A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory aka \Microsoft Exchange Memory Corruption Vulnerability.\ This affects Microsoft Exchange Server.

remote code execution
improper memory handle
memory corruption vulnerability


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590 CVE-2019-0591 CVE-2019-0593 CVE-2019-0605 CVE-2019-0607 CVE-2019-0610 CVE-2019-0640 CVE-2019-0642 CVE-2019-0644 CVE-2019-0651 CVE-2019-0652.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912 CVE-2019-0913 CVE-2019-0914 CVE-2019-0915 CVE-2019-0917 CVE-2019-0922 CVE-2019-0923 CVE-2019-0924 CVE-2019-0925 CVE-2019-0927 CVE-2019-0933 CVE-2019-0937.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0739 CVE-2019-0752 CVE-2019-0862.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2019-0567 CVE-2019-0568.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0752 CVE-2019-0753 CVE-2019-0862.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912 CVE-2019-0913 CVE-2019-0914 CVE-2019-0915 CVE-2019-0916 CVE-2019-0917 CVE-2019-0922 CVE-2019-0923 CVE-2019-0924 CVE-2019-0925 CVE-2019-0927 CVE-2019-0937.


A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0671 CVE-2019-0672 CVE-2019-0673 CVE-2019-0674.

remote code execution
improper memory handle


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0904 CVE-2019-0905 CVE-2019-0906 CVE-2019-0908 CVE-2019-0909 CVE-2019-0974.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0672 CVE-2019-0673 CVE-2019-0674 CVE-2019-0675.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595 CVE-2019-0597 CVE-2019-0598 CVE-2019-0599 CVE-2019-0625.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609 CVE-2019-0639 CVE-2019-0680 CVE-2019-0769 CVE-2019-0770 CVE-2019-0771 CVE-2019-0783.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka \Jet Database Engine Remote Code Execution Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2019 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers. This CVE ID is unique from CVE-2019-0538 CVE-2019-0575 CVE-2019-0577 CVE-2019-0578 CVE-2019-0579 CVE-2019-0580 CVE-2019-0581 CVE-2019-0582 CVE-2019-0583 CVE-2019-0584.

remote code execution
improper memory object handle


A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0823 CVE-2019-0824 CVE-2019-0826 CVE-2019-0827.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912 CVE-2019-0913 CVE-2019-0914 CVE-2019-0915 CVE-2019-0916 CVE-2019-0917 CVE-2019-0922 CVE-2019-0923 CVE-2019-0924 CVE-2019-0927 CVE-2019-0933 CVE-2019-0937.


A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0824 CVE-2019-0825 CVE-2019-0826 CVE-2019-0827.


A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0945 CVE-2019-0946.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595 CVE-2019-0596 CVE-2019-0597 CVE-2019-0598 CVE-2019-0625.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0904 CVE-2019-0905 CVE-2019-0906 CVE-2019-0907 CVE-2019-0909 CVE-2019-0974.


A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0823 CVE-2019-0824 CVE-2019-0825 CVE-2019-0826.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0846 CVE-2019-0847 CVE-2019-0877 CVE-2019-0879.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0905 CVE-2019-0906 CVE-2019-0907 CVE-2019-0908 CVE-2019-0909 CVE-2019-0974.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka \Jet Database Engine Remote Code Execution Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2019 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers. This CVE ID is unique from CVE-2019-0538 CVE-2019-0575 CVE-2019-0576 CVE-2019-0577 CVE-2019-0579 CVE-2019-0580 CVE-2019-0581 CVE-2019-0582 CVE-2019-0583 CVE-2019-0584.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0890 CVE-2019-0891 CVE-2019-0893 CVE-2019-0894 CVE-2019-0895 CVE-2019-0896 CVE-2019-0897 CVE-2019-0898 CVE-2019-0899 CVE-2019-0900 CVE-2019-0901 CVE-2019-0902.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0889 CVE-2019-0890 CVE-2019-0893 CVE-2019-0894 CVE-2019-0895 CVE-2019-0896 CVE-2019-0897 CVE-2019-0898 CVE-2019-0899 CVE-2019-0900 CVE-2019-0901 CVE-2019-0902.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595 CVE-2019-0596 CVE-2019-0597 CVE-2019-0598 CVE-2019-0599.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0889 CVE-2019-0890 CVE-2019-0891 CVE-2019-0893 CVE-2019-0894 CVE-2019-0895 CVE-2019-0896 CVE-2019-0897 CVE-2019-0898 CVE-2019-0899 CVE-2019-0901 CVE-2019-0902.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0596 CVE-2019-0597 CVE-2019-0598 CVE-2019-0599 CVE-2019-0625.


A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0671 CVE-2019-0673 CVE-2019-0674 CVE-2019-0675.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0889 CVE-2019-0890 CVE-2019-0891 CVE-2019-0893 CVE-2019-0894 CVE-2019-0896 CVE-2019-0897 CVE-2019-0898 CVE-2019-0899 CVE-2019-0900 CVE-2019-0901 CVE-2019-0902.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0904 CVE-2019-0906 CVE-2019-0907 CVE-2019-0908 CVE-2019-0909 CVE-2019-0974.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka \Jet Database Engine Remote Code Execution Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2019 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers. This CVE ID is unique from CVE-2019-0538 CVE-2019-0575 CVE-2019-0576 CVE-2019-0577 CVE-2019-0578 CVE-2019-0580 CVE-2019-0581 CVE-2019-0582 CVE-2019-0583 CVE-2019-0584.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0889 CVE-2019-0890 CVE-2019-0891 CVE-2019-0893 CVE-2019-0895 CVE-2019-0896 CVE-2019-0897 CVE-2019-0898 CVE-2019-0899 CVE-2019-0900 CVE-2019-0901 CVE-2019-0902.


A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0823 CVE-2019-0824 CVE-2019-0825 CVE-2019-0827.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based) aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1427 CVE-2019-1428 CVE-2019-1429.

remote code execution
memory corruption vulnerability


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590 CVE-2019-0591 CVE-2019-0593 CVE-2019-0605 CVE-2019-0607 CVE-2019-0610 CVE-2019-0640 CVE-2019-0642 CVE-2019-0651 CVE-2019-0652 CVE-2019-0655.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0611.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2019-0539 CVE-2019-0568.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609 CVE-2019-0639 CVE-2019-0769 CVE-2019-0770 CVE-2019-0771 CVE-2019-0773 CVE-2019-0783.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0920 CVE-2019-1005 CVE-2019-1055 CVE-2019-1080.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912 CVE-2019-0914 CVE-2019-0915 CVE-2019-0916 CVE-2019-0917 CVE-2019-0922 CVE-2019-0923 CVE-2019-0924 CVE-2019-0925 CVE-2019-0927 CVE-2019-0933 CVE-2019-0937.


A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory aka 'Microsoft Edge Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0634 CVE-2019-0645.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912 CVE-2019-0913 CVE-2019-0914 CVE-2019-0915 CVE-2019-0916 CVE-2019-0917 CVE-2019-0923 CVE-2019-0924 CVE-2019-0925 CVE-2019-0927 CVE-2019-0933 CVE-2019-0937.


A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory aka 'Microsoft Browser Memory Corruption Vulnerability'.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590 CVE-2019-0591 CVE-2019-0593 CVE-2019-0605 CVE-2019-0607 CVE-2019-0610 CVE-2019-0640 CVE-2019-0642 CVE-2019-0644 CVE-2019-0652 CVE-2019-0655.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609 CVE-2019-0639 CVE-2019-0680 CVE-2019-0769 CVE-2019-0770 CVE-2019-0771 CVE-2019-0773.


A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory aka 'Microsoft Edge Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0634 CVE-2019-0650.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0806 CVE-2019-0810 CVE-2019-0829 CVE-2019-0860 CVE-2019-0861.


A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client aka 'Windows DHCP Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0698 CVE-2019-0726.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590 CVE-2019-0593 CVE-2019-0605 CVE-2019-0607 CVE-2019-0610 CVE-2019-0640 CVE-2019-0642 CVE-2019-0644 CVE-2019-0651 CVE-2019-0652 CVE-2019-0655.


A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609 CVE-2019-0680 CVE-2019-0769 CVE-2019-0770 CVE-2019-0771 CVE-2019-0773 CVE-2019-0783.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0989 CVE-2019-0991 CVE-2019-0992 CVE-2019-1002 CVE-2019-1003 CVE-2019-1024 CVE-2019-1051 CVE-2019-1052.


A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP failover server aka 'Windows DHCP Server Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0884 CVE-2019-0911.


A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory aka 'Internet Explorer Memory Corruption Vulnerability'.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0810 CVE-2019-0812 CVE-2019-0829 CVE-2019-0860 CVE-2019-0861.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609 CVE-2019-0639 CVE-2019-0680 CVE-2019-0770 CVE-2019-0771 CVE-2019-0773 CVE-2019-0783.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0806 CVE-2019-0810 CVE-2019-0812 CVE-2019-0829 CVE-2019-0860.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0591 CVE-2019-0593 CVE-2019-0605 CVE-2019-0607 CVE-2019-0610 CVE-2019-0640 CVE-2019-0642 CVE-2019-0644 CVE-2019-0651 CVE-2019-0652 CVE-2019-0655.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609 CVE-2019-0639 CVE-2019-0680 CVE-2019-0769 CVE-2019-0770 CVE-2019-0773 CVE-2019-0783.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0989 CVE-2019-0991 CVE-2019-0993 CVE-2019-1002 CVE-2019-1003 CVE-2019-1024 CVE-2019-1051 CVE-2019-1052.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590 CVE-2019-0591 CVE-2019-0593 CVE-2019-0607 CVE-2019-0610 CVE-2019-0640 CVE-2019-0642 CVE-2019-0644 CVE-2019-0651 CVE-2019-0652 CVE-2019-0655.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590 CVE-2019-0591 CVE-2019-0605 CVE-2019-0607 CVE-2019-0610 CVE-2019-0640 CVE-2019-0642 CVE-2019-0644 CVE-2019-0651 CVE-2019-0652 CVE-2019-0655.

remote code execution
memory corruption vulnerability
improper memory handle


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0739 CVE-2019-0752 CVE-2019-0753.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2019-0539 CVE-2019-0567.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912 CVE-2019-0913 CVE-2019-0915 CVE-2019-0916 CVE-2019-0917 CVE-2019-0922 CVE-2019-0923 CVE-2019-0924 CVE-2019-0925 CVE-2019-0927 CVE-2019-0933 CVE-2019-0937.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0806 CVE-2019-0810 CVE-2019-0812 CVE-2019-0829 CVE-2019-0861.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609 CVE-2019-0639 CVE-2019-0680 CVE-2019-0769 CVE-2019-0771 CVE-2019-0773 CVE-2019-0783.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590 CVE-2019-0591 CVE-2019-0593 CVE-2019-0605 CVE-2019-0607 CVE-2019-0640 CVE-2019-0642 CVE-2019-0644 CVE-2019-0651 CVE-2019-0652 CVE-2019-0655.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912 CVE-2019-0913 CVE-2019-0914 CVE-2019-0915 CVE-2019-0916 CVE-2019-0922 CVE-2019-0923 CVE-2019-0924 CVE-2019-0925 CVE-2019-0927 CVE-2019-0933 CVE-2019-0937.


A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory aka 'Microsoft Browser Memory Corruption Vulnerability'.


Remote code execution in Monitorr v1.7.6m in upload.php allows an unauthorized person to execute arbitrary code on the server-side via an insecure file upload.

remote code execution
arbitrary code execution


Microsoft Excel 2007 SP3 Excel 2010 SP2 and Office Compatibility Pack allow remote attackers to execute arbitrary code via a crafted Office document aka \Global Free Remote Code Execution in Excel Vulnerability.\


Uniscribe in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site aka \Windows Uniscribe Remote Code Execution Vulnerability.\


Array index error in Microsoft Word 2007 SP3 Word 2010 SP2 and Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document aka \Invalid Index Remote Code Execution Vulnerability.\


Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing a deleted object aka \OnReadyStateChange Remote Code Execution Vulnerability.\


Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing a deleted object aka \Title Element Change Remote Code Execution Vulnerability.\


Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing a deleted object aka \OnBeforeDeactivate Event Remote Code Execution Vulnerability.\


Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing a deleted object aka \Center Element Remote Code Execution Vulnerability.\


Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing a deleted object aka \insertRow Remote Code Execution Vulnerability.\


Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by attempting to access an undefined memory location aka \insertAdjacentText Remote Code Execution Vulnerability.\


Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing a deleted object aka \SelectAll Remote Code Execution Vulnerability.\


Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing a deleted object aka \VML Style Remote Code Execution Vulnerability.\


Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing a deleted object aka \Asynchronous NULL Object Access Remote Code Execution Vulnerability.\


Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing a deleted object aka \Body Element Remote Code Execution Vulnerability.\


Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing an object that was not properly initialized aka \OLEAuto32.dll Remote Code Execution Vulnerability.\


Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing a deleted object aka \Option Element Remote Code Execution Vulnerability.\


Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing a deleted object aka \Scroll Event Remote Code Execution Vulnerability.\


Microsoft Internet Explorer 7 through 9 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing a deleted object aka \HTML Layout Remote Code Execution Vulnerability.\


Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory which allows user-assisted remote attackers to execute arbitrary code by accessing a deleted object aka \Developer Toolbar Remote Code Execution Vulnerability.\


Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing a deleted object aka \OnRowsInserted Event Remote Code Execution Vulnerability.\


PHPFusion 9.03.110 is affected by a remote code execution vulnerability. The theme function will extract a file to \webroot/themes/{Theme Folder where an attacker can access and execute arbitrary code.


Microsoft Office 2007 SP3 2010 SP2 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted template aka \Microsoft Office Remote Code Execution Vulnerability.\


A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18 Magento 2.2 prior to 2.2.9 Magento 2.3 prior to 2.3.2. An authenticated user with admin privileges to create or edit a product can execute arbitrary code via malicious XML layout updates.


A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18 Magento 2.2 prior to 2.2.9 Magento 2.3 prior to 2.3.2. An authenticated user with admin privileges to email templates can execute arbitrary code by previewing a malicious template.


A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18 Magento 2.2 prior to 2.2.9 Magento 2.3 prior to 2.3.2. An authenticated user with administrator privileges to layouts can execute arbitrary code through a combination of product import crafted csv file and XML layout update.


A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18 Magento 2.2 prior to 2.2.9 Magento 2.3 prior to 2.3.2. An authenticated user with administrator privileges to access shipment settings can execute arbitrary code via server-side request forgery.


Divisa

Proxia

Suite

and

and

SparkSpace

and

and

Proxia

PHR

and

allows

remote

code

execution

via

untrusted

Java

deserialization.

The

proxia-error

cookie

is

insecurely

deserialized

in

every

request

(GET

or

POST).

Thus

an

unauthenticated

attacker

can

easily

craft

a

payload

in

order

to

execute

arbitrary

code

via

the

prepareError

function

in

the

com.divisait.dv2ee.controller.MVCControllerServlet

class

of

the

component.

allows

remote

code

execution

via

untrusted

Java

deserialization.

The

proxia-error

cookie

is

insecurely

deserialized

in

every

request

(GET

or

POST).

Thus

an

unauthenticated

attacker

can

easily

craft

a

serialized

payload

in

order

to

execute

arbitrary

code

via

the

prepareError

function

in

the

class

of

the

component.

Affected

products

include

Proxia

Premium

Edition

and

Sparkspace.


Versions of handlebars prior to 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code Execution. Templates may alter an Object's __proto__ and __defineGetter__ properties which may allow an attacker to execute arbitrary code through crafted payloads.


An issue was discovered in TitanHQ WebTitan before 5.18. It contains a Remote Code Execution issue through which an attacker can execute arbitrary code as root. The issue stems from the hotfix download mechanism which downloads a shell script via HTTP and then executes it as root. This is analogous to CVE-2019-6800 but for a different product.


IBM Tivoli Netcool/Impact 7.1.0 allows for remote execution of command by low privileged User. Remote code execution allow to execute arbitrary code on system which lead to take control over the system. IBM X-Force ID: 158094.


AdRem NetCrunch 10.6.0.4587 allows Remote Code Execution. In the NetCrunch web client a read-only administrator can execute arbitrary code on the server running the NetCrunch server software.


A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10 Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can leverage plugin functionality related to email templates to manipulate the interceptor class in a way that allows an attacker to execute arbitrary code.


A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10 Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can leverage email templates hierarchy to manipulate the interceptor class in a way that allows an attacker to execute arbitrary code.


A remote code execution vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3 Magento 2.2 prior to 2.2.10 Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with admin privileges to import features can execute arbitrary code via crafted configuration archive file upload.


A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10 Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with admin privileges to manipulate shippment settings can execute arbitrary code through server-side request forgery due to unsafe handling of a carrier gateway.


WordPress before 4.9.9 and 5.x before 5.0.1 allows remote code execution because an _wp_attached_file Post Meta entry can be changed to an arbitrary string such as one ending with a .jpg?file.php substring. An attacker with author privileges can execute arbitrary code by uploading a crafted image containing PHP code in the Exif metadata. Exploitation can leverage CVE-2019-8943.


A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.19 Magento 2.2 prior to 2.2.10 Magento 2.3 prior to 2.3.3. An authenticated user with administrative privileges (system level import) can execute arbitrary code through a Phar deserialization vulnerability in the import functionality.


The Remote Desktop ActiveX control in mstscax.dll in Microsoft Remote Desktop Connection Client 6.1 and 7.0 does not properly handle objects in memory which allows remote attackers to execute arbitrary code via a web page that triggers access to a deleted object and allows remote RDP servers to execute arbitrary code via unspecified vectors that trigger access to a deleted object aka \RDP ActiveX Control Remote Code Execution Vulnerability.\


Object Linking and Embedding (OLE) Automation in Microsoft Windows XP SP3 does not properly allocate memory which allows remote attackers to execute arbitrary code via a crafted RTF document aka \OLE Automation Remote Code Execution Vulnerability.\


Microsoft Windows XP SP2 and SP3 Windows Server 2003 SP2 Windows Vista SP2 and Windows Server 2008 SP2 allow remote attackers to execute arbitrary code via a crafted screensaver in a theme file aka \Windows Theme File Remote Code Execution Vulnerability.\


The Microsoft WMV video codec in wmv9vcm.dll wmvdmod.dll in Windows Media Format Runtime 9 and 9.5 and wmvdecod.dll in Windows Media Format Runtime 11 and Windows Media Player 11 and 12 allows remote attackers to execute arbitrary code via a crafted media file aka \WMV Video Decoder Remote Code Execution Vulnerability.\


Umbraco Forms version 4.0.0 up to and including 8.7.5 and below are vulnerable to a security flaw that could lead to a remote code execution attack and/or arbitrary file deletion. A vulnerability occurs because validation of the file extension is performed after the file has been stored in a temporary directory. By default files are stored within the application directory structure at %BASEDIR%/APP_DATA/TEMP/FileUploads/. Whilst access to this directory is restricted by the root web.config file it is possible to override this restriction by uploading another specially crafted web.config file to the temporary directory. It is possible to exploit this flaw to upload a malicious script file to execute arbitrary code and system commands on the server.


BQE BillQuick Web Suite 2018 through 2021 before 22.0.9.1 allows SQL injection for unauthenticated remote code execution as exploited in the wild in October 2021 for ransomware installation. SQL injection can for example use the txtID (aka username) parameter. Successful exploitation can include the ability to execute arbitrary code as MSSQLSERVER$ via xp_cmdshell.


This issue exists to document that a security improvement in the way that Jira Server and Data Center use templates has been implemented. Affected versions of Atlassian Jira Server and Data Center allowed remote attackers with system administrator permissions to execute arbitrary code via Template Injection leading to Remote Code Execution (RCE) in the Email Templates feature. The affected versions are before version 8.13.15 and from version 8.14.0 before 8.20.3.


Affected

versions

of

Atlassian

Jira

Server

and

Data

Center

allow

remote

attackers

with

administrator

privileges

to

execute

arbitrary

code

via

a

Remote

Code

Execution

(RCE)

vulnerability

in

the

Email

Templates

feature.

This

issue

bypasses

the

fix

of

The

affected

versions

are

before

version

and

from

version

before


Microsoft OneNote 2007 SP3 allows remote attackers to execute arbitrary code via a crafted OneNote file that triggers creation of an executable file in a startup folder aka \OneNote Remote Code Execution Vulnerability.\


Windows Journal in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted Journal (aka .JNT) file aka \Windows Journal Remote Code Execution Vulnerability.\


win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted TrueType font as exploited in the wild in October 2014 aka \TrueType Font Parsing Remote Code Execution Vulnerability.\


Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 allow remote attackers to execute arbitrary code via a crafted OLE object in an Office document as exploited in the wild with a \Sandworm\ attack in June through October 2014 aka \Windows OLE Remote Code Execution Vulnerability.\


Microsoft Word 2007 SP3 Word Viewer and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document aka \Microsoft Office Double Delete Remote Code Execution Vulnerability.\


OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2 Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted web site as demonstrated by an array-redimensioning attempt that triggers improper handling of a size value in the SafeArrayDimen function aka \Windows OLE Automation Array Remote Code Execution Vulnerability.\


Microsoft Excel 2007 SP3 Excel 2010 SP2 Excel 2013 Gold and SP1 Excel 2013 RT Gold and SP1 and Office Compatibility Pack allow remote attackers to execute arbitrary code via a crafted Office document aka \Excel Invalid Pointer Remote Code Execution Vulnerability.\


Use-after-free vulnerability in Microsoft Office 2010 SP2 Office 2013 Gold and SP1 Office 2013 RT Gold and SP1 Office for Mac 2011 Word Viewer Office Compatibility Pack SP3 Word Automation Services on SharePoint Server 2010 SP2 and 2013 Gold and SP1 and Office Web Apps 2010 SP2 and 2013 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted Office document aka \Use After Free Word Remote Code Execution Vulnerability.\


Schannel in Microsoft Windows Server 2003 SP2 Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via crafted packets aka \Microsoft Schannel Remote Code Execution Vulnerability.\


The Secure Channel (aka SChannel) security package in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 does not properly validate certificate request messages from TLS and SSL servers which allows remote servers to execute arbitrary code via a crafted SSL response aka \SChannel Malformed Certificate Request Remote Code Execution Vulnerability.\


Unspecified vulnerability in the Windows Media Player ActiveX control in Windows Media Player (WMP) 9 on Microsoft Windows 2000 SP4 and XP SP2 and SP3 allows remote attackers to execute arbitrary code via crafted media content aka \Media Player Remote Code Execution Vulnerability.\


Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18 5.0 Update 23 and 1.4.2_25 allows remote attackers to affect confidentiality integrity and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to improper checks when executing privileged methods in the Java Runtime Environment (JRE) which allows attackers to execute arbitrary code via (1) an untrusted object that extends the trusted class but has not modified a certain method or (2) \a similar trust issue with interfaces \ aka \Trusted Methods Chaining Remote Code Execution Vulnerability.\


Marky commit 3686565726c65756e was discovered to contain a remote code execution (RCE) vulnerability via the Display text fields. This vulnerability allows attackers to execute arbitrary code via injection of a crafted payload.


The cfsend cfrecv and CyberResp components of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for UNIX and TIBCO Managed File Transfer Platform Server for z/Linux contain a difficult to exploit Remote Code Execution (RCE) vulnerability that allows a low privileged attacker with network access to execute arbitrary code on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for UNIX: versions 8.1.0 and below and TIBCO Managed File Transfer Platform Server for z/Linux: versions 8.1.0 and below.


Active Directory Federation Services (ADFS) in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly validate headers in HTTP requests which allows remote authenticated users to execute arbitrary code via a crafted request to an IIS web server aka \Remote Code Execution in ADFS Vulnerability.\


A remote code execution vulnerability in the Framesequence library could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses the Framesequence library. Product: Android. Versions: 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1. Android ID: A-32338390.


A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view change or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010 CVE-2017-0015 CVE-2017-0032 CVE-2017-0035 CVE-2017-0067 CVE-2017-0070 CVE-2017-0071 CVE-2017-0094 CVE-2017-0131 CVE-2017-0132 CVE-2017-0133 CVE-2017-0134 CVE-2017-0136 CVE-2017-0137 CVE-2017-0138 CVE-2017-0141 CVE-2017-0150 and CVE-2017-0151.


A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view change or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010 CVE-2017-0015 CVE-2017-0032 CVE-2017-0035 CVE-2017-0067 CVE-2017-0070 CVE-2017-0071 CVE-2017-0094 CVE-2017-0131 CVE-2017-0132 CVE-2017-0133 CVE-2017-0136 CVE-2017-0137 CVE-2017-0138 CVE-2017-0141 CVE-2017-0150 and CVE-2017-0151.


Uniscribe in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site aka \Uniscribe Remote Code Execution Vulnerability.\ This vulnerability is different from those described in CVE-2017-0072 CVE-2017-0083 CVE-2017-0084 CVE-2017-0086 CVE-2017-0087 CVE-2017-0088 and CVE-2017-0089.


A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view change or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010 CVE-2017-0015 CVE-2017-0035 CVE-2017-0067 CVE-2017-0070 CVE-2017-0071 CVE-2017-0094 CVE-2017-0131 CVE-2017-0132 CVE-2017-0133 CVE-2017-0134 CVE-2017-0136 CVE-2017-0137 CVE-2017-0138 CVE-2017-0141 CVE-2017-0150 and CVE-2017-0151.


Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows 10 Gold 1511 and 1607; and Windows Server 2016 allows guest OS users to execute arbitrary code on the host OS via a crafted application aka \Hyper-V Remote Code Execution Vulnerability.\ This vulnerability is different from that described in CVE-2017-0109.


Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows 10 Gold 1511 and 1607; and Windows Server 2016 allows guest OS users to execute arbitrary code on the host OS via a crafted application aka \Hyper-V Remote Code Execution Vulnerability.\ This vulnerability is different from that described in CVE-2017-0075.


Uniscribe in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 and 1607 and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site aka \Windows Uniscribe Remote Code Execution Vulnerability.\ This vulnerability is different from those described in CVE-2017-0072 CVE-2017-0083 CVE-2017-0086 CVE-2017-0087 CVE-2017-0088 CVE-2017-0089 and CVE-2017-0090.


A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view change or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010 CVE-2017-0015 CVE-2017-0032 CVE-2017-0035 CVE-2017-0067 CVE-2017-0070 CVE-2017-0071 CVE-2017-0094 CVE-2017-0131 CVE-2017-0132 CVE-2017-0133 CVE-2017-0134 CVE-2017-0136 CVE-2017-0137 CVE-2017-0141 CVE-2017-0150 and CVE-2017-0151.


A remote code execution vulnerability in the Framesequence library could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses the Framesequence library. Product: Android. Versions: 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1. Android ID: A-33718716.


A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view change or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010 CVE-2017-0015 CVE-2017-0032 CVE-2017-0035 CVE-2017-0067 CVE-2017-0070 CVE-2017-0094 CVE-2017-0131 CVE-2017-0132 CVE-2017-0133 CVE-2017-0134 CVE-2017-0136 CVE-2017-0137 CVE-2017-0138 CVE-2017-0141 CVE-2017-0150 and CVE-2017-0151.


The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold 1511 and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets aka \Windows SMB Remote Code Execution Vulnerability.\ This vulnerability is different from those described in CVE-2017-0143 CVE-2017-0144 CVE-2017-0145 and CVE-2017-0148.


The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Live Meeting 2007; Silverlight 5; Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site aka \Graphics Component Remote Code Execution Vulnerability.\ This vulnerability is different from that described in CVE-2017-0014.


The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold 1511 and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets aka \Windows SMB Remote Code Execution Vulnerability.\ This vulnerability is different from those described in CVE-2017-0144 CVE-2017-0145 CVE-2017-0146 and CVE-2017-0148.


A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view change or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010 CVE-2017-0015 CVE-2017-0032 CVE-2017-0035 CVE-2017-0067 CVE-2017-0071 CVE-2017-0094 CVE-2017-0131 CVE-2017-0132 CVE-2017-0133 CVE-2017-0134 CVE-2017-0136 CVE-2017-0137 CVE-2017-0138 CVE-2017-0141 CVE-2017-0150 and CVE-2017-0151.


The PDF library in Microsoft Edge; Windows 8.1; Windows Server 2012 and R2; Windows RT 8.1; and Windows 10 1511 and 1607 allows remote attackers to execute arbitrary code via a crafted PDF file aka \Microsoft PDF Remote Code Execution Vulnerability.\


A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view change or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010 CVE-2017-0015 CVE-2017-0032 CVE-2017-0035 CVE-2017-0067 CVE-2017-0070 CVE-2017-0071 CVE-2017-0094 CVE-2017-0132 CVE-2017-0133 CVE-2017-0134 CVE-2017-0136 CVE-2017-0137 CVE-2017-0138 CVE-2017-0141 CVE-2017-0150 and CVE-2017-0151.


Hyper-V in Microsoft Windows 10 Gold 1511 and 1607 and Windows Server 2016 does not properly validate vSMB packet data which allows attackers to execute arbitrary code on a target OS aka \Hyper-V vSMB Remote Code Execution Vulnerability.\ This vulnerability is different from that described in CVE-2017-0021.


Uniscribe in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site aka \Uniscribe Remote Code Execution Vulnerability.\ This vulnerability is different from those described in CVE-2017-0072 CVE-2017-0083 CVE-2017-0084 CVE-2017-0086 CVE-2017-0087 CVE-2017-0088 and CVE-2017-0090.


A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary code within the context of the Wi-Fi SoC. This issue is rated as Critical due to the possibility of remote code execution in the context of the Wi-Fi SoC. Product: Android. Versions: Kernel-3.10 Kernel-3.18. Android ID: A-34199105. References: B-RB#110814.


Uniscribe in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site aka \Uniscribe Remote Code Execution Vulnerability.\ This vulnerability is different from those described in CVE-2017-0072 CVE-2017-0083 CVE-2017-0084 CVE-2017-0086 CVE-2017-0088 CVE-2017-0089 and CVE-2017-0090.


A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view change or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010 CVE-2017-0015 CVE-2017-0032 CVE-2017-0035 CVE-2017-0067 CVE-2017-0070 CVE-2017-0071 CVE-2017-0094 CVE-2017-0131 CVE-2017-0132 CVE-2017-0133 CVE-2017-0134 CVE-2017-0136 CVE-2017-0137 CVE-2017-0138 CVE-2017-0150 and CVE-2017-0151.


The Windows Graphics Component in Microsoft Office 2010 SP2; Windows Server 2008 R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold 1511 and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site aka \Windows Graphics Component Remote Code Execution Vulnerability.\ This vulnerability is different from that described in CVE-2017-0108.


Microsoft Office 2007 SP3 Microsoft Office 2010 SP2 Microsoft Office 2013 SP1 Microsoft Office 2016 Microsoft Windows Vista SP2 Windows Server 2008 SP2 Windows 7 SP1 Windows 8.1 allow remote attackers to execute arbitrary code via a crafted document aka \Microsoft Office/WordPad Remote Code Execution Vulnerability w/Windows API.\


Uniscribe in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site aka \Uniscribe Remote Code Execution Vulnerability.\ This vulnerability is different from those described in CVE-2017-0083 CVE-2017-0084 CVE-2017-0086 CVE-2017-0087 CVE-2017-0088 CVE-2017-0089 and CVE-2017-0090.


A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view change or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0015 CVE-2017-0032 CVE-2017-0035 CVE-2017-0067 CVE-2017-0070 CVE-2017-0071 CVE-2017-0094 CVE-2017-0131 CVE-2017-0132 CVE-2017-0133 CVE-2017-0134 CVE-2017-0136 CVE-2017-0137 CVE-2017-0138 CVE-2017-0141 CVE-2017-0150 and CVE-2017-0151.


A remote code execution vulnerability in System UI component could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High because it is a remote arbitrary code execution in an unprivileged process. Product: Android. Versions: 7.1.1 7.1.2. Android ID: A-36368305.


Uniscribe in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site aka \Uniscribe Remote Code Execution Vulnerability.\ This vulnerability is different from those described in CVE-2017-0072 CVE-2017-0084 CVE-2017-0086 CVE-2017-0087 CVE-2017-0088 CVE-2017-0089 and CVE-2017-0090.


The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold 1511 and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets aka \Windows SMB Remote Code Execution Vulnerability.\ This vulnerability is different from those described in CVE-2017-0143 CVE-2017-0144 CVE-2017-0146 and CVE-2017-0148.


A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view change or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010 CVE-2017-0015 CVE-2017-0032 CVE-2017-0035 CVE-2017-0067 CVE-2017-0070 CVE-2017-0071 CVE-2017-0094 CVE-2017-0131 CVE-2017-0132 CVE-2017-0134 CVE-2017-0136 CVE-2017-0137 CVE-2017-0138 CVE-2017-0141 CVE-2017-0150 and CVE-2017-0151.


A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view change or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010 CVE-2017-0015 CVE-2017-0032 CVE-2017-0035 CVE-2017-0067 CVE-2017-0070 CVE-2017-0071 CVE-2017-0094 CVE-2017-0131 CVE-2017-0132 CVE-2017-0133 CVE-2017-0134 CVE-2017-0136 CVE-2017-0137 CVE-2017-0138 CVE-2017-0141 and CVE-2017-0150.


A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view change or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010 CVE-2017-0015 CVE-2017-0032 CVE-2017-0067 CVE-2017-0070 CVE-2017-0071 CVE-2017-0094 CVE-2017-0131 CVE-2017-0132 CVE-2017-0133 CVE-2017-0134 CVE-2017-0136 CVE-2017-0137 CVE-2017-0138 CVE-2017-0141 CVE-2017-0150 and CVE-2017-0151.


A remote code execution vulnerability in libgdx could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library. Product: Android. Versions: 7.1.1. Android ID: A-33621647.


A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view change or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010 CVE-2017-0015 CVE-2017-0032 CVE-2017-0035 CVE-2017-0067 CVE-2017-0070 CVE-2017-0071 CVE-2017-0094 CVE-2017-0131 CVE-2017-0132 CVE-2017-0133 CVE-2017-0134 CVE-2017-0136 CVE-2017-0138 CVE-2017-0141 CVE-2017-0150 and CVE-2017-0151.


A remote code execution vulnerability in libstagefright could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1. Android ID: A-31999646.


A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library. Product: Android. Versions: 4.4.4 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-37104170.


A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view change or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010 CVE-2017-0015 CVE-2017-0032 CVE-2017-0035 CVE-2017-0070 CVE-2017-0071 CVE-2017-0094 CVE-2017-0131 CVE-2017-0132 CVE-2017-0133 CVE-2017-0134 CVE-2017-0136 CVE-2017-0137 CVE-2017-0138 CVE-2017-0141 CVE-2017-0150 and CVE-2017-0151.


The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold 1511 and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets aka \Windows SMB Remote Code Execution Vulnerability.\ This vulnerability is different from those described in CVE-2017-0143 CVE-2017-0144 CVE-2017-0145 and CVE-2017-0146.


A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view change or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010 CVE-2017-0015 CVE-2017-0032 CVE-2017-0035 CVE-2017-0067 CVE-2017-0070 CVE-2017-0071 CVE-2017-0094 CVE-2017-0131 CVE-2017-0133 CVE-2017-0134 CVE-2017-0136 CVE-2017-0137 CVE-2017-0138 CVE-2017-0141 CVE-2017-0150 and CVE-2017-0151.


A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view change or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010 CVE-2017-0015 CVE-2017-0032 CVE-2017-0035 CVE-2017-0067 CVE-2017-0070 CVE-2017-0071 CVE-2017-0094 CVE-2017-0131 CVE-2017-0132 CVE-2017-0133 CVE-2017-0134 CVE-2017-0136 CVE-2017-0137 CVE-2017-0138 CVE-2017-0141 and CVE-2017-0151.


A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights an attacker could take control of an affected system. An attacker could then install programs; view change or delete data; or create new accounts with full user rights.


A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view change or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010 CVE-2017-0015 CVE-2017-0032 CVE-2017-0035 CVE-2017-0067 CVE-2017-0070 CVE-2017-0071 CVE-2017-0094 CVE-2017-0131 CVE-2017-0132 CVE-2017-0133 CVE-2017-0134 CVE-2017-0137 CVE-2017-0138 CVE-2017-0141 CVE-2017-0150 and CVE-2017-0151.


A remote code execution vulnerability in libgdx could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library. Product: Android. Versions: 7.1.1. Android ID: A-32769670.


Uniscribe in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site aka \Uniscribe Remote Code Execution Vulnerability.\ This vulnerability is different from those described in CVE-2017-0072 CVE-2017-0083 CVE-2017-0084 CVE-2017-0087 CVE-2017-0088 CVE-2017-0089 and CVE-2017-0090.


A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view change or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010 CVE-2017-0032 CVE-2017-0035 CVE-2017-0067 CVE-2017-0070 CVE-2017-0071 CVE-2017-0094 CVE-2017-0131 CVE-2017-0132 CVE-2017-0133 CVE-2017-0134 CVE-2017-0136 CVE-2017-0137 CVE-2017-0138 CVE-2017-0141 CVE-2017-0150 and CVE-2017-0151.


The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold 1511 and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets aka \Windows SMB Remote Code Execution Vulnerability.\ This vulnerability is different from those described in CVE-2017-0143 CVE-2017-0145 CVE-2017-0146 and CVE-2017-0148.


Microsoft Windows 7 SP1 allows an attacker to execute arbitrary code in the context of the current user due to how Microsoft browsers handle objects in memory aka \Windows Shell Remote Code Execution Vulnerability\.


D-Link EyeOn Baby Monitor (DCS-825L) 1.08.1 has a remote code execution vulnerability. A UDP \Discover\ service which provides multiple functions such as changing the passwords and getting basic information was installed on the device. A remote attacker can send a crafted UDP request to finderd to perform stack overflow and execute arbitrary code with root privilege on the device.


Import Language Package function in Huawei eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 has a remote code execution vulnerability. An authenticated remote attacker can craft and send the packets to the affected products after Language Package is uploaded. Due to insufficient verification of the packets this could be exploited to execute arbitrary code.


Import Signal Tone function in Huawei eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 has a remote code execution vulnerability. An authenticated remote attacker can craft and send the packets to the affected products after the Signal Tone is uploaded. Due to insufficient verification of the packets this could be exploited to execute arbitrary code.


The DefaultOSWorkflowConfigurator class in Jira Server and Jira Data Center before version 8.18.1 allows remote attackers who can trick a system administrator to import their malicious workflow to execute arbitrary code via a Remote Code Execution (RCE) vulnerability. The vulnerability allowed for various problematic OSWorkflow classes to be used as part of workflows. The fix for this issue blocks usage of unsafe conditions validators functions and registers that are build-in into OSWorkflow library and other Jira dependencies. Atlassian-made functions or functions provided by 3rd party plugins are not affected by this fix.


The

Comcast

firmware

on

Cisco

(firmware

version

Cisco

(firmware

version

Cisco

(firmware

version

Cisco

(firmware

version

and

Arris

(eMTA&DOCSIS

version

software

version

devices

allows

remote

attackers

to

execute

arbitrary

code

via

a

specific

(but

unstated)

exposed

service.

NOTE:

the

scope

of

this

CVE

does

NOT

include

the

concept

of

\Unnecessary

Services\

in

general;

the

scope

is

only

a

single

service

that

is

unnecessarily

exposed

leading

to

remote

code

execution.

The

details

of

that

service

might

be

disclosed

at

a

later

date.


Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 1607 1703 and Windows Server 2016 allows local users or remote attackers to execute arbitrary code via a crafted .LNK file which is not properly handled during icon display in Windows Explorer or any other application that parses the icon of the shortcut. aka \LNK Remote Code Execution Vulnerability.\


Microsoft Edge in Microsoft Windows 10 Gold 1511 1607 1703 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way Microsoft Edge handles objects in memory aka \Microsoft Edge Remote Code Execution Vulnerability\.


Microsoft Windows PDF Library in Microsoft Windows 8.1 and Windows RT 8.1 Windows Server 2012 and R2 Windows 10 Gold 1511 1607 1703 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Windows PDF Library handles objects in memory aka \Windows PDF Remote Code Execution Vulnerability\. This CVE ID is unique from CVE-2017-8737.


Microsoft Windows PDF Library in Microsoft Windows 8.1 and Windows RT 8.1 Windows Server 2012 and R2 Windows 10 Gold 1511 1607 1703 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Windows PDF Library handles objects in memory aka \Windows PDF Remote Code Execution Vulnerability\. This CVE ID is unique from CVE-2017-8728.


The Adobe Type Manager Library in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT Gold and 8.1 and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted embedded font aka \Windows Graphics Memory Remote Code Execution Vulnerability \ a different vulnerability than CVE-2015-6103.


The Adobe Type Manager Library in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT Gold and 8.1 and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted embedded font aka \Windows Graphics Memory Remote Code Execution Vulnerability \ a different vulnerability than CVE-2015-6104.


Adobe Font Driver in Microsoft Windows Server 2003 SP2 Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted (1) web site or (2) file aka \Adobe Font Driver Remote Code Execution Vulnerability \ a different vulnerability than CVE-2015-0088 CVE-2015-0090 CVE-2015-0092 and CVE-2015-0093.


Windows Text Services (WTS) in Microsoft Windows Server 2003 SP2 Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted (1) web site or (2) file aka \WTS Remote Code Execution Vulnerability.\


Adobe Font Driver in Microsoft Windows Server 2003 SP2 Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted (1) web site or (2) file aka \Adobe Font Driver Remote Code Execution Vulnerability \ a different vulnerability than CVE-2015-0090 CVE-2015-0091 CVE-2015-0092 and CVE-2015-0093.


Adobe Font Driver in Microsoft Windows Server 2003 SP2 Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted (1) web site or (2) file aka \Adobe Font Driver Remote Code Execution Vulnerability \ a different vulnerability than CVE-2015-0088 CVE-2015-0091 CVE-2015-0092 and CVE-2015-0093.


Adobe Font Driver in Microsoft Windows Server 2003 SP2 Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted (1) web site or (2) file aka \Adobe Font Driver Remote Code Execution Vulnerability \ a different vulnerability than CVE-2015-0088 CVE-2015-0090 CVE-2015-0091 and CVE-2015-0093.


Microsoft Excel 2007 SP3 PowerPoint 2007 SP3 Word 2007 SP3 Excel 2010 SP2 PowerPoint 2010 SP2 and Word 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document aka \Microsoft Word Local Zone Remote Code Execution Vulnerability.\


Adobe Font Driver in Microsoft Windows Server 2003 SP2 Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted (1) web site or (2) file aka \Adobe Font Driver Remote Code Execution Vulnerability \ a different vulnerability than CVE-2015-0088 CVE-2015-0090 CVE-2015-0091 and CVE-2015-0092.


The UNC implementation in Microsoft Windows Server 2003 SP2 Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 does not include authentication from the server to the client which allows remote attackers to execute arbitrary code by making crafted data available on a UNC share as demonstrated by Group Policy data from a spoofed domain controller aka \Group Policy Remote Code Execution Vulnerability.\


Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 allow remote attackers to execute arbitrary code via a crafted Journal file aka \Windows Journal Remote Code Execution Vulnerability \ a different vulnerability than CVE-2015-1675 CVE-2015-1695 CVE-2015-1697 CVE-2015-1698 and CVE-2015-1699.


Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 allow remote attackers to execute arbitrary code via a crafted Journal file aka \Windows Journal Remote Code Execution Vulnerability \ a different vulnerability than CVE-2015-1675 CVE-2015-1695 CVE-2015-1696 CVE-2015-1698 and CVE-2015-1699.


HTTP.sys in Microsoft Windows 7 SP1 Windows Server 2008 R2 SP1 Windows 8 Windows 8.1 and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted HTTP requests aka \HTTP.sys Remote Code Execution Vulnerability.\


Microsoft SQL Server 2008 SP3 and SP4 2008 R2 SP2 and SP3 2012 SP1 and SP2 and 2014 when transactional replication is configured does not prevent use of uninitialized memory in unspecified function calls which allows remote authenticated users to execute arbitrary code by leveraging certain permissions and making a crafted query as demonstrated by the VIEW SERVER STATE permission aka \SQL Server Remote Code Execution Vulnerability.\


Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 allow remote attackers to execute arbitrary code via a crafted Journal file aka \Windows Journal Remote Code Execution Vulnerability \ a different vulnerability than CVE-2015-1675 CVE-2015-1696 CVE-2015-1697 CVE-2015-1698 and CVE-2015-1699.


Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 allow remote attackers to execute arbitrary code via a crafted Journal file aka \Windows Journal Remote Code Execution Vulnerability \ a different vulnerability than CVE-2015-1675 CVE-2015-1695 CVE-2015-1696 CVE-2015-1697 and CVE-2015-1698.


Microsoft Windows Server 2003 SP2 Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 and Windows 7 SP1 allow remote attackers to execute arbitrary code via a crafted Enhanced Metafile (EMF) image aka \EMF Processing Remote Code Execution Vulnerability.\


Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 allow remote attackers to execute arbitrary code via a crafted Journal file aka \Windows Journal Remote Code Execution Vulnerability \ a different vulnerability than CVE-2015-1675 CVE-2015-1695 CVE-2015-1696 CVE-2015-1697 and CVE-2015-1699.


Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 allow remote attackers to execute arbitrary code via a crafted Journal file aka \Windows Journal Remote Code Execution Vulnerability \ a different vulnerability than CVE-2015-1695 CVE-2015-1696 CVE-2015-1697 CVE-2015-1698 and CVE-2015-1699.


Microsoft SQL Server 2008 SP3 and SP4 2008 R2 SP2 and SP3 2012 SP1 and SP2 and 2014 does not prevent use of uninitialized memory in certain attempts to execute virtual functions which allows remote authenticated users to execute arbitrary code via a crafted query aka \SQL Server Remote Code Execution Vulnerability.\


The Remote Desktop Protocol (RDP) server service in Microsoft Windows 7 SP1 Windows 8 and Windows Server 2012 allows remote attackers to execute arbitrary code via a series of crafted packets aka \Remote Desktop Protocol (RDP) Remote Code Execution Vulnerability.\


Microsoft Office 2007 SP3 and 2010 SP2 Live Meeting 2007 Console Lync 2010 Lync 2010 Attendee Lync 2013 SP1 and Lync Basic 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office Graphics Library (OGL) font aka \Microsoft Office Graphics Component Remote Code Execution Vulnerability.\


Microsoft Internet Explorer 9 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing a deleted object aka \Attribute Remove Remote Code Execution Vulnerability.\


Microsoft Excel 2003 SP3 2007 SP2 and SP3 and 2010 Gold and SP1; Office 2008 and 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files which allows remote attackers to execute arbitrary code via a crafted spreadsheet aka \Excel Series Record Parsing Type Mismatch Could Result in Remote Code Execution Vulnerability.\


Microsoft Internet Explorer 8 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing a deleted object aka \Same ID Property Remote Code Execution Vulnerability.\


Microsoft Internet Explorer 9 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing a deleted object aka \Cached Object Remote Code Execution Vulnerability.\


Microsoft Internet Explorer 9 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing a deleted object aka \JScript9 Remote Code Execution Vulnerability.\


Unspecified vulnerability in DirectShow in DirectX in Microsoft Windows XP SP2 and SP3 Windows Server 2003 SP2 Windows Vista SP2 Windows Server 2008 SP2 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted media file related to Quartz.dll Qdvd.dll closed captioning and the Line21 DirectShow filter aka \DirectShow Remote Code Execution Vulnerability.\


Microsoft Internet Explorer 9 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing a deleted object aka \VML Remote Code Execution Vulnerability.\


Microsoft Internet Explorer 6 through 9 allows user-assisted remote attackers to execute arbitrary code via a crafted HTML document that is not properly handled during a \Print table of links\ print operation aka \Print Feature Remote Code Execution Vulnerability.\


Unspecified vulnerability in winmm.dll in Windows Multimedia Library in Windows Media Player (WMP) in Microsoft Windows XP SP2 and SP3 Server 2003 SP2 Vista SP2 and Server 2008 SP2 allows remote attackers to execute arbitrary code via a crafted MIDI file aka \MIDI Remote Code Execution Vulnerability.\


Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing a malformed virtual function table after this table's deletion aka \Virtual Function Table Corruption Remote Code Execution Vulnerability.\


A CGGIServlet SQL injection remote code execution (RCE) vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.


XXXTreeNode method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.


An AdHocQuery_Processor SQL injection remote code execution (RCE) vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.


XXXStatusXXX XXXSummary TemplateXXX and XXXCompliance method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.


GetXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.


TopXXX ViolationXXX and IncidentXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.


A SQL injection remote code execution vulnerability in Trend Micro Smart Protection Server (Standalone) 3.x could allow a remote attacker to execute arbitrary code on vulnerable installations due to a flaw within the handling of parameters provided to wcs\\_bwlists\\_handler.php. Authentication is required in order to exploit this vulnerability.


Dell EMC ESRS Policy Manager versions 6.8 and prior contain a remote code execution vulnerability due to improper configurations of triggered JMX services. A remote unauthenticated attacker may potentially exploit this vulnerability to execute arbitrary code in the server's JVM.


A remote code execution vulnerability is present in network-listening components in some versions of ArubaOS. An attacker with the ability to transmit specially-crafted IP traffic to a mobility controller could exploit this vulnerability and cause a process crash or to execute arbitrary code within the underlying operating system with full system privileges. Such an attack could lead to complete system compromise. The ability to transmit traffic to an IP interface on the mobility controller is required to carry out an attack. The attack leverages the PAPI protocol (UDP port 8211). If the mobility controller is only bridging L2 traffic to an uplink and does not have an IP address that is accessible to the attacker it cannot be attacked.


Remote

Code

Execution

Vulnerability

in

in

oria

gridx

allows

remote

attackers

to

execute

arbitrary

code

via

crafted

value

to

the

$query

parameter.


** DISPUTED ** The git hook feature in Gitea 1.1.0 through 1.12.5 might allow for authenticated remote code execution in customer environments where the documentation was not understood (e.g. one viewpoint is that the dangerousness of this feature should be documented immediately above the ENABLE_GIT_HOOKS line in the config file). NOTE: The vendor has indicated this is not a vulnerability and states \This is a functionality of the software that is limited to a very limited subset of accounts. If you give someone the privilege to execute arbitrary code on your server they can execute arbitrary code on your server. We provide very clear warnings to users around this functionality and what it provides.\


A remote code execution vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier 10.4.0.0 10.4.0.1 10.4.0.2 10.4.0.3 10.5.1.0 10.5.2.0 and 10.6.0.0; and Sentry versions 9.7.2 and earlier and 9.8.0; and Monitor and Reporting Database (RDB) version 2.0.0.1 and earlier that allows remote attackers to execute arbitrary code via unspecified vectors.


A remote code execution vulnerability in the Qualcomm crypto driver could enable a remote attacker to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of remote code execution in the context of the kernel. Product: Android. Versions: N/A. Android ID: A-32652894. References: QC-CR#1077457.


Microsoft Video Control in Microsoft Windows Vista SP2 Windows 7 SP1 Windows 8.1 Windows RT 8.1 and Windows 10 Gold 1511 and 1607 allows remote attackers to execute arbitrary code via a crafted file aka \Microsoft Video Control Remote Code Execution Vulnerability.\


Uniscribe in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 and 1607 and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site aka \Windows Uniscribe Remote Code Execution Vulnerability.\


Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 and 1607 and Windows Server 2016 allow remote attackers to execute arbitrary code via a crafted image file aka \Windows Remote Code Execution Vulnerability.\


The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site aka \Scripting Engine Remote Code Execution Vulnerability.\


The Graphics component in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 and 1607 and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site aka \Windows Graphics Remote Code Execution Vulnerability.\


The Graphics component in Microsoft Windows 10 Gold 1511 and 1607 and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site aka \Windows Graphics Remote Code Execution Vulnerability.\


atmfd.dll in the Windows font library in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 and 1607 and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site aka \Open Type Font Remote Code Execution Vulnerability.\


A remote code execution vulnerability in the Qualcomm crypto driver in Android before 2016-11-05 could enable a remote attacker to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of remote code execution in the context of the kernel. Android ID: A-30515053. References: Qualcomm QC-CR#1050970.


A remote code execution vulnerability in Webview in Android 5.0.x before 5.0.2 5.1.x before 5.1.1 and 6.x before 2016-11-05 could enable a remote attacker to execute arbitrary code when the user is navigating to a website. This issue is rated as High due to the possibility of remote code execution in an unprivileged process. Android ID: A-31217937.


A remote code execution vulnerability in an Android runtime library in Android 4.x before 4.4.4 5.0.x before 5.0.2 5.1.x before 5.1.1 and 6.x before 2016-11-01 could enable an attacker using a specially crafted payload to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses the Android runtime. Android ID: A-30765246.


A remote code execution vulnerability in libjpeg in Android 4.x before 4.4.4 5.0.x before 5.0.2 and 5.1.x before 5.1.1 could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses libjpeg. Android ID: A-30259087.


A remote code execution vulnerability in the Framesequence library could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses the Framesequence library. Product: Android. Versions: 5.0.2 5.1.1 6.0 6.0.1 7.0. Android ID: A-31631842.


Windows Shell in Microsoft Windows 8.1 Windows Server 2012 R2 Windows RT 8.1 and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted web site aka \Windows Shell Remote Code Execution Vulnerability.\


OLE in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted file aka \Windows OLE Memory Remote Code Execution Vulnerability \ a different vulnerability than CVE-2016-0091.


DirectShow in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted file aka \DirectShow Heap Corruption Remote Code Execution Vulnerability.\


The PDF library in Microsoft Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted PDF document aka \Windows Remote Code Execution Vulnerability.\


Media Center in Microsoft Windows Vista SP2 Windows 7 SP1 and Windows 8.1 allows remote attackers to execute arbitrary code via a crafted Media Center link (aka .mcl) file aka \Windows Media Center Remote Code Execution Vulnerability.\


OLE in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT 8.1 allows remote attackers to execute arbitrary code via a crafted file aka \Windows OLE Remote Code Execution Vulnerability.\


The PDF library in Microsoft Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted PDF document aka \Windows Remote Code Execution Vulnerability.\


OLE in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted file aka \Windows OLE Memory Remote Code Execution Vulnerability \ a different vulnerability than CVE-2016-0092.


Microsoft Windows Server 2008 R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold and 1511 allow remote attackers to execute arbitrary code via crafted media content aka \Windows Media Parsing Remote Code Execution Vulnerability.\


Hyper-V in Microsoft Windows 8.1 Windows Server 2012 Gold and R2 and Windows 10 allows guest OS users to execute arbitrary code on the host OS via a crafted application aka \Hyper-V Remote Code Execution Vulnerability.\


Video Control in Microsoft Windows Vista SP2 Windows 7 SP1 Windows 8.1 Windows RT 8.1 and Windows 10 Gold 1511 and 1607 allows remote attackers to execute arbitrary code via a crafted web page aka \Microsoft Video Control Remote Code Execution Vulnerability.\


Microsoft Windows Server 2008 R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 allow remote attackers to execute arbitrary code via crafted media content aka \Windows Media Parsing Remote Code Execution Vulnerability.\


Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold 1511 and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010 Attendee; and Live Meeting 2007 Console allows remote attackers to execute arbitrary code via a crafted embedded font aka \GDI+ Remote Code Execution Vulnerability.\


The Graphics Device Interface (GDI) in Microsoft Windows 10 1607 allows remote attackers to execute arbitrary code via a crafted document aka \GDI Remote Code Execution Vulnerability.\


Microsoft

Office

Excel

PowerPoint

Word

Excel

PowerPoint

Word

Excel

RT

PowerPoint

RT

Word

RT

Excel

Word

Word

Automation

Services

on

SharePoint

Server

and

Office

Web

Apps

allow

remote

attackers

to

execute

arbitrary

code

via

a

crafted

XLA

file

aka

\Microsoft

Office

Remote

Code

Execution

Vulnerability.\


Microsoft Windows 8.1 Windows Server 2012 Gold and R2 Windows 10 Gold and 1511 and Microsoft Edge allow remote attackers to execute arbitrary code via a crafted PDF document aka \Windows PDF Remote Code Execution Vulnerability.\


The PDF library in Microsoft Windows 8.1 Windows Server 2012 Gold and R2 Windows 10 Gold and 1511 and Microsoft Edge allows remote attackers to execute arbitrary code via a crafted PDF file aka \Microsoft PDF Remote Code Execution Vulnerability.\


The SMBv1 server in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold 1511 and 1607 allows remote attackers to execute arbitrary code via crafted packets aka \Windows SMB Authenticated Remote Code Execution Vulnerability.\


Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold 1511 and 1607 allow remote authenticated users to execute arbitrary code by leveraging a domain account to make a crafted request aka \Windows Remote Code Execution Vulnerability.\