Archive

May 2016

Vulnerabilities first published in this month (UTC), newest first.

← April 2016 2016 / May June 2016 →

All Critical High Medium Low Exploited only Public exploit

612 results · Feed

High 7.8

CVE-2016-0185 Exploited Public exploit EPSS 70%

Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, and Windows 8.1 allows remote attackers to execute arbitrar…

May 11, 2016
KEV Nov 3, 2021
Unscored —

CVE-2016-0170 Public exploit EPSS 49%

GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012…

May 11, 2016
Unscored —

CVE-2016-0169 Public exploit EPSS 43%

GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012…

May 11, 2016
Unscored —

CVE-2016-0181

Microsoft Windows 10 Gold and 1511 allows local users to bypass the Virtual Secure Mode Hypervisor Code Integrity (HVCI…

May 11, 2016
Unscored —

CVE-2016-0196

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,…

May 11, 2016
Unscored —

CVE-2016-0194 EPSS 16%

Microsoft Internet Explorer 10 and 11 allows remote attackers to bypass file permissions and obtain sensitive informati…

May 11, 2016
Unscored —

CVE-2016-0126 EPSS 20%

Microsoft Office 2013 SP1, 2013 RT SP1, and 2016 allows remote attackers to execute arbitrary code via a crafted Office…

May 11, 2016
Unscored —

CVE-2016-0171 Public exploit

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,…

May 11, 2016
Unscored —

CVE-2016-0149

Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 allows man-in-the-middle attackers to obta…

May 11, 2016
Unscored —

CVE-2016-0178 EPSS 17%

The RPC NDR Engine in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Wind…

May 11, 2016
Unscored —

CVE-2016-0174

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,…

May 11, 2016
Unscored —

CVE-2016-0176

dxgkrnl.sys in the DirectX Graphics kernel subsystem in the kernel-mode drivers in Microsoft Windows 7 SP1, Windows Ser…

May 11, 2016
Unscored —

CVE-2016-0188 EPSS 18%

The User Mode Code Integrity (UMCI) implementation in Device Guard in Microsoft Internet Explorer 11 allows remote atta…

May 11, 2016
Unscored —

CVE-2016-0180

The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Serv…

May 11, 2016
High 7.5

CVE-2016-0186 EPSS 19%

ChakraCore RCE Vulnerability

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CV…

Microsoft.ChakraCore NuGet

May 11, 2016
Unscored —

CVE-2016-0195 EPSS 18%

The Imaging Component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, W…

May 11, 2016
Unscored —

CVE-2016-0179 EPSS 24%

Windows Shell in Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows rem…

May 11, 2016
Unscored —

CVE-2016-0175

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,…

May 11, 2016
High 7.5

CVE-2016-0191 EPSS 28%

ChakraCore RCE Vulnerability

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CV…

Microsoft.ChakraCore NuGet

May 11, 2016
Unscored —

CVE-2016-0197

dxgkrnl.sys in the DirectX Graphics kernel subsystem in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows…

May 11, 2016
Unscored —

CVE-2016-0173 Public exploit

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,…

May 11, 2016
High 7.5

CVE-2016-0193 EPSS 20%

ChakraCore RCE Vulnerability

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CV…

Microsoft.ChakraCore NuGet

May 11, 2016
Unscored —

CVE-2016-0140 EPSS 19%

Microsoft Office 2007 SP3, Office 2010 SP2, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps…

May 11, 2016
Unscored —

CVE-2016-0168 Public exploit EPSS 43%

GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012…

May 11, 2016
Unscored —

CVE-2016-1114

Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 allows remote attackers to execute a…

May 11, 2016
Unscored —

CVE-2016-1115

Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 mishandles wildcards in name fields …

May 11, 2016
Unscored —

CVE-2016-1113

Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before U…

May 11, 2016
High 7.8

CVE-2016-4117 Exploited · Ransomware Public exploit EPSS 94%

Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as…

flashplugin-nonfree Ubuntu

May 11, 2016
KEV Mar 3, 2022
Unscored —

CVE-2016-4556 EPSS 23%

Double free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a d…

squid3 Ubuntu

May 10, 2016
Unscored —

CVE-2016-4553 EPSS 80%

client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI …

squid3 Ubuntu

May 10, 2016
Unscored —

CVE-2016-4561

Cross-site scripting (XSS) vulnerability in the cgierror function in CGI.pm in ikiwiki before 3.20160506 might allow re…

ikiwiki ikiwiki Debian Ubuntu

May 10, 2016
Unscored —

CVE-2016-4555 EPSS 18%

client_side_request.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of serv…

squid3 Ubuntu

May 10, 2016
Unscored —

CVE-2016-4554 EPSS 39%

mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin restrictions and possibly …

squid squid3 Debian Ubuntu

May 10, 2016
Unscored —

CVE-2015-5208

Apache Cordova iOS before 4.0.0 allows remote attackers to execute arbitrary plugins via a link.

May 9, 2016
Unscored —

CVE-2015-5207

Apache Cordova iOS before 4.0.0 might allow attackers to bypass a URL whitelist protection mechanism in an app and load…

May 9, 2016
Unscored —

CVE-2016-4350 EPSS 70%

Multiple SQL injection vulnerabilities in the Web Services web server in SolarWinds Storage Resource Monitor (SRM) Prof…

May 9, 2016
High 8.8

CVE-2016-3105

Mercurial vulnerable to arbitrary code execution when converting Git repos

The convert extension in Mercurial before 3.8 might allow context-dependent attackers to execute arbitrary code via a crafted git repository name.

mercurial mercurial mercurial Debian Ubuntu PyPI

May 9, 2016
Unscored —

CVE-2015-0571

The WLAN (aka Wi-Fi) driver for the Linux kernel 3.x and 4.x, as used in Qualcomm Innovation Center (QuIC) Android cont…

May 9, 2016
Unscored —

CVE-2015-0570

Stack-based buffer overflow in the SET_WPS_IE IOCTL implementation in wlan_hdd_hostapd.c in the WLAN (aka Wi-Fi) driver…

May 9, 2016
Unscored —

CVE-2015-0569 Public exploit

Heap-based buffer overflow in the private wireless extensions IOCTL implementation in wlan_hdd_wext.c in the WLAN (aka …

May 9, 2016