Vulnerabilities > High

DATE CVE VULNERABILITY TITLE RISK
2017-04-12 CVE-2017-3005 Unquoted Search Path or Element vulnerability in Adobe Photoshop CC
Adobe Photoshop versions CC 2017 (18.0.1) and earlier, CC 2015.5.1 (17.0.1) and earlier have an unquoted search path vulnerability.
local
low complexity
adobe CWE-428
7.8
2017-04-12 CVE-2017-3004 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Adobe Photoshop CC
Adobe Photoshop versions CC 2017 (18.0.1) and earlier, CC 2015.5.1 (17.0.1) and earlier have a memory corruption vulnerability when parsing malicious PCX files.
local
low complexity
adobe CWE-119
7.8
2017-04-12 CVE-2017-0210 Unspecified vulnerability in Microsoft Internet Explorer 10/11
An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain, aka "Internet Explorer Elevation of Privilege Vulnerability."
network
low complexity
microsoft
8.8
2017-04-12 CVE-2017-0205 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Microsoft Edge
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory.
network
high complexity
microsoft CWE-119
7.5
2017-04-12 CVE-2017-0202 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Microsoft Internet Explorer 11
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory.
network
high complexity
microsoft CWE-119
7.5
2017-04-12 CVE-2017-0201 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Microsoft Internet Explorer 10/9
A remote code execution vulnerability exists in Internet Explorer in the way that the JScript and VBScript engines render when handling objects in memory.
network
high complexity
microsoft CWE-119
7.5
2017-04-12 CVE-2017-0200 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Microsoft Edge
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory.
network
high complexity
microsoft CWE-119
7.5
2017-04-12 CVE-2017-0199 Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office/WordPad Remote Code Execution Vulnerability w/Windows API."
local
low complexity
microsoft philips
7.8
2017-04-12 CVE-2017-0197 Improper Input Validation vulnerability in Microsoft Onenote 2007/2010
Microsoft OneNote 2007 SP3 and Microsoft OneNote 2010 SP2 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office DLL Loading Vulnerability."
local
low complexity
microsoft CWE-20
7.8
2017-04-12 CVE-2017-0189 Unspecified vulnerability in Microsoft Windows 10 and Windows Server 2016
An elevation of privilege vulnerability exists in Windows 10 when the Windows kernel-mode driver fails to properly handle objects in memory.
local
low complexity
microsoft
7.8