Vulnerabilities > Information Exposure

DATE CVE VULNERABILITY TITLE RISK
2017-06-15 CVE-2017-0297 Information Exposure vulnerability in Microsoft products
The kernel in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application.
local
low complexity
microsoft CWE-200
5.0
2017-06-15 CVE-2017-0289 Information Exposure vulnerability in Microsoft products
Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows improper disclosure of memory contents, aka "Windows Graphics Information Disclosure Vulnerability".
local
low complexity
microsoft CWE-200
5.0
2017-06-15 CVE-2017-0288 Information Exposure vulnerability in Microsoft products
Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows improper disclosure of memory contents, aka "Windows Graphics Information Disclosure Vulnerability".
local
low complexity
microsoft CWE-200
5.0
2017-06-15 CVE-2017-0287 Information Exposure vulnerability in Microsoft products
Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows improper disclosure of memory contents, aka "Graphics Uniscribe Information Disclosure Vulnerability".
local
low complexity
microsoft CWE-200
5.0
2017-06-15 CVE-2017-0286 Information Exposure vulnerability in Microsoft Office, Windows 7 and Windows Server 2008
Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows improper disclosure of memory contents, aka "Windows Graphics Information Disclosure Vulnerability".
local
low complexity
microsoft CWE-200
5.0
2017-06-15 CVE-2017-0285 Information Exposure vulnerability in Microsoft products
Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, Windows Server 2016, Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, and Microsoft Office Word Viewer allows improper disclosure of memory contents, aka "Windows Uniscribe Information Disclosure Vulnerability".
local
low complexity
microsoft CWE-200
5.0
2017-06-15 CVE-2017-0284 Information Exposure vulnerability in Microsoft products
Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, Windows Server 2016, Microsoft Office 2007 SP3, and Microsoft Office 2010 SP2 allows improper disclosure of memory contents, aka "Windows Uniscribe Information Disclosure Vulnerability".
local
low complexity
microsoft CWE-200
5.0
2017-06-15 CVE-2017-0282 Information Exposure vulnerability in Microsoft products
Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, Windows Server 2016, Microsoft Office 2007 SP3, and Microsoft Office 2010 SP2 allows improper disclosure of memory contents, aka "Windows Uniscribe Information Disclosure Vulnerability".
local
low complexity
microsoft CWE-200
5.0
2017-06-14 CVE-2017-4986 Information Exposure vulnerability in EMC Secure Remote Services 3.18
EMC ESRS VE 3.18 or earlier contains Authentication Bypass that could potentially be exploited by malicious users to compromise the affected system.
network
low complexity
emc CWE-200
5.3
2017-06-14 CVE-2017-0651 Information Exposure vulnerability in Linux Kernel 3.18
An information disclosure vulnerability in the kernel ION subsystem could enable a local malicious application to access data outside of its permission levels.
local
high complexity
linux CWE-200
4.7