Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-3871 State: PUBLISHED Published: 2013-10-09T14:44:00 Last Updated: 2024-08-06T16:22:01.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://blogs.technet.com/b/msrc/archive/2013/10/08/the-october-2013-security-updates.aspx - http://www.us-cert.gov/ncas/alerts/TA13-317A - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18936 - https://docs
/TA13-317A - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18936 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-080 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-088
CVE ID: CVE-2013-3872 State: PUBLISHED Published: 2013-10-09T14:44:00 Last Updated: 2024-08-06T16:22:01.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3873, CVE-2013-3882, and CVE-2013-3885. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18601 - http://www.us-cert.gov/ncas/alerts/TA13-288A - https://docs.microsoft.com/en-us/s
/oval%3Aorg.mitre.oval%3Adef%3A18601 - http://www.us-cert.gov/ncas/alerts/TA13-288A - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-080
CVE ID: CVE-2013-3873 State: PUBLISHED Published: 2013-10-09T14:44:00 Last Updated: 2024-08-06T16:22:01.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3872, CVE-2013-3882, and CVE-2013-3885. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19060 - http://www.us-cert.gov/ncas/alerts/TA13-288A - https://docs.microsoft.com/en-us/s
/oval%3Aorg.mitre.oval%3Adef%3A19060 - http://www.us-cert.gov/ncas/alerts/TA13-288A - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-080
CVE ID: CVE-2013-3874 State: PUBLISHED Published: 2013-10-09T14:44:00 Last Updated: 2024-08-06T16:22:01.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18793 - http://www.us-cert.gov/ncas/alerts/TA13-288A - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-080
CVE ID: CVE-2013-3875 State: PUBLISHED Published: 2013-10-09T14:44:00 Last Updated: 2024-08-06T16:22:01.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18909 - http://www.us-cert.gov/ncas/alerts/TA13-288A - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-080
CVE ID: CVE-2013-3876 State: PUBLISHED Published: 2013-11-16T02:00:00Z Last Updated: 2024-09-16T20:36:42.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: DirectAccess in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly verify server X.509 certificates, which allows man-in-the-middle attackers to spoof servers and read encrypted domain credentials via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://technet.microsoft.com/security/advisory/286215
. Additional Analyst Notes: - CVE Program Container: References: - http://technet.microsoft.com/security/advisory/2862152
CVE ID: CVE-2013-3877 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-3878 State: PUBLISHED Published: 2013-12-11T00:00:00 Last Updated: 2024-08-06T16:22:01.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the LRPC client in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges by operating an LRPC server that sends a crafted LPC port message, aka "LRPC Client Buffer Overrun Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-102
CVE ID: CVE-2013-3879 State: PUBLISHED Published: 2013-10-09T14:44:00 Last Updated: 2024-08-06T16:22:01.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application, aka "Win32k Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18718 - https://docs.mi
rences: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18718 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-081 - http://www.us-cert.gov/ncas/alerts/TA13-288A
CVE ID: CVE-2013-3880 State: PUBLISHED Published: 2013-10-09T14:44:00 Last Updated: 2024-08-06T16:22:01.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: The App Container feature in the kernel-mode drivers in Microsoft Windows 8, Windows Server 2012, and Windows RT allows remote attackers to bypass intended access restrictions and obtain sensitive information from a different container via a Trojan horse application, aka "App Container Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-081 - http://www.us-cert.gov/ncas/alerts/TA13-288A - https://ov
t.com/en-us/security-updates/securitybulletins/2013/ms13-081 - http://www.us-cert.gov/ncas/alerts/TA13-288A - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18912
CVE ID: CVE-2013-3881 State: PUBLISHED Published: 2013-10-09T14:44:00 Last Updated: 2024-08-06T16:22:01.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel-mode drivers in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows local users to gain privileges via a crafted application, aka "Win32k NULL Page Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-081 - http://www.us-cert.gov/ncas/alerts/TA13-288A - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18614
CVE ID: CVE-2013-3882 State: PUBLISHED Published: 2013-10-09T14:44:00 Last Updated: 2024-08-06T16:22:01.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3872, CVE-2013-3873, and CVE-2013-3885. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/ncas/alerts/TA13-288A - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-080 - https://oval.cisecurity.org/repository/search
ocs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-080 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18366
CVE ID: CVE-2013-3883 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-3884 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-3885 State: PUBLISHED Published: 2013-10-09T14:44:00 Last Updated: 2024-08-06T16:22:01.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3872, CVE-2013-3873, and CVE-2013-3882. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18817 - http://www.us-cert.gov/ncas/alerts/TA13-288A - https://docs.microsoft.com/en-us/s
/oval%3Aorg.mitre.oval%3Adef%3A18817 - http://www.us-cert.gov/ncas/alerts/TA13-288A - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-080
CVE ID: CVE-2013-3886 State: PUBLISHED Published: 2013-10-09T14:44:00 Last Updated: 2024-08-06T16:22:01.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18811 - http://www.us-cert.gov/ncas/alerts/TA13-288A - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-080
CVE ID: CVE-2013-3887 State: PUBLISHED Published: 2013-11-13T00:00:00 Last Updated: 2024-08-06T16:22:01.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Ancillary Function Driver (AFD) in afd.sys in the kernel-mode drivers in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, and Windows Server 2012 allows local users to obtain sensitive information from kernel memory by leveraging improper copy operations, aka "Ancillary Function Driver Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/ncas/alerts/TA13-317A - https:/
Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/ncas/alerts/TA13-317A - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-093 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18805
CVE ID: CVE-2013-3888 State: PUBLISHED Published: 2013-10-09T14:44:00 Last Updated: 2024-10-17T18:08:25.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: dxgkrnl.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a crafted application, aka "DirectX Graphics Kernel Subsystem Double Fetch Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18924 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-081 - http:
org.mitre.oval%3Adef%3A18924 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-081 - http://www.us-cert.gov/ncas/alerts/TA13-288A
CVE ID: CVE-2013-3889 State: PUBLISHED Published: 2013-10-09T14:44:00 Last Updated: 2024-08-06T16:22:01.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Excel 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office for Mac 2011; Excel Viewer; Office Compatibility Pack SP3; and Excel Services and Word Automation Services in SharePoint Server 2013 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Excel Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms
otes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-084 - http://www.us-cert.gov/ncas/alerts/TA13-288A - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19132 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-085 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18901
CVE ID: CVE-2013-3890 State: PUBLISHED Published: 2013-10-09T14:44:00 Last Updated: 2024-08-06T16:22:01.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Excel 2007 SP3, Excel Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Excel Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/ncas/alerts/TA13-288A - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-085 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18926
CVE ID: CVE-2013-3891 State: PUBLISHED Published: 2013-10-09T14:44:00 Last Updated: 2024-08-06T16:22:01.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Word 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18643 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-086 - http://www.us-cert.gov/ncas/alerts/TA13-288A
CVE ID: CVE-2013-3892 State: PUBLISHED Published: 2013-10-09T14:44:00 Last Updated: 2024-08-06T16:22:01.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Word 2007 SP3 and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-086 - http://www.us-cert.gov/ncas/alerts/TA13-288A - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18953
CVE ID: CVE-2013-3893 State: PUBLISHED Published: 2013-09-18T10:00:00.000Z Last Updated: 2025-10-22T00:05:40.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code via crafted JavaScript strings, as demonstrated by use of an ms-help: URL that triggers loading of hxds.dll. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-000093.html - http://jvn.jp/en/jp/JVN27443259/index.html - http://blogs.technet.com/b/srd/archive/2013/10
013/JVNDB-2013-000093.html - http://jvn.jp/en/jp/JVN27443259/index.html - http://blogs.technet.com/b/srd/archive/2013/10/08/ms13-080-addresses-two-vulnerabilities-under-limited-targeted-attacks.aspx - http://www.securityfocus.com/bid/62453 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18665 - http://www.us-cert.gov/ncas/alerts/TA13-288A - http://technet.microsoft.com/security/advisory/2887505 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-080 - http://pastebin.com/raw.php?i=Hx1L5gu6 - http://blogs.technet.com/b/srd/archive/2013/09/17/cve-2013-3893-fix-it-workaround-available.aspx - http://packetstormsecurity.com/file
echnet.com/b/srd/archive/2013/09/17/cve-2013-3893-fix-it-workaround-available.aspx - http://packetstormsecurity.com/files/162585/Microsoft-Internet-Explorer-8-SetMouseCapture-Use-After-Free.html
CVE ID: CVE-2013-3894 State: PUBLISHED Published: 2013-10-09T14:44:00 Last Updated: 2025-01-16T20:15:33.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allow remote attackers to execute arbitrary code via a crafted CMAP table in a TrueType font (TTF) file, aka "TrueType Font CMAP Table Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1
ADP Vulnrichment: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18899 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-081 - http://www.us-cert.gov/ncas/alerts/TA13-288A
CVE ID: CVE-2013-3895 State: PUBLISHED Published: 2013-10-09T14:44:00 Last Updated: 2024-08-06T16:22:01.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft SharePoint Server 2007 SP3 and 2010 SP1 and SP2 allows remote attackers to conduct clickjacking attacks via a crafted web page, aka "Parameter Injection Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-084 - http://www.us-cert.gov/ncas/alerts/TA13-288A - http://blogs.technet.com/b/srd/archive/2013/10/08/assessing-risk-for-the-october-2013-security-updates.aspx - https://oval.cisecurity.org/repository/search/d
e/2013/10/08/assessing-risk-for-the-october-2013-security-updates.aspx - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18991
CVE ID: CVE-2013-3896 State: PUBLISHED Published: 2013-10-09T14:44:00.000Z Last Updated: 2025-10-22T00:05:40.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application, aka "Silverlight Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-087 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19003 - http:/
ns/2013/ms13-087 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19003 - http://www.us-cert.gov/ncas/alerts/TA13-288A - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19055
CVE ID: CVE-2013-3897 State: PUBLISHED Published: 2013-10-09T14:44:00.000Z Last Updated: 2025-10-22T00:05:40.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the CDisplayPointer class in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted JavaScript code that uses the onpropertychange event handler, as exploited in the wild in September and October 2013, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://blogs.technet.com/b/srd/arch
ional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://blogs.technet.com/b/srd/archive/2013/10/08/ms13-080-addresses-two-vulnerabilities-under-limited-targeted-attacks.aspx - http://www.us-cert.gov/ncas/alerts/TA13-288A - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-080 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18989
CVE ID: CVE-2013-3898 State: PUBLISHED Published: 2013-11-13T00:00:00 Last Updated: 2024-08-06T16:22:01.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows 8 and Windows Server 2012, when Hyper-V is used, does not ensure memory-address validity, which allows guest OS users to execute arbitrary code in all guest OS instances, and allows guest OS users to cause a denial of service (host OS crash), via a guest-to-host hypercall with a crafted function parameter, aka "Address Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/ncas/alerts/TA13-317A - https://oval.cisecurity.org/repository/search/definiti
ner: References: - http://www.us-cert.gov/ncas/alerts/TA13-317A - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18851 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-092
CVE ID: CVE-2013-3899 State: PUBLISHED Published: 2013-12-11T00:00:00 Last Updated: 2024-08-06T16:22:01.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate addresses, which allows local users to gain privileges via a crafted application, aka "Win32k Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-101
CVE ID: CVE-2013-3900 State: PUBLISHED Published: 2013-12-11T00:00:00.000Z Last Updated: 2025-10-22T00:05:39.513Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows Server 2025 (Server Core installation), Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607,
rver Core installation), Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-347 Description: Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Sec