Memory Buffer Bounds Error — CVEs by weakness type

Chakracore HIGH 7.5

CVE-2017-11905EPSS 9%

ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the conte…

Fix: 1.7.5+

Fix from $1,950 2017-12-12

Chakracore HIGH 7.5

CVE-2017-11908EPSS 9%

ChakraCore and Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handl…

Fix: 1.7.5+

Fix from $1,950 2017-12-12

Edge HIGH 7.5

CVE-2017-11909EPSS 65%

ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current …

Fix: 1.7.5+

Fix from $1,950 2017-12-12

Chakracore HIGH 7.5

CVE-2017-11910EPSS 9%

ChakraCore and Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the cu…

Fix: 1.7.5+

Fix from $1,950 2017-12-12

Edge HIGH 7.5

CVE-2017-11911EPSS 65%

ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current …

Fix: 1.7.5+

Fix from $1,950 2017-12-12

Chakracore HIGH 7.5

CVE-2017-11912EPSS 8%

ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and…

Fix: 1.7.5+

Fix from $1,950 2017-12-12

Edge HIGH 7.5

CVE-2017-11914EPSS 63%

ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the cu…

Fix: 1.7.5+

Fix from $1,950 2017-12-12

Chakracore HIGH 7.5

CVE-2017-11916EPSS 6%

ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine handles object…

Fix: 1.7.5+

Fix from $1,950 2017-12-12

Edge HIGH 7.5

CVE-2017-11918EPSS 63%

ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as …

Fix: 1.7.5+

Fix from $1,950 2017-12-12

Chakracore HIGH 7.5

CVE-2017-11930EPSS 9%

ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Win…

Fix: 1.7.5+

Fix from $1,950 2017-12-12

Pan Os CRITICAL 9.8

CVE-2017-15944 KEVEPSS 98%

Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote attackers to execute arbitrar…

Fix: 6.1.19 / 7.0.19+

Fix from $2,300 2017-12-11

Graphicsmagick HIGH 8.8

CVE-2017-17498

WritePNMImage in coders/pnm.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (bit_stream.c MagickBitStreamMSBWrite hea…

Patch available

Fix from $1,950 2017-12-11

Tidy HIGH 7.5

CVE-2017-17497

In Tidy 5.7.0, the prvTidyTidyMetaCharset function in clean.c allows attackers to cause a denial of service (Segmentation Fault), because the current…

Patch available

Fix from $1,950 2017-12-10

International Components For Unicode CRITICAL 9.8

CVE-2017-17484

The ucnv_UTF8FromUTF8 function in ucnv_u8.cpp in International Components for Unicode (ICU) for C/C++ through 60.1 mishandles ucnv_convertEx calls fo…

Fix: after 60.1

Fix from $2,300 2017-12-10

Acrobat HIGH 8.8

CVE-2017-16392EPSS 13%