Browse CVEs

HIGH 7.8 CVE-2016-7185 The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and … Windows 10 No fix yet Fix from $1,9502016-10-14 CRITICAL 9.8 CVE-2016-7182EPSS 30% The Graphics component in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R… Live Meeting Mitigation only Fix from $2,3002016-10-14 HIGH 7.8 CVE-2016-3396EPSS 24% Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows S… Live Meeting Mitigation only Fix from $1,9502016-10-14 HIGH 7.8 CVE-2016-3393 KEVEPSS 69% Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows S… Windows 10 1507 Patch available Fix from $1,9502016-10-14 MEDIUM 5.3 CVE-2016-3392EPSS 10% The Edge Content Security Policy feature in Microsoft Edge does not properly validate documents, which allows remote attackers to bypass intended acc… Edge Mitigation only Fix from $1,6002016-10-14 MEDIUM 5.3 CVE-2016-3391EPSS 8% Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow context-dependent attackers to discover credentials by leveraging access to a memory d… Edge Mitigation only Fix from $1,6002016-10-14 HIGH 7.5 CVE-2016-3390EPSS 17% The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of serv… Edge Mitigation only Fix from $1,9502016-10-14 HIGH 7.5 CVE-2016-3389EPSS 15% The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via… Edge Mitigation only Fix from $1,9502016-10-14 MEDIUM 5.3 CVE-2016-3388EPSS 28% Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, which allows remote attackers to gain… Edge No fix yet Fix from $1,6002016-10-14 HIGH 7.5 CVE-2016-3387EPSS 20% Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, which allows remote attackers to gain… Edge No fix yet Fix from $1,9502016-10-14 HIGH 7.5 CVE-2016-3386EPSS 41% The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via… Edge Mitigation only Fix from $1,9502016-10-14 HIGH 7.5 CVE-2016-3382EPSS 17% The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a deni… Edge Mitigation only Fix from $1,9502016-10-14 HIGH 7.8 CVE-2016-3376EPSS 13% The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and … Windows 10 Patch available Fix from $1,9502016-10-14 HIGH 7.8 CVE-2016-3341EPSS 7% The kernel-mode drivers in Transaction Manager in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, … Windows 10 Mitigation only Fix from $1,9502016-10-14 HIGH 7.5 CVE-2016-3331EPSS 14% Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v… Edge Mitigation only Fix from $1,9502016-10-14 MEDIUM 6.5 CVE-2016-3298 KEVEPSS 33% Microsoft Internet Explorer 9 through 11 and the Internet Messaging API in Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 a… Internet Explorer Patch available Fix from $1,6002016-10-14 HIGH 7.8 CVE-2016-3270EPSS 7% The Graphics component in the kernel in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2… Windows 10 Mitigation only Fix from $1,9502016-10-14 MEDIUM 5.3 CVE-2016-3267EPSS 16% Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to determine the existence of unspecified files via a crafted web … Edge Mitigation only Fix from $1,6002016-10-14 HIGH 7.8 CVE-2016-3266EPSS 6% The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and … Windows 10 Mitigation only Fix from $1,9502016-10-14 MEDIUM 5.5 CVE-2016-3263EPSS 32% Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows S… Live Meeting Mitigation only Fix from $1,6002016-10-14 MEDIUM 5.5 CVE-2016-3262EPSS 32% Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows S… Live Meeting Mitigation only Fix from $1,6002016-10-14 MEDIUM 5.5 CVE-2016-3209EPSS 54% Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows S… .net Framework Mitigation only Fix from $1,6002016-10-14 HIGH 7.8 CVE-2016-0142EPSS 20% Video Control in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers… Windows 10 Mitigation only Fix from $1,9502016-10-14 MEDIUM 5.0 CVE-2016-0079EPSS 5% The kernel in Microsoft Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application that makes an API call to acc… Windows 10 No fix yet Fix from $1,6002016-10-14 MEDIUM 5.5 CVE-2016-0075EPSS 7% The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain … Windows 10 No fix yet Fix from $1,6002016-10-14 MEDIUM 5.0 CVE-2016-0073EPSS 5% The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain … Windows 10 No fix yet Fix from $1,6002016-10-14 MEDIUM 5.5 CVE-2016-0070EPSS 11% The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows R… Windows 10 Mitigation only Fix from $1,6002016-10-14 HIGH 8.1 CVE-2016-7191EPSS 29% The Microsoft Azure Active Directory Passport (aka Passport-Azure-AD) library 1.x before 1.4.6 and 2.x before 2.0.1 for Node.js does not recognize th… Azure Active Directory Passport Patch available Fix from $1,9502016-09-28 HIGH 7.8 CVE-2016-3381EPSS 15% Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow remote… Excel Mitigation only Fix from $1,9502016-09-14 MEDIUM 6.1 CVE-2016-3379EPSS 8% Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2016 Cumulative Update 1 and 2 allows remote attackers to inject arbitrary web … Exchange Server Mitigation only Fix from $1,6002016-09-14