Vulnerability index

Browse CVEs

10,000+ matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Memory Buffer Bounds ErrorCWE-119 × clear
HIGH 9.3 CVE-2015-6177EPSS 14% Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office docum… Excel Mitigation only Fix from $1,9502015-12-09 HIGH 9.3 CVE-2015-6168EPSS 31% Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Micros… Edge No fix yet Fix from $1,9502015-12-09 HIGH 9.3 CVE-2015-6159EPSS 19% Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v… Edge Mitigation only Fix from $1,9502015-12-09 HIGH 9.3 CVE-2015-6158EPSS 17% Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v… Edge Mitigation only Fix from $1,9502015-12-09 HIGH 9.3 CVE-2015-6155EPSS 17% Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corrup… Edge Mitigation only Fix from $1,9502015-12-09 HIGH 9.3 CVE-2015-6154EPSS 17% Microsoft Internet Explorer 7 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory cor… Edge Mitigation only Fix from $1,9502015-12-09 HIGH 9.3 CVE-2015-6153EPSS 17% Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v… Edge Mitigation only Fix from $1,9502015-12-09 HIGH 9.3 CVE-2015-6151EPSS 19% Microsoft Internet Explorer 8 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory cor… Edge Mitigation only Fix from $1,9502015-12-09 HIGH 9.3 CVE-2015-6142EPSS 20% Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v… Edge Mitigation only Fix from $1,9502015-12-09 HIGH 9.3 CVE-2015-6140EPSS 17% Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v… Edge Mitigation only Fix from $1,9502015-12-09 HIGH 9.3 CVE-2015-6136EPSS 25% The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remot… Jscript Mitigation only Fix from $1,9502015-12-09 HIGH 9.3 CVE-2015-6124EPSS 14% Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, and Office Compatibility Pack SP3 allow remote attackers to… Office Mitigation only Fix from $1,9502015-12-09 HIGH 9.3 CVE-2015-6122EPSS 14% Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbit… Excel Mitigation only Fix from $1,9502015-12-09 HIGH 9.3 CVE-2015-6118EPSS 14% Microsoft Office 2007 SP3 and Office 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office M… Office Mitigation only Fix from $1,9502015-12-09 HIGH 9.3 CVE-2015-6108EPSS 26% The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8; Windows 8.1; Windows Server 20… Live Meeting Patch available Fix from $1,9502015-12-09 HIGH 9.3 CVE-2015-6107EPSS 18% The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 20… Live Meeting Patch available Fix from $1,9502015-12-09 HIGH 9.3 CVE-2015-6106EPSS 17% The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2… Live Meeting Mitigation only Fix from $1,9502015-12-09 HIGH 9.3 CVE-2015-6040EPSS 14% Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, and Excel Viewer allow remote attack… Excel Mitigation only Fix from $1,9502015-12-09 HIGH 9.3 CVE-2015-8507 mediaserver in Android 6.0 before 2015-12-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a… Android Mitigation only Fix from $1,9502015-12-08 HIGH 9.3 CVE-2015-8506 mediaserver in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to execute arbitrary code or cause a denial of service (… Android 5.1.1+ Fix from $1,9502015-12-08 HIGH 9.3 CVE-2015-8505 mediaserver in Android before 5.1.1 LMY48Z allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a c… Android after 5.1 Fix from $1,9502015-12-08 HIGH 9.3 CVE-2015-6634 The display drivers in Android before 5.1.1 LMY48Z allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) … Android after 5.1 Fix from $1,9502015-12-08 HIGH 9.3 CVE-2015-6633 The display drivers in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allow remote attackers to execute arbitrary code or cause a denial of se… Android 5.1.1+ Fix from $1,9502015-12-08 HIGH 9.3 CVE-2015-6617 Skia, as used in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01, allows remote attackers to execute arbitrary code or cause a denial of servic… Android 5.1.1+ Fix from $1,9502015-12-08 HIGH 9.3 CVE-2015-6616 mediaserver in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to execute arbitrary code or cause a denial of service (… Android 5.1.1+ Fix from $1,9502015-12-08 HIGH 10.0 CVE-2015-8480 The VideoFramePool::PoolImpl::CreateFrame function in media/base/video_frame_pool.cc in Google Chrome before 47.0.2526.73 does not initialize memory … Chrome after 46.0.2490.86 Fix from $1,9502015-12-06 HIGH 7.5 CVE-2015-8479 Use-after-free vulnerability in the AudioOutputDevice::OnDeviceAuthorized function in media/audio/audio_output_device.cc in Google Chrome before 47.0… Chrome after 46.0.2490.86 Fix from $1,9502015-12-06 HIGH 7.5 CVE-2015-6778 The CJBig2_SymbolDict class in fxcodec/jbig2/JBig2_SymbolDict.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, allows remote attackers to… Chrome after 46.0.2490.86 Fix from $1,9502015-12-06 MEDIUM 6.8 CVE-2015-6776 The opj_dwt_decode_1* functions in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 47.0.2526.73, allow remote attackers to cause a denia… Chrome after 46.0.2490.86 Fix from $1,6002015-12-06 HIGH 7.5 CVE-2015-6773 The convolution implementation in Skia, as used in Google Chrome before 47.0.2526.73, does not properly constrain row lengths, which allows remote at… Chrome after 46.0.2490.86 Fix from $1,9502015-12-06