deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-1670
Published: 2015-05-13
Description: The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2, allows remote attackers to obtain sensitive information from process memory via a crafted OpenType font on a web site, aka "OpenType Font Parsing Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/74485; http://www.securitytracker.com/id/1032281; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-044
CVE: CVE-2015-1671
Published: 2015-05-13
Description: The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 SP2; Live Meeting 2007 Console; Lync 2010; Lync 2010 Attendee; Lync 2013 SP1; Lync Basic 2013 SP1; Silverlight 5 before 5.1.40416.00; and Silverlight 5 Developer Runtime before 5.1.40416.00, allows remote attackers to execute arbitrary code via a crafted TrueType font, aka "TrueType Font Parsing Vulnerability."
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/74490; http://www.securitytracker.com/id/1032281; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-044
CVE: CVE-2015-1672
Published: 2015-05-13
Description: Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 allows remote attackers to cause a denial of service (recursion and performance degradation) via crafted encrypted data in an XML document, aka ".NET XML Decryption Denial of Service Vulnerability."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://www.securityfocus.com/bid/74482; http://www.securitytracker.com/id/1032297; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-048
CVE: CVE-2015-1673
Published: 2015-05-13
Description: The Windows Forms (aka WinForms) libraries in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 allow user-assisted remote attackers to execute arbitrary code via a crafted partial-trust application, aka "Windows Forms Elevation of Privilege Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/74487; http://www.securitytracker.com/id/1032297; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-048
CVE: CVE-2015-1674
Published: 2015-05-13
Description: The kernel in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly validate an unspecified address, which allows local users to bypass the KASLR protection mechanism, and consequently discover the cng.sys base address, via a crafted application, aka "Windows Kernel Security Feature Bypass Vulnerability."
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-254
References: http://www.securityfocus.com/bid/74488; http://www.securitytracker.com/id/1032292; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-052
CVE: CVE-2015-1675
Published: 2015-05-13
Description: Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to execute arbitrary code via a crafted Journal file, aka "Windows Journal Remote Code Execution Vulnerability," a different vulnerability than CVE-2015-1695, CVE-2015-1696, CVE-2015-1697, CVE-2015-1698, and CVE-2015-1699.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.securitytracker.com/id/1032280; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-045; http://www.securitytracker.com/id/1032280
CVE: CVE-2015-1676
Published: 2015-05-13
Description: The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to bypass the ASLR protection mechanism via a crafted function call, aka "Microsoft Windows Kernel Memory Disclosure Vulnerability," a different vulnerability than CVE-2015-1677, CVE-2015-1678, CVE-2015-1679, and CVE-2015-1680.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://www.securityfocus.com/bid/74483; http://www.securitytracker.com/id/1032294; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-051
CVE: CVE-2015-1677
Published: 2015-05-13
Description: The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to bypass the ASLR protection mechanism via a crafted function call, aka "Microsoft Windows Kernel Memory Disclosure Vulnerability," a different vulnerability than CVE-2015-1676, CVE-2015-1678, CVE-2015-1679, and CVE-2015-1680.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://www.securityfocus.com/bid/74494; http://www.securitytracker.com/id/1032294; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-051
CVE: CVE-2015-1678
Published: 2015-05-13
Description: The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to bypass the ASLR protection mechanism via a crafted function call, aka "Microsoft Windows Kernel Memory Disclosure Vulnerability," a different vulnerability than CVE-2015-1676, CVE-2015-1677, CVE-2015-1679, and CVE-2015-1680.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://www.securityfocus.com/bid/74495; http://www.securitytracker.com/id/1032294; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-051
CVE: CVE-2015-1679
Published: 2015-05-13
Description: The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to bypass the ASLR protection mechanism via a crafted function call, aka "Microsoft Windows Kernel Memory Disclosure Vulnerability," a different vulnerability than CVE-2015-1676, CVE-2015-1677, CVE-2015-1678, and CVE-2015-1680.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://www.securityfocus.com/bid/74496; http://www.securitytracker.com/id/1032294; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-051
CVE: CVE-2015-1680
Published: 2015-05-13
Description: The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to bypass the ASLR protection mechanism via a crafted function call, aka "Microsoft Windows Kernel Memory Disclosure Vulnerability," a different vulnerability than CVE-2015-1676, CVE-2015-1677, CVE-2015-1678, and CVE-2015-1679.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://www.securityfocus.com/bid/74497; http://www.securitytracker.com/id/1032294; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-051
CVE: CVE-2015-1681
Published: 2015-05-13
Description: Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to cause a denial of service via a crafted .msc file, aka "Microsoft Management Console File Format Denial of Service Vulnerability."
CVSS Score: 1.9 (LOW)
CWE: CWE-119
References: http://www.securityfocus.com/bid/74486; http://www.securitytracker.com/id/1032286; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-054
CVE: CVE-2015-1682
Published: 2015-05-13
Description: Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Office 2013 SP1, Excel 2013 SP1, PowerPoint 2013 SP1, Word 2013 SP1, Office 2013 RT SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Word 2013 RT SP1, Office for Mac 2011, Excel for Mac 2011, PowerPoint for Mac 2011, Word for Mac 2011, PowerPoint Viewer, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, Excel Services on SharePoint Server 2010 SP2 and 2013 SP1, Office Web Apps 2010 SP2, Excel Web App 2010 SP2, Office Web Apps Server 2013 SP1, SharePoint Foundation 2010 SP2, and SharePoint Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/74481; http://www.securitytracker.com/id/1032295; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-046
CVE: CVE-2015-1683
Published: 2015-05-13
Description: Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1032295; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-046; http://www.securitytracker.com/id/1032295
CVE: CVE-2015-1684
Published: 2015-05-13
Description: VBScript.dll in the Microsoft VBScript 5.6 through 5.8 engine, as used in Internet Explorer 8 through 11 and other products, allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "VBScript ASLR Bypass."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/74522; http://www.securitytracker.com/id/1032282; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-043
CVE: CVE-2015-1685
Published: 2015-05-13
Description: Microsoft Internet Explorer 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://www.securityfocus.com/bid/74516; http://www.securitytracker.com/id/1032282; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-043
CVE: CVE-2015-1686
Published: 2015-05-13
Description: The Microsoft (1) VBScript 5.6 through 5.8 and (2) JScript 5.6 through 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "VBScript and JScript ASLR Bypass."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/74530; http://www.securitytracker.com/id/1032282; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-043
CVE: CVE-2015-1688
Published: 2015-05-13
Description: Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability."
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://www.securityfocus.com/bid/74519; http://www.securitytracker.com/id/1032282; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-043
CVE: CVE-2015-1689
Published: 2015-05-13
Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1705.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/74506; http://www.securitytracker.com/id/1032282; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-043
CVE: CVE-2015-1691
Published: 2015-05-13
Description: Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1712.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/74507; http://www.securitytracker.com/id/1032282; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-043
CVE: CVE-2015-1692
Published: 2015-05-13
Description: Microsoft Internet Explorer 7 through 11 allows user-assisted remote attackers to read the clipboard contents via crafted web script, aka "Internet Explorer Clipboard Information Disclosure Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/74517; http://www.securitytracker.com/id/1032282; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-043
CVE: CVE-2015-1694
Published: 2015-05-13
Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1710.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/74508; http://www.securitytracker.com/id/1032282; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-043
CVE: CVE-2015-1695
Published: 2015-05-13
Description: Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to execute arbitrary code via a crafted Journal file, aka "Windows Journal Remote Code Execution Vulnerability," a different vulnerability than CVE-2015-1675, CVE-2015-1696, CVE-2015-1697, CVE-2015-1698, and CVE-2015-1699.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.securitytracker.com/id/1032280; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-045; http://www.securitytracker.com/id/1032280
CVE: CVE-2015-1696
Published: 2015-05-13
Description: Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to execute arbitrary code via a crafted Journal file, aka "Windows Journal Remote Code Execution Vulnerability," a different vulnerability than CVE-2015-1675, CVE-2015-1695, CVE-2015-1697, CVE-2015-1698, and CVE-2015-1699.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.securitytracker.com/id/1032280; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-045; https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1095
CVE: CVE-2015-1697
Published: 2015-05-13
Description: Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to execute arbitrary code via a crafted Journal file, aka "Windows Journal Remote Code Execution Vulnerability," a different vulnerability than CVE-2015-1675, CVE-2015-1695, CVE-2015-1696, CVE-2015-1698, and CVE-2015-1699.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.securitytracker.com/id/1032280; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-045; https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1096
CVE: CVE-2015-1698
Published: 2015-05-13
Description: Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to execute arbitrary code via a crafted Journal file, aka "Windows Journal Remote Code Execution Vulnerability," a different vulnerability than CVE-2015-1675, CVE-2015-1695, CVE-2015-1696, CVE-2015-1697, and CVE-2015-1699.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.securitytracker.com/id/1032280; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-045; https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1097
CVE: CVE-2015-1699
Published: 2015-05-13
Description: Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to execute arbitrary code via a crafted Journal file, aka "Windows Journal Remote Code Execution Vulnerability," a different vulnerability than CVE-2015-1675, CVE-2015-1695, CVE-2015-1696, CVE-2015-1697, and CVE-2015-1698.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.securitytracker.com/id/1032280; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-045; http://www.securitytracker.com/id/1032280
CVE: CVE-2015-1700
Published: 2015-05-13
Description: Microsoft SharePoint Server 2007 SP3, SharePoint Foundation 2010 SP2, SharePoint Server 2010 SP2, and SharePoint Foundation 2013 SP1 allow remote authenticated users to execute arbitrary code via crafted page content, aka "Microsoft SharePoint Page Content Vulnerabilities."
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-20
References: http://www.securitytracker.com/id/1032296; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-047; http://www.securitytracker.com/id/1032296
CVE: CVE-2015-1702
Published: 2015-05-13
Description: The Service Control Manager (SCM) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly constrain impersonation levels, which allows local users to gain privileges via a crafted application, aka "Service Control Manager Elevation of Privilege Vulnerability."
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-264
References: http://www.securityfocus.com/bid/74492; http://www.securitytracker.com/id/1032299; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-050
CVE: CVE-2015-1703
Published: 2015-05-13
Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability," a different vulnerability than CVE-2015-1704.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://www.securityfocus.com/bid/74520; http://www.securitytracker.com/id/1032282; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-043
CVE: CVE-2015-1704
Published: 2015-05-13
Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability," a different vulnerability than CVE-2015-1703.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://www.securityfocus.com/bid/74521; http://www.securitytracker.com/id/1032282; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-043
CVE: CVE-2015-1705
Published: 2015-05-13
Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1689.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/74509; http://www.securitytracker.com/id/1032282; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-043
CVE: CVE-2015-1706
Published: 2015-05-13
Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1658, CVE-2015-1711, CVE-2015-1717, and CVE-2015-1718.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/74510; http://www.securitytracker.com/id/1032282; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-043
CVE: CVE-2015-1708
Published: 2015-05-13
Description: Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/74511; http://www.securitytracker.com/id/1032282; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-043
CVE: CVE-2015-1709
Published: 2015-05-13
Description: Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/74512; http://www.securitytracker.com/id/1032282; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-043
CVE: CVE-2015-1710
Published: 2015-05-13
Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1694.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/74513; http://www.securitytracker.com/id/1032282; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-043
CVE: CVE-2015-1711
Published: 2015-05-13
Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1658, CVE-2015-1706, CVE-2015-1717, and CVE-2015-1718.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/74514; http://www.securitytracker.com/id/1032282; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-043
CVE: CVE-2015-1712
Published: 2015-05-13
Description: Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1691.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/74515; http://www.securitytracker.com/id/1032282; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-043
CVE: CVE-2015-1713
Published: 2015-05-13
Description: Microsoft Internet Explorer 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability."
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://www.securityfocus.com/bid/74518; http://www.securitytracker.com/id/1032282; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-043
CVE: CVE-2015-1714
Published: 2015-05-13
Description: Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/74505; http://www.securitytracker.com/id/1032282; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-043
CVE: CVE-2015-1715
Published: 2015-05-13
Description: Microsoft Silverlight 5 before 5.1.40416.00 allows remote attackers to bypass intended integrity-level restrictions via a crafted Silverlight application, aka "Microsoft Silverlight Out of Browser Application Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-264
References: http://www.securitytracker.com/id/1032298; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-049; http://www.securitytracker.com/id/1032298