cve.bz

Microsoft Patch Tuesday, January 2017: the CVEs

Filter

Microsoft Patch Tuesday January 2017: the CVEs Microsoft published on 10 January 2017, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Dec 2016, Nov 2016, Oct 2016, Sep 2016, Aug 2016, Jul 2016, Jun 2016, May 2016, Apr 2016, Mar 2016, Feb 2016, Jan 2016. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. 7.5CVE-2017-0004EPSS 89%

    The Local Security Authority Subsystem Service (LSASS) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to cause a denial of service (reboot) via a crafted authentication request…

  2. 7.8CVE-2017-0003EPSS 25%

    Microsoft Word 2016 and SharePoint Enterprise Server 2016 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."

  3. 8.8CVE-2017-0002EPSS 17%

    Microsoft Edge allows remote attackers to bypass the Same Origin Policy via vectors involving the about:blank URL and data: URLs, aka "Microsoft Edge Elevation of Privilege Vulnerability."