Latest CVE Feed
-
9.3
HIGHCVE-2014-1786
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE... Read more
Affected Products : internet_explorer- Published: Jun. 11, 2014
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2014-1249
Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PSD image.... Read more
Affected Products : quicktime- Published: Feb. 27, 2014
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2014-0569
Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302... Read more
Affected Products : android windows_8.1 linux_kernel macos flash_player_desktop_runtime flash_player opensuse iphone_os linux_enterprise_desktop windows +4 more products- Published: Oct. 15, 2014
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2014-0278
Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0277 ... Read more
Affected Products : internet_explorer- Published: Feb. 12, 2014
- Modified: Apr. 11, 2025
-
9.3
HIGHCVE-2014-0260
Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office Compatibility Pack SP3; Word Viewer; SharePoint Server 2010 SP1 and SP2 and 2013; Office Web Apps 2010 SP1 and SP2; and Office Web Apps Server 2013 allow remote attackers to ex... Read more
Affected Products : word word_viewer sharepoint_server office_web_apps office_compatibility_pack office_web_apps_server- Published: Jan. 15, 2014
- Modified: Apr. 11, 2025
-
9.3
HIGHCVE-2014-0288
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE... Read more
Affected Products : internet_explorer- Published: Feb. 12, 2014
- Modified: Apr. 11, 2025
-
9.3
HIGHCVE-2014-0100
Race condition in the inet_frag_intern function in net/ipv4/inet_fragment.c in the Linux kernel through 3.13.6 allows remote attackers to cause a denial of service (use-after-free error) or possibly have unspecified other impact via a large series of frag... Read more
Affected Products : linux_kernel- Published: Mar. 11, 2014
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2013-7388
Heap-based buffer overflow in paintlib, as used in Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689), allows remote attackers to execute arbitrary code via a crafted RLE4-compressed bitmap (BMP). NOTE: this issue was SPLIT from CVE-2013... Read more
- Published: Jul. 01, 2014
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2013-3863
Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allow remote attackers to execute arbitrary code via a crafted OLE object in a file, aka "OLE Property Vulnerability."... Read more
- Published: Sep. 11, 2013
- Modified: Apr. 11, 2025
-
9.3
HIGHCVE-2013-3855
Microsoft Word 2003 SP3 and 2007 SP3, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Word Memory Corruption Vulnerability... Read more
- Published: Sep. 11, 2013
- Modified: Apr. 11, 2025
-
9.3
HIGHCVE-2013-3161
Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-201... Read more
Affected Products : internet_explorer- Published: Jul. 10, 2013
- Modified: Apr. 11, 2025
-
9.3
HIGHCVE-2013-3158
Microsoft Excel 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."... Read more
Affected Products : excel- Published: Sep. 11, 2013
- Modified: Apr. 11, 2025
-
9.3
HIGHCVE-2013-3131
Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5, and Silverlight 5 before 5.1.20513.0, does not properly prevent changes to data in multidimensional arrays of structures, which allows remote attackers to execute arbitrary code via (1) a crafted .... Read more
- Published: Jul. 10, 2013
- Modified: Apr. 11, 2025
-
9.3
HIGHCVE-2013-3120
Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3118... Read more
Affected Products : internet_explorer- Published: Jun. 12, 2013
- Modified: Apr. 11, 2025
-
9.3
HIGHCVE-2013-3110
Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013... Read more
Affected Products : internet_explorer- Published: Jun. 12, 2013
- Modified: Apr. 11, 2025
-
9.3
HIGHCVE-2013-3011
Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 allows remote attackers to affect confidentiality, availability,... Read more
Affected Products : java- Published: Jul. 23, 2013
- Modified: Apr. 11, 2025
-
9.3
HIGHCVE-2013-1722
Use-after-free vulnerability in the nsAnimationManager::BuildAnimations function in the Animation Manager in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.2... Read more
- Published: Sep. 18, 2013
- Modified: Apr. 11, 2025
-
9.3
HIGHCVE-2013-1313
Object Linking and Embedding (OLE) Automation in Microsoft Windows XP SP3 does not properly allocate memory, which allows remote attackers to execute arbitrary code via a crafted RTF document, aka "OLE Automation Remote Code Execution Vulnerability."... Read more
Affected Products : windows_xp- Published: Feb. 13, 2013
- Modified: Apr. 11, 2025
-
9.3
HIGHCVE-2013-1288
Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer CTreeNode Use After Free Vulnerability."... Read more
Affected Products : windows_7 windows_server_2008 internet_explorer windows_server_2003 windows_vista windows_xp- Published: Mar. 13, 2013
- Modified: Apr. 11, 2025
-
9.3
HIGHCVE-2013-0758
Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allow remote attackers to execute arbitrary JavaScript co... Read more
Affected Products : firefox firefox_esr thunderbird ubuntu_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_aus enterprise_linux_eus opensuse +5 more products- Published: Jan. 13, 2013
- Modified: Apr. 11, 2025