Latest CVE Feed
-
7.6
HIGHCVE-2016-0157
Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0155 and CVE-2016-0156.... Read more
Affected Products : edge- EPSS Score: %15.90
- Published: Apr. 12, 2016
- Modified: Apr. 12, 2025
-
7.6
HIGHCVE-2016-0156
Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0155 and CVE-2016-0157.... Read more
Affected Products : edge- EPSS Score: %20.27
- Published: Apr. 12, 2016
- Modified: Apr. 12, 2025
-
7.6
HIGHCVE-2016-0155
Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0156 and CVE-2016-0157.... Read more
Affected Products : edge- EPSS Score: %15.98
- Published: Apr. 12, 2016
- Modified: Apr. 12, 2025
-
7.6
HIGHCVE-2016-0154
Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."... Read more
- EPSS Score: %20.46
- Published: Apr. 12, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-0153
OLE in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT 8.1 allows remote attackers to execute arbitrary code via a crafted file, aka "Windows OLE Remote Code Exec... Read more
Affected Products : windows_7 windows_8.1 windows_rt_8.1 windows_server_2008 windows_server_2012 windows_vista- EPSS Score: %33.65
- Published: Apr. 12, 2016
- Modified: Apr. 12, 2025
-
7.8
HIGHCVE-2016-0151
The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mismanages process tokens, which allows local users to gain privileges via a crafted application, aka "Win... Read more
Affected Products : windows_10 windows_8.1 windows_rt_8.1 windows_server_2012 windows_10_1507 windows_10_1511- Actively Exploited
- EPSS Score: %60.41
- Published: Apr. 12, 2016
- Modified: Apr. 12, 2025
-
7.8
HIGHCVE-2016-0150
HTTP.sys in Microsoft Windows 10 Gold and 1511 allows remote attackers to cause a denial of service (system hang) via crafted HTTP 2.0 requests, aka "HTTP.sys Denial of Service Vulnerability."... Read more
Affected Products : windows_10- EPSS Score: %43.28
- Published: Apr. 12, 2016
- Modified: Apr. 12, 2025
-
7.8
HIGHCVE-2016-0148
Microsoft .NET Framework 4.6 and 4.6.1 mishandles library loading, which allows local users to gain privileges via a crafted application, aka ".NET Framework Remote Code Execution Vulnerability."... Read more
Affected Products : .net_framework- EPSS Score: %19.61
- Published: Apr. 12, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-0147
Microsoft XML Core Services 3.0 allows remote attackers to execute arbitrary code via a crafted web site, aka "MSXML 3.0 Remote Code Execution Vulnerability."... Read more
Affected Products : xml_core_services- EPSS Score: %26.42
- Published: Apr. 12, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-0145
The font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold and 1511; Office 2007 SP3 and 2010 SP2; Word Viewer; .NET Framework 3.0 SP2, ... Read more
Affected Products : windows_10 windows_7 windows_8.1 windows_rt_8.1 windows_server_2008 windows_server_2012 office lync skype_for_business .net_framework +3 more products- EPSS Score: %74.82
- Published: Apr. 12, 2016
- Modified: Apr. 12, 2025
-
7.8
HIGHCVE-2016-0143
The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted applic... Read more
Affected Products : windows_10 windows_7 windows_8.1 windows_rt_8.1 windows_server_2008 windows_server_2012 windows_vista- EPSS Score: %4.41
- Published: Apr. 12, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-0139
Microsoft Excel 2010 SP2, Word for Mac 2011, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."... Read more
- EPSS Score: %30.33
- Published: Apr. 12, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-0136
Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, Excel Services on SharePoint Server 2007 SP3, and Excel Services on SharePoint Server 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Mi... Read more
- EPSS Score: %40.64
- Published: Apr. 12, 2016
- Modified: Apr. 12, 2025
-
8.4
HIGHCVE-2016-0135
The Secondary Logon Service in Microsoft Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Secondary Logon Elevation of Privilege Vulnerability."... Read more
Affected Products : windows_10- EPSS Score: %0.52
- Published: Apr. 12, 2016
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2016-0128
The SAM and LSAD protocol implementations in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 do not properly establish an RPC channe... Read more
Affected Products : windows_10 windows_7 windows_8.1 windows_rt_8.1 windows_server_2008 windows_server_2012 windows_vista- EPSS Score: %34.58
- Published: Apr. 12, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-0127
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1, Office We... Read more
Affected Products : office word word_viewer sharepoint_server office_compatibility_pack office_web_apps_server- EPSS Score: %21.68
- Published: Apr. 12, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-0122
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Word 2016 for Mac, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Offi... Read more
- EPSS Score: %39.92
- Published: Apr. 12, 2016
- Modified: Apr. 12, 2025
-
7.1
HIGHCVE-2016-0090
Hyper-V in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows 10 allows guest OS users to obtain sensitive information from host OS memory via a crafted application, aka "Hyper-V Information Disclosure Vulnerability."... Read more
- EPSS Score: %0.71
- Published: Apr. 12, 2016
- Modified: Apr. 12, 2025
-
7.1
HIGHCVE-2016-0089
Hyper-V in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows guest OS users to obtain sensitive information from host OS memory via a crafted application, aka "Hyper-V Information Disclosure Vulnerability."... Read more
- EPSS Score: %0.92
- Published: Apr. 12, 2016
- Modified: Apr. 12, 2025
-
9.3
CRITICALCVE-2016-0088
Hyper-V in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows guest OS users to execute arbitrary code on the host OS via a crafted application, aka "Hyper-V Remote Code Execution Vulnerability."... Read more
- EPSS Score: %1.54
- Published: Apr. 12, 2016
- Modified: Apr. 12, 2025