CVE-2017-0290

Description

References

• securityfocus.com/bid/98330 · Third Party Advisory
• securitytracker.com/id/1038419
• securitytracker.com/id/1038420
• 0patch.blogspot.si/2017/05/0patching-worst-windows-remote-code.html
• arstechnica.com/information-technology/2017/05/windows-defender-nscript-remote-vulnerability · Press/Media Coverage
• bugs.chromium.org/p/project-zero/issues/detail · Exploit
• portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0290 · Vendor Advisory
• technet.microsoft.com/library/security/4022344 · Patch
• twitter.com/natashenka/status/861748397409058816 · Exploit
• exploit-db.com/exploits/41975

Autres vulnérabilités de malware protection engine

• CVE-2026-55012ÉLEVÉE 7.8Integer overflow or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally.
• CVE-2026-55011ÉLEVÉE 7.8Integer underflow (wrap or wraparound) in Microsoft Defender allows an unauthorized attacker to execute code locally.
• CVE-2026-45584ÉLEVÉE 8.1Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network.
• CVE-2026-41091ÉLEVÉE 7.8EXPLOITED (CISA KEV)Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges loc…
• CVE-2023-33156ÉLEVÉE 7.0Microsoft Defender Elevation of Privilege Vulnerability