Browse CVEs

MEDIUM 5.9 CVE-2017-0016EPSS 28% Microsoft Windows 10 Gold, 1511, and 1607; Windows 8.1; Windows RT 8.1; Windows Server 2012 R2, and Windows Server 2016 do not properly handle certai… Windows 10 Patch available Fix from $1,6002017-03-17 MEDIUM 5.5 CVE-2017-0007EPSS 15% Device Guard in Microsoft Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows remote attackers to modify PowerShell script without invalidati… Windows 10 Patch available Fix from $1,6002017-03-17 MEDIUM 5.5 CVE-2017-0029EPSS 15% Microsoft Office 2010 SP2, Word 2010 SP2, Word 2013 RT SP1, and Word 2016 allow remote attackers to cause a denial of service (application hang) via … Office Patch available Fix from $1,6002017-03-17 HIGH 8.1 CVE-2017-0037 KEVEPSS 80% Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilder::HandleColumnBreakOnColumnS… Edge Patch available Fix from $1,9502017-02-26 MEDIUM 5.5 CVE-2017-0038EPSS 72% gdi32.dll in Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows … Windows 10 Patch available Fix from $1,6002017-02-20 HIGH 7.8 CVE-2016-5720 Multiple untrusted search path vulnerabilities in Microsoft Skype allow local users to execute arbitrary code and conduct DLL hijacking attacks via a… Skype Mitigation only Fix from $1,9502017-01-23 HIGH 8.8 CVE-2017-0002EPSS 13% Microsoft Edge allows remote attackers to bypass the Same Origin Policy via vectors involving the about:blank URL and data: URLs, aka "Microsoft Edge… Edge Mitigation only Fix from $1,9502017-01-10 HIGH 7.8 CVE-2017-0003EPSS 22% Microsoft Word 2016 and SharePoint Enterprise Server 2016 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Off… Sharepoint Enterprise Server Mitigation only Fix from $1,9502017-01-10 HIGH 7.8 CVE-2016-7289EPSS 22% Microsoft Publisher 2010 SP2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted documen… Publisher Mitigation only Fix from $1,9502016-12-20 HIGH 7.8 CVE-2016-7292 The Installer in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Window… Windows 10 Mitigation only Fix from $1,9502016-12-20 HIGH 7.8 CVE-2016-7298EPSS 20% Microsoft Office 2007 SP3, Office 2010 SP2, Word Viewer, Office for Mac 2011, and Office 2016 for Mac allow remote attackers to execute arbitrary cod… Office Mitigation only Fix from $1,9502016-12-20 HIGH 7.8 CVE-2016-7300EPSS 6% Untrusted search path vulnerability in Microsoft Auto Updater for Mac allows local users to gain privileges via a Trojan horse executable file, aka "… Auto Updater For Mac Mitigation only Fix from $1,9502016-12-20 HIGH 7.5 CVE-2016-7286EPSS 65% The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft… Edge No fix yet Fix from $1,9502016-12-20 HIGH 7.5 CVE-2016-7287EPSS 66% The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of serv… Edge No fix yet Fix from $1,9502016-12-20 HIGH 7.5 CVE-2016-7288EPSS 68% The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft… Edge No fix yet Fix from $1,9502016-12-20 HIGH 7.5 CVE-2016-7296EPSS 18% The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft… Edge Mitigation only Fix from $1,9502016-12-20 HIGH 7.5 CVE-2016-7297EPSS 26% The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft… Edge Mitigation only Fix from $1,9502016-12-20 HIGH 7.1 CVE-2016-7290EPSS 17% Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Services on SharePoint Ser… Office Mitigation only Fix from $1,9502016-12-20 HIGH 7.1 CVE-2016-7291EPSS 17% Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Services on SharePoint Ser… Office Mitigation only Fix from $1,9502016-12-20 MEDIUM 6.1 CVE-2016-7280EPSS 15% Cross-site scripting (XSS) vulnerability in Microsoft Edge allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, ak… Edge Mitigation only Fix from $1,6002016-12-20 MEDIUM 6.1 CVE-2016-7282EPSS 16% Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allows remote attackers to inject arbitrary w… Edge Mitigation only Fix from $1,6002016-12-20 MEDIUM 5.5 CVE-2016-7295 The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Serv… Windows 10 Mitigation only Fix from $1,6002016-12-20 MEDIUM 5.3 CVE-2016-7281EPSS 14% The Web Workers implementation in Microsoft Internet Explorer 10 and 11 and Microsoft Edge allows remote attackers to bypass the Same Origin Policy v… Edge Mitigation only Fix from $1,6002016-12-20 CRITICAL 9.6 CVE-2016-7277EPSS 18% Microsoft Office 2016 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka … Office Mitigation only Fix from $2,3002016-12-20 HIGH 8.8 CVE-2016-7272EPSS 35% The Graphics component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R… Windows 10 Mitigation only Fix from $1,9502016-12-20 HIGH 8.8 CVE-2016-7273EPSS 18% The Graphics component in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allows remote attackers to execute arbitrary code via a c… Windows 10 Mitigation only Fix from $1,9502016-12-20 HIGH 8.8 CVE-2016-7274EPSS 36% Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT… Windows 10 No fix yet Fix from $1,9502016-12-20 HIGH 7.8 CVE-2016-7259 The Graphics Component in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Win… Windows 10 No fix yet Fix from $1,9502016-12-20 HIGH 7.8 CVE-2016-7260 The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and … Windows 10 Mitigation only Fix from $1,9502016-12-20 HIGH 7.8 CVE-2016-7262 KEVEPSS 58% Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow user-a… Excel Patch available Fix from $1,9502016-12-20