Browse CVEs

MEDIUM 5.5 CVE-2012-1860EPSS 13% Microsoft Office SharePoint Server 2007 SP2 and SP3, SharePoint Server 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 do not properly check… Office Web Apps Mitigation only Fix from $1,6002012-07-10 HIGH 9.3 CVE-2012-1849EPSS 18% Untrusted search path vulnerability in Microsoft Lync 2010, 2010 Attendee, and 2010 Attendant allows local users to gain privileges via a Trojan hors… Lync Mitigation only Fix from $1,9502012-06-12 HIGH 9.3 CVE-2012-1855EPSS 20% Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly handle function pointers, which allows remote attackers to execute arbitra… .net Framework Mitigation only Fix from $1,9502012-06-12 HIGH 8.4 CVE-2012-1867 Integer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Se… Windows 2003 Server Mitigation only Fix from $1,9502012-06-12 HIGH 7.2 CVE-2012-1864 win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, a… Windows 2003 Server Mitigation only Fix from $1,9502012-06-12 HIGH 7.2 CVE-2012-1865 win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, a… Windows 2003 Server Mitigation only Fix from $1,9502012-06-12 HIGH 7.2 CVE-2012-1866 win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, a… Windows 2003 Server Mitigation only Fix from $1,9502012-06-12 HIGH 9.3 CVE-2012-0018EPSS 25% Microsoft Visio Viewer 2010 Gold and SP1 does not properly validate attributes in Visio files, which allows remote attackers to execute arbitrary cod… Visio Viewer Mitigation only Fix from $1,9502012-05-09 HIGH 9.3 CVE-2012-0141EPSS 22% Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do no… Excel Mitigation only Fix from $1,9502012-05-09 HIGH 9.3 CVE-2012-0142EPSS 22% Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do no… Excel Mitigation only Fix from $1,9502012-05-09 HIGH 9.3 CVE-2012-0143EPSS 22% Microsoft Excel 2003 SP3 and Office 2008 for Mac do not properly handle memory during the opening of files, which allows remote attackers to execute … Excel Mitigation only Fix from $1,9502012-05-09 HIGH 9.3 CVE-2012-0159EPSS 27% Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Wi… Office Mitigation only Fix from $1,9502012-05-09 HIGH 9.3 CVE-2012-0160EPSS 23% Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4 does not properly serialize input data, which allows remote attack… .net Framework Mitigation only Fix from $1,9502012-05-09 HIGH 9.3 CVE-2012-0161EPSS 22% Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4 does not properly handle an unspecified exception during use of pa… .net Framework Mitigation only Fix from $1,9502012-05-09 HIGH 9.3 CVE-2012-0162EPSS 22% Microsoft .NET Framework 4 does not properly allocate buffers, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser… .net Framework Mitigation only Fix from $1,9502012-05-09 HIGH 9.3 CVE-2012-0165EPSS 25% GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2 and Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1 does not properly validate recor… Office Mitigation only Fix from $1,9502012-05-09 HIGH 9.3 CVE-2012-0167EPSS 29% Heap-based buffer overflow in the Office GDI+ library in Microsoft Office 2003 SP3 and 2007 SP2 and SP3 allows remote attackers to execute arbitrary … Office Mitigation only Fix from $1,9502012-05-09 HIGH 9.3 CVE-2012-0183EPSS 24% Microsoft Word 2003 SP3 and 2007 SP2 and SP3, Office 2008 and 2011 for Mac, and Office Compatibility Pack SP2 and SP3 allow remote attackers to execu… Office Mitigation only Fix from $1,9502012-05-09 HIGH 9.3 CVE-2012-0184EPSS 24% Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 and 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and … Excel Mitigation only Fix from $1,9502012-05-09 HIGH 9.3 CVE-2012-0185EPSS 25% Heap-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 Gold and SP1, Excel Viewer, and Office Compatibility Pack SP2 and SP3 allows … Excel Mitigation only Fix from $1,9502012-05-09 HIGH 9.3 CVE-2012-1847EPSS 25% Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 and 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and … Excel Mitigation only Fix from $1,9502012-05-09 MEDIUM 5.0 CVE-2012-0164EPSS 17% Microsoft .NET Framework 4 does not properly compare index values, which allows remote attackers to cause a denial of service (application hang) via … .net Framework Mitigation only Fix from $1,6002012-05-09 HIGH 9.3 CVE-2012-0177EPSS 30% Heap-based buffer overflow in the Office Works File Converter in Microsoft Office 2007 SP2, Works 9, and Works 6-9 File Converter allows remote attac… Office Mitigation only Fix from $1,9502012-04-10 HIGH 9.3 CVE-2012-0163EPSS 38% Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly validate function parameters, which allows remote attack… .net Framework Mitigation only Fix from $1,9502012-04-10 MEDIUM 5.8 CVE-2012-0146EPSS 11% Open redirect vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 allows remote attackers to redirect users t… Forefront Unified Access Gateway Mitigation only Fix from $1,6002012-04-10 MEDIUM 5.0 CVE-2012-0147EPSS 36% Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 does not properly configure the default web site, which allows remote atta… Forefront Unified Access Gateway Mitigation only Fix from $1,6002012-04-10 HIGH 9.3 CVE-2012-0016EPSS 22% Untrusted search path vulnerability in Microsoft Expression Design; Expression Design SP1; and Expression Design 2, 3, and 4 allows local users to ga… Expression Design Mitigation only Fix from $1,9502012-03-13 MEDIUM 6.9 CVE-2012-0008 Untrusted search path vulnerability in Microsoft Visual Studio 2008 SP1, 2010, and 2010 SP1 allows local users to gain privileges via a Trojan horse … Visual Studio Mitigation only Fix from $1,6002012-03-13 MEDIUM 5.8 CVE-2012-1545EPSS 20% Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, allows remote attackers to bypass Protected Mode or cause a denial of service (memo… Ie Mitigation only Fix from $1,6002012-03-09 HIGH 9.3 CVE-2012-0015EPSS 24% Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not properly calculate the length of an unspecified buffer, which allows remote attackers to execute … .net Framework Mitigation only Fix from $1,9502012-02-14