Browse CVEs

MEDIUM 6.8 CVE-2015-6111EPSS 8% IPSec in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandles encrypti… Windows 10 Patch available Fix from $1,6002015-11-11 HIGH 9.3 CVE-2015-0086EPSS 13% Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 Gold and SP1, Word 2013 RT Gold and SP1, Word Viewer, Office Compatibility Pack SP… Office Mitigation only Fix from $1,9502015-03-11 HIGH 9.3 CVE-2015-0032EPSS 22% vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 8 through 11 and other products, allows remote attackers to execut… Vbscript Mitigation only Fix from $1,9502015-03-11 HIGH 9.3 CVE-2015-0064EPSS 30% Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Automation Services in SharePoint Server 2010, Web Applications 2010 SP2, Word Viewer, … Web Applications No fix yet Fix from $1,9502015-02-11 HIGH 9.3 CVE-2015-0065EPSS 30% Microsoft Word 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office docum… Word No fix yet Fix from $1,9502015-02-11 HIGH 9.3 CVE-2015-0063EPSS 16% Microsoft Excel 2007 SP3; the proofing tools in Office 2010 SP2; Excel 2010 SP2; Excel 2013 Gold, SP1, and RT; Excel Viewer; and Office Compatibility… Office Compatibility Pack Patch available Fix from $1,9502015-02-11 HIGH 9.3 CVE-2014-6363EPSS 28% vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 6 through 11 and other products, allows remote attackers to execut… Vbscript No fix yet Fix from $1,9502014-12-11 HIGH 10.0 CVE-2014-4121EPSS 19% Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 does not properly parse internationalized resource identifiers, which allows r… .net Framework Mitigation only Fix from $1,9502014-10-15 MEDIUM 5.0 CVE-2014-4072EPSS 31% Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 does not properly use a hash table for request data, which a… .net Framework Mitigation only Fix from $1,6002014-09-10 MEDIUM 6.8 CVE-2014-4061EPSS 26% Microsoft SQL Server 2008 SP3, 2008 R2 SP2, and 2012 SP1 does not properly control use of stack memory for processing of T-SQL batch commands, which … Sql Server Mitigation only Fix from $1,6002014-08-12 HIGH 7.5 CVE-2014-0316EPSS 11% Memory leak in the Local RPC (LRPC) server implementation in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Ser… Windows 7 Patch available Fix from $1,9502014-08-12 MEDIUM 5.0 CVE-2014-1811EPSS 18% The TCP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012… Windows 7 Patch available Fix from $1,6002014-06-11 MEDIUM 5.0 CVE-2014-2730EPSS 12% The XML parser in Microsoft Office 2007 SP3, 2010 SP1 and SP2, and 2013, and Office for Mac 2011, does not properly detect recursion during entity ex… Office Mitigation only Fix from $1,6002014-04-05 HIGH 7.1 CVE-2013-6801EPSS 14% Microsoft Word 2003 SP2 and SP3 on Windows XP SP3 allows remote attackers to cause a denial of service (CPU consumption) via a malformed .doc file co… Word No fix yet Fix from $1,9502013-11-18 HIGH 9.3 CVE-2013-3870EPSS 19% Double free vulnerability in Microsoft Outlook 2007 SP3 and 2010 SP1 and SP2 allows remote attackers to execute arbitrary code by including many nest… Outlook No fix yet Fix from $1,9502013-09-11 HIGH 9.3 CVE-2012-1887EPSS 25% Use-after-free vulnerability in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1, and Office 2008 and 2011 for Mac, allows remote attackers t… Excel Mitigation only Fix from $1,9502012-11-14 HIGH 9.3 CVE-2012-2528EPSS 22% Use-after-free vulnerability in Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; Word Aut… Word Automation Services Mitigation only Fix from $1,9502012-10-09 HIGH 8.4 CVE-2012-1867 Integer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Se… Windows 2003 Server Mitigation only Fix from $1,9502012-06-12 HIGH 9.3 CVE-2012-0142EPSS 22% Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do no… Excel Mitigation only Fix from $1,9502012-05-09 HIGH 9.3 CVE-2012-0143EPSS 22% Microsoft Excel 2003 SP3 and Office 2008 for Mac do not properly handle memory during the opening of files, which allows remote attackers to execute … Excel Mitigation only Fix from $1,9502012-05-09 HIGH 9.3 CVE-2012-0159EPSS 27% Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Wi… Office Mitigation only Fix from $1,9502012-05-09 HIGH 9.3 CVE-2011-1983EPSS 22% Use-after-free vulnerability in Microsoft Office 2007 SP2 and SP3, Office 2010 Gold and SP1, and Office for Mac 2011 allows remote attackers to execu… Office Mitigation only Fix from $1,9502011-12-14 HIGH 7.2 CVE-2011-2011 Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2… Windows 2003 Server Mitigation only Fix from $1,9502011-10-12 HIGH 9.3 CVE-2011-1986EPSS 22% Use-after-free vulnerability in Microsoft Excel 2003 SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Use … Excel Mitigation only Fix from $1,9502011-09-15 HIGH 7.1 CVE-2011-1968EPSS 26% The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 does not properly process packets in… Windows 2003 Server Mitigation only Fix from $1,9502011-08-10 HIGH 7.2 CVE-2011-1875 Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1… Windows 2003 Server Mitigation only Fix from $1,9502011-07-13 HIGH 7.2 CVE-2011-1876 Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1… Windows 2003 Server Mitigation only Fix from $1,9502011-07-13 HIGH 7.2 CVE-2011-1878 Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1… Windows 2003 Server Mitigation only Fix from $1,9502011-07-13 HIGH 7.2 CVE-2011-1879 Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1… Windows 2003 Server Mitigation only Fix from $1,9502011-07-13 HIGH 7.2 CVE-2011-1882 Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1… Windows 2003 Server Mitigation only Fix from $1,9502011-07-13