Archive
20 December 2016
Vulnerabilities first published on this day (UTC), newest first.
44 results · Feed
-
Unscored —
Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.2.0 allows remote attackers to inject arbitrary …
-
Unscored —
In the Create Tags page of the Rapid7 Nexpose version 6.4.12 user interface, any authenticated user who has the capabil…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Horde Text Filter API in Horde Groupware and Horde Groupware Webmail Ed…
-
Unscored —CVE-2016-7264 EPSS 23%
Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, Excel for Mac 2011, and Excel 2016 for Mac allow…
-
Unscored —CVE-2016-7291 EPSS 23%
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automat…
-
Unscored —CVE-2016-7267 EPSS 20%
Microsoft Excel 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016 misparses file formats, which makes it easier for remote atta…
-
Unscored —CVE-2016-7257 EPSS 23%
The GDI component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office for Mac 201…
-
Unscored —
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Serve…
-
Unscored —CVE-2016-7298 EPSS 23%
Microsoft Office 2007 SP3, Office 2010 SP2, Word Viewer, Office for Mac 2011, and Office 2016 for Mac allow remote atta…
-
Unscored —CVE-2016-7276 EPSS 25%
Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office for Mac 2011, and Office 2016 for Mac allow remote …
-
Unscored —CVE-2016-7279 EPSS 15%
Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a…
-
Unscored —CVE-2016-7281 EPSS 13%
The Web Workers implementation in Microsoft Internet Explorer 10 and 11 and Microsoft Edge allows remote attackers to b…
-
Unscored —
The Crypto driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windo…
-
Unscored —
The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary …
-
Unscored —CVE-2016-7278 EPSS 15%
Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory vi…
-
Unscored —CVE-2016-7297 EPSS 27%
The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (…
-
High 7.8
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3,…
KEV Mar 3, 2022 -
Unscored —
The kernel in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 mishandles page-fault system calls, whi…
-
Unscored —
Microsoft Office 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016 mishandles library loading, which allows local users to gain…
-
Unscored —
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,…
-
Unscored —
The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (…
-
Unscored —CVE-2016-7263 EPSS 20%
Microsoft Excel for Mac 2011 and Excel 2016 for Mac allow remote attackers to execute arbitrary code or cause a denial …
-
Unscored —CVE-2016-7272 EPSS 39%
The Graphics component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, …
-
Unscored —CVE-2016-7206 EPSS 12%
Cross-site scripting (XSS) vulnerability in Microsoft Edge allows remote attackers to inject arbitrary web script or HT…
-
Unscored —
The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 …
-
Unscored —CVE-2016-7290 EPSS 23%
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automat…
-
Unscored —CVE-2016-7296 EPSS 17%
The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (…
-
Unscored —
The Graphics Component in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, W…
-
Unscored —CVE-2016-7268 EPSS 23%
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word for Mac 2011,…
-
Unscored —CVE-2016-7283 EPSS 18%
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…
-
Unscored —
The Secure Kernel Mode implementation in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allows local…
-
Unscored —
The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (…
-
Unscored —CVE-2016-7282 EPSS 10%
Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allows remote a…
-
Unscored —CVE-2016-7265 EPSS 22%
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3,…
-
Unscored —CVE-2016-7284 EPSS 15%
Microsoft Internet Explorer 10 and 11 allows remote attackers to obtain sensitive information from process memory via a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Microsoft Edge allows remote attackers to inject arbitrary web script or HT…
-
Unscored —CVE-2016-7266 EPSS 23%
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3,…
-
Unscored —CVE-2016-7181 EPSS 14%
Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…
-
Unscored —CVE-2016-7273 EPSS 19%
The Graphics component in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allows remote attackers to …
-
Unscored —CVE-2016-7270 EPSS 23%
The Data Provider for SQL Server in Microsoft .NET Framework 4.6.2 mishandles a developer-supplied key, which allows re…