Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-3322 State: PUBLISHED Published: 2016-08-09T21:00:00 Last Updated: 2024-08-05T23:56:13.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3289. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-095 - http://www.securitytracker.com/id/1036562 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-096 - http://www.securityfocus.com/bid/92282
CVE ID: CVE-2016-3323 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-3324 State: PUBLISHED Published: 2016-09-14T10:00:00 Last Updated: 2024-08-05T23:56:12.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92809 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-104 - https://www.exploit-db.com/exploits/40748/ - http://www.securitytracker.com/id/1036788
CVE ID: CVE-2016-3325 State: PUBLISHED Published: 2016-09-14T10:00:00 Last Updated: 2024-08-05T23:56:12.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036789 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-104 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-105 - https://www.exploit-db.com/exploits/40747/ - http://www.security
n-us/security-updates/securitybulletins/2016/ms16-105 - https://www.exploit-db.com/exploits/40747/ - http://www.securitytracker.com/id/1036788 - http://www.securityfocus.com/bid/92832
CVE ID: CVE-2016-3326 State: PUBLISHED Published: 2016-08-09T21:00:00 Last Updated: 2024-08-05T23:56:13.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to obtain sensitive information via a crafted web page, aka "Microsoft Browser Information Disclosure Vulnerability," a different vulnerability than CVE-2016-3327. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-095 - http://www.securitytracker.com/id/1036562 - http://www.securityfocus.com/bid/92287 - https://docs.microsoft.com/en-us/security-updates/securitybul
.com/id/1036562 - http://www.securityfocus.com/bid/92287 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-096
CVE ID: CVE-2016-3327 State: PUBLISHED Published: 2016-08-09T21:00:00 Last Updated: 2024-08-05T23:56:13.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to obtain sensitive information via a crafted web page, aka "Microsoft Browser Information Disclosure Vulnerability," a different vulnerability than CVE-2016-3326. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-095 - http://www.securitytracker.com/id/1036562 - http://www.securityfocus.com/bid/92284 - https://docs.microsoft.com/en-us/security-updates/securitybul
.com/id/1036562 - http://www.securityfocus.com/bid/92284 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-096
CVE ID: CVE-2016-3328 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-3329 State: PUBLISHED Published: 2016-08-09T21:00:00 Last Updated: 2024-08-05T23:56:13.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to determine the existence of files via a crafted webpage, aka "Internet Explorer Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-095 - http://www.securitytracker.com/id/1036562 - http://www.securityfocus.com/bid/92286 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-096
CVE ID: CVE-2016-3330 State: PUBLISHED Published: 2016-09-14T10:00:00 Last Updated: 2024-08-05T23:56:13.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3294. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036789 - http://www.securityfocus.com/bid/92807 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-105
CVE ID: CVE-2016-3331 State: PUBLISHED Published: 2016-10-14T01:00:00 Last Updated: 2024-08-05T23:56:13.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-119 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-118 - http://www.securitytracker.com/id/1036993 - http://www.securitytracker
ecurity-updates/securitybulletins/2016/ms16-118 - http://www.securitytracker.com/id/1036993 - http://www.securitytracker.com/id/1036992 - http://www.securityfocus.com/bid/93387
CVE ID: CVE-2016-3332 State: PUBLISHED Published: 2016-11-10T06:16:00 Last Updated: 2024-08-05T23:56:13.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted application, aka "Windows Common Log File System Driver Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0026, CVE-2016-3333, CVE-2016-3334, CVE-2016-3335, CVE-2016-3338, CVE-2016-3340, CVE-2016-3342, CVE-20
ity than CVE-2016-0026, CVE-2016-3333, CVE-2016-3334, CVE-2016-3335, CVE-2016-3338, CVE-2016-3340, CVE-2016-3342, CVE-2016-3343, and CVE-2016-7184. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037252 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-134 - http://www.securityfocus.com/bid/94008
CVE ID: CVE-2016-3333 State: PUBLISHED Published: 2016-11-10T06:16:00 Last Updated: 2024-08-05T23:56:12.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted application, aka "Windows Common Log File System Driver Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0026, CVE-2016-3332, CVE-2016-3334, CVE-2016-3335, CVE-2016-3338, CVE-2016-3340, CVE-2016-3342, CVE-20
ity than CVE-2016-0026, CVE-2016-3332, CVE-2016-3334, CVE-2016-3335, CVE-2016-3338, CVE-2016-3340, CVE-2016-3342, CVE-2016-3343, and CVE-2016-7184. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037252 - http://www.securityfocus.com/bid/94009 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-134
CVE ID: CVE-2016-3334 State: PUBLISHED Published: 2016-11-10T06:16:00 Last Updated: 2024-08-05T23:56:12.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted application, aka "Windows Common Log File System Driver Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0026, CVE-2016-3332, CVE-2016-3333, CVE-2016-3335, CVE-2016-3338, CVE-2016-3340, CVE-2016-3342, CVE-20
ity than CVE-2016-0026, CVE-2016-3332, CVE-2016-3333, CVE-2016-3335, CVE-2016-3338, CVE-2016-3340, CVE-2016-3342, CVE-2016-3343, and CVE-2016-7184. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037252 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-134 - http://www.securityfocus.com/bid/94012
CVE ID: CVE-2016-3335 State: PUBLISHED Published: 2016-11-10T06:16:00 Last Updated: 2024-08-05T23:56:13.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted application, aka "Windows Common Log File System Driver Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0026, CVE-2016-3332, CVE-2016-3333, CVE-2016-3334, CVE-2016-3338, CVE-2016-3340, CVE-2016-3342, CVE-20
ity than CVE-2016-0026, CVE-2016-3332, CVE-2016-3333, CVE-2016-3334, CVE-2016-3338, CVE-2016-3340, CVE-2016-3342, CVE-2016-3343, and CVE-2016-7184. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037252 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-134 - http://www.securityfocus.com/bid/94011
CVE ID: CVE-2016-3336 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-3337 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-3338 State: PUBLISHED Published: 2016-11-10T06:16:00 Last Updated: 2024-08-05T23:56:12.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted application, aka "Windows Common Log File System Driver Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0026, CVE-2016-3332, CVE-2016-3333, CVE-2016-3334, CVE-2016-3335, CVE-2016-3340, CVE-2016-3342, CVE-20
ity than CVE-2016-0026, CVE-2016-3332, CVE-2016-3333, CVE-2016-3334, CVE-2016-3335, CVE-2016-3340, CVE-2016-3342, CVE-2016-3343, and CVE-2016-7184. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037252 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-134 - http://www.securityfocus.com/bid/94014
CVE ID: CVE-2016-3339 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-3340 State: PUBLISHED Published: 2016-11-10T06:16:00 Last Updated: 2024-08-05T23:56:13.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted application, aka "Windows Common Log File System Driver Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0026, CVE-2016-3332, CVE-2016-3333, CVE-2016-3334, CVE-2016-3335, CVE-2016-3338, CVE-2016-3342, CVE-20
ity than CVE-2016-0026, CVE-2016-3332, CVE-2016-3333, CVE-2016-3334, CVE-2016-3335, CVE-2016-3338, CVE-2016-3342, CVE-2016-3343, and CVE-2016-7184. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037252 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-134 - http://www.securityfocus.com/bid/94010
CVE ID: CVE-2016-3341 State: PUBLISHED Published: 2016-10-14T01:00:00 Last Updated: 2024-08-05T23:56:13.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel-mode drivers in Transaction Manager in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Windows Transaction Manager Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036996 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-123 - http://www.securityfocus.com/bid/93391
CVE ID: CVE-2016-3342 State: PUBLISHED Published: 2016-11-10T06:16:00 Last Updated: 2024-08-05T23:56:13.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted application, aka "Windows Common Log File System Driver Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0026, CVE-2016-3332, CVE-2016-3333, CVE-2016-3334, CVE-2016-3335, CVE-2016-3338, CVE-2016-3340, CVE-20
ity than CVE-2016-0026, CVE-2016-3332, CVE-2016-3333, CVE-2016-3334, CVE-2016-3335, CVE-2016-3338, CVE-2016-3340, CVE-2016-3343, and CVE-2016-7184. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037252 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-134 - http://www.securityfocus.com/bid/94013
CVE ID: CVE-2016-3343 State: PUBLISHED Published: 2016-11-10T06:16:00 Last Updated: 2024-08-05T23:56:13.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted application, aka "Windows Common Log File System Driver Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0026, CVE-2016-3332, CVE-2016-3333, CVE-2016-3334, CVE-2016-3335, CVE-2016-3338, CVE-2016-3340, CVE-20
ity than CVE-2016-0026, CVE-2016-3332, CVE-2016-3333, CVE-2016-3334, CVE-2016-3335, CVE-2016-3338, CVE-2016-3340, CVE-2016-3342, and CVE-2016-7184. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037252 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-134 - http://www.securityfocus.com/bid/94007
CVE ID: CVE-2016-3344 State: PUBLISHED Published: 2016-09-14T10:00:00 Last Updated: 2024-08-05T23:56:13.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Secure Kernel Mode feature in Microsoft Windows 10 Gold and 1511 allows local users to obtain sensitive information via a crafted application, aka "Windows Secure Kernel Mode Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036800 - http://www.securityfocus.com/bid/92855 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-113
CVE ID: CVE-2016-3345 State: PUBLISHED Published: 2016-09-14T10:00:00 Last Updated: 2024-08-05T23:56:13.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SMBv1 server in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Authenticated Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92859 - http://www.securitytracker.com/id/1036803 - https://docs.microsoft.com/en-us/security-up
w.securityfocus.com/bid/92859 - http://www.securitytracker.com/id/1036803 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-114
CVE ID: CVE-2016-3346 State: PUBLISHED Published: 2016-09-14T10:00:00 Last Updated: 2024-08-05T23:56:13.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows 10 Gold, 1511, and 1607 does not properly enforce permissions, which allows local users to obtain Administrator access via a crafted DLL, aka "Windows Permissions Enforcement Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-110 - http://www.securitytracker.com/id/1036798 - http://www.securityfocus.com/bid/92846
CVE ID: CVE-2016-3347 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-3348 State: PUBLISHED Published: 2016-09-14T10:00:00 Last Updated: 2024-08-05T23:56:13.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92782 - http://www.securitytracker.com/id/1036786 - https://docs.microsoft.com/en-us/security-updates/securitybull
m/bid/92782 - http://www.securitytracker.com/id/1036786 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-106
CVE ID: CVE-2016-3349 State: PUBLISHED Published: 2016-09-14T10:00:00 Last Updated: 2024-08-05T23:56:12.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel-mode drivers in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92783 - http://www.securitytracker.com/id/1036786 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-106
CVE ID: CVE-2016-3350 State: PUBLISHED Published: 2016-09-14T10:00:00 Last Updated: 2024-08-05T23:56:13.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3377. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036789 - http://www.securityfocus.com/bid/92793 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-105
CVE ID: CVE-2016-3351 State: PUBLISHED Published: 2016-09-14T10:00:00.000Z Last Updated: 2025-10-21T23:55:49.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1036789 - http://www.securityfocus.com/bid/92788 - https://www.brokenbrowser.com/detecting-apps-mimetype-malware/ - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-104 - ht
etecting-apps-mimetype-malware/ - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-104 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-105 - http://www.securitytracker.com/id/1036788
CVE ID: CVE-2016-3352 State: PUBLISHED Published: 2016-09-14T10:00:00 Last Updated: 2024-08-05T23:56:13.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows 8.1, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 do not properly check NTLM SSO requests for MSA logins, which makes it easier for remote attackers to determine passwords via a brute-force attack on NTLM password hashes, aka "Microsoft Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-110 - http://www.securityfocus.com/bid/92852 - http://www.securitytracker.com/id/1036798
CVE ID: CVE-2016-3353 State: PUBLISHED Published: 2016-09-14T10:00:00 Last Updated: 2024-08-05T23:56:13.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 through 11 mishandles .url files from the Internet zone, which allows remote attackers to bypass intended access restrictions via a crafted file, aka "Internet Explorer Security Feature Bypass." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92827 - http://zerodayinitiative.com/advisories/ZDI-16-506/ - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-104 - http://www.securitytracker.com/id/1036788
CVE ID: CVE-2016-3354 State: PUBLISHED Published: 2016-09-14T10:00:00 Last Updated: 2024-08-05T23:56:13.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to bypass the ASLR protection mechanism via a crafted application, aka "GDI Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036786 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016
: - http://www.securitytracker.com/id/1036786 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-106 - http://www.securityfocus.com/bid/92784