# Vulnerabilities published in 2017


- [CVE-2017-8559](https://insights.sbomify.com/CVE-2017-8559/): Cross-site scripting in Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5. (medium 6.1)
- [CVE-2017-8558](https://insights.sbomify.com/CVE-2017-8558/): Memory corruption in Microsoft Malware Protection Engine (high 7.8)
- [CVE-2017-8557](https://insights.sbomify.com/CVE-2017-8557/): XML external entity in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 (medium 5.5)
- [CVE-2017-8556](https://insights.sbomify.com/CVE-2017-8556/): Privilege escalation in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 (high 7.0)
- [CVE-2017-8555](https://insights.sbomify.com/CVE-2017-8555/): Security feature bypass in Microsoft Edge (medium 4.3)
- [CVE-2017-8554](https://insights.sbomify.com/CVE-2017-8554/): Information disclosure in Microsof Windows (medium 4.7)
- [CVE-2017-8553](https://insights.sbomify.com/CVE-2017-8553/): Information disclosure in Windows kernel (medium 4.7)
- [CVE-2017-8552](https://insights.sbomify.com/CVE-2017-8552/): Privilege escalation in Microsoft Windows (high 7.8)
- [CVE-2017-8551](https://insights.sbomify.com/CVE-2017-8551/): Cross-site scripting in Microsoft SharePoint (medium 6.1)
- [CVE-2017-8550](https://insights.sbomify.com/CVE-2017-8550/): Cross-site scripting in Skype for Business (medium 5.4)
- [CVE-2017-8549](https://insights.sbomify.com/CVE-2017-8549/): Memory corruption in Microsoft Edge (high 7.5)
- [CVE-2017-8548](https://insights.sbomify.com/CVE-2017-8548/): Memory corruption in Microsoft Edge (high 7.5)
- [CVE-2017-8547](https://insights.sbomify.com/CVE-2017-8547/): Memory corruption in n/a (high 7.5)
- [CVE-2017-8545](https://insights.sbomify.com/CVE-2017-8545/): Cross-site scripting in Microsoft Outlook for Mac (medium 6.5)
- [CVE-2017-8544](https://insights.sbomify.com/CVE-2017-8544/): Information disclosure in Microsoft Windows (medium 5.5)
- [CVE-2017-8543](https://insights.sbomify.com/CVE-2017-8543/): Microsoft Windows Search Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2017-8542](https://insights.sbomify.com/CVE-2017-8542/): Denial of service in Malware Protection (medium 5.5)
- [CVE-2017-8541](https://insights.sbomify.com/CVE-2017-8541/): Memory corruption in Malware Protection Engine (high 7.8)
- [CVE-2017-8540](https://insights.sbomify.com/CVE-2017-8540/): Microsoft Malware Protection Engine Improper Restriction of Operations (high 7.8, exploited in the wild)
- [CVE-2017-8539](https://insights.sbomify.com/CVE-2017-8539/): Denial of service in Malware Protection Engine (medium 5.5)
- [CVE-2017-8538](https://insights.sbomify.com/CVE-2017-8538/): Memory corruption in Malware Protection Engine (high 7.8)
- [CVE-2017-8537](https://insights.sbomify.com/CVE-2017-8537/): Denial of service in Malware Protection Engine (medium 5.5)
- [CVE-2017-8536](https://insights.sbomify.com/CVE-2017-8536/): Denial of service in Malware Protection Engine (medium 5.5)
- [CVE-2017-8535](https://insights.sbomify.com/CVE-2017-8535/): Denial of service in Malware Protection Engine (medium 5.5)
- [CVE-2017-8534](https://insights.sbomify.com/CVE-2017-8534/): Information disclosure in Uniscribe (medium 6.5)
- [CVE-2017-8533](https://insights.sbomify.com/CVE-2017-8533/): Information disclosure in Graphics (medium 6.5)
- [CVE-2017-8532](https://insights.sbomify.com/CVE-2017-8532/): Information disclosure in Graphics (medium 6.5)
- [CVE-2017-8531](https://insights.sbomify.com/CVE-2017-8531/): Information disclosure in Graphics (medium 6.5)
- [CVE-2017-8530](https://insights.sbomify.com/CVE-2017-8530/): Security feature bypass in Microsoft Edge (medium 5.4)
- [CVE-2017-8529](https://insights.sbomify.com/CVE-2017-8529/): Information disclosure in Internet Explorer (medium 6.5)
- [CVE-2017-8528](https://insights.sbomify.com/CVE-2017-8528/): Memory corruption in Uniscribe (high 8.8)
- [CVE-2017-8527](https://insights.sbomify.com/CVE-2017-8527/): Memory corruption in Graphics (high 8.8)
- [CVE-2017-8524](https://insights.sbomify.com/CVE-2017-8524/): Memory corruption in Microsoft browsers (high 7.5)
- [CVE-2017-8523](https://insights.sbomify.com/CVE-2017-8523/): Security feature bypass in Microsoft Edge (medium 4.3)
- [CVE-2017-8522](https://insights.sbomify.com/CVE-2017-8522/): Memory corruption in Microsoft browsers (high 7.5)
- [CVE-2017-8521](https://insights.sbomify.com/CVE-2017-8521/): Memory corruption in Microsoft Edge (high 7.5)
- [CVE-2017-8520](https://insights.sbomify.com/CVE-2017-8520/): Memory corruption in Microsoft Edge (high 7.5)
- [CVE-2017-8519](https://insights.sbomify.com/CVE-2017-8519/): Memory corruption in Internet Explorer (high 7.5)
- [CVE-2017-8518](https://insights.sbomify.com/CVE-2017-8518/): Memory corruption in Microsoft Edge (high 7.5)
- [CVE-2017-8517](https://insights.sbomify.com/CVE-2017-8517/): Memory corruption in Microsoft browsers (high 7.5)
- [CVE-2017-8516](https://insights.sbomify.com/CVE-2017-8516/): Information disclosure in SQL Server (high 7.5)
- [CVE-2017-8515](https://insights.sbomify.com/CVE-2017-8515/): Denial of service in Microsoft Windows (medium 5.5)
- [CVE-2017-8514](https://insights.sbomify.com/CVE-2017-8514/): Cross-site scripting in Microsoft SharePoint (medium 5.4)
- [CVE-2017-8513](https://insights.sbomify.com/CVE-2017-8513/): Memory corruption in Microsoft PowerPoint (high 7.8)
- [CVE-2017-8512](https://insights.sbomify.com/CVE-2017-8512/): Memory corruption in Microsoft Office (high 8.8)
- [CVE-2017-8511](https://insights.sbomify.com/CVE-2017-8511/): Memory corruption in Microsoft Office (high 7.8)
- [CVE-2017-8510](https://insights.sbomify.com/CVE-2017-8510/): Memory corruption in Microsoft Office (high 8.8)
- [CVE-2017-8509](https://insights.sbomify.com/CVE-2017-8509/): Memory corruption in Microsoft Office (high 8.8)
- [CVE-2017-8508](https://insights.sbomify.com/CVE-2017-8508/): Security feature bypass in Microsoft Office (medium 5.5)
- [CVE-2017-8507](https://insights.sbomify.com/CVE-2017-8507/): Memory corruption in Microsoft Office (high 7.8)
- [CVE-2017-8506](https://insights.sbomify.com/CVE-2017-8506/): Memory corruption in Microsoft Office (high 7.8)
- [CVE-2017-8504](https://insights.sbomify.com/CVE-2017-8504/): Information disclosure in Microsoft Edge (medium 4.3)
- [CVE-2017-8503](https://insights.sbomify.com/CVE-2017-8503/): Privilege escalation in Microsoft Edge (high 8.8)
- [CVE-2017-8502](https://insights.sbomify.com/CVE-2017-8502/): Memory corruption in Microsoft Excel 2010 SP2, Microsoft Excel 2013 SP1, and Microsoft Excel 2016. (high 7.8)
- [CVE-2017-8501](https://insights.sbomify.com/CVE-2017-8501/): Memory corruption in Microsoft Office 2007 SP3, Microsoft Excel Viewer 2007 SP3, Microsoft Office 2010 SP2, Excel Services on Microsoft SharePoint Server 2010 SP1, Microsoft Office for Mac 2011, Microsoft Excel 2013 SP1, Microsoft Excel 2013 RT SP1, Microsoft SharePoint Enterprise Server 2013, Microsoft Excel 2016, Microsoft Office 2016 for Mac, Microsoft Office Online Server 2016, and Microsoft Office Compatibility Pack SP3. (high 7.8)
- [CVE-2017-8499](https://insights.sbomify.com/CVE-2017-8499/): Memory corruption in Microsoft Edge (high 7.5)
- [CVE-2017-8498](https://insights.sbomify.com/CVE-2017-8498/): Information disclosure in Microsoft Edge (medium 4.3)
- [CVE-2017-8497](https://insights.sbomify.com/CVE-2017-8497/): Memory corruption in Microsoft Edge (high 7.5)
- [CVE-2017-8496](https://insights.sbomify.com/CVE-2017-8496/): Memory corruption in Microsoft Edge (high 7.5)
- [CVE-2017-8495](https://insights.sbomify.com/CVE-2017-8495/): Security feature bypass in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016. (high 7.5)
- [CVE-2017-8494](https://insights.sbomify.com/CVE-2017-8494/): Privilege escalation in Microsoft Windows (high 7.3)
- [CVE-2017-8493](https://insights.sbomify.com/CVE-2017-8493/): Security feature bypass in Microsoft Windows (medium 5.5)
- [CVE-2017-8492](https://insights.sbomify.com/CVE-2017-8492/): Information disclosure in Microsoft Windows (medium 5.0)
- [CVE-2017-8491](https://insights.sbomify.com/CVE-2017-8491/): Information disclosure in Microsoft Windows (medium 5.0)
- [CVE-2017-8490](https://insights.sbomify.com/CVE-2017-8490/): Information disclosure in Microsoft Windows (medium 5.0)
- [CVE-2017-8489](https://insights.sbomify.com/CVE-2017-8489/): Information disclosure in Microsoft Windows (medium 5.0)
- [CVE-2017-8488](https://insights.sbomify.com/CVE-2017-8488/): Information disclosure in Microsoft Windows (medium 5.0)
- [CVE-2017-8487](https://insights.sbomify.com/CVE-2017-8487/): Code injection in Microsoft Windows (high 7.8)
- [CVE-2017-8486](https://insights.sbomify.com/CVE-2017-8486/): Information disclosure in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016. (medium 4.7)
- [CVE-2017-8485](https://insights.sbomify.com/CVE-2017-8485/): Information disclosure in Microsoft Windows (medium 5.0)
- [CVE-2017-8484](https://insights.sbomify.com/CVE-2017-8484/): Information disclosure in Microsoft Windows (medium 5.0)
- [CVE-2017-8483](https://insights.sbomify.com/CVE-2017-8483/): Information disclosure in Microsoft Windows (medium 5.0)
- [CVE-2017-8482](https://insights.sbomify.com/CVE-2017-8482/): Information disclosure in Microsoft Windows (medium 5.0)
- [CVE-2017-8481](https://insights.sbomify.com/CVE-2017-8481/): Information disclosure in Microsoft Windows (medium 5.0)
- [CVE-2017-8480](https://insights.sbomify.com/CVE-2017-8480/): Information disclosure in Microsoft Windows (medium 5.0)
- [CVE-2017-8479](https://insights.sbomify.com/CVE-2017-8479/): Information disclosure in Microsoft Windows (medium 5.0)
- [CVE-2017-8478](https://insights.sbomify.com/CVE-2017-8478/): Information disclosure in Microsoft Windows (medium 5.0)
- [CVE-2017-8477](https://insights.sbomify.com/CVE-2017-8477/): Information disclosure in Microsoft Windows (medium 5.0)
- [CVE-2017-8476](https://insights.sbomify.com/CVE-2017-8476/): Information disclosure in Microsoft Windows (medium 5.0)
- [CVE-2017-8475](https://insights.sbomify.com/CVE-2017-8475/): Information disclosure in Microsoft Windows (medium 5.0)
- [CVE-2017-8474](https://insights.sbomify.com/CVE-2017-8474/): Information disclosure in Microsoft Windows (medium 5.0)
- [CVE-2017-8473](https://insights.sbomify.com/CVE-2017-8473/): Information disclosure in Microsoft Windows (medium 5.0)
- [CVE-2017-8472](https://insights.sbomify.com/CVE-2017-8472/): Information disclosure in Microsoft Windows (medium 5.0)
- [CVE-2017-8471](https://insights.sbomify.com/CVE-2017-8471/): Information disclosure in Microsoft Windows (medium 5.0)
- [CVE-2017-8470](https://insights.sbomify.com/CVE-2017-8470/): Information disclosure in Microsoft Windows (medium 5.0)
- [CVE-2017-8469](https://insights.sbomify.com/CVE-2017-8469/): Information disclosure in Microsoft Windows (medium 5.5)
- [CVE-2017-8468](https://insights.sbomify.com/CVE-2017-8468/): Privilege escalation in Microsoft Windows (high 7.8)
- [CVE-2017-8467](https://insights.sbomify.com/CVE-2017-8467/): Privilege escalation in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016. (high 7.0)
- [CVE-2017-8466](https://insights.sbomify.com/CVE-2017-8466/): Privilege escalation in Windows Cursor (high 7.8)
- [CVE-2017-8465](https://insights.sbomify.com/CVE-2017-8465/): Privilege escalation in Microsoft Windows (high 7.8)
- [CVE-2017-8464](https://insights.sbomify.com/CVE-2017-8464/): Microsoft Windows Shell (.lnk) Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2017-8463](https://insights.sbomify.com/CVE-2017-8463/): Code injection in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 (high 7.8)
- [CVE-2017-8462](https://insights.sbomify.com/CVE-2017-8462/): Information disclosure in Microsoft Windows (medium 5.0)
- [CVE-2017-8461](https://insights.sbomify.com/CVE-2017-8461/): Code injection in Microsoft Windows (high 7.8)
- [CVE-2017-8460](https://insights.sbomify.com/CVE-2017-8460/): Information disclosure in Windows PDF (high 7.3)
- [CVE-2017-8459](https://insights.sbomify.com/CVE-2017-8459/): Other in n/a (medium 5.3)
- [CVE-2017-8458](https://insights.sbomify.com/CVE-2017-8458/): Other in n/a (medium 6.5)
- [CVE-2017-8455](https://insights.sbomify.com/CVE-2017-8455/): Memory corruption in n/a (high 7.8)
- [CVE-2017-8454](https://insights.sbomify.com/CVE-2017-8454/): Memory corruption in n/a (high 8.8)
- [CVE-2017-8453](https://insights.sbomify.com/CVE-2017-8453/): Memory corruption in n/a (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/14/