Skip to content
OpenAdvisories

Archive

11 May 2016

Vulnerabilities first published on this day (UTC), newest first.

← April 2016 2016 / May /11 June 2016 →
  1. 18
  2. 236
  3. 34
  4. 4 
  5. 525
  6. 67
  7. 718
  8. 8 
  9. 941
  10. 105
  11. 11156
  12. 125
  13. 1325
  14. 1425
  15. 153
  16. 1627
  17. 1713
  18. 184
  19. 191
  20. 2084
  21. 212
  22. 2240
  23. 2328
  24. 241
  25. 2513
  26. 2614
  27. 27 
  28. 283
  29. 292
  30. 307
  31. 3115
All Critical High Medium Low Exploited only Public exploit

156 results · Feed

  • Unscored —
    CVE-2016-0183 EPSS 16%

    The Windows font library in Microsoft Office 2010 SP2, Word 2010 SP2, Word Automation Services on SharePoint Server 201…

  • Unscored —
    CVE-2016-0192 EPSS 17%

    Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a…

  • Unscored —
    CVE-2016-0182 EPSS 20%

    Windows Journal in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, and Windows 10 Gold and 151…

  • Unscored —
    CVE-2016-0152

    Internet Information Services (IIS) in Microsoft Windows Vista SP2 and Server 2008 SP2 mishandles library loading, whic…

  • High 7.5
    CVE-2016-0189 Exploited · Ransomware Public exploit EPSS 94%

    The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other…

    KEV Mar 28, 2022
  • Unscored —
    CVE-2016-0190

    Volume Manager Driver in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT 8.1 does not properly c…

  • Unscored —
    CVE-2016-0187 EPSS 22%

    The Microsoft (1) JScript 5.8 and (2) VBScript 5.8 engines, as used in Internet Explorer 9 through 11 and other product…

  • Unscored —
    CVE-2016-0184 EPSS 19%

    Use-after-free vulnerability in GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, …

  • High 7.8
    CVE-2016-0185 Exploited Public exploit EPSS 70%

    Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, and Windows 8.1 allows remote attackers to execute arbitrar…

    KEV Nov 3, 2021
  • Unscored —
    CVE-2016-0170 Public exploit EPSS 49%

    GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012…

  • Unscored —
    CVE-2016-0169 Public exploit EPSS 43%

    GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012…

  • Unscored —
    CVE-2016-0181

    Microsoft Windows 10 Gold and 1511 allows local users to bypass the Virtual Secure Mode Hypervisor Code Integrity (HVCI…

  • Unscored —
    CVE-2016-0196

    The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,…

  • Unscored —
    CVE-2016-0194 EPSS 16%

    Microsoft Internet Explorer 10 and 11 allows remote attackers to bypass file permissions and obtain sensitive informati…

  • Unscored —
    CVE-2016-0126 EPSS 20%

    Microsoft Office 2013 SP1, 2013 RT SP1, and 2016 allows remote attackers to execute arbitrary code via a crafted Office…

  • Unscored —
    CVE-2016-0171 Public exploit

    The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,…

  • Unscored —
    CVE-2016-0149

    Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 allows man-in-the-middle attackers to obta…

  • Unscored —
    CVE-2016-0178 EPSS 17%

    The RPC NDR Engine in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Wind…

  • Unscored —
    CVE-2016-0174

    The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,…

  • Unscored —
    CVE-2016-0176

    dxgkrnl.sys in the DirectX Graphics kernel subsystem in the kernel-mode drivers in Microsoft Windows 7 SP1, Windows Ser…

  • Unscored —
    CVE-2016-0188 EPSS 18%

    The User Mode Code Integrity (UMCI) implementation in Device Guard in Microsoft Internet Explorer 11 allows remote atta…

  • Unscored —
    CVE-2016-0180

    The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Serv…

  • High 7.5
    CVE-2016-0186 EPSS 19%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CV…

    Microsoft.ChakraCore NuGet
  • Unscored —
    CVE-2016-0195 EPSS 18%

    The Imaging Component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, W…

  • Unscored —
    CVE-2016-0179 EPSS 24%

    Windows Shell in Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows rem…

  • Unscored —
    CVE-2016-0175

    The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,…

  • High 7.5
    CVE-2016-0191 EPSS 28%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CV…

    Microsoft.ChakraCore NuGet
  • Unscored —
    CVE-2016-0197

    dxgkrnl.sys in the DirectX Graphics kernel subsystem in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows…

  • Unscored —
    CVE-2016-0173 Public exploit

    The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,…

  • High 7.5
    CVE-2016-0193 EPSS 20%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CV…

    Microsoft.ChakraCore NuGet
  • Unscored —
    CVE-2016-0140 EPSS 19%

    Microsoft Office 2007 SP3, Office 2010 SP2, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps…

  • Unscored —
    CVE-2016-0168 Public exploit EPSS 43%

    GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012…

  • Unscored —
    CVE-2016-1114

    Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 allows remote attackers to execute a…

  • Unscored —
    CVE-2016-1115

    Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 mishandles wildcards in name fields …

  • Unscored —
    CVE-2016-1113

    Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before U…

  • High 7.8
    CVE-2016-4117 Exploited · Ransomware Public exploit EPSS 94%

    Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as…

    flashplugin-nonfree Ubuntu
    KEV Mar 3, 2022