Skip to content
OpenAdvisories

Archive

September 2016

Vulnerabilities first published in this month (UTC), newest first.

← August 2016 2016 / September October 2016 →
  1. 116
  2. 219
  3. 38
  4. 4 
  5. 5 
  6. 66
  7. 737
  8. 84
  9. 914
  10. 101
  11. 1161
  12. 1224
  13. 13 
  14. 1476
  15. 15 
  16. 1615
  17. 1716
  18. 1828
  19. 199
  20. 2022
  21. 2143
  22. 2230
  23. 23 
  24. 2411
  25. 2577
  26. 2657
  27. 279
  28. 283
  29. 296
  30. 305
All Critical High Medium Low Exploited only Public exploit

597 results · Feed

  • Unscored —
    CVE-2016-3367 EPSS 18%

    StringBuilder in Microsoft Silverlight 5 before 5.1.50709.0 does not properly allocate memory for string-insert and str…

  • Unscored —
    CVE-2016-3330 EPSS 14%

    Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…

  • Unscored —
    CVE-2016-3291 EPSS 13%

    Microsoft Internet Explorer 11 and Microsoft Edge mishandle cross-origin requests, which allows remote attackers to obt…

  • Unscored —
    CVE-2016-3375 EPSS 17%

    The OLE Automation mechanism and VBScript scripting engine in Microsoft Internet Explorer 9 through 11, Windows Vista S…

  • Unscored —
    CVE-2016-3378 EPSS 15%

    Open redirect vulnerability in Microsoft Exchange Server 2013 SP1, 2013 Cumulative Update 12, 2013 Cumulative Update 13…

  • Unscored —
    CVE-2016-3364 EPSS 19%

    Microsoft Visio 2016 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Me…

  • Unscored —
    CVE-2016-3295 EPSS 15%

    Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a de…

  • Unscored —
    CVE-2016-3374 EPSS 26%

    The PDF library in Microsoft Edge, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1…

  • High 7.5
    CVE-2016-3350 EPSS 15%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CV…

    Microsoft.ChakraCore NuGet
  • Unscored —
    CVE-2016-3371 Public exploit EPSS 40%

    The kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows …

  • Unscored —
    CVE-2016-3344

    The Secure Kernel Mode feature in Microsoft Windows 10 Gold and 1511 allows local users to obtain sensitive information…

  • Unscored —
    CVE-2016-3292

    Microsoft Internet Explorer 10 and 11 mishandles integrity settings and zone settings, which allows remote attackers to…

  • Unscored —
    CVE-2016-3379

    Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2016 Cumulative Update 1 and 2 allows remote atta…

  • Unscored —
    CVE-2016-3373 Public exploit EPSS 17%

    The kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows …

  • Unscored —
    CVE-2016-3349

    The kernel-mode drivers in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold …

  • Unscored —
    CVE-2016-3365 EPSS 20%

    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3,…

  • Medium 6.5
    CVE-2016-3351 Exploited · Ransomware EPSS 26%

    Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain sensitive information via …

    KEV May 24, 2022
  • Unscored —
    CVE-2016-3297 EPSS 23%

    Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a…

  • Unscored —
    CVE-2016-3324 Public exploit EPSS 28%

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2016-3355

    The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, …

  • Unscored —
    CVE-2016-3362 EPSS 17%

    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3,…

  • Unscored —
    CVE-2016-3348 EPSS 13%

    The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,…

  • Unscored —
    CVE-2016-3306

    The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Serv…

  • Unscored —
    CVE-2016-3346

    Microsoft Windows 10 Gold, 1511, and 1607 does not properly enforce permissions, which allows local users to obtain Adm…

  • Unscored —
    CVE-2016-3359 EPSS 17%

    Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to exe…

  • Unscored —
    CVE-2016-3358 EPSS 18%

    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel 2016 for Mac, Office Com…

  • Unscored —
    CVE-2016-3325 Public exploit EPSS 54%

    Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted …

  • Unscored —
    CVE-2016-3305

    The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Serv…

  • Unscored —
    CVE-2016-3369 EPSS 12%

    Microsoft Windows 10 Gold and 1511 allows attackers to cause a denial of service via unspecified vectors, aka "Windows …

  • Unscored —
    CVE-2016-3356 EPSS 19%

    The Graphics Device Interface (GDI) in Microsoft Windows 10 1607 allows remote attackers to execute arbitrary code via …

  • Unscored —
    CVE-2016-3247 Public exploit EPSS 71%

    Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of…

  • Unscored —
    CVE-2016-3360 EPSS 17%

    Microsoft PowerPoint 2007 SP3, PowerPoint 2010 SP2, PowerPoint 2013 SP1, PowerPoint 2013 RT SP1, PowerPoint 2016 for Ma…

  • Unscored —
    CVE-2016-3370 EPSS 22%

    The PDF library in Microsoft Edge, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1…

  • Unscored —
    CVE-2016-3372

    The kernel API in Microsoft Windows Vista SP2 and Windows Server 2008 SP2 does not properly enforce permissions, which …

  • Unscored —
    CVE-2016-3294 EPSS 14%

    Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…

  • Unscored —
    CVE-2016-3361 EPSS 17%

    Microsoft Excel 2010 SP2 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Offic…

  • Unscored —
    CVE-2016-3368 EPSS 18%

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold a…

  • Unscored —
    CVE-2016-3353 EPSS 12%

    Microsoft Internet Explorer 9 through 11 mishandles .url files from the Internet zone, which allows remote attackers to…

  • High 7.5
    CVE-2016-3377 EPSS 16%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CV…

    Microsoft.ChakraCore NuGet
  • Unscored —
    CVE-2016-3381 EPSS 15%

    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3,…