Memory Buffer Bounds Error — CVEs by weakness type

Safari MEDIUM 6.8

CVE-2015-3733

WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitra…

Fix: 6.2.8 / 7.1.8+

Fix from $1,600 2015-08-16

Safari MEDIUM 6.8

CVE-2015-3732

WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitra…

Fix: 6.2.8 / 7.1.8+

Fix from $1,600 2015-08-16

Safari MEDIUM 6.8

CVE-2015-3731

WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitra…

Fix: 6.2.8 / 7.1.8+

Fix from $1,600 2015-08-16

Safari MEDIUM 6.8

CVE-2015-3730

WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitra…

Fix: 6.2.8 / 7.1.8+

Fix from $1,600 2015-08-16

Firefox HIGH 9.3

CVE-2015-4493EPSS 7%

Heap-based buffer overflow in the stagefright::ESDS::parseESDescriptor function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x…

Fix: after 39.0.3

Fix from $1,950 2015-08-16

Firefox HIGH 7.5

CVE-2015-4489

The nsTArray_Impl class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 might allow remote attackers to cause…

Fix: after 39.0.3

Fix from $1,950 2015-08-16

Firefox HIGH 7.5

CVE-2015-4487

The nsTSubstring::ReplacePrep function in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 might allow remote att…

Fix: after 39.0.3

Fix from $1,950 2015-08-16

Ubuntu Linux HIGH 10.0

CVE-2015-4486EPSS 7%

The decrease_ref_count function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrar…

Fix: after 39.0.3

Fix from $1,950 2015-08-16

Firefox HIGH 10.0

CVE-2015-4485EPSS 8%

Heap-based buffer overflow in the resize_context_buffers function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows re…

Fix: after 39.0.3

Fix from $1,950 2015-08-16

Ubuntu Linux MEDIUM 5.0

CVE-2015-4484

The js::jit::AssemblerX86Shared::lock_addl function in the JavaScript implementation in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 …

Fix: after 39.0.3

Fix from $1,600 2015-08-16

Firefox HIGH 7.5

CVE-2015-4475

The mozilla::AudioSink function in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 mishandles inconsistent sample formats within MP3 aud…

Fix: after 39.0.3

Fix from $1,950 2015-08-16

Ubuntu Linux HIGH 10.0

CVE-2015-4473EPSS 7%

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to …

Fix: after 39.0.3

Fix from $1,950 2015-08-16

Office HIGH 9.3

CVE-2015-2477EPSS 14%

Microsoft Office 2007 SP3, Office for Mac 2011, Office for Mac 2016, and Word Viewer allow remote attackers to execute arbitrary code via a crafted d…

Mitigation only

Fix from $1,950 2015-08-15

Office HIGH 9.3

CVE-2015-2469EPSS 27%

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, and Office for Mac 2011 allow remote attackers to execute arbitrary code via a crafted docum…

No fix yet

Fix from $1,950 2015-08-15

Office HIGH 9.3

CVE-2015-2468EPSS 30%

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office for Mac 2011, Office for Mac 2016, Office Compatibil…

No fix yet

Fix from $1,950 2015-08-15

Office HIGH 9.3

CVE-2015-2467EPSS 28%

Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerabi…

No fix yet

Fix from $1,950 2015-08-15

Edge HIGH 9.3

CVE-2015-2446EPSS 16%

Microsoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft…

Mitigation only