Threat Advisories - NVD Disclosed May 12, 2017

CVE-2017-0263

Microsoft Win32k Local Privilege Escalation Vulnerability

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A vulnerability in Microsoft Windows kernel-mode drivers allows local users to gain elevated privileges by running a crafted application. This impacts affected Windows operating systems by enabling attackers with existing local access to increase their control over a system, potentially leading to unauthorized data acc

NVD published: May 12, 2017 • CISA KEV

CVE advisoryKnown Exploit

CVE-2017-0262

Microsoft Office Memory Handling Vulnerability

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

Microsoft Office has a memory handling vulnerability that could allow unauthorized code execution. This impacts organizations using affected versions of Office by potentially compromising systems and data. The realistic business risk involves attackers gaining control through user interaction with malicious files.

NVD published: May 12, 2017 • CISA KEV

CVE advisoryKnown Exploit

CVE-2017-0261

Microsoft Office Memory Handling Vulnerability

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

Microsoft Office software has a memory handling vulnerability that could allow remote code execution if a user opens a specially crafted document. This poses a business risk by potentially affecting system integrity and data confidentiality.

NVD published: May 12, 2017 • CISA KEV

CVE advisoryKnown Exploit

CVE-2017-0222

Internet Explorer Memory Corruption Vulnerability

Halo Surface Signal: 2 out of 5 — less likely to be public-facing.

A memory corruption vulnerability in Internet Explorer allows attackers to execute arbitrary code. This impacts systems using the browser and poses a risk of system compromise, affecting data and operations.

NVD published: May 12, 2017 • CISA KEV

CVE advisoryKnown Exploit

CVE-2017-0213

Windows Privilege Escalation Vulnerability

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A vulnerability in Windows COM Aggregate Marshaler allows privilege elevation through a specially crafted application, potentially impacting affected systems and data. This presents a business risk of unauthorized access and system compromise.

NVD published: May 12, 2017 • CISA KEV