Skip to content
OpenAdvisories

Archive

March 2016

Vulnerabilities first published in this month (UTC), newest first.

330 results · Feed

  • Unscored —

    The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, …

  • Unscored —
    CVE-2016-0094 Public exploit

    The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, …

  • Unscored —

    Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2016 does not properly sign an unspecified binary file, which allows…

  • Unscored —
    CVE-2016-0107 EPSS 16%

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2016-0123 EPSS 16%

    Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…

  • Unscored —
    CVE-2016-0117 EPSS 72%

    The PDF library in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511…

  • Unscored —
    CVE-2016-0130 EPSS 13%

    Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…

  • Unscored —
    CVE-2016-0102 EPSS 16%

    Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of…

  • Unscored —
    CVE-2016-0092 EPSS 57%

    OLE in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012…

  • Unscored —

    Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…

  • Unscored —
    CVE-2016-0101 EPSS 20%

    Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and …

  • Unscored —
    CVE-2016-0110 EPSS 14%

    Microsoft Internet Explorer 10 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause …

  • Unscored —
    CVE-2016-0120 Public exploit EPSS 37%

    The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windo…

  • Unscored —
    CVE-2016-0111 Public exploit EPSS 39%

    Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a…

  • Unscored —
    CVE-2016-0093 Public exploit

    The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, …

  • Unscored —

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 do not properly validate handles, wh…

  • Unscored —
    CVE-2016-0112 EPSS 16%

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2016-0114 EPSS 16%

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…

  • Unscored —
    CVE-2016-0021 EPSS 24%

    Microsoft InfoPath 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted Off…

  • Unscored —
    CVE-2016-0132 EPSS 21%

    Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 mishandles signature validation for unspec…

  • Unscored —
    CVE-2016-0129 EPSS 13%

    Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…

  • Unscored —
    CVE-2016-0108 Public exploit EPSS 39%

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…

  • Unscored —
    CVE-2016-0125 EPSS 12%

    Microsoft Edge mishandles the Referer policy, which allows remote attackers to obtain sensitive browser-history and req…

  • Unscored —
    CVE-2016-0100 Public exploit EPSS 57%

    Microsoft Windows Vista SP2 and Server 2008 SP2 mishandle library loading, which allows local users to gain privileges …

  • Unscored —
    CVE-2016-0124 EPSS 13%

    Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…

  • Unscored —
    CVE-2016-0106 EPSS 16%

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…

  • Unscored —
    CVE-2016-0095 Public exploit

    The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, …

  • Unscored —

    The USB Mass Storage Class driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Wi…

  • Unscored —

    Untrusted search path vulnerability in Adobe Reader and Acrobat before 11.0.15, Acrobat and Acrobat Reader DC Classic b…

  • Unscored —

    Adobe Reader and Acrobat before 11.0.15, Acrobat and Acrobat Reader DC Classic before 15.006.30121, and Acrobat and Acr…

  • Unscored —

    Adobe Reader and Acrobat before 11.0.15, Acrobat and Acrobat Reader DC Classic before 15.006.30121, and Acrobat and Acr…

  • Unscored —

    The PPB_Flash_MessageLoop_Impl::InternalRun function in content/renderer/pepper/ppb_flash_message_loop_impl.cc in the P…

  • Unscored —

    Use-after-free vulnerability in the StyleResolver::appendCSSStyleSheet function in WebKit/Source/core/css/resolver/Styl…

  • Unscored —

    extensions/renderer/resources/platform_app.js in the Extensions subsystem in Google Chrome before 49.0.2623.75 does not…

  • Unscored —

    Use-after-free vulnerability in browser/extensions/api/webrtc_audio_private/webrtc_audio_private_api.cc in the WebRTC A…

  • Unscored —

    The ContainerNode::parserRemoveChild function in WebKit/Source/core/dom/ContainerNode.cpp in Blink, as used in Google C…

  • Unscored —

    The Web Store inline-installer implementation in the Extensions UI in Google Chrome before 49.0.2623.75 does not block …

  • Unscored —

    The Extensions subsystem in Google Chrome before 49.0.2623.75 does not properly maintain own properties, which allows r…

  • Unscored —

    Multiple unspecified vulnerabilities in Google Chrome before 49.0.2623.75 allow attackers to cause a denial of service …

  • Unscored —

    extensions/renderer/render_frame_observer_natives.cc in Google Chrome before 49.0.2623.75 does not properly consider ob…