| Month | Quarter | Year |
|---|---|---|
| #15 | #42 | #79 |
| CVE-ID | CWE-ID | Type | Score |
|---|---|---|---|
| CVE-2019-1132 | CWE-264 | Permissions, Privileges, and Access Controls | 7.8 |
|
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.
|
|||
| CVE-2018-8120 | CWE-264 | Permissions, Privileges, and Access Control | 7.0 |
|
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8124, CVE-2018-8164, CVE-2018-8166.
|
|||
| CVE-2018-4990 | CWE-415 | Double Free | 8.8 |
|
Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Double Free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
|
|||
| CVE-2017-0263 | CWE-264 | Permissions, Privileges, and Access Control | 7.8 |
|
The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."
|
|||
| CVE-2017-0262 | CWE-19 | Data Handling | 7.8 |
|
Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0261 and CVE-2017-0281.
|
|||