# Vulnerabilities published in 2017 - [CVE-2017-8669](https://insights.sbomify.com/CVE-2017-8669/): Memory corruption in Internet Explorer (high 7.5) - [CVE-2017-8668](https://insights.sbomify.com/CVE-2017-8668/): Information disclosure in Volume Manager Driver (medium 5.5) - [CVE-2017-8666](https://insights.sbomify.com/CVE-2017-8666/): Information disclosure in Windows Kernel-Mode Drivers (medium 5.5) - [CVE-2017-8665](https://insights.sbomify.com/CVE-2017-8665/): Privilege escalation in Xamarin.iOS (high 7.8) - [CVE-2017-8664](https://insights.sbomify.com/CVE-2017-8664/): Code injection in Windows Hyper-V (high 8.8) - [CVE-2017-8663](https://insights.sbomify.com/CVE-2017-8663/): Memory corruption in Microsoft Office (high 7.8) - [CVE-2017-8662](https://insights.sbomify.com/CVE-2017-8662/): Information disclosure in Microsoft Edge (medium 4.3) - [CVE-2017-8661](https://insights.sbomify.com/CVE-2017-8661/): Memory corruption in Microsoft Edge (high 7.5) - [CVE-2017-8660](https://insights.sbomify.com/CVE-2017-8660/): Memory corruption in Microsoft Edge (high 8.8) - [CVE-2017-8659](https://insights.sbomify.com/CVE-2017-8659/): ChakraCore information disclosure vulnerability (medium 4.3) - [CVE-2017-8658](https://insights.sbomify.com/CVE-2017-8658/): ChakraCore RCE Vulnerability (critical 9.8) - [CVE-2017-8657](https://insights.sbomify.com/CVE-2017-8657/): Memory corruption in Microsoft Scripting Engine (high 7.5) - [CVE-2017-8656](https://insights.sbomify.com/CVE-2017-8656/): Memory corruption in Microsoft Scripting Engine (high 7.5) - [CVE-2017-8655](https://insights.sbomify.com/CVE-2017-8655/): Memory corruption in Microsoft Scripting Engine (high 7.5) - [CVE-2017-8654](https://insights.sbomify.com/CVE-2017-8654/): Cross-site scripting in Microsoft Office (medium 5.4) - [CVE-2017-8653](https://insights.sbomify.com/CVE-2017-8653/): Memory corruption in Internet Explorer (high 7.5) - [CVE-2017-8652](https://insights.sbomify.com/CVE-2017-8652/): Information disclosure in Microsoft Edge (medium 6.5) - [CVE-2017-8651](https://insights.sbomify.com/CVE-2017-8651/): Memory corruption in Internet Explorer (high 7.5) - [CVE-2017-8650](https://insights.sbomify.com/CVE-2017-8650/): Security feature bypass in Microsoft Edge (medium 5.4) - [CVE-2017-8649](https://insights.sbomify.com/CVE-2017-8649/): Memory corruption in Microsoft Edge (high 7.5) - [CVE-2017-8648](https://insights.sbomify.com/CVE-2017-8648/): Information disclosure in Microsoft Edge (medium 4.3) - [CVE-2017-8647](https://insights.sbomify.com/CVE-2017-8647/): Memory corruption in Microsoft Scripting Engine (high 7.5) - [CVE-2017-8646](https://insights.sbomify.com/CVE-2017-8646/): Memory corruption in Microsoft Scripting Engine (high 7.5) - [CVE-2017-8645](https://insights.sbomify.com/CVE-2017-8645/): Memory corruption in Microsoft Scripting Engine (high 7.5) - [CVE-2017-8644](https://insights.sbomify.com/CVE-2017-8644/): Information disclosure in Microsoft Edge (medium 4.3) - [CVE-2017-8643](https://insights.sbomify.com/CVE-2017-8643/): Information disclosure in Microsoft Edge (medium 4.3) - [CVE-2017-8642](https://insights.sbomify.com/CVE-2017-8642/): Cross-site scripting in Microsoft Edge (medium 6.1) - [CVE-2017-8641](https://insights.sbomify.com/CVE-2017-8641/): Memory corruption in Microsoft Scripting Engine (high 7.5) - [CVE-2017-8640](https://insights.sbomify.com/CVE-2017-8640/): Memory corruption in Microsoft Scripting Engine (high 7.5) - [CVE-2017-8639](https://insights.sbomify.com/CVE-2017-8639/): Memory corruption in Microsoft Scripting Engine (high 7.5) - [CVE-2017-8638](https://insights.sbomify.com/CVE-2017-8638/): Memory corruption in Microsoft Scripting Engine (high 7.5) - [CVE-2017-8637](https://insights.sbomify.com/CVE-2017-8637/): Security feature bypass in Microsoft Scripting Engine (medium 5.3) - [CVE-2017-8636](https://insights.sbomify.com/CVE-2017-8636/): Memory corruption in Microsoft Scripting Engine (high 7.5) - [CVE-2017-8635](https://insights.sbomify.com/CVE-2017-8635/): Memory corruption in Microsoft Scripting Engine (high 7.5) - [CVE-2017-8634](https://insights.sbomify.com/CVE-2017-8634/): Memory corruption in Microsoft Scripting Engine (high 7.5) - [CVE-2017-8633](https://insights.sbomify.com/CVE-2017-8633/): Privilege escalation in Microsoft Windows (high 7.5) - [CVE-2017-8632](https://insights.sbomify.com/CVE-2017-8632/): Memory corruption in Microsoft Office (high 7.8) - [CVE-2017-8631](https://insights.sbomify.com/CVE-2017-8631/): Memory corruption in Microsoft Office (high 7.8) - [CVE-2017-8630](https://insights.sbomify.com/CVE-2017-8630/): Memory corruption in Microsoft Office (high 7.8) - [CVE-2017-8629](https://insights.sbomify.com/CVE-2017-8629/): Cross-site scripting in Microsoft SharePoint Server (medium 5.4) - [CVE-2017-8628](https://insights.sbomify.com/CVE-2017-8628/): Other in Microsoft Bluetooth Driver (medium 6.8) - [CVE-2017-8627](https://insights.sbomify.com/CVE-2017-8627/): Denial of service in Windows Subsystem for Linux (medium 4.7) - [CVE-2017-8625](https://insights.sbomify.com/CVE-2017-8625/): Security feature bypass in Internet Explorer (high 8.8) - [CVE-2017-8624](https://insights.sbomify.com/CVE-2017-8624/): Privilege escalation in Common Log File System Driver (high 7.8) - [CVE-2017-8623](https://insights.sbomify.com/CVE-2017-8623/): Denial of service in Windows Hyper-V (medium 6.8) - [CVE-2017-8622](https://insights.sbomify.com/CVE-2017-8622/): Privilege escalation in Windows Subsystem for Linux (high 7.8) - [CVE-2017-8621](https://insights.sbomify.com/CVE-2017-8621/): Open redirect in Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5. (medium 6.1) - [CVE-2017-8620](https://insights.sbomify.com/CVE-2017-8620/): Memory corruption in Microsoft Windows Search Component (high 8.1) - [CVE-2017-8619](https://insights.sbomify.com/CVE-2017-8619/): Memory corruption in Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 (high 7.5) - [CVE-2017-8618](https://insights.sbomify.com/CVE-2017-8618/): Memory corruption in Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 (high 7.5) - [CVE-2017-8617](https://insights.sbomify.com/CVE-2017-8617/): Memory corruption in Windows 10 1703 (high 7.5) - [CVE-2017-8613](https://insights.sbomify.com/CVE-2017-8613/): Privilege escalation in Azure AD Connect (high 8.1) - [CVE-2017-8611](https://insights.sbomify.com/CVE-2017-8611/): Other in Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 (medium 6.5) - [CVE-2017-8610](https://insights.sbomify.com/CVE-2017-8610/): Memory corruption in Windows 10 1703 (high 7.5) - [CVE-2017-8609](https://insights.sbomify.com/CVE-2017-8609/): Memory corruption in Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 (high 7.5) - [CVE-2017-8608](https://insights.sbomify.com/CVE-2017-8608/): Memory corruption in Microsoft Windows Server 2008 and R2, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016. (high 7.5) - [CVE-2017-8607](https://insights.sbomify.com/CVE-2017-8607/): Memory corruption in Windows 7, Windows Server 2008 and R2, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 (high 7.5) - [CVE-2017-8606](https://insights.sbomify.com/CVE-2017-8606/): Memory corruption in Microsoft Windows 7, Windows Server 2008 and R2, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 (high 7.5) - [CVE-2017-8605](https://insights.sbomify.com/CVE-2017-8605/): Memory corruption in Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 (high 7.5) - [CVE-2017-8604](https://insights.sbomify.com/CVE-2017-8604/): Memory corruption in Windows 10 1511, 1607, and 1703, and Windows Server 2016 (high 7.5) - [CVE-2017-8603](https://insights.sbomify.com/CVE-2017-8603/): Memory corruption in Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 (high 7.5) - [CVE-2017-8602](https://insights.sbomify.com/CVE-2017-8602/): Other in Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 (medium 6.5) - [CVE-2017-8601](https://insights.sbomify.com/CVE-2017-8601/): Memory corruption in Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 (high 7.5) - [CVE-2017-8599](https://insights.sbomify.com/CVE-2017-8599/): Security feature bypass in Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 (medium 6.5) - [CVE-2017-8598](https://insights.sbomify.com/CVE-2017-8598/): Memory corruption in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 (high 7.5) - [CVE-2017-8597](https://insights.sbomify.com/CVE-2017-8597/): Information disclosure in Microsoft Edge (medium 4.3) - [CVE-2017-8596](https://insights.sbomify.com/CVE-2017-8596/): Memory corruption in Windows 10 1607, and 1703, and Windows Server 2016 (high 7.5) - [CVE-2017-8595](https://insights.sbomify.com/CVE-2017-8595/): Memory corruption in Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 (high 7.5) - [CVE-2017-8594](https://insights.sbomify.com/CVE-2017-8594/): Internet Explorer on Microsoft Windows 8.1 and Windows RT 8.1, and Windows Server 2012 R2 allows an attacker to execute arbitrary code in th (high 7.5) - [CVE-2017-8593](https://insights.sbomify.com/CVE-2017-8593/): Privilege escalation in Windows Kernel-Mode Drivers (high 7.0) - [CVE-2017-8592](https://insights.sbomify.com/CVE-2017-8592/): Security feature bypass in Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, and Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 (medium 6.5) - [CVE-2017-8591](https://insights.sbomify.com/CVE-2017-8591/): Memory corruption in Windows Shell (high 7.8) - [CVE-2017-8590](https://insights.sbomify.com/CVE-2017-8590/): Privilege escalation in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016. (high 8.8) - [CVE-2017-8589](https://insights.sbomify.com/CVE-2017-8589/): Memory corruption in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016. (critical 9.8) - [CVE-2017-8588](https://insights.sbomify.com/CVE-2017-8588/): Memory corruption in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 (high 7.0) - [CVE-2017-8587](https://insights.sbomify.com/CVE-2017-8587/): Denial of service in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511 (medium 6.5) - [CVE-2017-8585](https://insights.sbomify.com/CVE-2017-8585/): Improper Input Validation in Microsoft.NETCore.App (high 7.5) - [CVE-2017-8584](https://insights.sbomify.com/CVE-2017-8584/): Memory corruption in Windows 10 1607 and Windows Server 2016 (high 7.5) - [CVE-2017-8582](https://insights.sbomify.com/CVE-2017-8582/): Information disclosure in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 (medium 5.9) - [CVE-2017-8581](https://insights.sbomify.com/CVE-2017-8581/): Privilege escalation in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 (high 7.0) - [CVE-2017-8580](https://insights.sbomify.com/CVE-2017-8580/): Privilege escalation in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 (high 7.0) - [CVE-2017-8579](https://insights.sbomify.com/CVE-2017-8579/): Privilege escalation in Microsoft Windows (high 7.0) - [CVE-2017-8578](https://insights.sbomify.com/CVE-2017-8578/): Privilege escalation in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 (high 7.8) - [CVE-2017-8577](https://insights.sbomify.com/CVE-2017-8577/): Privilege escalation in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 (high 7.0) - [CVE-2017-8576](https://insights.sbomify.com/CVE-2017-8576/): Privilege escalation in Microsoft Windows (high 7.0) - [CVE-2017-8575](https://insights.sbomify.com/CVE-2017-8575/): Information disclosure in Microsoft Windows (medium 5.5) - [CVE-2017-8574](https://insights.sbomify.com/CVE-2017-8574/): Privilege escalation in Microsoft Windows 10 1607, 1703, and Windows Server 2016 (high 7.0) - [CVE-2017-8573](https://insights.sbomify.com/CVE-2017-8573/): Privilege escalation in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 (high 7.0) - [CVE-2017-8572](https://insights.sbomify.com/CVE-2017-8572/): Information disclosure in Microsoft Office (medium 5.5) - [CVE-2017-8571](https://insights.sbomify.com/CVE-2017-8571/): Security feature bypass in Microsoft Office (high 7.8) - [CVE-2017-8570](https://insights.sbomify.com/CVE-2017-8570/): Microsoft Office Remote Code Execution (high 7.8, exploited in the wild) - [CVE-2017-8569](https://insights.sbomify.com/CVE-2017-8569/): Cross-site scripting in Microsoft SharePoint Enterprise Server 2016 (high 8.8) - [CVE-2017-8567](https://insights.sbomify.com/CVE-2017-8567/): Memory corruption in Microsoft Office (high 7.8) - [CVE-2017-8566](https://insights.sbomify.com/CVE-2017-8566/): Privilege escalation in Microsoft Windows 1607, 1703, and Windows Server 2016. (high 7.0) - [CVE-2017-8565](https://insights.sbomify.com/CVE-2017-8565/): Code injection in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 (high 8.1) - [CVE-2017-8564](https://insights.sbomify.com/CVE-2017-8564/): Information disclosure in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 (medium 5.5) - [CVE-2017-8563](https://insights.sbomify.com/CVE-2017-8563/): Privilege escalation in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016. (high 8.1) - [CVE-2017-8562](https://insights.sbomify.com/CVE-2017-8562/): Privilege escalation in Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703. (high 7.0) - [CVE-2017-8561](https://insights.sbomify.com/CVE-2017-8561/): Privilege escalation in Windows kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 (high 7.0) - [CVE-2017-8560](https://insights.sbomify.com/CVE-2017-8560/): Cross-site scripting in Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5. (medium 6.1) --- From sbomify Insights: https://insights.sbomify.com/years/2017/page/13/