auren-research/cyber-sec huggingface dataset:
cveID: CVE-2022-30190
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
dateAdded: 2022-06-14
shortDescription: A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run code with the privileges of the calling application.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-07-05
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2022-30190
cwes: CWE-610
cveID: CVE-2021-38163
vendorProject: SAP
product: NetWeaver
vulnerabilityName: SAP NetWeaver Unrestricted File Upload Vulnerability
dateAdded: 2022-06-09
shortDescription: SAP NetWeaver contains a vulnerability that allows unrestricted file upload.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-30
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-38163
cwes: CWE-23
cveID: CVE-2016-2386
vendorProject: SAP
product: NetWeaver
vulnerabilityName: SAP NetWeaver SQL Injection Vulnerability
dateAdded: 2022-06-09
shortDescription: SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-30
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2016-2386
cwes: CWE-89
cveID: CVE-2016-2388
vendorProject: SAP
product: NetWeaver
vulnerabilityName: SAP NetWeaver Information Disclosure Vulnerability
dateAdded: 2022-06-09
shortDescription: The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-30
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2016-2388
cwes: CWE-200
cveID: CVE-2019-7195
vendorProject: QNAP
product: Photo Station
vulnerabilityName: QNAP Photo Station Path Traversal Vulnerability
dateAdded: 2022-06-08
shortDescription: QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-22
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2019-7195
cwes: CWE-22
cveID: CVE-2019-7194
vendorProject: QNAP
product: Photo Station
vulnerabilityName: QNAP Photo Station Path Traversal Vulnerability
dateAdded: 2022-06-08
shortDescription: QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-22
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2019-7194
cwes: CWE-22
cveID: CVE-2019-7193
vendorProject: QNAP
product: QTS
vulnerabilityName: QNAP QTS Improper Input Validation Vulnerability
dateAdded: 2022-06-08
shortDescription: QNAP QTS contains an improper input validation vulnerability allowing remote attackers to inject code on the system.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-22
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2019-7193
cwes: CWE-20
cveID: CVE-2019-7192
vendorProject: QNAP
product: Photo Station
vulnerabilityName: QNAP Photo Station Improper Access Control Vulnerability
dateAdded: 2022-06-08
shortDescription: QNAP NAS devices running Photo Station contain an improper access control vulnerability allowing remote attackers to gain unauthorized access to the system.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-22
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2019-7192
cwes: CWE-863
cveID: CVE-2019-5825
vendorProject: Google
product: Chromium V8
vulnerabilityName: Google Chromium V8 Out-of-Bounds Write Vulnerability
dateAdded: 2022-06-08
shortDescription: Google Chromium V8 Engine contains an out-of-bounds write vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-22
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2019-5825
cwes: CWE-787
cveID: CVE-2019-15271
vendorProject: Cisco
product: RV Series Routers
vulnerabilityName: Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability
dateAdded: 2022-06-08
shortDescription: A deserialization of untrusted data vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an attacker to execute code with root privileges.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-22
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2019-15271
cwes: CWE-502
cveID: CVE-2018-6065
vendorProject: Google
product: Chromium V8
vulnerabilityName: Google Chromium V8 Integer Overflow Vulnerability
dateAdded: 2022-06-08
shortDescription: Google Chromium V8 Engine contains an integer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-22
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2018-6065
cwes: CWE-190
CWE-787
cveID: CVE-2018-4990
vendorProject: Adobe
product: Acrobat and Reader
vulnerabilityName: Adobe Acrobat and Reader Double Free Vulnerability
dateAdded: 2022-06-08
shortDescription: Adobe Acrobat and Reader have a double free vulnerability that could lead to remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-22
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2018-4990
cwes: CWE-415
cveID: CVE-2018-17480
vendorProject: Google
product: Chromium V8
vulnerabilityName: Google Chromium V8 Out-of-Bounds Write Vulnerability
dateAdded: 2022-06-08
shortDescription: Google Chromium V8 Engine contains out-of-bounds write vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-22
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2018-17480
cwes: CWE-787
cveID: CVE-2018-17463
vendorProject: Google
product: Chromium V8
vulnerabilityName: Google Chromium V8 Remote Code Execution Vulnerability
dateAdded: 2022-06-08
shortDescription: Google Chromium V8 Engine contains an unspecified vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-22
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2018-17463
cveID: CVE-2017-6862
vendorProject: NETGEAR
product: Multiple Devices
vulnerabilityName: NETGEAR Multiple Devices Buffer Overflow Vulnerability
dateAdded: 2022-06-08
shortDescription: Multiple NETGEAR devices contain a buffer overflow vulnerability that allows for authentication bypass and remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-22
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-6862
cwes: CWE-119
cveID: CVE-2017-5070
vendorProject: Google
product: Chromium V8
vulnerabilityName: Google Chromium V8 Type Confusion Vulnerability
dateAdded: 2022-06-08
shortDescription: Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-22
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-5070
cwes: CWE-843
cveID: CVE-2017-5030
vendorProject: Google
product: Chromium V8
vulnerabilityName: Google Chromium V8 Memory Corruption Vulnerability
dateAdded: 2022-06-08
shortDescription: Google Chromium V8 Engine contains a memory corruption vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-22
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-5030
cwes: CWE-125
cveID: CVE-2016-5198
vendorProject: Google
product: Chromium V8
vulnerabilityName: Google Chromium V8 Out-of-Bounds Memory Vulnerability
dateAdded: 2022-06-08
shortDescription: Google Chromium V8 Engine contains an out-of-bounds memory access vulnerability that allows a remote attacker to perform read/write operations, leading to code execution, via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-22
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2016-5198
cwes: CWE-125
CWE-787
cveID: CVE-2016-1646
vendorProject: Google
product: Chromium V8
vulnerabilityName: Google Chromium V8 Out-of-Bounds Read Vulnerability
dateAdded: 2022-06-08
shortDescription: Google Chromium V8 Engine contains an out-of-bounds read vulnerability that allows a remote attacker to cause a denial of service or possibly have another unspecified impact via crafted JavaScript code. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-22
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2016-1646
cwes: CWE-119
cveID: CVE-2013-1331
vendorProject: Microsoft
product: Office
vulnerabilityName: Microsoft Office Buffer Overflow Vulnerability
dateAdded: 2022-06-08
shortDescription: Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via crafted PNG data in an Office document.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-22
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2013-1331
cwes: CWE-119
cveID: CVE-2012-5054
vendorProject: Adobe
product: Flash Player
vulnerabilityName: Adobe Flash Player Integer Overflow Vulnerability
dateAdded: 2022-06-08
shortDescription: Adobe Flash Player contains an integer overflow vulnerability that allows remote attackers to execute code via malformed arguments.
requiredAction: The impacted product is end-of-life and should be disconnected if still in use.
dueDate: 2022-06-22
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2012-5054
cwes: CWE-189
cveID: CVE-2012-4969
vendorProject: Microsoft
product: Internet Explorer
vulnerabilityName: Microsoft Internet Explorer Use-After-Free Vulnerability
dateAdded: 2022-06-08
shortDescription: Microsoft Internet Explorer contains a use-after-free vulnerability that allows remote attackers to execute code via a crafted web site.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-22
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2012-4969
cveID: CVE-2012-1889
vendorProject: Microsoft
product: XML Core Services
vulnerabilityName: Microsoft XML Core Services Memory Corruption Vulnerability
dateAdded: 2022-06-08
shortDescription: Microsoft XML Core Services contains a memory corruption vulnerability which could allow for remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-22
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2012-1889
cwes: CWE-119
cveID: CVE-2012-0767
vendorProject: Adobe
product: Flash Player
vulnerabilityName: Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability
dateAdded: 2022-06-08
shortDescription: Adobe Flash Player contains a XSS vulnerability that allows remote attackers to inject web script or HTML.
requiredAction: The impacted product is end-of-life and should be disconnected if still in use.
dueDate: 2022-06-22
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2012-0767
cwes: CWE-79
cveID: CVE-2012-0754
vendorProject: Adobe
product: Flash Player
vulnerabilityName: Adobe Flash Player Memory Corruption Vulnerability
dateAdded: 2022-06-08
shortDescription: Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
requiredAction: The impacted product is end-of-life and should be disconnected if still in use.
dueDate: 2022-06-22
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2012-0754
cwes: CWE-787
cveID: CVE-2012-0151
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability
dateAdded: 2022-06-08
shortDescription: The Authenticode Signature Verification function in Microsoft Windows (WinVerifyTrust) does not properly validate the digest of a signed portable executable (PE) file, which allows user-assisted remote attackers to execute code.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-22
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2012-0151
cwes: CWE-20
cveID: CVE-2011-2462
vendorProject: Adobe
product: Reader and Acrobat
vulnerabilityName: Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability
dateAdded: 2022-06-08
shortDescription: The Universal 3D (U3D) component in Adobe Reader and Acrobat contains a memory corruption vulnerability which could allow remote attackers to execute code or cause denial-of-service (DoS).
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-22
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2011-2462
cwes: CWE-787
cveID: CVE-2011-0609
vendorProject: Adobe
product: Flash Player
vulnerabilityName: Adobe Flash Player Unspecified Vulnerability
dateAdded: 2022-06-08
shortDescription: Adobe Flash Player contains an unspecified vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
requiredAction: The impacted product is end-of-life and should be disconnected if still in use.
dueDate: 2022-06-22
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2011-0609
cveID: CVE-2010-2883
vendorProject: Adobe
product: Acrobat and Reader
vulnerabilityName: Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability
dateAdded: 2022-06-08
shortDescription: Adobe Acrobat and Reader contain a stack-based buffer overflow vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-22
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2010-2883
cwes: CWE-119
cveID: CVE-2010-2572
vendorProject: Microsoft
product: PowerPoint
vulnerabilityName: Microsoft PowerPoint Buffer Overflow Vulnerability
dateAdded: 2022-06-08
shortDescription: Microsoft PowerPoint contains a buffer overflow vulnerability that alllows for remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-22
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2010-2572
cwes: CWE-119
cveID: CVE-2010-1297
vendorProject: Adobe
product: Flash Player
vulnerabilityName: Adobe Flash Player Memory Corruption Vulnerability
dateAdded: 2022-06-08
shortDescription: Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
requiredAction: The impacted product is end-of-life and should be disconnected if still in use.
dueDate: 2022-06-22
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2010-1297
cwes: CWE-787
cveID: CVE-2009-4324
vendorProject: Adobe
product: Acrobat and Reader
vulnerabilityName: Adobe Acrobat and Reader Use-After-Free Vulnerability
dateAdded: 2022-06-08
shortDescription: Use-after-free vulnerability in Adobe Acrobat and Reader allows remote attackers to execute code via a crafted PDF file.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-22
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2009-4324
cwes: CWE-399
cveID: CVE-2009-3953
vendorProject: Adobe
product: Acrobat and Reader
vulnerabilityName: Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability
dateAdded: 2022-06-08
shortDescription: Adobe Acrobat and Reader contains an array boundary issue in Universal 3D (U3D) support that could lead to remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-22
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2009-3953
cwes: CWE-119
cveID: CVE-2009-1862
vendorProject: Adobe
product: Acrobat and Reader, Flash Player
vulnerabilityName: Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability
dateAdded: 2022-06-08
shortDescription: Adobe Acrobat and Reader and Adobe Flash Player allows remote attackers to execute code or cause denial-of-service (DoS).
requiredAction: For Adobe Acrobat and Reader, apply updates per vendor instructions. For Adobe Flash Player, the impacted product is end-of-life and should be disconnected if still in use.
dueDate: 2022-06-22
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2009-1862
cwes: CWE-94
cveID: CVE-2009-0563
vendorProject: Microsoft
product: Office
vulnerabilityName: Microsoft Office Buffer Overflow Vulnerability
dateAdded: 2022-06-08
shortDescription: Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via a Word document with a crafted tag containing an invalid length field.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-22
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2009-0563
cwes: CWE-119
cveID: CVE-2009-0557
vendorProject: Microsoft
product: Office
vulnerabilityName: Microsoft Office Object Record Corruption Vulnerability
dateAdded: 2022-06-08
shortDescription: Microsoft Office contains an object record corruption vulnerability that allows remote attackers to execute code via a crafted Excel file with a malformed record object.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-22
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2009-0557
cwes: CWE-94
cveID: CVE-2008-0655
vendorProject: Adobe
product: Acrobat and Reader
vulnerabilityName: Adobe Acrobat and Reader Unspecified Vulnerability
dateAdded: 2022-06-08
shortDescription: Adobe Acrobat and Reader contains an unespecified vulnerability described as a design flaw which could allow a specially crafted file to be printed silently an arbitrary number of times.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-22
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2008-0655
cveID: CVE-2007-5659
vendorProject: Adobe
product: Acrobat and Reader
vulnerabilityName: Adobe Acrobat and Reader Buffer Overflow Vulnerability
dateAdded: 2022-06-08
shortDescription: Adobe Acrobat and Reader contain a buffer overflow vulnerability that allows remote attackers to execute code via a PDF file with long arguments to unspecified JavaScript methods.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-22
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2007-5659
cwes: CWE-119
cveID: CVE-2006-2492
vendorProject: Microsoft
product: Word
vulnerabilityName: Microsoft Word Malformed Object Pointer Vulnerability
dateAdded: 2022-06-08
shortDescription: Microsoft Word and Microsoft Works Suites contain a malformed object pointer which allows attackers to execute code.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-22
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2006-2492
cwes: CWE-120
cveID: CVE-2022-26134
vendorProject: Atlassian
product: Confluence Server/Data Center
vulnerabilityName: Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability
dateAdded: 2022-06-02
shortDescription: Atlassian Confluence Server and Data Center contain a remote code execution vulnerability that allows for an unauthenticated attacker to perform remote code execution.
requiredAction: Immediately block all internet traffic to and from affected products AND apply the update per vendor instructions [https://confluence.atlassian.com/doc/confluence-security-advisory-2022-06-02-1130377146.html] OR remove the affected products by the due date on the right. Note: Once the update is successfully deployed, agencies can reassess the internet blocking rules.
dueDate: 2022-06-06
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2022-26134
cwes: CWE-917
cveID: CVE-2019-3010
vendorProject: Oracle
product: Solaris
vulnerabilityName: Oracle Solaris Privilege Escalation Vulnerability
dateAdded: 2022-05-25
shortDescription: Oracle Solaris component: XScreenSaver contains an unspecified vulnerability that allows for privilege escalation.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-15
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2019-3010
cveID: CVE-2016-3393
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability
dateAdded: 2022-05-25
shortDescription: A remote code execution vulnerability exists due to the way the Windows GDI component handles objects in the memory. An attacker who successfully exploits this vulnerability could take control of the affected system.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-15
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2016-3393
cwes: CWE-284
cveID: CVE-2016-7256
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Open Type Font Remote Code Execution Vulnerability
dateAdded: 2022-05-25
shortDescription: A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploits this vulnerability could take control of the affected system.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-15
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2016-7256
cwes: CWE-284