windows

日期	标题	类别	作者
2017-09-21	Microsoft Edge Chakra – ‘Parser::ParseCatch’ Does Not Handle ‘eval()’ (Denial of Service)	dos	Google Security Research
2017-09-21	Microsoft Edge Chakra – Deferred Parsing Makes Wrong Scopes	dos	Google Security Research
2017-09-21	Microsoft Edge – Chakra Incorrectly Parses Object Patterns	dos	Google Security Research
2017-09-20	Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution (1)	webapps	xxlegend
2017-09-19	Microsoft Edge 38.14393.1066.0 – ‘COptionsCollectionCacheItem::GetAt’ Out-of-Bounds Read	dos	Google Security Research
2017-09-19	Microsoft Edge 38.14393.1066.0 – Memory Corruption with Partial Page Loading	dos	Google Security Research
2017-09-18	Microsoft Windows Kernel – ‘nt!NtSetIoCompletion / nt!NtRemoveIoCompletion’ Pool Memory Disclosure	dos	Google Security Research
2017-09-18	Microsoft Windows Kernel – ‘win32k!NtGdiGetPhysicalMonitorDescription’ Stack Memory Disclosure	dos	Google Security Research
2017-09-18	Microsoft Windows Kernel – ‘win32k!NtGdiGetGlyphOutline’ Pool Memory Disclosure	dos	Google Security Research
2017-09-18	Microsoft Windows Kernel – ‘win32k!NtQueryCompositionSurfaceBinding’ Stack Memory Disclosure	dos	Google Security Research
2017-09-18	Microsoft Windows Kernel – ‘win32k!NtGdiDoBanding’ Stack Memory Disclosure	dos	Google Security Research
2017-09-18	Microsoft Windows Kernel – ‘win32k!NtGdiEngCreatePalette’ Stack Memory Disclosure	dos	Google Security Research
2017-09-18	Microsoft Windows Kernel – ‘win32k!NtGdiGetFontResourceInfoInternalW’ Stack Memory Disclosure	dos	Google Security Research
2017-09-18	Microsoft Windows Kernel – ‘win32k.sys’ ‘.TTF’ Font Processing Out-of-Bounds Read with Malformed ‘glyf’ Table ‘win32k!fsc_CalcGrayRow’ (Denial of Service)	dos	Google Security Research
2017-09-18	Microsoft Windows Kernel – ‘win32k.sys’ ‘.TTF’ Font Processing Out-of-Bounds Reads/Writes with Malformed ‘fpgm’ table ‘win32k!bGeneratePath’ (Denial of Service)	dos	Google Security Research
2017-09-16	Netdecision 5.8.2 – Local Privilege Escalation	local	Peter Baris
2017-09-14	Cloudview NMS 2.00b – Writable Directory Traversal Execution (Metasploit)	remote	James Fitts
2017-09-14	haneWIN DNS Server 1.5.3 – Remote Buffer Overflow (Metasploit)	remote	James Fitts
2017-09-14	KingScada AlarmServer 3.1.2.13 – Remote Stack Buffer Overflow (Metasploit)	remote	James Fitts
2017-09-14	Lockstep Backup for Workgroups 4.0.3 – Remote Buffer Overflow (Metasploit)	remote	James Fitts
2017-09-14	EMC AlphaStor Device Manager – Opcode 0x72 Buffer Overflow (Metasploit)	remote	James Fitts
2017-09-14	EMC AlphaStor Library Manager < 4.0 build 910 - Opcode 0x4f Buffer Overflow (Metasploit)	remote	James Fitts
2017-09-13	Dameware Mini Remote Control 4.0 – Username Stack Buffer Overflow (Metasploit)	remote	James Fitts
2017-09-13	Fatek Automation PLC WinProladder 3.11 Build 14701 – Stack Buffer Overflow (Metasploit)	remote	James Fitts