A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0226.

The Internet Explorer installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities :

  - A remote code execution vulnerability exists in the way     Microsoft Edge handles objects in memory. The     vulnerability could corrupt memory in such a way that an     attacker could execute arbitrary code in the context of     the current user. An attacker who successfully exploited     the vulnerability could gain the same user rights as the     current user.  (CVE-2017-0238)

  - A remote code execution vulnerability exists when     Internet Explorer improperly accesses objects in memory.
    This vulnerability could corrupt memory in such a way     that an attacker could execute arbitrary code in the     context of the current user.  (CVE-2017-0226)

  - A spoofing vulnerability exists when Microsoft browsers     render SmartScreen Filter. An attacker who successfully     exploited this vulnerability could trick a user by     redirecting the user to a specially crafted website. The     specially crafted website could then either spoof     content or serve as a pivot to chain an attack with     other vulnerabilities in web services.  (CVE-2017-0231)

  - A remote code execution vulnerability exists when     Internet Explorer improperly accesses objects in memory.
    The vulnerability could corrupt memory in such a way     that an attacker could execute arbitrary code in the     context of the current user. An attacker who     successfully exploited the vulnerability could gain the     same user rights as the current user.  (CVE-2017-0222)

  - A security feature bypass vulnerability exists in     Internet Explorer that allows for bypassing Mixed     Content warnings. This could allow for the loading of     unsecure content (HTTP) from secure locations (HTTPS).
    (CVE-2017-0064)

The remote Windows host is missing a security update. It is, therefore, affected by one or more of the following vulnerabilities :

  - A remote code execution vulnerability exists in how the     Remote Desktop Protocol (RDP) handles requests if the     RDP server has Smart Card authentication enabled. An     authenticated, remote attacker can exploit this, via a     specially crafted application, to execute arbitrary code     with full user privileges. (CVE-2017-0176)

  - A remote code execution vulnerability exists in     Microsoft Internet Explorer due to improper handling of     objects in memory. An unauthenticated, remote attacker     can exploit this, by convincing a user to visit a     specially crafted website, to execute arbitrary code in     the context of the current user. (CVE-2017-0222)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0267)

  - A buffer overflow condition exists in the IIS WebDAV     service due to improper handling of the 'If' header in a     PROPFIND request. An unauthenticated, remote attacker     can exploit this, via a specially crafted request, to     cause a denial of service condition or the execution of     arbitrary code. This vulnerability, also known as     EXPLODINGCAN, is one of multiple Equation Group     vulnerabilities and exploits disclosed on 2017/04/14 by     a group known as the Shadow Brokers. (CVE-2017-7269)

  - A remote code execution vulnerability exists in how the     Remote Desktop Protocol (RDP) handles requests if the     RDP server has Routing and Remote Access enabled. An     authenticated, remote attacker can exploit this, via a     specially crafted application, to execute arbitrary code     with full user privileges. (CVE-2017-8461)

  - A remote code execution vulnerability exists in Windows     OLE, specifically in olecnv32.dll, due to improper     validation of user-supplied input. An unauthenticated,     remote attacker can exploit this, by convincing a user     to visit a specially crafted website or to open a     specially crafted file or email, to execute arbitrary     code in the context of the current user. (CVE-2017-8487)

  - A remote code execution vulnerability exists in the     Windows Search functionality due to improper handling of     objects in memory. An unauthenticated, remote attacker     can exploit this, via a specially crafted SMB message,     to execute arbitrary code. (CVE-2017-8543)

  - An information disclosure vulnerability exists in the     GDI component due to improper handling of objects in     memory. An unauthenticated, remote attacker can exploit     this, by convincing a user to open a specially crafted     document or visit a specially crafted website, to     disclose the contents of memory. (CVE-2017-8552)

The remote Windows 8 host is missing a security update. It is, therefore, affected by the following vulnerabilities :

  - A remote code execution vulnerability exists in     Microsoft Internet Explorer due to improper handling of     objects in memory. An unauthenticated, remote attacker     can exploit this, by convincing a user to visit a     specially crafted website, to execute arbitrary code in     the context of the current user. (CVE-2017-0222)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0267)

  - A remote code execution vulnerability exists in Windows     due to improper handling of shortcuts. An     unauthenticated, remote attacker can exploit this, by     convincing a user to insert a removable drive containing     a malicious shortcut and binary, to automatically     execute arbitrary code in the context of the current     user. (CVE-2017-8464)

  - A remote code execution vulnerability exists in Windows     OLE due to improper validation of user-supplied input.
    An unauthenticated, remote attacker can exploit this, by     convincing a user to visit a specially crafted website or     to open a specially crafted file or email message, to     execute arbitrary code in the context of the current     user. (CVE-2017-8487)

  - A remote code execution vulnerability exists in the     Windows Search functionality due to improper handling of     objects in memory. An unauthenticated, remote attacker     can exploit this, via a specially crafted SMB message,     to execute arbitrary code. (CVE-2017-8543)

The remote Windows Vista host is missing a security update. It is, therefore, affected by the following vulnerabilities :

  - A remote code execution vulnerability exists in     Microsoft Internet Explorer due to improper handling of     objects in memory. An unauthenticated, remote attacker     can exploit this, by convincing a user to visit a     specially crafted website, to execute arbitrary code in     the context of the current user. (CVE-2017-0222)

  - Multiple information disclosure vulnerabilities exist in     the Microsoft Server Message Block 1.0 (SMBv1) server     when handling certain requests. An unauthenticated,     remote attacker can exploit these, via a specially     crafted packet, to disclose sensitive information.
    (CVE-2017-0267, CVE-2017-0268, CVE-2017-0270,     CVE-2017-0271, CVE-2017-0274, CVE-2017-0275,     CVE-2017-0276)

  - Multiple denial of service vulnerabilities exist in     Microsoft Server Message Block (SMB) when handling a     specially crafted request to the server. An     unauthenticated, remote attacker can exploit these, via     a crafted SMB request, to cause the system to stop     responding. (CVE-2017-0269, CVE-2017-0273,     CVE-2017-0280)

  - Multiple remote code execution vulnerabilities exist in     the Microsoft Server Message Block 1.0 (SMBv1) server     when handling certain requests. An unauthenticated,     remote attacker can exploit these, via a specially     crafted packet, to execute arbitrary code on a target     server. (CVE-2017-0272, CVE-2017-0277, CVE-2017-0278,     CVE-2017-0279)

  - A remote code execution vulnerability exists in Windows     due to improper handling of shortcuts. An     unauthenticated, remote attacker can exploit this, by     convincing a user to insert a removable drive containing     a malicious shortcut and binary, to automatically     execute arbitrary code in the context of the current     user. (CVE-2017-8464)

  - A remote code execution vulnerability exists in the     Windows Search functionality due to improper handling of     objects in memory. An unauthenticated, remote attacker     can exploit this, via a specially crafted SMB message,     to execute arbitrary code. (CVE-2017-8543)

  - An information disclosure vulnerability exists in the     GDI component due to improper handling of objects in     memory. An unauthenticated, remote attacker can exploit     this, by convincing a user to open a specially crafted     document or visit a specially crafted website, to     disclose the contents of memory. (CVE-2017-8552)

The remote Windows 10 version 1507 host is missing security update KB4019474. It is, therefore, affected by multiple vulnerabilities :

  - A security bypass vulnerability exists in Internet     Explorer due to an unspecified flaw. An unauthenticated,     remote attacker can exploit this, by convincing a user     to visit a specially crafted website, to bypass mixed     content warnings and load insecure content (HTTP) from     secure locations (HTTPS). (CVE-2017-0064)

  - An elevation of privilege vulnerability exists in     Windows in the Microsoft DirectX graphics kernel     subsystem (dxgkrnl.sys) due to improper handling of     objects in memory. A local attacker can exploit this,     via a specially crafted application, to execute     arbitrary code in an elevated context. (CVE-2017-0077)

  - An information disclosure vulnerability exists in the     Windows Graphics Device Interface (GDI) due to improper     handling of objects in memory. A local attacker can     exploit this, via a specially crafted application, to     disclose sensitive information. (CVE-2017-0190)

  - An elevation of privilege vulnerability exists in     Windows Hyper-V due to improper validation of vSMB     packet data. An unauthenticated, adjacent attacker can     exploit this to gain elevated privileges.
    (CVE-2017-0212)

  - An elevation of privilege vulnerability exists in the     Windows COM Aggregate Marshaler due to an unspecified     flaw. A local attacker can exploit this, via a specially     crafted application, to execute arbitrary code with     elevated privileges. (CVE-2017-0213)

  - An elevation of privilege vulnerability exists in     Windows due to improper validation of user-supplied     input when loading type libraries. A local attacker can     exploit this, via a specially crafted application, to     gain elevated privileges. (CVE-2017-0214)

  - A remote code execution vulnerability exists in     Microsoft Internet Explorer due to improper handling of     objects in memory. An unauthenticated, remote attacker     can exploit this, by convincing a user to visit a     specially crafted website, to execute arbitrary code in     the context of the current user. (CVE-2017-0222)

  - A remote code execution vulnerability exists in     Microsoft Internet Explorer due to improper handling of     objects in memory. An unauthenticated, remote attacker     can exploit this, by convincing a user to visit a     specially crafted website, to execute arbitrary code in     the context of the current user. (CVE-2017-0226)

  - A remote code execution vulnerability exists in     Microsoft Edge in the scripting engines due to improper     handling of objects in memory. An unauthenticated,     remote attacker can exploit this, by convincing a user     to visit a specially crafted website or open a specially     crafted Microsoft Office document, to execute arbitrary     code in the context of the current user. (CVE-2017-0227)

  - A remote code execution vulnerability exists in     Microsoft browsers in the JavaScript engines due to     improper handling of objects in memory. An     unauthenticated, remote attacker can exploit this, by     convincing a user to visit a specially crafted website     or open a specially crafted Microsoft Office document,     to execute arbitrary code in the context of the current     user. (CVE-2017-0228)

  - A remote code execution vulnerability exists in     Microsoft browsers in the JavaScript engines due to     improper handling of objects in memory. An     unauthenticated, remote attacker can exploit this, by     convincing a user to visit a specially crafted website     or open a specially crafted Microsoft Office document,     to execute arbitrary code in the context of the current     user. (CVE-2017-0229)

  - A spoofing vulnerability exists in Microsoft browsers     due to improper rendering of the SmartScreen filter. An     unauthenticated, remote attacker can exploit this, via a     specially crafted URL, to redirect users to a malicious     website that appears to be a legitimate website.
    (CVE-2017-0231)

  - An elevation of privilege vulnerability exists in     Microsoft Edge due to improper sandboxing. An     unauthenticated, remote attacker can exploit this to     break out of the Edge AppContainer sandbox and gain     elevated privileges. (CVE-2017-0233)

  - A remote code execution vulnerability exists in     Microsoft Edge in the Chakra JavaScript engine due to     improper handling of objects in memory. An     unauthenticated, remote attacker can exploit this, by     convincing a user to visit a specially crafted website     or open a specially crafted Microsoft Office document,     to execute arbitrary code in the context of the current     user. (CVE-2017-0234)

  - A remote code execution vulnerability exists in     Microsoft Edge in the Chakra JavaScript engine due to     improper handling of objects in memory. An     unauthenticated, remote attacker can exploit this, by     convincing a user to visit a specially crafted website     or open a specially crafted Office document, to     execute arbitrary code in the context of the current     user. (CVE-2017-0236)

  - A remote code execution vulnerability exists in     Microsoft browsers in the JavaScript scripting engines     due to improper handling of objects in memory. An     unauthenticated, remote attacker can exploit this, by     convincing a user to visit a specially crafted website     or open a specially crafted Office document, to     execute arbitrary code in the context of the current     user. (CVE-2017-0238)

  - A remote code execution vulnerability exists in     Microsoft Edge in the scripting engines due to improper     handling of objects in memory. An unauthenticated,     remote attacker can exploit this, by convincing a user     to visit a specially crafted website or to open a     specially crafted Office document, to execute arbitrary     code in the context of the current user. (CVE-2017-0240)

  - An elevation of privilege vulnerability exists in     Microsoft Edge due to improper rendering of a     domain-less page in the URL. An unauthenticated, remote     attacker can exploit this, by convincing a user to visit     a specially crafted website, to cause the user to     perform actions in the context of the Intranet Zone and     access functionality that is not typically available to     the browser when browsing in the context of the Internet     Zone. (CVE-2017-0241)

  - An elevation of privilege vulnerability exists in the     win32k component due to improper handling of objects in     memory. A local attacker can exploit this, via a     specially crafted application, to execute arbitrary code     with elevated permissions. Note that an attacker can     also cause a denial of service condition on Windows 7     x64 or later systems. (CVE-2017-0246)

  - A security bypass vulnerability exists in the Microsoft     .NET Framework and .NET Core components due to a failure     to completely validate certificates. An attacker can     exploit this to present a certificate that is marked     invalid for a specific use, but the component uses it     for that purpose, resulting in a bypass of the Enhanced     Key Usage taggings. (CVE-2017-0248)

  - An information disclosure vulnerability exists in the     Windows kernel due to improper initialization of objects     in memory. A local attacker can exploit this, via a     specially crafted application, to disclose sensitive     information. (CVE-2017-0258)

  - An information disclosure vulnerability exists in the     Windows kernel due to improper initialization of objects     in memory. A local attacker can exploit this, via a     specially crafted application, to disclose sensitive     information. (CVE-2017-0259)

  - An elevation of privilege vulnerability exists in the     Windows kernel-mode driver due to improper handling of     objects in memory. A local attacker can exploit this,     via a specially crafted application, to run arbitrary     code in kernel mode. (CVE-2017-0263)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0267)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0268)

  - A denial of service vulnerability exists in Microsoft     Server Message Block (SMB) when handling a specially     crafted request to the server. An unauthenticated,     remote attacker can exploit this, via a crafted SMB     request, to cause the system to stop responding.
    (CVE-2017-0269)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0270)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0271)

  - A remote code execution vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to execute arbitrary code on a target server.
    (CVE-2017-0272)

  - A denial of service vulnerability exists in Microsoft     Server Message Block (SMB) when handling a specially     crafted request to the server. An unauthenticated,     remote attacker can exploit this, via a crafted SMB     request, to cause the system to stop responding.
    (CVE-2017-0273)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0274)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0275)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0276)

  - A remote code execution vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to execute arbitrary code on a target server.
    (CVE-2017-0277)

  - A remote code execution vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to execute arbitrary code on a target server.
    (CVE-2017-0278)

  - A remote code execution vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to execute arbitrary code on a target server.
    (CVE-2017-0279)

  - A denial of service vulnerability exists in Microsoft     Server Message Block (SMB) when handling a specially     crafted request to the server. An unauthenticated,     remote attacker can exploit this, via a crafted SMB     request, to cause the system to stop responding.
    (CVE-2017-0280)

The remote Windows 10 version 1511 host is missing security update KB4019473. It is, therefore, affected by multiple vulnerabilities :

  - A security bypass vulnerability exists in Internet     Explorer due to an unspecified flaw. An unauthenticated,     remote attacker can exploit this, by convincing a user     to visit a specially crafted website, to bypass mixed     content warnings and load insecure content (HTTP) from     secure locations (HTTPS). (CVE-2017-0064)

  - An elevation of privilege vulnerability exists in     Windows in the Microsoft DirectX graphics kernel     subsystem (dxgkrnl.sys) due to improper handling of     objects in memory. A local attacker can exploit this,     via a specially crafted application, to execute     arbitrary code in an elevated context. (CVE-2017-0077)

  - An information disclosure vulnerability exists in the     Windows Graphics Device Interface (GDI) due to improper     handling of objects in memory. A local attacker can     exploit this, via a specially crafted application, to     disclose sensitive information. (CVE-2017-0190)

  - An elevation of privilege vulnerability exists in     Windows Hyper-V due to improper validation of vSMB     packet data. An unauthenticated, adjacent attacker can     exploit this to gain elevated privileges.
    (CVE-2017-0212)

  - An elevation of privilege vulnerability exists in the     Windows COM Aggregate Marshaler due to an unspecified     flaw. A local attacker can exploit this, via a specially     crafted application, to execute arbitrary code with     elevated privileges. (CVE-2017-0213)

  - An elevation of privilege vulnerability exists in     Windows due to improper validation of user-supplied     input when loading type libraries. A local attacker can     exploit this, via a specially crafted application, to     gain elevated privileges. (CVE-2017-0214)

  - A remote code execution vulnerability exists in     Microsoft Internet Explorer due to improper handling of     objects in memory. An unauthenticated, remote attacker     can exploit this, by convincing a user to visit a     specially crafted website, to execute arbitrary code in     the context of the current user. (CVE-2017-0222)

  - A remote code execution vulnerability exists in     Microsoft Internet Explorer due to improper handling of     objects in memory. An unauthenticated, remote attacker     can exploit this, by convincing a user to visit a     specially crafted website, to execute arbitrary code in     the context of the current user. (CVE-2017-0226)

  - A remote code execution vulnerability exists in     Microsoft Edge in the scripting engines due to improper     handling of objects in memory. An unauthenticated,     remote attacker can exploit this, by convincing a user     to visit a specially crafted website or open a specially     crafted Microsoft Office document, to execute arbitrary     code in the context of the current user. (CVE-2017-0227)

  - A remote code execution vulnerability exists in     Microsoft browsers in the JavaScript engines due to     improper handling of objects in memory. An     unauthenticated, remote attacker can exploit this, by     convincing a user to visit a specially crafted website     or open a specially crafted Microsoft Office document,     to execute arbitrary code in the context of the current     user. (CVE-2017-0228)

  - A remote code execution vulnerability exists in     Microsoft browsers in the JavaScript engines due to     improper handling of objects in memory. An     unauthenticated, remote attacker can exploit this, by     convincing a user to visit a specially crafted website     or open a specially crafted Microsoft Office document,     to execute arbitrary code in the context of the current     user. (CVE-2017-0229)

  - A spoofing vulnerability exists in Microsoft browsers     due to improper rendering of the SmartScreen filter. An     unauthenticated, remote attacker can exploit this, via a     specially crafted URL, to redirect users to a malicious     website that appears to be a legitimate website.
    (CVE-2017-0231)

  - An elevation of privilege vulnerability exists in     Microsoft Edge due to improper sandboxing. An     unauthenticated, remote attacker can exploit this to     break out of the Edge AppContainer sandbox and gain     elevated privileges. (CVE-2017-0233)

  - A remote code execution vulnerability exists in     Microsoft Edge in the Chakra JavaScript engine due to     improper handling of objects in memory. An     unauthenticated, remote attacker can exploit this, by     convincing a user to visit a specially crafted website     or open a specially crafted Microsoft Office document,     to execute arbitrary code in the context of the current     user. (CVE-2017-0234)

  - A remote code execution vulnerability exists in     Microsoft Edge in the Chakra JavaScript engine due to     improper handling of objects in memory. An     unauthenticated, remote attacker can exploit this, by     convincing a user to visit a specially crafted website     or open a specially crafted Office document, to     execute arbitrary code in the context of the current     user. (CVE-2017-0236)

  - A remote code execution vulnerability exists in     Microsoft browsers in the JavaScript scripting engines     due to improper handling of objects in memory. An     unauthenticated, remote attacker can exploit this, by     convincing a user to visit a specially crafted website     or open a specially crafted Office document, to     execute arbitrary code in the context of the current     user. (CVE-2017-0238)

  - A remote code execution vulnerability exists in     Microsoft Edge in the scripting engines due to improper     handling of objects in memory. An unauthenticated,     remote attacker can exploit this, by convincing a user     to visit a specially crafted website or to open a     specially crafted Office document, to execute arbitrary     code in the context of the current user. (CVE-2017-0240)

  - An elevation of privilege vulnerability exists in     Microsoft Edge due to improper rendering of a     domain-less page in the URL. An unauthenticated, remote     attacker can exploit this, by convincing a user to visit     a specially crafted website, to cause the user to     perform actions in the context of the Intranet Zone and     access functionality that is not typically available to     the browser when browsing in the context of the Internet     Zone. (CVE-2017-0241)

  - An elevation of privilege vulnerability exists in the     win32k component due to improper handling of objects in     memory. A local attacker can exploit this, via a     specially crafted application, to execute arbitrary code     with elevated permissions. Note that an attacker can     also cause a denial of service condition on Windows 7     x64 or later systems. (CVE-2017-0246)

  - A security bypass vulnerability exists in the Microsoft     .NET Framework and .NET Core components due to a failure     to completely validate certificates. An attacker can     exploit this to present a certificate that is marked     invalid for a specific use, but the component uses it     for that purpose, resulting in a bypass of the Enhanced     Key Usage taggings. (CVE-2017-0248)

  - An information disclosure vulnerability exists in the     Windows kernel due to improper initialization of objects     in memory. A local attacker can exploit this, via a     specially crafted application, to disclose sensitive     information. (CVE-2017-0258)

  - An information disclosure vulnerability exists in the     Windows kernel due to improper initialization of objects     in memory. A local attacker can exploit this, via a     specially crafted application, to disclose sensitive     information. (CVE-2017-0259)

  - An elevation of privilege vulnerability exists in the     Windows kernel-mode driver due to improper handling of     objects in memory. A local attacker can exploit this,     via a specially crafted application, to run arbitrary     code in kernel mode. (CVE-2017-0263)

  - A remote code execution vulnerability exists in the     Microsoft scripting engines due to improper handling of     objects in memory. An unauthenticated, remote attacker     can exploit this, by convincing a user to visit a     crafted web page or open a crafted Office document file,     to execute arbitrary code in the context of the current     user. (CVE-2017-0266)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0267)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0268)

  - A denial of service vulnerability exists in Microsoft     Server Message Block (SMB) when handling a specially     crafted request to the server. An unauthenticated,     remote attacker can exploit this, via a crafted SMB     request, to cause the system to stop responding.
    (CVE-2017-0269)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0270)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0271)

  - A remote code execution vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to execute arbitrary code on a target server.
    (CVE-2017-0272)

  - A denial of service vulnerability exists in Microsoft     Server Message Block (SMB) when handling a specially     crafted request to the server. An unauthenticated,     remote attacker can exploit this, via a crafted SMB     request, to cause the system to stop responding.
    (CVE-2017-0273)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0274)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0275)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0276)

  - A remote code execution vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to execute arbitrary code on a target server.
    (CVE-2017-0277)

  - A remote code execution vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to execute arbitrary code on a target server.
    (CVE-2017-0278)

  - A remote code execution vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to execute arbitrary code on a target server.
    (CVE-2017-0279)

  - A denial of service vulnerability exists in Microsoft     Server Message Block (SMB) when handling a specially     crafted request to the server. An unauthenticated,     remote attacker can exploit this, via a crafted SMB     request, to cause the system to stop responding.
    (CVE-2017-0280)

The remote Windows host is missing security update KB4019472. It is, therefore, affected by multiple vulnerabilities :

  - A security bypass vulnerability exists in Internet     Explorer due to an unspecified flaw. An unauthenticated,     remote attacker can exploit this, by convincing a user     to visit a specially crafted website, to bypass mixed     content warnings and load insecure content (HTTP) from     secure locations (HTTPS). (CVE-2017-0064)

  - An elevation of privilege vulnerability exists in     Windows in the Microsoft DirectX graphics kernel     subsystem (dxgkrnl.sys) due to improper handling of     objects in memory. A local attacker can exploit this,     via a specially crafted application, to execute     arbitrary code in an elevated context. (CVE-2017-0077)

  - A denial of service vulnerability exists in the Windows     DNS server when it's configured to answer version     queries. An unauthenticated, remote attacker can exploit     this, via a malicious DNS query, to cause the DNS server     to become nonresponsive. (CVE-2017-0171)

  - An information disclosure vulnerability exists in the     Windows Graphics Device Interface (GDI) due to improper     handling of objects in memory. A local attacker can     exploit this, via a specially crafted application, to     disclose sensitive information. (CVE-2017-0190)

  - An elevation of privilege vulnerability exists in     Windows Hyper-V due to improper validation of vSMB     packet data. An unauthenticated, adjacent attacker can     exploit this to gain elevated privileges.
    (CVE-2017-0212)

  - An elevation of privilege vulnerability exists in the     Windows COM Aggregate Marshaler due to an unspecified     flaw. A local attacker can exploit this, via a specially     crafted application, to execute arbitrary code with     elevated privileges. (CVE-2017-0213)

  - An elevation of privilege vulnerability exists in     Windows due to improper validation of user-supplied     input when loading type libraries. A local attacker can     exploit this, via a specially crafted application, to     gain elevated privileges. (CVE-2017-0214)

  - A remote code execution vulnerability exists in     Microsoft Edge due to improper handling of objects in     memory. An unauthenticated, remote attacker can exploit     this, by convincing a user to visit a specially crafted     website, to execute arbitrary code in the context of the     current user. (CVE-2017-0221)

  - A remote code execution vulnerability exists in     Microsoft Internet Explorer due to improper handling of     objects in memory. An unauthenticated, remote attacker     can exploit this, by convincing a user to visit a     specially crafted website, to execute arbitrary code in     the context of the current user. (CVE-2017-0222)

  - A remote code execution vulnerability exists in     Microsoft Internet Explorer due to improper handling of     objects in memory. An unauthenticated, remote attacker     can exploit this, by convincing a user to visit a     specially crafted website, to execute arbitrary code in     the context of the current user. (CVE-2017-0226)

  - A remote code execution vulnerability exists in     Microsoft Edge in the scripting engines due to improper     handling of objects in memory. An unauthenticated,     remote attacker can exploit this, by convincing a user     to visit a specially crafted website or open a specially     crafted Microsoft Office document, to execute arbitrary     code in the context of the current user. (CVE-2017-0227)

  - A remote code execution vulnerability exists in     Microsoft browsers in the JavaScript engines due to     improper handling of objects in memory. An     unauthenticated, remote attacker can exploit this, by     convincing a user to visit a specially crafted website     or open a specially crafted Microsoft Office document,     to execute arbitrary code in the context of the current     user. (CVE-2017-0228)

  - A remote code execution vulnerability exists in     Microsoft browsers in the JavaScript engines due to     improper handling of objects in memory. An     unauthenticated, remote attacker can exploit this, by     convincing a user to visit a specially crafted website     or open a specially crafted Microsoft Office document,     to execute arbitrary code in the context of the current     user. (CVE-2017-0229)

  - A remote code execution vulnerability exists in     Microsoft browsers in the JavaScript engines due to     improper handling of objects in memory. An     unauthenticated, remote attacker can exploit this, by     convincing a user to visit a specially crafted website     or open a specially crafted Office document, to execute     arbitrary code in the context of the current user.
    (CVE-2017-0230)

  - A spoofing vulnerability exists in Microsoft browsers     due to improper rendering of the SmartScreen filter. An     unauthenticated, remote attacker can exploit this, via a     specially crafted URL, to redirect users to a malicious     website that appears to be a legitimate website.
    (CVE-2017-0231)

  - An elevation of privilege vulnerability exists in     Microsoft Edge due to improper sandboxing. An     unauthenticated, remote attacker can exploit this to     break out of the Edge AppContainer sandbox and gain     elevated privileges. (CVE-2017-0233)

  - A remote code execution vulnerability exists in     Microsoft Edge in the Chakra JavaScript engine due to     improper handling of objects in memory. An     unauthenticated, remote attacker can exploit this, by     convincing a user to visit a specially crafted website     or open a specially crafted Microsoft Office document,     to execute arbitrary code in the context of the current     user. (CVE-2017-0234)

  - A remote code execution vulnerability exists in     Microsoft Edge in the Chakra JavaScript engine due to     improper handling of objects in memory. An     unauthenticated, remote attacker can exploit this, by     convincing a user to visit a specially crafted website     or open a specially crafted Office document, to     execute arbitrary code in the context of the current     user. (CVE-2017-0236)

  - A remote code execution vulnerability exists in     Microsoft browsers in the JavaScript scripting engines     due to improper handling of objects in memory. An     unauthenticated, remote attacker can exploit this, by     convincing a user to visit a specially crafted website     or open a specially crafted Office document, to     execute arbitrary code in the context of the current     user. (CVE-2017-0238)

  - A remote code execution vulnerability exists in     Microsoft Edge in the scripting engines due to improper     handling of objects in memory. An unauthenticated,     remote attacker can exploit this, by convincing a user     to visit a specially crafted website or to open a     specially crafted Office document, to execute arbitrary     code in the context of the current user. (CVE-2017-0240)

  - An elevation of privilege vulnerability exists in     Microsoft Edge due to improper rendering of a     domain-less page in the URL. An unauthenticated, remote     attacker can exploit this, by convincing a user to visit     a specially crafted website, to cause the user to     perform actions in the context of the Intranet Zone and     access functionality that is not typically available to     the browser when browsing in the context of the Internet     Zone. (CVE-2017-0241)

  - An elevation of privilege vulnerability exists in the     win32k component due to improper handling of objects in     memory. A local attacker can exploit this, via a     specially crafted application, to execute arbitrary code     with elevated permissions. Note that an attacker can     also cause a denial of service condition on Windows 7     x64 or later systems. (CVE-2017-0246)

  - A security bypass vulnerability exists in the Microsoft     .NET Framework and .NET Core components due to a failure     to completely validate certificates. An attacker can     exploit this to present a certificate that is marked     invalid for a specific use, but the component uses it     for that purpose, resulting in a bypass of the Enhanced     Key Usage taggings. (CVE-2017-0248)

  - An information disclosure vulnerability exists in the     Windows kernel due to improper initialization of objects     in memory. A local attacker can exploit this, via a     specially crafted application, to disclose sensitive     information. (CVE-2017-0258)

  - An information disclosure vulnerability exists in the     Windows kernel due to improper initialization of objects     in memory. A local attacker can exploit this, via a     specially crafted application, to disclose sensitive     information. (CVE-2017-0259)

  - An elevation of privilege vulnerability exists in the     Windows kernel-mode driver due to improper handling of     objects in memory. A local attacker can exploit this,     via a specially crafted application, to run arbitrary     code in kernel mode. (CVE-2017-0263)

  - A remote code execution vulnerability exists in the     Microsoft scripting engines due to improper handling of     objects in memory. An unauthenticated, remote attacker     can exploit this, by convincing a user to visit a     crafted web page or open a crafted Office document file,     to execute arbitrary code in the context of the current     user. (CVE-2017-0266)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0267)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0268)

  - A denial of service vulnerability exists in Microsoft     Server Message Block (SMB) when handling a specially     crafted request to the server. An unauthenticated,     remote attacker can exploit this, via a crafted SMB     request, to cause the system to stop responding.
    (CVE-2017-0269)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0270)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0271)

  - A remote code execution vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to execute arbitrary code on a target server.
    (CVE-2017-0272)

  - A denial of service vulnerability exists in Microsoft     Server Message Block (SMB) when handling a specially     crafted request to the server. An unauthenticated,     remote attacker can exploit this, via a crafted SMB     request, to cause the system to stop responding.
    (CVE-2017-0273)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0274)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0275)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0276)

  - A remote code execution vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to execute arbitrary code on a target server.
    (CVE-2017-0277)

  - A remote code execution vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to execute arbitrary code on a target server.
    (CVE-2017-0278)

  - A remote code execution vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to execute arbitrary code on a target server.
    (CVE-2017-0279)

  - A denial of service vulnerability exists in Microsoft     Server Message Block (SMB) when handling a specially     crafted request to the server. An unauthenticated,     remote attacker can exploit this, via a crafted SMB     request, to cause the system to stop responding.
    (CVE-2017-0280)

The remote Windows host is missing security update 4019263 or cumulative update 4019264. It is, therefore, affected by multiple vulnerabilities :

  - A denial of service vulnerability exists in the Windows     DNS server when it's configured to answer version     queries. An unauthenticated, remote attacker can exploit     this, via a malicious DNS query, to cause the DNS server     to become nonresponsive. (CVE-2017-0171)

  - An information disclosure vulnerability exists in the     Windows kernel due to improper handling of objects in     memory. A local attacker can exploit this, via a     specially crafted application, to disclose sensitive     information. (CVE-2017-0175)

  - An elevation of privilege vulnerability exists in the     Windows COM Aggregate Marshaler due to an unspecified     flaw. A local attacker can exploit this, via a specially     crafted application, to execute arbitrary code with     elevated privileges. (CVE-2017-0213)

  - An elevation of privilege vulnerability exists in     Windows due to improper validation of user-supplied     input when loading type libraries. A local attacker can     exploit this, via a specially crafted application, to     gain elevated privileges. (CVE-2017-0214)

  - An information disclosure vulnerability exists in the     Windows kernel due to improper handling of objects in     memory. A local attacker can exploit this, via a     specially crafted application, to disclose sensitive     information. (CVE-2017-0220)

  - A remote code execution vulnerability exists in     Microsoft Internet Explorer due to improper handling of     objects in memory. An unauthenticated, remote attacker     can exploit this, by convincing a user to visit a     specially crafted website, to execute arbitrary code in     the context of the current user. (CVE-2017-0222)

  - A spoofing vulnerability exists in Microsoft browsers     due to improper rendering of the SmartScreen filter. An     unauthenticated, remote attacker can exploit this, via a     specially crafted URL, to redirect users to a malicious     website that appears to be a legitimate website.
    (CVE-2017-0231)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0267)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0268)

  - A denial of service vulnerability exists in Microsoft     Server Message Block (SMB) when handling a specially     crafted request to the server. An unauthenticated,     remote attacker can exploit this, via a crafted SMB     request, to cause the system to stop responding.
    (CVE-2017-0269)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0270)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0271)

  - A remote code execution vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to execute arbitrary code on a target server.
    (CVE-2017-0272)

  - A denial of service vulnerability exists in Microsoft     Server Message Block (SMB) when handling a specially     crafted request to the server. An unauthenticated,     remote attacker can exploit this, via a crafted SMB     request, to cause the system to stop responding.
    (CVE-2017-0273)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0274)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0275)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0276)

  - A remote code execution vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to execute arbitrary code on a target server.
    (CVE-2017-0277)

  - A remote code execution vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to execute arbitrary code on a target server.
    (CVE-2017-0278)

  - A remote code execution vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to execute arbitrary code on a target server.
    (CVE-2017-0279)

  - A denial of service vulnerability exists in Microsoft     Server Message Block (SMB) when handling a specially     crafted request to the server. An unauthenticated,     remote attacker can exploit this, via a crafted SMB     request, to cause the system to stop responding.
    (CVE-2017-0280)

  - An information disclosure vulnerability exists in the     GDI component due to improper handling of objects in     memory. An unauthenticated, remote attacker can exploit     this, by convincing a user to open a specially crafted     document or visit a specially crafted website, to     disclose the contents of memory. (CVE-2017-8552)

The remote Windows host is missing security update 4019213 or cumulative update 4019215. It is, therefore, affected by multiple vulnerabilities :

  - A security bypass vulnerability exists in Internet     Explorer due to an unspecified flaw. An unauthenticated,     remote attacker can exploit this, by convincing a user     to visit a specially crafted website, to bypass mixed     content warnings and load insecure content (HTTP) from     secure locations (HTTPS). (CVE-2017-0064)

  - An elevation of privilege vulnerability exists in     Windows in the Microsoft DirectX graphics kernel     subsystem (dxgkrnl.sys) due to improper handling of     objects in memory. A local attacker can exploit this,     via a specially crafted application, to execute     arbitrary code in an elevated context. (CVE-2017-0077)

  - A denial of service vulnerability exists in the Windows     DNS server when it's configured to answer version     queries. An unauthenticated, remote attacker can exploit     this, via a malicious DNS query, to cause the DNS server     to become nonresponsive. (CVE-2017-0171)

  - An information disclosure vulnerability exists in the     Windows Graphics Device Interface (GDI) due to improper     handling of objects in memory. A local attacker can     exploit this, via a specially crafted application, to     disclose sensitive information. (CVE-2017-0190)

  - An elevation of privilege vulnerability exists in the     Windows COM Aggregate Marshaler due to an unspecified     flaw. A local attacker can exploit this, via a specially     crafted application, to execute arbitrary code with     elevated privileges. (CVE-2017-0213)

  - An elevation of privilege vulnerability exists in     Windows due to improper validation of user-supplied     input when loading type libraries. A local attacker can     exploit this, via a specially crafted application, to     gain elevated privileges. (CVE-2017-0214)

  - A remote code execution vulnerability exists in     Microsoft Internet Explorer due to improper handling of     objects in memory. An unauthenticated, remote attacker     can exploit this, by convincing a user to visit a     specially crafted website, to execute arbitrary code in     the context of the current user. (CVE-2017-0222)

  - A remote code execution vulnerability exists in     Microsoft Internet Explorer due to improper handling of     objects in memory. An unauthenticated, remote attacker     can exploit this, by convincing a user to visit a     specially crafted website, to execute arbitrary code in     the context of the current user. (CVE-2017-0226)

  - A remote code execution vulnerability exists in     Microsoft browsers in the JavaScript engines due to     improper handling of objects in memory. An     unauthenticated, remote attacker can exploit this, by     convincing a user to visit a specially crafted website     or open a specially crafted Microsoft Office document,     to execute arbitrary code in the context of the current     user. (CVE-2017-0228)

  - A spoofing vulnerability exists in Microsoft browsers     due to improper rendering of the SmartScreen filter. An     unauthenticated, remote attacker can exploit this, via a     specially crafted URL, to redirect users to a malicious     website that appears to be a legitimate website.
    (CVE-2017-0231)

  - A remote code execution vulnerability exists in     Microsoft browsers in the JavaScript scripting engines     due to improper handling of objects in memory. An     unauthenticated, remote attacker can exploit this, by     convincing a user to visit a specially crafted website     or open a specially crafted Office document, to     execute arbitrary code in the context of the current     user. (CVE-2017-0238)

  - An elevation of privilege vulnerability exists in the     win32k component due to improper handling of objects in     memory. A local attacker can exploit this, via a     specially crafted application, to execute arbitrary code     with elevated permissions. Note that an attacker can     also cause a denial of service condition on Windows 7     x64 or later systems. (CVE-2017-0246)

  - A security bypass vulnerability exists in the Microsoft     .NET Framework and .NET Core components due to a failure     to completely validate certificates. An attacker can     exploit this to present a certificate that is marked     invalid for a specific use, but the component uses it     for that purpose, resulting in a bypass of the Enhanced     Key Usage taggings. (CVE-2017-0248)

  - An information disclosure vulnerability exists in the     Windows kernel due to improper initialization of objects     in memory. A local attacker can exploit this, via a     specially crafted application, to disclose sensitive     information. (CVE-2017-0258)

  - An information disclosure vulnerability exists in the     Windows kernel due to improper initialization of objects     in memory. A local attacker can exploit this, via a     specially crafted application, to disclose sensitive     information. (CVE-2017-0259)

  - An elevation of privilege vulnerability exists in the     Windows kernel-mode driver due to improper handling of     objects in memory. A local attacker can exploit this,     via a specially crafted application, to run arbitrary     code in kernel mode. (CVE-2017-0263)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0267)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0268)

  - A denial of service vulnerability exists in Microsoft     Server Message Block (SMB) when handling a specially     crafted request to the server. An unauthenticated,     remote attacker can exploit this, via a crafted SMB     request, to cause the system to stop responding.
    (CVE-2017-0269)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0270)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0271)

  - A remote code execution vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to execute arbitrary code on a target server.
    (CVE-2017-0272)

  - A denial of service vulnerability exists in Microsoft     Server Message Block (SMB) when handling a specially     crafted request to the server. An unauthenticated,     remote attacker can exploit this, via a crafted SMB     request, to cause the system to stop responding.
    (CVE-2017-0273)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0274)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0275)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0276)

  - A remote code execution vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to execute arbitrary code on a target server.
    (CVE-2017-0277)

  - A remote code execution vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to execute arbitrary code on a target server.
    (CVE-2017-0278)

  - A remote code execution vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to execute arbitrary code on a target server.
    (CVE-2017-0279)

  - A denial of service vulnerability exists in Microsoft     Server Message Block (SMB) when handling a specially     crafted request to the server. An unauthenticated,     remote attacker can exploit this, via a crafted SMB     request, to cause the system to stop responding.
    (CVE-2017-0280)

The remote Windows 10 version 1703 host is missing security update KB4016871. It is, therefore, affected by multiple vulnerabilities :

  - A security bypass vulnerability exists in Internet     Explorer due to an unspecified flaw. An unauthenticated,     remote attacker can exploit this, by convincing a user     to visit a specially crafted website, to bypass mixed     content warnings and load insecure content (HTTP) from     secure locations (HTTPS). (CVE-2017-0064)

  - An elevation of privilege vulnerability exists in     Windows in the Microsoft DirectX graphics kernel     subsystem (dxgkrnl.sys) due to improper handling of     objects in memory. A local attacker can exploit this,     via a specially crafted application, to execute     arbitrary code in an elevated context. (CVE-2017-0077)

  - An elevation of privilege vulnerability exists in     Windows Hyper-V due to improper validation of vSMB     packet data. An unauthenticated, adjacent attacker can     exploit this to gain elevated privileges.
    (CVE-2017-0212)

  - An elevation of privilege vulnerability exists in the     Windows COM Aggregate Marshaler due to an unspecified     flaw. A local attacker can exploit this, via a specially     crafted application, to execute arbitrary code with     elevated privileges. (CVE-2017-0213)

  - An elevation of privilege vulnerability exists in     Windows due to improper validation of user-supplied     input when loading type libraries. A local attacker can     exploit this, via a specially crafted application, to     gain elevated privileges. (CVE-2017-0214)

  - A remote code execution vulnerability exists in     Microsoft Internet Explorer due to improper handling of     objects in memory. An unauthenticated, remote attacker     can exploit this, by convincing a user to visit a     specially crafted website, to execute arbitrary code in     the context of the current user. (CVE-2017-0222)

  - A remote code execution vulnerability exists in     Microsoft browsers in the JavaScript engines due to     improper handling of objects in memory. An     unauthenticated, remote attacker can exploit this, by     convincing a user to visit a specially crafted website     or open a specially crafted Microsoft Office document,     to execute arbitrary code in the context of the current     user. (CVE-2017-0224)

  - A remote code execution vulnerability exists in     Microsoft Internet Explorer due to improper handling of     objects in memory. An unauthenticated, remote attacker     can exploit this, by convincing a user to visit a     specially crafted website, to execute arbitrary code in     the context of the current user. (CVE-2017-0226)

  - A remote code execution vulnerability exists in     Microsoft Edge in the scripting engines due to improper     handling of objects in memory. An unauthenticated,     remote attacker can exploit this, by convincing a user     to visit a specially crafted website or open a specially     crafted Microsoft Office document, to execute arbitrary     code in the context of the current user. (CVE-2017-0227)

  - A remote code execution vulnerability exists in     Microsoft browsers in the JavaScript engines due to     improper handling of objects in memory. An     unauthenticated, remote attacker can exploit this, by     convincing a user to visit a specially crafted website     or open a specially crafted Microsoft Office document,     to execute arbitrary code in the context of the current     user. (CVE-2017-0228)

  - A remote code execution vulnerability exists in     Microsoft browsers in the JavaScript engines due to     improper handling of objects in memory. An     unauthenticated, remote attacker can exploit this, by     convincing a user to visit a specially crafted website     or open a specially crafted Microsoft Office document,     to execute arbitrary code in the context of the current     user. (CVE-2017-0229)

  - A remote code execution vulnerability exists in     Microsoft browsers in the JavaScript engines due to     improper handling of objects in memory. An     unauthenticated, remote attacker can exploit this, by     convincing a user to visit a specially crafted website     or open a specially crafted Office document, to execute     arbitrary code in the context of the current user.
    (CVE-2017-0230)

  - A spoofing vulnerability exists in Microsoft browsers     due to improper rendering of the SmartScreen filter. An     unauthenticated, remote attacker can exploit this, via a     specially crafted URL, to redirect users to a malicious     website that appears to be a legitimate website.
    (CVE-2017-0231)

  - An elevation of privilege vulnerability exists in     Microsoft Edge due to improper sandboxing. An     unauthenticated, remote attacker can exploit this to     break out of the Edge AppContainer sandbox and gain     elevated privileges. (CVE-2017-0233)

  - A remote code execution vulnerability exists in     Microsoft Edge in the Chakra JavaScript engine due to     improper handling of objects in memory. An     unauthenticated, remote attacker can exploit this, by     convincing a user to visit a specially crafted website     or open a specially crafted Microsoft Office document,     to execute arbitrary code in the context of the current     user. (CVE-2017-0234)

  - A remote code execution vulnerability exists in     Microsoft Edge in the Chakra JavaScript engine due to     improper handling of objects in memory. An     unauthenticated, remote attacker can exploit this, by     convincing a user to visit a specially crafted website     or open a specially crafted Microsoft Office document,     to execute arbitrary code in the context of the current     user. (CVE-2017-0235)

  - A remote code execution vulnerability exists in     Microsoft Edge in the Chakra JavaScript engine due to     improper handling of objects in memory. An     unauthenticated, remote attacker can exploit this, by     convincing a user to visit a specially crafted website     or open a specially crafted Office document, to     execute arbitrary code in the context of the current     user. (CVE-2017-0236)

  - A remote code execution vulnerability exists in     Microsoft browsers in the JavaScript scripting engines     due to improper handling of objects in memory. An     unauthenticated, remote attacker can exploit this, by     convincing a user to visit a specially crafted website     or open a specially crafted Office document, to     execute arbitrary code in the context of the current     user. (CVE-2017-0238)

  - A remote code execution vulnerability exists in     Microsoft Edge in the scripting engines due to improper     handling of objects in memory. An unauthenticated,     remote attacker can exploit this, by convincing a user     to visit a specially crafted website or to open a     specially crafted Office document, to execute arbitrary     code in the context of the current user. (CVE-2017-0240)

  - An elevation of privilege vulnerability exists in     Microsoft Edge due to improper rendering of a     domain-less page in the URL. An unauthenticated, remote     attacker can exploit this, by convincing a user to visit     a specially crafted website, to cause the user to     perform actions in the context of the Intranet Zone and     access functionality that is not typically available to     the browser when browsing in the context of the Internet     Zone. (CVE-2017-0241)

  - An elevation of privilege vulnerability exists in the     win32k component due to improper handling of objects in     memory. A local attacker can exploit this, via a     specially crafted application, to execute arbitrary code     with elevated permissions. Note that an attacker can     also cause a denial of service condition on Windows 7     x64 or later systems. (CVE-2017-0246)

  - A security bypass vulnerability exists in the Microsoft     .NET Framework and .NET Core components due to a failure     to completely validate certificates. An attacker can     exploit this to present a certificate that is marked     invalid for a specific use, but the component uses it     for that purpose, resulting in a bypass of the Enhanced     Key Usage taggings. (CVE-2017-0248)

  - An information disclosure vulnerability exists in the     Windows kernel due to improper initialization of objects     in memory. A local attacker can exploit this, via a     specially crafted application, to disclose sensitive     information. (CVE-2017-0258)

  - An information disclosure vulnerability exists in the     Windows kernel due to improper initialization of objects     in memory. A local attacker can exploit this, via a     specially crafted application, to disclose sensitive     information. (CVE-2017-0259)

  - An elevation of privilege vulnerability exists in the     Windows kernel-mode driver due to improper handling of     objects in memory. A local attacker can exploit this,     via a specially crafted application, to run arbitrary     code in kernel mode. (CVE-2017-0263)

  - A remote code execution vulnerability exists in the     Microsoft scripting engines due to improper handling of     objects in memory. An unauthenticated, remote attacker     can exploit this, by convincing a user to visit a     crafted web page or open a crafted Office document file,     to execute arbitrary code in the context of the current     user. (CVE-2017-0266)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0267)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0268)

  - A denial of service vulnerability exists in Microsoft     Server Message Block (SMB) when handling a specially     crafted request to the server. An unauthenticated,     remote attacker can exploit this, via a crafted SMB     request, to cause the system to stop responding.
    (CVE-2017-0269)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0270)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0271)

  - A remote code execution vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to execute arbitrary code on a target server.
    (CVE-2017-0272)

  - A denial of service vulnerability exists in Microsoft     Server Message Block (SMB) when handling a specially     crafted request to the server. An unauthenticated,     remote attacker can exploit this, via a crafted SMB     request, to cause the system to stop responding.
    (CVE-2017-0273)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0274)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0275)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0276)

  - A remote code execution vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to execute arbitrary code on a target server.
    (CVE-2017-0277)

  - A remote code execution vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to execute arbitrary code on a target server.
    (CVE-2017-0278)

  - A remote code execution vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to execute arbitrary code on a target server.
    (CVE-2017-0279)

  - A denial of service vulnerability exists in Microsoft     Server Message Block (SMB) when handling a specially     crafted request to the server. An unauthenticated,     remote attacker can exploit this, via a crafted SMB     request, to cause the system to stop responding.
    (CVE-2017-0280)

The remote Windows host is missing security update 4019214 or cumulative update 4019216. It is, therefore, affected by multiple vulnerabilities :

  - An elevation of privilege vulnerability exists in the     Windows COM Aggregate Marshaler due to an unspecified     flaw. A local attacker can exploit this, via a specially     crafted application, to execute arbitrary code with     elevated privileges. (CVE-2017-0213)

  - An elevation of privilege vulnerability exists in     Windows due to improper validation of user-supplied     input when loading type libraries. A local attacker can     exploit this, via a specially crafted application, to     gain elevated privileges. (CVE-2017-0214)

  - An information disclosure vulnerability exists in the     Windows kernel due to improper handling of objects in     memory. A local attacker can exploit this, via a     specially crafted application, to disclose sensitive     information. (CVE-2017-0220)

  - A remote code execution vulnerability exists in     Microsoft Internet Explorer due to improper handling of     objects in memory. An unauthenticated, remote attacker     can exploit this, by convincing a user to visit a     specially crafted website, to execute arbitrary code in     the context of the current user. (CVE-2017-0222)

  - A remote code execution vulnerability exists in     Microsoft Internet Explorer due to improper handling of     objects in memory. An unauthenticated, remote attacker     can exploit this, by convincing a user to visit a     specially crafted website, to execute arbitrary code in     the context of the current user. (CVE-2017-0226)

  - A remote code execution vulnerability exists in     Microsoft browsers in the JavaScript scripting engines     due to improper handling of objects in memory. An     unauthenticated, remote attacker can exploit this, by     convincing a user to visit a specially crafted website     or open a specially crafted Office document, to     execute arbitrary code in the context of the current     user. (CVE-2017-0238)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0267)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0268)

  - A denial of service vulnerability exists in Microsoft     Server Message Block (SMB) when handling a specially     crafted request to the server. An unauthenticated,     remote attacker can exploit this, via a crafted SMB     request, to cause the system to stop responding.
    (CVE-2017-0269)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0270)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0271)

  - A remote code execution vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to execute arbitrary code on a target server.
    (CVE-2017-0272)

  - A denial of service vulnerability exists in Microsoft     Server Message Block (SMB) when handling a specially     crafted request to the server. An unauthenticated,     remote attacker can exploit this, via a crafted SMB     request, to cause the system to stop responding.
    (CVE-2017-0273)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0274)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0275)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0276)

  - A remote code execution vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to execute arbitrary code on a target server.
    (CVE-2017-0277)

  - A remote code execution vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to execute arbitrary code on a target server.
    (CVE-2017-0278)

  - A remote code execution vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to execute arbitrary code on a target server.
    (CVE-2017-0279)

  - A denial of service vulnerability exists in Microsoft     Server Message Block (SMB) when handling a specially     crafted request to the server. An unauthenticated,     remote attacker can exploit this, via a crafted SMB     request, to cause the system to stop responding.
    (CVE-2017-0280)

ID	Name	Product	Family	Severity
104893	Security Updates for Internet Explorer (May 2017)	Nessus	Windows : Microsoft Bulletins	high
100791	Microsoft Security Advisory 4025685: Guidance for older platforms (XP / 2003) (EXPLODINGCAN)	Nessus	Windows : Microsoft Bulletins	critical
100788	Windows 8 June 2017 Security Updates	Nessus	Windows : Microsoft Bulletins	critical
100785	Microsoft Security Advisory 4025685: Windows Vista (June 2017)	Nessus	Windows : Microsoft Bulletins	critical
100061	KB4019474: Windows 10 Version 1507 May 2017 Cumulative Update	Nessus	Windows : Microsoft Bulletins	high
100060	KB4019473: Windows 10 Version 1511 May 2017 Cumulative Update	Nessus	Windows : Microsoft Bulletins	high
100059	KB4019472: Windows 10 Version 1607 and Windows Server 2016 May 2017 Cumulative Update	Nessus	Windows : Microsoft Bulletins	high
100058	Windows 7 and Windows Server 2008 R2 May 2017 Security Updates	Nessus	Windows : Microsoft Bulletins	high
100057	Windows 8.1 and Windows Server 2012 R2 May 2017 Security Updates	Nessus	Windows : Microsoft Bulletins	high
100055	KB4016871: Windows 10 Version 1703 May 2017 Cumulative Update	Nessus	Windows : Microsoft Bulletins	critical
100054	Windows Server 2012 May 2017 Security Updates	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2017-0222

high

Tenable Plugins

high

critical

critical

critical

high

high

high

high

high

critical

high