Browse CVEs

HIGH 10.0 CVE-2010-0476EPSS 34% The SMB client in Microsoft Windows Server 2003 SP2, Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2 allows remote SMB servers and man… Windows 7 Mitigation only Fix from $1,9502010-04-14 HIGH 7.2 CVE-2010-0236 The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Vista Gold does not properly allocate memory for the destination key a… Windows 2000 Mitigation only Fix from $1,9502010-04-14 HIGH 9.3 CVE-2010-0491EPSS 29% Use-after-free vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, and 6 SP1 allows remote attackers to execute arbitrary code by changing unsp… Internet Explorer Patch available Fix from $1,9502010-03-31 HIGH 8.8 CVE-2010-0806 KEVEPSS 82% Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers t… Internet Explorer Patch available Fix from $1,9502010-03-10 HIGH 9.3 CVE-2009-0102EPSS 24% Microsoft Project 2000 SR1 and 2002 SP1, and Office Project 2003 SP3, does not properly handle memory allocation for Project files, which allows remo… Office Project Mitigation only Fix from $1,9502009-12-09 MEDIUM 6.8 CVE-2009-3675EPSS 25% LSASS.exe in the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote … Windows 2000 Mitigation only Fix from $1,6002009-12-09 HIGH 7.8 CVE-2009-1928EPSS 30% Stack consumption vulnerability in the LDAP service in Active Directory on Microsoft Windows 2000 SP4, Server 2003 SP2, and Server 2008 Gold and SP2;… Windows 2000 Mitigation only Fix from $1,9502009-11-11 HIGH 9.3 CVE-2009-0562EPSS 26% The Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, … Isa Server Mitigation only Fix from $1,9502009-08-12 HIGH 8.8 CVE-2009-1544EPSS 21% Double free vulnerability in the Workstation service in Microsoft Windows allows remote authenticated users to gain privileges via a crafted RPC mess… Windows 2003 Server Mitigation only Fix from $1,9502009-08-12 MEDIUM 5.0 CVE-2009-2576EPSS 15% Microsoft Internet Explorer 6.0.2900.2180 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via a long Un… Ie after 6.0.2900.2180 Fix from $1,6002009-07-22 HIGH 9.3 CVE-2009-0560EPSS 28% Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and S… Office Mitigation only Fix from $1,9502009-06-10 HIGH 7.8 CVE-2009-1139EPSS 39% Memory leak in the LDAP service in Active Directory on Microsoft Windows 2000 SP4 and Server 2003 SP2, and Active Directory Application Mode (ADAM) o… Adam Mitigation only Fix from $1,9502009-06-10 HIGH 9.3 CVE-2009-0100EPSS 29% Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel in Microsoft Office 2004 and 2008 for Mac; Microsoft Office Excel Viewer and… Office Mitigation only Fix from $1,9502009-04-15 HIGH 7.8 CVE-2008-6194EPSS 11% Memory leak in the DNS server in Microsoft Windows allows remote attackers to cause a denial of service (memory consumption) via DNS packets. NOTE: … Windows Mitigation only Fix from $1,9502009-02-19 HIGH 9.3 CVE-2009-0095EPSS 23% Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly validate object data in Visio files, which allows remote attackers to execu… Visio Mitigation only Fix from $1,9502009-02-10 HIGH 9.3 CVE-2009-0096EPSS 23% Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly perform memory copy operations for object data, which allows remote attacke… Visio Mitigation only Fix from $1,9502009-02-10 HIGH 9.3 CVE-2009-0097EPSS 23% Microsoft Office Visio 2002 SP2 and 2003 SP3 does not properly validate memory allocation for Visio files, which allows remote attackers to execute a… Visio Mitigation only Fix from $1,9502009-02-10 HIGH 9.3 CVE-2009-0098EPSS 25% Microsoft Exchange 2000 Server SP3, Exchange Server 2003 SP2, and Exchange Server 2007 SP1 do not properly interpret Transport Neutral Encapsulation … Exchange Server Mitigation only Fix from $1,9502009-02-10 HIGH 9.3 CVE-2008-4264EPSS 26% Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Office Compatibility Pack f… Office Excel Mitigation only Fix from $1,9502008-12-10 HIGH 9.3 CVE-2008-4265EPSS 25% Microsoft Office Excel 2000 SP3 allows remote attackers to execute arbitrary code via a crafted Excel spreadsheet that contains a malformed object, w… Office Excel Mitigation only Fix from $1,9502008-12-10 HIGH 9.3 CVE-2008-4266EPSS 28% Array index vulnerability in Microsoft Office Excel 2000 SP3, 2002 SP3, and 2003 SP3; Excel Viewer 2003 Gold and SP3; Office 2004 and 2008 for Mac; a… Excel Mitigation only Fix from $1,9502008-12-10 HIGH 9.3 CVE-2008-4841EPSS 43% The WordPad Text Converter for Word 97 files in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows remote attackers to execute ar… Wordpad No fix yet Fix from $1,9502008-12-10 HIGH 9.3 CVE-2008-4026EPSS 23% Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, … Office Mitigation only Fix from $1,9502008-12-10 HIGH 9.3 CVE-2008-4027EPSS 34% Double free vulnerability in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 G… Office Mitigation only Fix from $1,9502008-12-10 HIGH 9.3 CVE-2008-4030EPSS 23% Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; and Office Compa… Office Mitigation only Fix from $1,9502008-12-10 HIGH 9.3 CVE-2008-4031EPSS 23% Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibi… Office Mitigation only Fix from $1,9502008-12-10 HIGH 8.5 CVE-2008-4253EPSS 21% The FlexGrid ActiveX control in Microsoft Visual Basic 6.0, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, Office FrontPage 2002 SP3, and Office Project … Office Frontpage Mitigation only Fix from $1,9502008-12-10 HIGH 8.5 CVE-2008-4256EPSS 21% The Charts ActiveX control in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 doe… Office Frontpage Mitigation only Fix from $1,9502008-12-10 MEDIUM 5.0 CVE-2008-5181EPSS 13% Microsoft Communicator allows remote attackers to cause a denial of service (application or device outage) via instant messages containing large numb… Office Communicator Mitigation only Fix from $1,6002008-11-20 MEDIUM 5.0 CVE-2008-4800EPSS 26% The DebugDiag ActiveX control in CrashHangExt.dll, possibly 1.0, in Microsoft Debug Diagnostic Tool allows remote attackers to cause a denial of serv… Debug Diagnostic Tool No fix yet Fix from $1,6002008-10-31