Skip to content
OpenAdvisories

Archive

14 October 2016

Vulnerabilities first published on this day (UTC), newest first.

← September 2016 2016 / October /14 November 2016 →
  1. 13
  2. 2 
  3. 345
  4. 4 
  5. 552
  6. 642
  7. 713
  8. 8 
  9. 91
  10. 10108
  11. 11 
  12. 12 
  13. 1399
  14. 1438
  15. 15 
  16. 1614
  17. 178
  18. 18 
  19. 19 
  20. 20 
  21. 2110
  22. 229
  23. 23 
  24. 24 
  25. 25162
  26. 266
  27. 2718
  28. 2835
  29. 296
  30. 306
  31. 3113
All Critical High Medium Low Exploited only Public exploit

38 results · Feed

  • Medium 5.9
    CVE-2005-4900

    SHA-1 is not collision resistant, which makes it easier for context-dependent attackers to conduct spoofing attacks, as…

  • Unscored —
    CVE-2016-0142 EPSS 20%

    Video Control in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, and Windows 10 Gold, 1511, an…

  • Unscored —
    CVE-2016-0079 Public exploit

    The kernel in Microsoft Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application…

  • Unscored —
    CVE-2016-0073 Public exploit

    The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 16…

  • Unscored —
    CVE-2016-0070 Public exploit EPSS 11%

    The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Serv…

  • Unscored —
    CVE-2016-0075 Public exploit

    The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 16…

  • High 7.5
    CVE-2016-7190 Public exploit EPSS 67%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CV…

    Microsoft.ChakraCore NuGet
  • High 7.5
    CVE-2016-7194 Public exploit EPSS 58%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CV…

    Microsoft.ChakraCore NuGet
  • High 7.5
    CVE-2016-7189 Public exploit EPSS 48%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Remote Code Execution Vulnerability."

    Microsoft.ChakraCore NuGet
  • Unscored —
    CVE-2016-7182 Public exploit EPSS 30%

    The Graphics component in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; …

  • Unscored —
    CVE-2016-7211

    The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,…

  • High 7.8
    CVE-2016-7193 Exploited EPSS 58%

    Microsoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for …

    KEV Mar 3, 2022
  • Unscored —
    CVE-2016-7188 Public exploit

    The Standard Collector Service in Windows Diagnostics Hub in Microsoft Windows 10 Gold, 1511, and 1607 mishandles libra…

  • Unscored —
    CVE-2016-7185 Public exploit

    The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,…

  • Unscored —
    CVE-2016-3385 EPSS 23%

    The scripting engine in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or c…

  • Unscored —
    CVE-2016-3056

    Cross-site scripting (XSS) vulnerability in Business Space in IBM Business Process Manager 7.5 through 7.5.1.2, 8.0 thr…

  • Unscored —
    CVE-2016-3392

    The Edge Content Security Policy feature in Microsoft Edge does not properly validate documents, which allows remote at…

  • Unscored —
    CVE-2016-3263 EPSS 32%

    Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows…

  • Unscored —
    CVE-2016-3262 EPSS 32%

    Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows…

  • Unscored —
    CVE-2016-3266

    The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,…

  • High 7.5
    CVE-2016-3382 EPSS 17%

    ChakraCore RCE Vulnerability

    The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, as demonstrated by the Chakra JavaScript engine, aka…

    Microsoft.ChakraCore NuGet
  • Unscored —
    CVE-2016-3341

    The kernel-mode drivers in Transaction Manager in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.…

  • Unscored —
    CVE-2016-3388 Public exploit EPSS 28%

    Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, which a…

  • Medium 6.5
    CVE-2016-3298 Exploited EPSS 33%

    Microsoft Internet Explorer 9 through 11 and the Internet Messaging API in Windows Vista SP2, Windows Server 2008 SP2 a…

    KEV May 24, 2022
  • High 7.5
    CVE-2016-3386 Public exploit EPSS 41%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CV…

    Microsoft.ChakraCore NuGet
  • Unscored —
    CVE-2016-3376 Public exploit EPSS 13%

    The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,…

  • Unscored —
    CVE-2016-3267 EPSS 16%

    Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to determine the existence of unspec…

  • Unscored —
    CVE-2016-3331 EPSS 14%

    Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of…

  • Unscored —
    CVE-2016-3384 EPSS 13%

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2016-3270

    The Graphics component in the kernel in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1;…

  • High 7.8
    CVE-2016-3393 Exploited EPSS 68%

    Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows…

    KEV May 25, 2022
  • High 7.5
    CVE-2016-3389 EPSS 15%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CV…

    Microsoft.ChakraCore NuGet
  • Unscored —
    CVE-2016-3383 EPSS 14%

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (m…

  • Unscored —
    CVE-2016-3391

    Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow context-dependent attackers to discover credentials by l…

  • High 7.5
    CVE-2016-3390 EPSS 17%

    ChakraCore RCE Vulnerability

    The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, as demonstrated by the Chakra JavaScript engine, aka "Scriptin…

    Microsoft.ChakraCore NuGet
  • Unscored —
    CVE-2016-3209 Public exploit EPSS 54%

    Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows…

  • Unscored —
    CVE-2016-3387 Public exploit EPSS 20%

    Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, which a…

  • Unscored —
    CVE-2016-3396 EPSS 24%

    Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows…