Vulnerabilities > Microsoft > Windows 10

DATE CVE VULNERABILITY TITLE RISK
2017-09-13 CVE-2017-8713 Information Exposure vulnerability in Microsoft products
The Windows Hyper-V component on Microsoft Windows Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Information Disclosure Vulnerability".
local
high complexity
microsoft CWE-200
5.3
2017-09-13 CVE-2017-8712 Information Exposure vulnerability in Microsoft Windows 10 and Windows Server 2016
The Windows Hyper-V component on Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an information disclosure vulnerability when it fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Information Disclosure Vulnerability".
local
high complexity
microsoft CWE-200
5.3
2017-09-13 CVE-2017-8711 Information Exposure vulnerability in Microsoft Windows 10 and Windows Server 2016
The Windows Hyper-V component on Microsoft Windows 10 1607 and Windows Server 2016 allows an information disclosure vulnerability when it fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Information Disclosure Vulnerability".
local
high complexity
microsoft CWE-200
5.3
2017-09-13 CVE-2017-8709 Information Exposure vulnerability in Microsoft products
The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability".
local
high complexity
microsoft CWE-200
4.7
2017-09-13 CVE-2017-8708 Information Exposure vulnerability in Microsoft products
The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability".
local
high complexity
microsoft CWE-200
4.7
2017-09-13 CVE-2017-8707 Information Exposure vulnerability in Microsoft products
The Windows Hyper-V component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it fails to properly validate input from an authenticated user on a guest operating system, aka Hyper-V Information Disclosure Vulnerability".
local
high complexity
microsoft CWE-200
5.3
2017-09-13 CVE-2017-8706 Information Exposure vulnerability in Microsoft Windows 10 and Windows Server 2016
The Windows Hyper-V component on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Information Disclosure Vulnerability".
local
high complexity
microsoft CWE-200
5.3
2017-09-13 CVE-2017-8704 Improper Input Validation vulnerability in Microsoft Windows 10 and Windows Server 2016
The Windows Hyper-V component on Microsoft Windows 10 1607 and Windows Server 2016 allows a denial of service vulnerability when it fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Denial of Service Vulnerability".
local
high complexity
microsoft CWE-20
5.3
2017-09-13 CVE-2017-8702 Unspecified vulnerability in Microsoft Windows 10 and Windows Server 2016
Windows Error Reporting (WER) in Microsoft Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows an attacker to gain greater access to sensitive information and system functionality, due to the way that WER handles and executes files, aka "Windows Elevation of Privilege Vulnerability".
local
high complexity
microsoft
7.0
2017-09-13 CVE-2017-8699 Improper Input Validation vulnerability in Microsoft products
Windows Shell in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to run arbitrary code in the context of the current user, due to the way that Windows Shell validates file copy destinations, aka "Windows Shell Remote Code Execution Vulnerability".
local
high complexity
microsoft CWE-20
7.0