Hui Gao

**Name of the Vulnerable Software and Affected Versions** Internet Explorer (affected versions not specified) **Description** A remote code execution issue exists due to improper memory object access. This could lead to memory corruption, allowing an attacker to execute arbitrary code as the current user. If the user has administrative rights, the attacker could gain control of the system, enabling them to install programs, modify or delete data, or create new accounts with full rights. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Edge and Internet Explorer versions in Windows 10 Gold, 1511, 1607, 1703, 1709 ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows Server 2016 and Windows Server, version 1709 **Description** An information disclosure issue exists due to the improper handling of objects in memory by the scripting engine in Microsoft browsers. This could allow an attacker to obtain information that could be used to further compromise the user's system. **Recommendations** For Windows 10 Gold, 1511, 1607, 1703, 1709, update to a version that includes the fix for this issue. For Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows Server 2016 and Windows Server, version 1709, apply the necessary security updates to resolve the issue. As a temporary workaround, consider restricting access to sensitive information and monitoring system activity for signs of exploitation until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** Internet Explorer versions in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 **Description** The issue is related to how Internet Explorer handles objects in memory, allowing an attacker to gain the same user rights as the current user. This could lead to memory corruption, enabling an attacker to execute arbitrary code in the context of the current user. If the current user has administrative user rights, the attacker could take control of the affected system, install programs, view, change, or delete data, or create new accounts with full user rights. **Recommendations** For Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709, consider disabling JavaScript as a temporary workaround until a patch is available. Restrict access to Internet Explorer to minimize the risk of exploitation. Avoid using Internet Explorer for sensitive operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Internet Explorer versions in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 **Description** The issue is related to the way Internet Explorer accesses objects in memory, allowing an attacker to execute arbitrary code in the context of the current user. This can be exploited by a remote attacker to corrupt memory and execute arbitrary code. **Recommendations** For Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016, consider restricting access to sensitive resources until a patch is available. As a temporary workaround, consider disabling the Internet Explorer browser until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Internet Explorer (affected versions not specified) **Description** The issue is related to incorrect access to objects in memory, which can cause a memory error and allow an attacker to execute arbitrary code in the context of the current user. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Internet Explorer (affected versions not specified) **Description** The issue is related to incorrect access to objects in memory, which can cause memory errors and allow an attacker to execute arbitrary code in the context of the current user. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Internet Explorer versions 6, 8 through 11 **Description** The issue is related to a use-after-free error when accessing the CDispStructureNode object, allowing remote attackers to execute arbitrary code or cause a denial of service via a crafted web site. This could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. **Recommendations** For Internet Explorer version 6: update to a newer version to mitigate the risk. For Internet Explorer versions 8 through 11: update to a newer version to mitigate the risk. As a temporary workaround, consider restricting access to potentially malicious web sites to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Microsoft Internet Explorer (affected versions not specified) **Description** The issue is related to incorrect access to objects in memory, which can cause a memory error and allow an attacker to execute arbitrary code in the context of the current user. This is a remote code execution issue. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Internet Explorer 11 (affected versions not specified) **Description** The issue is related to memory corruption, allowing remote attackers to execute arbitrary code or cause a denial of service via a crafted web site. This is due to improper access to objects in memory, which could corrupt memory and enable an attacker to execute arbitrary code in the context of the current user. The vulnerability is also associated with insufficient input validation. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.