Browse CVEs

HIGH 7.4 CVE-2016-3378EPSS 15% Open redirect vulnerability in Microsoft Exchange Server 2013 SP1, 2013 Cumulative Update 12, 2013 Cumulative Update 13, 2016 Cumulative Update 1, an… Exchange Server Mitigation only Fix from $1,9502016-09-14 HIGH 7.5 CVE-2016-3377EPSS 16% The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via… Edge Mitigation only Fix from $1,9502016-09-14 HIGH 7.5 CVE-2016-3375EPSS 17% The OLE Automation mechanism and VBScript scripting engine in Microsoft Internet Explorer 9 through 11, Windows Vista SP2, Windows Server 2008 SP2 an… Internet Explorer Mitigation only Fix from $1,9502016-09-14 MEDIUM 6.5 CVE-2016-3374EPSS 26% The PDF library in Microsoft Edge, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote at… Edge Mitigation only Fix from $1,6002016-09-14 MEDIUM 5.5 CVE-2016-3373EPSS 17% The kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windo… Windows 10 No fix yet Fix from $1,6002016-09-14 MEDIUM 5.5 CVE-2016-3371EPSS 40% The kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windo… Windows 10 No fix yet Fix from $1,6002016-09-14 MEDIUM 6.5 CVE-2016-3370EPSS 22% The PDF library in Microsoft Edge, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote at… Edge Mitigation only Fix from $1,6002016-09-14 HIGH 7.5 CVE-2016-3369EPSS 12% Microsoft Windows 10 Gold and 1511 allows attackers to cause a denial of service via unspecified vectors, aka "Windows Denial of Service Vulnerabilit… Windows 10 Mitigation only Fix from $1,9502016-09-14 HIGH 8.8 CVE-2016-3368EPSS 18% Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Win… Windows 10 Mitigation only Fix from $1,9502016-09-14 MEDIUM 6.5 CVE-2016-3366EPSS 16% Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, Outlook 2016, and Outlook 2016 for Mac do not properly implement… Outlook Mitigation only Fix from $1,6002016-09-14 HIGH 7.8 CVE-2016-3365EPSS 20% Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, Excel Services … Excel Mitigation only Fix from $1,9502016-09-14 HIGH 7.8 CVE-2016-3364EPSS 19% Microsoft Visio 2016 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." Visio Mitigation only Fix from $1,9502016-09-14 HIGH 7.8 CVE-2016-3363EPSS 20% Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow remote… Excel Mitigation only Fix from $1,9502016-09-14 HIGH 7.8 CVE-2016-3362EPSS 17% Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, Excel Services … Excel Mitigation only Fix from $1,9502016-09-14 HIGH 7.8 CVE-2016-3361EPSS 17% Microsoft Excel 2010 SP2 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerabil… Excel Mitigation only Fix from $1,9502016-09-14 HIGH 7.8 CVE-2016-3360EPSS 17% Microsoft PowerPoint 2007 SP3, PowerPoint 2010 SP2, PowerPoint 2013 SP1, PowerPoint 2013 RT SP1, PowerPoint 2016 for Mac, Office Compatibility Pack S… Office Compatibility Pack Mitigation only Fix from $1,9502016-09-14 HIGH 7.8 CVE-2016-3359EPSS 17% Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a craf… Excel Mitigation only Fix from $1,9502016-09-14 HIGH 7.8 CVE-2016-3358EPSS 18% Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel 2016 for Mac, Office Compatibility Pack SP3, Excel Vie… Excel Mitigation only Fix from $1,9502016-09-14 HIGH 7.8 CVE-2016-3357EPSS 55% Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word for Mac 2011, Word 2016 for Mac, Word Viewer, Word… Office No fix yet Fix from $1,9502016-09-14 HIGH 7.8 CVE-2016-3356EPSS 19% The Graphics Device Interface (GDI) in Microsoft Windows 10 1607 allows remote attackers to execute arbitrary code via a crafted document, aka "GDI R… Windows 10 Mitigation only Fix from $1,9502016-09-14 HIGH 7.8 CVE-2016-3355 The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 20… Windows 10 Mitigation only Fix from $1,9502016-09-14 HIGH 8.8 CVE-2016-3352EPSS 21% Microsoft Windows 8.1, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 do not properly check NTLM SSO requests for MSA logins, which makes it eas… Windows 10 Mitigation only Fix from $1,9502016-09-14 MEDIUM 6.5 CVE-2016-3351 KEVEPSS 26% Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Micro… Internet Explorer Patch available Fix from $1,6002016-09-14 HIGH 7.5 CVE-2016-3350EPSS 15% The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via… Edge Mitigation only Fix from $1,9502016-09-14 HIGH 7.8 CVE-2016-3349 The kernel-mode drivers in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to … Windows 10 Mitigation only Fix from $1,9502016-09-14 HIGH 7.8 CVE-2016-3348EPSS 13% The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and … Windows 10 Mitigation only Fix from $1,9502016-09-14 HIGH 7.8 CVE-2016-3346 Microsoft Windows 10 Gold, 1511, and 1607 does not properly enforce permissions, which allows local users to obtain Administrator access via a crafte… Windows 10 Mitigation only Fix from $1,9502016-09-14 HIGH 8.8 CVE-2016-3345EPSS 32% The SMBv1 server in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Win… Windows 10 Mitigation only Fix from $1,9502016-09-14 HIGH 7.5 CVE-2016-3330EPSS 14% Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Micros… Edge Mitigation only Fix from $1,9502016-09-14 HIGH 7.8 CVE-2016-3306 The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows R… Windows 10 Patch available Fix from $1,9502016-09-14