deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-8827
Published: 2016-12-16
Description: NVIDIA GeForce Experience 3.x before GFE 3.1.0.52 contains a vulnerability in NVIDIA Web Helper.exe where a local web API endpoint, /VisualOPS/v.1.0./, lacks proper access control and parameter validation, allowing for information disclosure via a directory traversal attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://nvidia.custhelp.com/app/answers/detail/a_id/4279; http://www.securityfocus.com/bid/94964; https://nvidia.custhelp.com/app/answers/detail/a_id/5033
CVE: CVE-2016-7454
Published: 2016-12-17
Description: CSRF vulnerability on Technicolor TC dpc3941T (formerly Cisco dpc3941T) devices with firmware dpc3941-P20-18-v303r20[PII_REDACTED]13a-CMCST allows an attacker to change the Wi-Fi password, open the remote management interface, or reset the router.
CVSS Score: 8.0 (HIGH)
CWE: CWE-352
References: http://www.securityfocus.com/bid/94881; https://packetstormsecurity.com/files/140121/XFINITY-Gateway-Technicolor-DPC3941T-Cross-Site-Request-Forgery.html; http://www.securityfocus.com/bid/94881
CVE: CVE-2016-9158
Published: 2016-12-17
Description: A vulnerability has been identified in SIMATIC S7-300 CPU family (All versions), SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 V6 and earlier CPU family (All versions), SIMATIC S7-400 V7 CPU family (All versions). Specially crafted packets sent to port 80/tcp could cause the affected devices to go into defect mode. A cold restart is required to recover the system.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/94820; http://www.securitytracker.com/id/1037434; https://cert-portal.siemens.com/productcert/pdf/ssa-731239.pdf
CVE: CVE-2016-9159
Published: 2016-12-17
Description: A vulnerability has been identified in SIMATIC S7-300 CPU family (All versions), SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 V6 and earlier CPU family (All versions), SIMATIC S7-400 V7 CPU family (All versions), SIMATIC S7-410 V8 CPU family (All versions), SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants) (All versions). An attacker with network access to port 102/tcp (ISO-TSAP) or via Profibus could obtain credentials from the PLC if protection-level 2 is configured on the affected devices.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200, CWE-200
References: http://www.securityfocus.com/bid/94820; http://www.securitytracker.com/id/1037434; https://cert-portal.siemens.com/productcert/pdf/ssa-731239.pdf
CVE: CVE-2016-9160
Published: 2016-12-17
Description: A vulnerability in SIEMENS SIMATIC WinCC (All versions < SIMATIC WinCC V7.2) and SIEMENS SIMATIC PCS 7 (All versions < SIMATIC PCS 7 V8.0 SP1) could allow a remote attacker to crash an ActiveX component or leak parts of the application memory if a user is tricked into clicking on a malicious link under certain conditions.
CVSS Score: 8.1 (HIGH)
CWE: CWE-111, CWE-254
References: http://www.securityfocus.com/bid/94825; http://www.securitytracker.com/id/1037435; http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-693129.pdf
CVE: CVE-2016-9949
Published: 2016-12-17
Description: An issue was discovered in Apport before 2.20.4. In apport/ui.py, Apport reads the CrashDB field and it then evaluates the field as Python code if it begins with a "{". This allows remote attackers to execute arbitrary Python code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: http://www.securityfocus.com/bid/95011; http://www.ubuntu.com/usn/USN-3157-1; https://bugs.launchpad.net/apport/+bug/1648806
CVE: CVE-2016-9950
Published: 2016-12-17
Description: An issue was discovered in Apport before 2.20.4. There is a path traversal issue in the Apport crash file "Package" and "SourcePackage" fields. These fields are used to build a path to the package specific hook files in the /usr/share/apport/package-hooks/ directory. An attacker can exploit this path traversal to execute arbitrary Python files from the local system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: http://www.securityfocus.com/bid/95011; http://www.ubuntu.com/usn/USN-3157-1; https://bugs.launchpad.net/apport/+bug/1648806
CVE: CVE-2016-9951
Published: 2016-12-17
Description: An issue was discovered in Apport before 2.20.4. A malicious Apport crash file can contain a restart command in `RespawnCommand` or `ProcCmdline` fields. This command will be executed if a user clicks the Relaunch button on the Apport prompt from the malicious crash file. The fix is to only show the Relaunch button on Apport crash files generated by local systems. The Relaunch button will be hidden when crash files are opened directly in Apport-GTK.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: http://www.securityfocus.com/bid/95011; http://www.ubuntu.com/usn/USN-3157-1; https://bugs.launchpad.net/apport/+bug/1648806
CVE: CVE-2016-9997
Published: 2016-12-17
Description: SPIP 3.1.x suffers from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/puce_statut.php involving the `$id` parameter, as demonstrated by a /ecrire/?exec=puce_statut URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/95008; http://www.securitytracker.com/id/1037486; https://core.spip.net/projects/spip/repository/revisions/23288
CVE: CVE-2016-9998
Published: 2016-12-17
Description: SPIP 3.1.x suffer from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/info_plugin.php involving the `$plugin` parameter, as demonstrated by a /ecrire/?exec=info_plugin URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/95008; http://www.securitytracker.com/id/1037486; https://core.spip.net/projects/spip/repository/revisions/23288
CVE: CVE-2016-5181
Published: 2016-12-18
Description: Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android permitted execution of v8 microtasks while the DOM was in an inconsistent state, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via crafted HTML pages.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://rhn.redhat.com/errata/RHSA-2016-2067.html; http://www.securityfocus.com/bid/93528; https://chromereleases.googleblog.com/2016/10/stable-channel-update-for-desktop.html
CVE: CVE-2016-5182
Published: 2016-12-18
Description: Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android had insufficient validation in bitmap handling, which allowed a remote attacker to potentially exploit heap corruption via crafted HTML pages.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://rhn.redhat.com/errata/RHSA-2016-2067.html; http://www.securityfocus.com/bid/93528; https://chromereleases.googleblog.com/2016/10/stable-channel-update-for-desktop.html
CVE: CVE-2016-5183
Published: 2016-12-18
Description: A heap use after free in PDFium in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android allows a remote attacker to potentially exploit heap corruption via crafted PDF files.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://rhn.redhat.com/errata/RHSA-2016-2067.html; http://www.securityfocus.com/bid/93528; https://chromereleases.googleblog.com/2016/10/stable-channel-update-for-desktop.html
CVE: CVE-2016-5184
Published: 2016-12-18
Description: PDFium in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled object lifecycles in CFFL_FormFillter::KillFocusForAnnot, which allowed a remote attacker to potentially exploit heap corruption via crafted PDF files.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://rhn.redhat.com/errata/RHSA-2016-2067.html; http://www.securityfocus.com/bid/93528; https://chromereleases.googleblog.com/2016/10/stable-channel-update-for-desktop.html
CVE: CVE-2016-5185
Published: 2016-12-18
Description: Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly allowed reentrance of FrameView::updateLifecyclePhasesInternal(), which allowed a remote attacker to perform an out of bounds memory read via crafted HTML pages.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://rhn.redhat.com/errata/RHSA-2016-2067.html; http://www.securityfocus.com/bid/93528; https://chromereleases.googleblog.com/2016/10/stable-channel-update-for-desktop.html
CVE: CVE-2016-5186
Published: 2016-12-18
Description: Devtools in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled objects after a tab crash, which allowed a remote attacker to perform an out of bounds memory read via crafted PDF files.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125
References: http://rhn.redhat.com/errata/RHSA-2016-2067.html; http://www.securityfocus.com/bid/93528; https://chromereleases.googleblog.com/2016/10/stable-channel-update-for-desktop.html
CVE: CVE-2016-5187
Published: 2016-12-18
Description: Google Chrome prior to 54.0.2840.85 for Android incorrectly handled rapid transition into and out of full screen mode, which allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via crafted HTML pages.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://rhn.redhat.com/errata/RHSA-2016-2067.html; http://www.securityfocus.com/bid/93528; https://chromereleases.googleblog.com/2016/10/stable-channel-update-for-desktop.html
CVE: CVE-2016-5188
Published: 2016-12-18
Description: Multiple issues in Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux allow a remote attacker to spoof various parts of browser UI via crafted HTML pages.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://rhn.redhat.com/errata/RHSA-2016-2067.html; http://www.securityfocus.com/bid/93528; https://chromereleases.googleblog.com/2016/10/stable-channel-update-for-desktop.html
CVE: CVE-2016-5189
Published: 2016-12-18
Description: Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android permitted navigation to blob URLs with non-canonical origins, which allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via crafted HTML pages.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: http://rhn.redhat.com/errata/RHSA-2016-2067.html; http://www.securityfocus.com/bid/93528; https://chromereleases.googleblog.com/2016/10/stable-channel-update-for-desktop.html
CVE: CVE-2016-5190
Published: 2016-12-18
Description: Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled object lifecycles during shutdown, which allowed a remote attacker to perform an out of bounds memory read via crafted HTML pages.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-416
References: http://rhn.redhat.com/errata/RHSA-2016-2067.html; http://www.securityfocus.com/bid/93528; https://chromereleases.googleblog.com/2016/10/stable-channel-update-for-desktop.html
CVE: CVE-2016-5191
Published: 2016-12-18
Description: Bookmark handling in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android had insufficient validation of supplied data, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via crafted HTML pages, as demonstrated by an interpretation conflict between userinfo and scheme in an http://javascript:payload@example.com URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://rhn.redhat.com/errata/RHSA-2016-2067.html; http://www.securityfocus.com/bid/93528; https://chromereleases.googleblog.com/2016/10/stable-channel-update-for-desktop.html
CVE: CVE-2016-5192
Published: 2016-12-18
Description: Blink in Google Chrome prior to 54.0.2840.59 for Windows missed a CORS check on redirect in TextTrackLoader, which allowed a remote attacker to bypass cross-origin restrictions via crafted HTML pages.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: http://rhn.redhat.com/errata/RHSA-2016-2067.html; http://www.securityfocus.com/bid/93528; https://chromereleases.googleblog.com/2016/10/stable-channel-update-for-desktop.html
CVE: CVE-2016-5193
Published: 2016-12-18
Description: Google Chrome prior to 54.0 for iOS had insufficient validation of URLs for windows open by DOM, which allowed a remote attacker to bypass restrictions on navigation to certain URL schemes via crafted HTML pages.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://rhn.redhat.com/errata/RHSA-2016-2067.html; http://www.securityfocus.com/bid/93528; https://chromereleases.googleblog.com/2016/10/stable-channel-update-for-desktop.html
CVE: CVE-2016-10005
Published: 2016-12-19
Description: Webdynpro in SAP Solman 7.1 through 7.31 allows remote attackers to obtain sensitive information via webdynpro/dispatcher/sap.com/caf~eu~gp~example~timeoff~wd requests, aka SAP Security Note 2344524.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://packetstormsecurity.com/files/140232/SAP-Solman-7.31-Information-Disclosure.html; http://seclists.org/fulldisclosure/2016/Dec/69; http://www.securityfocus.com/bid/92949
CVE: CVE-2016-2355
Published: 2016-12-19
Description: SQL injection vulnerability in the REST API in dotCMS before 3.3.2 allows remote attackers to execute arbitrary SQL commands via the stName parameter to api/content/save/1.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://dotcms.com/security/SI-35; http://www.securityfocus.com/bid/94992; https://github.com/dotCMS/core/issues/8848
CVE: CVE-2016-7181
Published: 2016-12-20
Description: Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption Vulnerability."
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94735; http://www.securitytracker.com/id/1037444; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-145
CVE: CVE-2016-7206
Published: 2016-12-20
Description: Cross-site scripting (XSS) vulnerability in Microsoft Edge allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Microsoft Edge Information Disclosure Vulnerability," a different vulnerability than CVE-2016-7280.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/94737; http://www.securitytracker.com/id/1037444; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-145
CVE: CVE-2016-7219
Published: 2016-12-20
Description: The Crypto driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to obtain sensitive information via a crafted application, aka "Windows Crypto Driver Information Disclosure Vulnerability."
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94764; http://www.securitytracker.com/id/1037450; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-149
CVE: CVE-2016-7257
Published: 2016-12-20
Description: The GDI component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office for Mac 2011, and Office 2016 for Mac allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "GDI Information Disclosure Vulnerability."
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94755; http://www.securitytracker.com/id/1037438; http://www.securitytracker.com/id/1037441
CVE: CVE-2016-7258
Published: 2016-12-20
Description: The kernel in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 mishandles page-fault system calls, which allows local users to obtain sensitive information from arbitrary processes via a crafted application, aka "Windows Kernel Memory Address Information Disclosure Vulnerability."
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94736; http://www.securitytracker.com/id/1037453; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-152
CVE: CVE-2016-7259
Published: 2016-12-20
Description: The Graphics Component in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-19
References: http://blog.quarkslab.com/cve-2016-7259-an-empty-file-into-the-blue.html; http://packetstormsecurity.com/files/140172/Microsoft-Windows-Type-1-Font-Processing-Privilege-Escalation.html; http://www.securityfocus.com/archive/1/539919/100/0/threaded
CVE: CVE-2016-7260
Published: 2016-12-20
Description: The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/94785; http://www.securitytracker.com/id/1037452; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-151
CVE: CVE-2016-7262
Published: 2016-12-20
Description: Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow user-assisted remote attackers to execute arbitrary commands via a crafted cell that is mishandled upon a click, aka "Microsoft Office Security Feature Bypass Vulnerability."
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/94660; http://www.securitytracker.com/id/1037441; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-148
CVE: CVE-2016-7263
Published: 2016-12-20
Description: Microsoft Excel for Mac 2011 and Excel 2016 for Mac allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94668; http://www.securitytracker.com/id/1037441; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-148
CVE: CVE-2016-7264
Published: 2016-12-20
Description: Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, Excel for Mac 2011, and Excel 2016 for Mac allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via a crafted document, aka "Microsoft Office Information Disclosure Vulnerability."
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/94769; http://www.securitytracker.com/id/1037441; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-148
CVE: CVE-2016-7265
Published: 2016-12-20
Description: Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3, and Excel Services on SharePoint Server 2010 SP2 allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via a crafted document, aka "Microsoft Office Information Disclosure Vulnerability."
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/94721; http://www.securitytracker.com/id/1037441; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-148
CVE: CVE-2016-7266
Published: 2016-12-20
Description: Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, and Excel 2016 for Mac mishandle a registry check, which allows user-assisted remote attackers to execute arbitrary commands via crafted embedded content in a document, aka "Microsoft Office Security Feature Bypass Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/94662; http://www.securitytracker.com/id/1037441; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-148
CVE: CVE-2016-7267
Published: 2016-12-20
Description: Microsoft Excel 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016 misparses file formats, which makes it easier for remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Security Feature Bypass Vulnerability."
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/94664; http://www.securitytracker.com/id/1037441; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-148
CVE: CVE-2016-7268
Published: 2016-12-20
Description: Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via a crafted document, aka "Microsoft Office Information Disclosure Vulnerability."
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/94672; http://www.securitytracker.com/id/1037441; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-148
CVE: CVE-2016-7270
Published: 2016-12-20
Description: The Data Provider for SQL Server in Microsoft .NET Framework 4.6.2 mishandles a developer-supplied key, which allows remote attackers to bypass the Always Encrypted protection mechanism and obtain sensitive cleartext information by leveraging key guessability, aka ".NET Information Disclosure Vulnerability."
CVSS Score: 7.5 (HIGH)
CWE: CWE-310
References: http://www.securityfocus.com/bid/94741; http://www.securitytracker.com/id/1037455; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-155
CVE: CVE-2016-7271
Published: 2016-12-20
Description: The Secure Kernel Mode implementation in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allows local users to bypass the virtual trust level (VTL) protection mechanism via a crafted application, aka "Secure Kernel Mode Elevation of Privilege Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/94734; http://www.securitytracker.com/id/1037451; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-150
CVE: CVE-2016-7272
Published: 2016-12-20
Description: The Graphics component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site, aka "Windows Graphics Remote Code Execution Vulnerability."
CVSS Score: 8.8 (HIGH)
CWE: CWE-19
References: http://www.securityfocus.com/bid/94739; http://www.securitytracker.com/id/1037438; http://www.zerodayinitiative.com/advisories/ZDI-16-645
CVE: CVE-2016-7273
Published: 2016-12-20
Description: The Graphics component in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site, aka "Windows Graphics Remote Code Execution Vulnerability."
CVSS Score: 8.8 (HIGH)
CWE: CWE-19
References: http://www.securityfocus.com/bid/94752; http://www.securitytracker.com/id/1037438; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-146