Google Security Research Apple macOS/iOS - 'xpc_data' Objects Sandbox Escape Privilege Escalation
local multiple CVE-2017-7047

SecuriTeam McAfee Security Scan Plus - Remote Command Execution
remote windows CVE-2017-3897

patryk_bogdan Fortinet FortiOS < 5.6.0 - Cross-Site Scripting
webapps hardware CVE-2017-3133;CVE-2017-3132;CVE-2017-3131

Marcel Böhme GNU libiberty - Buffer Overflow
dos linux CVE-2016-2226

Yorick Koster Microsoft Windows - '.LNK' Shortcut File Code Execution (Metasploit)
local windows CVE-2017-8464

Google Security Research WebKit JSC - 'JSObject::putInlineSlow' / 'JSValue::putToPrimitive' Universal Cross-Site Scripting
webapps multiple CVE-2017-7037

Google Security Research WebKit JSC - 'ObjectPatternNode::appendEntry' Stack Use-After-Free
dos multiple

Google Security Research WebKit JSC - 'ArgumentsEliminationPhase::transform' Incorrect LoadVarargs Handling
dos multiple CVE-2017-7056

Google Security Research WebKit JSC - 'JSArray::appendMemcpy' Uninitialized Memory Copy
dos multiple CVE-2017-7064

Google Security Research WebKit JSC - 'arrayProtoFuncSplice' Uninitialized Memory Reference
dos multiple

Google Security Research WebKit JSC - 'DFG::ByteCodeParser::flush(InlineStackEntry* inlineStackEntry)' Incorrect Scope Register Handling
dos multiple CVE-2017-7018

Ren Kimura Linux Kernel - 'BadIRET' Local Privilege Escalation
local linux CVE-2014-9322

SecuriTeam Nitro Pro PDF - Multiple Vulnerabilities
local windows CVE-2017-7950;CVE-2017-2796

RedTeam Pentesting REDDOXX Appliance Build 2032 / 2.0.625 - Arbitrary File Disclosure
webapps json

RedTeam Pentesting REDDOXX Appliance Build 2032 / 2.0.625 - Remote Command Execution
webapps json

Google Security Research WebKit - 'WebCore::getCachedWrapper' Use-After-Free
dos multiple CVE-2017-7040