Week 10, 2016
7–13 March 2016
Newly exploited 0
Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.
No newly exploited vulnerabilities were reported this week.
Not critical, but likely targeted
New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.
-
Unscored
CVE-2016-2774 ISC DHCP 4.1.x before 4.1-ESV-R13 and 4.2.x and 4.3.x before 4.3.4 does not restrict the number of concurrent TCP sessions, which allows remote attackers to ca…EPSS 74%
-
Unscored
CVE-2016-0117 The PDF library in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbi…EPSS 72%
-
Unscored
CVE-2016-1286 named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via …EPSS 61%
-
Unscored
CVE-2016-1285 named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote…EPSS 58%
-
Unscored
CVE-2016-0092 OLE in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Window…EPSS 57%
-
Unscored
CVE-2016-0100 Microsoft Windows Vista SP2 and Server 2008 SP2 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Library …EPSS 57%
-
Unscored
CVE-2016-0111 Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v…EPSS 39%
-
Unscored
CVE-2016-0108 Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "…EPSS 39%
Advisories
- Ubuntu Security Notices (USN) 10
- SUSE / openSUSE Security Updates 10
- Debian Security (DSA / DLA) 8
- Oracle Linux Security Advisories (ELSA) 52 critical
- CISA ICS & IT advisories 31 critical
- BSI CERT-Bund (WID) 2
- ELSA-2016-0373 Critical: firefox security update (Oracle Linux 7) 26 CVEs
- ICSA-16-159-01 Trihedral Engineering Limited VTScada Vulnerabilities 3 CVEs
- ELSA-2016-0370 Critical: nss-util security update (Oracle Linux 7) 1 CVEs