Vulnerability index

Browse CVEs

10,000+ matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Memory Buffer Bounds ErrorCWE-119 × clear
Excel HIGH 9.3
CVE-2015-6177EPSS 14%

Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office docum…

Mitigation only
Fix from $1,950 2015-12-09
Edge HIGH 9.3
CVE-2015-6168EPSS 31%

Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Micros…

No fix yet
Fix from $1,950 2015-12-09
Edge HIGH 9.3
CVE-2015-6159EPSS 19%

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v…

Mitigation only
Fix from $1,950 2015-12-09
Edge HIGH 9.3
CVE-2015-6158EPSS 17%

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v…

Mitigation only
Fix from $1,950 2015-12-09
Edge HIGH 9.3
CVE-2015-6155EPSS 17%

Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corrup…

Mitigation only
Fix from $1,950 2015-12-09
Edge HIGH 9.3
CVE-2015-6154EPSS 17%

Microsoft Internet Explorer 7 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory cor…

Mitigation only
Fix from $1,950 2015-12-09
Edge HIGH 9.3
CVE-2015-6153EPSS 17%

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v…

Mitigation only
Fix from $1,950 2015-12-09
Edge HIGH 9.3
CVE-2015-6151EPSS 19%

Microsoft Internet Explorer 8 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory cor…

Mitigation only
Fix from $1,950 2015-12-09
Edge HIGH 9.3
CVE-2015-6142EPSS 20%

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v…

Mitigation only
Fix from $1,950 2015-12-09
Edge HIGH 9.3
CVE-2015-6140EPSS 17%

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v…

Mitigation only
Fix from $1,950 2015-12-09
Jscript HIGH 9.3
CVE-2015-6136EPSS 25%

The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remot…

Mitigation only
Fix from $1,950 2015-12-09
Office HIGH 9.3
CVE-2015-6124EPSS 14%

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, and Office Compatibility Pack SP3 allow remote attackers to…

Mitigation only
Fix from $1,950 2015-12-09
Excel HIGH 9.3
CVE-2015-6122EPSS 14%

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbit…

Mitigation only
Fix from $1,950 2015-12-09
Office HIGH 9.3
CVE-2015-6118EPSS 14%

Microsoft Office 2007 SP3 and Office 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office M…

Mitigation only
Fix from $1,950 2015-12-09
Live Meeting HIGH 9.3
CVE-2015-6108EPSS 26%

The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8; Windows 8.1; Windows Server 20…

Patch available
Fix from $1,950 2015-12-09
Live Meeting HIGH 9.3
CVE-2015-6107EPSS 18%

The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 20…

Patch available
Fix from $1,950 2015-12-09
Live Meeting HIGH 9.3
CVE-2015-6106EPSS 17%

The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2…

Mitigation only
Fix from $1,950 2015-12-09
Excel HIGH 9.3
CVE-2015-6040EPSS 14%

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, and Excel Viewer allow remote attack…

Mitigation only
Fix from $1,950 2015-12-09
Android HIGH 9.3
CVE-2015-8507

mediaserver in Android 6.0 before 2015-12-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…

Mitigation only
Fix from $1,950 2015-12-08
Android HIGH 9.3
CVE-2015-8506

mediaserver in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to execute arbitrary code or cause a denial of service (…

Fix: 5.1.1+
Fix from $1,950 2015-12-08
Android HIGH 9.3
CVE-2015-8505

mediaserver in Android before 5.1.1 LMY48Z allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a c…

Fix: after 5.1
Fix from $1,950 2015-12-08
Android HIGH 9.3
CVE-2015-6634

The display drivers in Android before 5.1.1 LMY48Z allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) …

Fix: after 5.1
Fix from $1,950 2015-12-08
Android HIGH 9.3
CVE-2015-6633

The display drivers in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allow remote attackers to execute arbitrary code or cause a denial of se…

Fix: 5.1.1+
Fix from $1,950 2015-12-08
Android HIGH 9.3
CVE-2015-6617

Skia, as used in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01, allows remote attackers to execute arbitrary code or cause a denial of servic…

Fix: 5.1.1+
Fix from $1,950 2015-12-08
Android HIGH 9.3
CVE-2015-6616

mediaserver in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to execute arbitrary code or cause a denial of service (…

Fix: 5.1.1+
Fix from $1,950 2015-12-08
Chrome HIGH 10.0
CVE-2015-8480

The VideoFramePool::PoolImpl::CreateFrame function in media/base/video_frame_pool.cc in Google Chrome before 47.0.2526.73 does not initialize memory …

Fix: after 46.0.2490.86
Fix from $1,950 2015-12-06
Chrome HIGH 7.5
CVE-2015-8479

Use-after-free vulnerability in the AudioOutputDevice::OnDeviceAuthorized function in media/audio/audio_output_device.cc in Google Chrome before 47.0…

Fix: after 46.0.2490.86
Fix from $1,950 2015-12-06
Chrome HIGH 7.5
CVE-2015-6778

The CJBig2_SymbolDict class in fxcodec/jbig2/JBig2_SymbolDict.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, allows remote attackers to…

Fix: after 46.0.2490.86
Fix from $1,950 2015-12-06
Chrome MEDIUM 6.8
CVE-2015-6776

The opj_dwt_decode_1* functions in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 47.0.2526.73, allow remote attackers to cause a denia…

Fix: after 46.0.2490.86
Fix from $1,600 2015-12-06
Chrome HIGH 7.5
CVE-2015-6773

The convolution implementation in Skia, as used in Google Chrome before 47.0.2526.73, does not properly constrain row lengths, which allows remote at…

Fix: after 46.0.2490.86
Fix from $1,950 2015-12-06