft Office 2010 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2010, Microsoft Excel 2010, Microsoft Visio 2010, Microsoft Visio Viewer, or any other Microsoft Office 2010 product that is not specifically listed in the Affected Software table.</p>\n<p>For more information on this behavior and recommended actions, see <a href=\"https://support.microsoft.com/kb/830335\">Microsoft Knowledge Base Article 830335</a>. For a list of Microsoft Office products that an update may apply to, refer to the Microsoft Knowledge Base Article associated with the specific update.</p>\n"},{"Ordinal":"20","Title":"Microsoft Office","Type":7,"Value":"Microsoft Office"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"75","ProductStatuses":[{"ProductID":["10950","10748","10746","10747","4497","10649","10611","1160","10162","10513","10514","10606","10604","10605","9432-10120","9432-10607"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011217"},"ProductID":["10950"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011127","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=88dfde83-b64a-4931-9c73-34b5c4fb70f7"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"3213659"},"ProductID":["10748"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"3213658","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=b776c91e-2570-4186-8561-1d7a5d491979"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011222"},"ProductID":["10746","10747"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"3191945","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=ff88ce13-5b7f-4095-b6fa-431e9a20b3f9"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"3213647"},"ProductID":["4497"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"3203438","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=46e63f97-acc5-414a-a3d8-7eb38da04714"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011194"},"ProductID":["10649"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"3213632","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=505920a8-bb49-42a7-954a-f6c0334c8029"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011231"},"ProductID":["10611"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"3213562","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=bcb42590-5a93-4ab3-b054-4d373ff8a610"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011236"},"ProductID":["1160"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"3191909","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=a7bf2597-a55e-4041-8937-73a26cbe2e4d"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"3213648"},"ProductID":["10162"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"3203441","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=9c407247-f1ad-4163-93c6-c42d5ccc6397"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"3213630"},"ProductID":["10513","10514"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"3203464","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=3d673c55-44c0-46ba-9237-1f467cd9a7e9"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"3213627"},"ProductID":["10513","10514"],"RestartRequired":{},"SubType":"Security Update","Supercedence":"3203463","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=1b5ed3fb-999b-4ede-8e81-5bfa1a84e58f"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011232"},"ProductID":["10606","10604","10605"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"3203393","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"3213623"},"ProductID":["9432-10120"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"3203458","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=dba239e4-9e25-4a5a-b81f-bba56da7d885"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011068"},"ProductID":["9432-10607"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"3203384","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=7c2f6253-48f8-4928-af95-58449d3df453"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2017-11-01T07:00:00Z","Description":{"Value":"<p>Added an Update FAQ to explain why some customers are not being offered update 3213627. Added an Update FAQ to explain why customers might be offered an update for software that is not specifically indicated as being affected in the Affected Software and Vulnerability Severity Ratings table. These are informational changes only. Customers who have already successfully installed the updates do not need to take any further action.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10950"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10748"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10746"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10747"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["4497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10649"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10611"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["1160"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10162"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10513"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10514"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10606"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10604"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10605"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9432-10120"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9432-10607"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10950"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10748"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10746"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10747"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["4497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10649"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10611"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["1160"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10162"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10513"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10514"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10606"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10604"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10605"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9432-10120"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9432-10607"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:Yes;Exploited:Yes;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation Detected;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Office Remote Code Execution Vulnerability"}},{"Acknowledgments":[],"CVE":"CVE-2017-11829","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An elevation of privilege vulnerability exists when the Windows Update Delivery Optimization does not properly enforce file share permissions. An attacker who successfully exploited the vulnerability could overwrite files that require higher privileges than what the attacker already has.</p>\n<p>To exploit this vulnerability, an attacker would need to log into a system. The attacker could then create a Delivery Optimization job to exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by correcting how the Delivery Optimization services enforces permissions.</p>\n"},{"Ordinal":"20","Title":"Windows Update","Type":7,"Value":"Windows Update"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"76","ProductStatuses":[{"ProductID":["10852","10853","10951","10952","10816","10855"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041691"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038782","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041691"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4041676"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038788","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4041676"}],"RevisionHistory":[{"Date":"2017-10-10T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Update Delivery Optimization Elevation of Privilege Vulnerability"}},{"Acknowledgments":[],"CVE":"ADV170018","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This security update addresses the following vulnerability, which is described in Adobe Security Bulletin <a href=\"http://helpx.adobe.com/security/products/flash-player/apsb17-32.html\">APSB17-32</a>: CVE-2017-11292.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>How could an attacker exploit these vulnerabilities?</strong>\nIn a web-based attack scenario where the user is using Internet Explorer for the desktop, an attacker could host a specially crafted website that is designed to exploit any of these vulnerabilities through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit any of these vulnerabilities. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by clicking a link in an email message or in an Instant Messenger message that takes users to the attacker's website, or by opening an attachment sent through email.</p>\n<p>In a web-based attack scenario where the user is using Internet Explorer in the Windows 8-style UI, an attacker would first need to compromise a website already listed in the Compatibility View (CV) list. An attacker could then host a website that contains specially crafted Flash content designed to exploit any of these vulnerabilities through Internet Explorer and then convince a user to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by clicking a link in an email message or in an Instant Messenger message that takes users to the attacker's website, or by opening an attachment sent through email. For more information about Internet Explorer and the CV List, please see the MSDN Article, Developer Guidance for websites with content for Adobe Flash Player in Windows 8.</p>\n"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"77","ProductStatuses":[{"ProductID":["10384-11453","10384-11454","10384-10951","10384-10952","10384-10729","10384-10735","10384-10789","10384-10788","10384-10852","10384-10853","10384-10816","10384-10481","10384-10482","10384-10484","10384-10378","10384-10483"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4049179"},"ProductID":["10384-11453","10384-11454","10384-10951","10384-10952","10384-10729","10384-10735","10384-10789","10384-10788","10384-10852","10384-10853","10384-10816","10384-10481","10384-10482","10384-10484","10384-10378","10384-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4038806","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4049179"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"<p>The following <a href=\"https://technet.microsoft.com/library/security/dn848375.aspx#Mitigation\">mitigating factors</a> may be helpful in your situation:</p>\n<ul>\n<li>In a web-based attack scenario where the user is using Internet Explorer for the desktop, an attacker could host a website that contains a webpage that is used to exploit any of these vulnerabilities. In addition, compromised websites and websites that accept or host user-provided content or advertisements could contain specially crafted content that could exploit any of these vulnerabilities. In all cases, however, an attacker would have no way to force users to visit these websites. Instead, an attacker would have to convince users to visit the website, typically by getting them to click a link in an email message or instant message that takes users to the attacker's website.</li>\n<li>Internet Explorer in the Windows 8-style UI will only play Flash content from sites listed on the Compatibility View (CV) list. This restriction requires an attacker to first compromise a website already listed on the CV list. An attacker could then host specially crafted Flash content designed to exploit any of these vulnerabilities through Internet Explorer and then convince a user to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by clicking a link in an email message or in an instant message that takes users to the attacker's website, or by opening an attachment sent through email.</li>\n<li>By default, all supported versions of Microsoft Outlook and Windows Live Mail open HTML email messages in the Restricted sites zone. The Restricted sites zone, which disables scripts and ActiveX controls, helps reduce the risk of an attacker being able to use any of these vulnerabilities to execute malicious code. If a user clicks a link in an email message, the user could still be vulnerable to exploitation of any of these vulnerabilities through the web-based attack scenario.</li>\n<li>By default, Internet Explorer on Windows Server 2012 and Windows Server 2012 R2 runs in a restricted mode that is known as <a href=\"https://technet.microsoft.com/library/dd883248.aspx\">Enhanced Security Configuration</a>. This mode can help reduce the likelihood of the exploitation of these Adobe Flash Player vulnerabilities in Internet Explorer.</li>\n</ul>\n"},"Type":1},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"<p>Workaround refers to a setting or configuration change that would help block known attack vectors before you apply the update.</p>\n<p><strong>Prevent Adobe Flash Player from running</strong>\nYou can disable attempts to instantiate Adobe Flash Player in Internet Explorer and other applications that honor the kill bit feature, such as Office 2007 and Office 2010, by setting the kill bit for the control in the registry.</p>\n<p><strong>Warning</strong> If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.\nTo set the kill bit for the control in the registry, perform the following steps:</p>\n<ol>\n<li><p>Paste the following into a text file and save it with the .reg file extension.</p>\n<pre><code> Windows Registry Editor Version 5.00\n [HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Internet Explorer\\ActiveX Compatibility\\{D27CDB6E-AE6D-11CF-96B8-444553540000}]\n &quot;Compatibility Flags&quot;=dword:00000400\n\n [HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Internet Explorer\\ActiveX Compatibility\\{D27CDB6E-AE6D-11CF-96B8-444553540000}]\n &quot;Compatibility Flags&quot;=dword:00000400\n</code></pre>\n</li>\n<li><p>Double-click the .reg file to apply it to an individual system.</p>\n<p>You can also apply this workaround across domains by using Group Policy. For more information about Group Policy, see the TechNet article, Group Policy collection.</p>\n</li>\n</ol>\n<p><strong>Note</strong> You must restart Internet Explorer for your changes to take effect.\n<strong>Impact of workaround</strong>. There is no impact as long as the object is not intended to be used in Internet Explorer.\n<strong>How to undo the workaround.</strong> Delete the registry keys that were added in implementing this workaround.\n<strong>Prevent Adobe Flash Player from running in Internet Explorer through Group Policy</strong>\n<strong>Note</strong> The Group Policy MMC snap-in can be used to set policy for a machine, for an organizational unit, or for an entire domain. For more information about Group Policy, visit the following Microsoft Web sites:</p>\n<p><a href=\"https://technet.microsoft.com/library/hh831791\">Group Policy Overview</a>\n<a href=\"https://technet.microsoft.com/library/cc737816%28v=ws.10%29.aspx\">What is Group Policy Object Editor?</a>\n<a href=\"https://technet.microsoft.com/library/cc784165%28v=ws.10%29.aspx\">Core Group Policy tools and settings</a></p>\n<p>To disable Adobe Flash Player in Internet Explorer through Group Policy, perform the following steps:\n<strong>Note</strong> This workaround does not prevent Flash from being invoked from other applications, such as Microsoft Office 2007 or Microsoft Office 2010.</p>\n<ol>\n<li>Open the Group Policy Management Console and configure the console to work with the appropriate Group Policy object, such as local machine, OU, or domain GPO.</li>\n<li>Navigate to the following node:\n<strong>Administrative Templates -&gt; Windows Components -&gt; Internet Explorer -&gt; Security Features -&gt; Add-on Management</strong></li>\n<li>Double-click <strong>Turn off Adobe Flash in Internet Explorer and prevent applications from using Internet Explorer technology to instantiate Flash objects</strong>.</li>\n<li>Change the setting to Enabled.</li>\n<li>Click <strong>Apply</strong> and then click <strong>OK</strong> to return to the Group Policy Management Console.</li>\n<li>Refresh Group Policy on all systems or wait for the next scheduled Group Policy refresh interval for the settings to take effect.\n<strong>Prevent Adobe Flash Player from running in Office 2010 on affected systems</strong>\n<strong>Note</strong> This workaround does not prevent Adobe Flash Player from running in Internet Explorer.\n<strong>Warning</strong> If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.\nFor detailed steps that you can use to prevent a control from running in Internet Explorer, see Microsoft Knowledge Base Article 240797. Follow the steps in the article to create a Compatibility Flags value in the registry to prevent a COM object from being instantiated in Internet Explorer.</li>\n</ol>\n<p>To disable Adobe Flash Player in Office 2010 only, set the kill bit for the ActiveX control for Adobe Flash Player in the registry using the following steps:</p>\n<ol>\n<li>Create a text file named Disable_Flash.reg with the following contents:</li>\n</ol>\n<pre><code>\t\t[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Office\\Common\\COM\\Compatibility\\{D27CDB6E-AE6D-11CF-96B8-444553540000}]\n\t&quot;Compatibility Flags&quot;=dword:00000400\n</code></pre>\n<ol start=\"2\">\n<li>Double-click the .reg file to apply it to an individual system.</li>\n<li><strong>Note</strong> You must restart Internet Explorer for your changes to take effect.\nYou can also apply this workaround across domains by using Group Policy. For more information about Group Policy, see the TechNet article, <a href=\"http://go.microsoft.com/fwlink/?LinkID=215719\">Group Policy collection</a>.\n<strong>Prevent ActiveX controls from running in Office 2007 and Office 2010</strong></li>\n</ol>\n<p>To disable all ActiveX controls in Microsoft Office 2007 and Microsoft Office 2010, including Adobe Flash Player in Internet Explorer, perform the following steps:</p>\n<ol>\n<li>Click File, click Options, click Trust Center, and then click Trust Center Settings.</li>\n<li>Click ActiveX Settings in the left-hand pane, and then select Disable all controls without notifications.</li>\n<li>Click OK to save your settings.\n<strong>Impact of workaround</strong>. Office documents that use embedded ActiveX controls may not display as intended.\n<strong>How to undo the workaround</strong>.</li>\n</ol>\n<p>To re-enable ActiveX controls in Microsoft Office 2007 and Microsoft Office 2010, perform the following steps:</p>\n<ol>\n<li>Click File, click Options, click Trust Center, and then click Trust Center Settings.</li>\n<li>Click ActiveX Settings in the left-hand pane, and then deselect Disable all controls without notifications.</li>\n<li>Click OK to save your settings.\n<strong>Set Internet and Local intranet security zone settings to &quot;High&quot; to block ActiveX Controls and Active Scripting in these zones</strong>\nYou can help protect against exploitation of these vulnerabilities by changing your settings for the Internet security zone to block ActiveX controls and Active Scripting. You can do this by setting your browser security to High.</li>\n</ol>\n<p>To raise the browsing security level in Internet Explorer, perform the following steps:</p>\n<ol>\n<li>On the Internet Explorer <strong>Tools</strong> menu, click** Internet Option**s.</li>\n<li>In the <strong>Internet Options</strong> dialog box, click the <strong>Security</strong> tab, and then click <strong>Internet</strong>.</li>\n<li>Under <strong>Security level for this zone</strong>, move the slider to <strong>High</strong>. This sets the security level for all websites you visit to High.</li>\n<li>Click <strong>Local intranet</strong>.</li>\n<li>Under <strong>Security level for this zone</strong>, move the slider to <strong>High</strong>. This sets the security level for all websites you visit to High.</li>\n<li>Click <strong>OK</strong> to accept the changes and return to Internet Explorer.\n<strong>Note</strong> If no slider is visible, click <strong>Default Level</strong>, and then move the slider to <strong>High</strong>.\n<strong>Note</strong> Setting the level to High may cause some websites to work incorrectly. If you have difficulty using a website after you change this setting, and you are sure the site is safe to use, you can add that site to your list of trusted sites. This will allow the site to work correctly even with the security setting set to High.\n<strong>Impact of workaround</strong>. There are side effects to blocking ActiveX Controls and Active Scripting. Many websites on the Internet or an intranet use ActiveX or Active Scripting to provide additional functionality. For example, an online e-commerce site or banking site may use ActiveX Controls to provide menus, ordering forms, or even account statements. Blocking ActiveX Controls or Active Scripting is a global setting that affects all Internet and intranet sites. If you do not want to block ActiveX Controls or Active Scripting for such sites, use the steps outlined in &quot;Add sites that you trust to the Internet Explorer Trusted sites zone&quot;.\n<strong>Configure Internet Explorer to prompt before running Active Scripting or to disable Active Scripting in the Internet and Local intranet security zone</strong></li>\n</ol>\n<p>You can help protect against exploitation of these vulnerabilities by changing your settings to prompt before running Active Scripting or to disable Active Scripting in the Internet and Local intranet security zone. To do this, perform the following steps:</p>\n<ol>\n<li>In Internet Explorer, click <strong>Internet Options</strong> on the <strong>Tools</strong> menu.</li>\n<li>Click the <strong>Security</strong> tab.</li>\n<li>Click <strong>Internet</strong>, and then click <strong>Custom Level</strong>.</li>\n<li>Under <strong>Settings</strong>, in the <strong>Scripting</strong> section, under <strong>Active Scripting</strong>, click <strong>Prompt</strong> or <strong>Disable</strong>, and then click <strong>OK</strong>.</li>\n<li>Click <strong>Local intranet</strong>, and then click <strong>Custom Level</strong>.</li>\n<li>Under <strong>Settings</strong>, in the <strong>Scripting</strong> section, under <strong>Active Scripting</strong>, click <strong>Prompt</strong> or <strong>Disable</strong>, and then click <strong>OK</strong>.</li>\n<li>Click <strong>OK</strong> to return to Internet Explorer, and then click <strong>OK</strong> again.\n<strong>Note</strong> Disabling Active Scripting in the Internet and Local intranet security zones may cause some websites to work incorrectly. If you have difficulty using a website after you change this setting, and you are sure the site is safe to use, you can add that site to your list of trusted sites. This will allow the site to work correctly.\n<strong>Impact of workaround</strong>. There are side effects to prompting before running Active Scripting. Many websites that are on the Internet or on an intranet use Active Scripting to provide additional functionality. For example, an online e-commerce site or banking site may use Active Scripting to provide menus, ordering forms, or even account statements. Prompting before running Active Scripting is a global setting that affects all Internet and intranet sites. You will be prompted frequently when you enable this workaround. For each prompt, if you feel you trust the site that you are visiting, click <strong>Yes</strong> to run Active Scripting. If you do not want to be prompted for all these sites, use the steps outlined in &quot;Add sites that you trust to the Internet Explorer Trusted sites zone&quot;.\n<strong>Add sites that you trust to the Internet Explorer Trusted sites zone</strong>\nAfter you set Internet Explorer to require a prompt before it runs ActiveX controls and Active Scripting in the Internet zone and in the Local intranet zone, you can add sites that you trust to the Internet Explorer Trusted sites zone. This will allow you to continue to use trusted websites exactly as you do today, while helping to protect you from this attack on untrusted sites. We recommend that you add only sites that you trust to the Trusted sites zone.</li>\n</ol>\n<p>To do this, perform the following steps:</p>\n<ol>\n<li>In Internet Explorer, click <strong>Tools</strong>, click <strong>Internet Options</strong>, and then click the <strong>Security</strong> tab.</li>\n<li>In the <strong>Select a web content zone to specify its current security settings</strong> box, click <strong>Trusted Sites</strong>, and then click <strong>Sites</strong>.</li>\n<li>If you want to add sites that do not require an encrypted channel, click to clear the <strong>Require server verification (https:) for all sites in this zone</strong> check box.</li>\n<li>In the <strong>Add this website to the zone</strong> box, type the URL of a site that you trust, and then click <strong>Add</strong>.</li>\n<li>Repeat these steps for each site that you want to add to the zone.</li>\n<li>Click <strong>OK</strong> two times to accept the changes and return to Internet Explorer.\n<strong>Note</strong> Add any sites that you trust not to take malicious action on your system. Two sites in particular that you may want to add are *<strong>.windowsupdate.microsoft.com</strong> and *<strong>.update.microsoft.com</strong>. These are the sites that will host the update, and they require an ActiveX control to install the update.</li>\n</ol>\n"},"Type":0}],"RevisionHistory":[{"Date":"2017-10-17T07:00:00Z","Description":{"Value":"<p>The October Adobe Flash Security Update is available for installation. See https://support.microsoft.com/en-us/help/4049179 for more information.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-10789"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-10788"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10384-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10384-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10384-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10384-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10384-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10384-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10384-10789"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10384-10788"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10384-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10384-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10384-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10384-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10384-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10384-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10384-10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10384-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:Yes;DOS:N/A"},"Type":1}],"Title":{"Value":"October 2017 Adobe Flash Security Update"}}]}
View Git Blame Copy Permalink