Browse CVEs

MEDIUM 6.8 CVE-2015-1771EPSS 6% Cross-site request forgery (CSRF) vulnerability in the web applications in Microsoft Exchange Server 2013 SP1 and Cumulative Update 8 allows remote a… Exchange Server Mitigation only Fix from $1,6002015-06-10 HIGH 7.2 CVE-2015-1768 win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2 allows local users to gain privileges or cause a denial of serv… Windows 2003 Server Mitigation only Fix from $1,9502015-06-10 HIGH 9.3 CVE-2015-1760EPSS 16% Microsoft Office Compatibility Pack SP3, Office 2010 SP2, Office 2013 SP1, and Office 2013 RT SP1 allow remote attackers to execute arbitrary code vi… Office Mitigation only Fix from $1,9502015-06-10 HIGH 9.3 CVE-2015-1759EPSS 16% Microsoft Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory… Office Compatibility Pack Mitigation only Fix from $1,9502015-06-10 HIGH 9.3 CVE-2015-1728EPSS 18% Microsoft Windows Media Player 10 through 12 allows remote attackers to execute arbitrary code via a crafted DataObject on a web site, aka "Windows M… Windows Media Player Mitigation only Fix from $1,9502015-06-10 MEDIUM 6.0 CVE-2015-1700EPSS 12% Microsoft SharePoint Server 2007 SP3, SharePoint Foundation 2010 SP2, SharePoint Server 2010 SP2, and SharePoint Foundation 2013 SP1 allow remote aut… Sharepoint Foundation Mitigation only Fix from $1,6002015-05-13 HIGH 9.3 CVE-2015-1683EPSS 14% Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerabi… Office Mitigation only Fix from $1,9502015-05-13 HIGH 9.3 CVE-2015-1682EPSS 19% Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Office 2013 SP1, Excel 2013 SP1, PowerPoint 2013 SP1, Word 2013 SP1, O… Excel Mitigation only Fix from $1,9502015-05-13 HIGH 9.3 CVE-2015-1673EPSS 17% The Windows Forms (aka WinForms) libraries in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 allow user-assisted rem… .net Framework Mitigation only Fix from $1,9502015-05-13 MEDIUM 5.0 CVE-2015-1672EPSS 18% Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 allows remote attackers to cause a denial of service (recursion and performanc… .net Framework Mitigation only Fix from $1,6002015-05-13 HIGH 9.3 CVE-2015-1651EPSS 16% Use-after-free vulnerability in Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 allows remote attackers to execute arbitrary … Office Compatibility Pack Mitigation only Fix from $1,9502015-04-14 HIGH 9.3 CVE-2015-1650EPSS 27% Use-after-free vulnerability in Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word Viewer, Office Compati… Office Mitigation only Fix from $1,9502015-04-14 HIGH 9.3 CVE-2015-1649EPSS 23% Use-after-free vulnerability in Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Viewer, Office Compatibility Pack SP3, Word Automation … Office Mitigation only Fix from $1,9502015-04-14 MEDIUM 5.0 CVE-2015-1631EPSS 9% Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remote attackers to spoof meeting organizers via unspecified vectors, aka "Exchange… Exchange Server Mitigation only Fix from $1,6002015-03-11 HIGH 9.3 CVE-2015-0097EPSS 41% Microsoft Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Excel 2010 SP2, PowerPoint 2010 SP2, and Word 2010 SP2 allow remote attackers to execut… Excel No fix yet Fix from $1,9502015-03-11 HIGH 9.3 CVE-2015-0086EPSS 13% Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 Gold and SP1, Word 2013 RT Gold and SP1, Word Viewer, Office Compatibility Pack SP… Office Mitigation only Fix from $1,9502015-03-11 HIGH 9.3 CVE-2015-0085EPSS 19% Use-after-free vulnerability in Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, Power… Excel Mitigation only Fix from $1,9502015-03-11 HIGH 7.2 CVE-2015-0075 The kernel in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 does not properly constrain… Windows 2003 Server Mitigation only Fix from $1,9502015-03-11 HIGH 9.3 CVE-2015-0032EPSS 22% vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 8 through 11 and other products, allows remote attackers to execut… Vbscript Mitigation only Fix from $1,9502015-03-11 HIGH 9.3 CVE-2015-0064EPSS 30% Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Automation Services in SharePoint Server 2010, Web Applications 2010 SP2, Word Viewer, … Web Applications No fix yet Fix from $1,9502015-02-11 HIGH 9.3 CVE-2015-0065EPSS 30% Microsoft Word 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office docum… Word No fix yet Fix from $1,9502015-02-11 MEDIUM 6.1 CVE-2015-0006EPSS 12% The Network Location Awareness (NLA) service in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 S… Windows 7 Mitigation only Fix from $1,6002015-01-13 HIGH 7.2 CVE-2015-0004 The User Profile Service (aka ProfSvc) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Wi… Windows 7 No fix yet Fix from $1,9502015-01-13 HIGH 7.2 CVE-2015-0002EPSS 14% The AhcVerifyAdminContext function in ahcache.sys in the Application Compatibility component in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, … Windows 7 No fix yet Fix from $1,9502015-01-13 HIGH 9.3 CVE-2014-6364EPSS 15% Use-after-free vulnerability in Microsoft Office 2007 SP3; 2010 SP2; 2013 Gold, SP1, and SP2; and 2013 RT Gold and SP1 allows remote attackers to exe… Office Mitigation only Fix from $1,9502014-12-11 HIGH 9.3 CVE-2014-6363EPSS 28% vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 6 through 11 and other products, allows remote attackers to execut… Vbscript No fix yet Fix from $1,9502014-12-11 HIGH 9.3 CVE-2014-6361EPSS 13% Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 Gold and SP1, Excel 2013 RT Gold and SP1, and Office Compatibility Pack allow remote attackers t… Excel Mitigation only Fix from $1,9502014-12-11 HIGH 9.3 CVE-2014-6360EPSS 13% Microsoft Excel 2007 SP3, Excel 2010 SP2, and Office Compatibility Pack allow remote attackers to execute arbitrary code via a crafted Office documen… Excel Mitigation only Fix from $1,9502014-12-11 HIGH 9.3 CVE-2014-6357EPSS 14% Use-after-free vulnerability in Microsoft Office 2010 SP2, Office 2013 Gold and SP1, Office 2013 RT Gold and SP1, Office for Mac 2011, Word Viewer, O… Office Mitigation only Fix from $1,9502014-12-11 HIGH 9.3 CVE-2014-6356EPSS 12% Array index error in Microsoft Word 2007 SP3, Word 2010 SP2, and Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via … Office Compatibility Pack Mitigation only Fix from $1,9502014-12-11