deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2014-9757
Published: 2016-02-08
Description: The Ignite Realtime Smack XMPP API, as used in Atlassian Bamboo before 5.9.9 and 5.10.x before 5.10.0, allows remote configured XMPP servers to execute arbitrary Java code via serialized data in an XMPP message.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://packetstormsecurity.com/files/135352/Bamboo-Deserialization-Missing-Authentication-Checks.html; http://www.securityfocus.com/archive/1/537347/100/0/threaded; https://confluence.atlassian.com/bamboo/bamboo-security-advisory-2016-01-20-794376535.html
CVE: CVE-2015-3251
Published: 2016-02-08
Description: Apache CloudStack before 4.5.2 might allow remote authenticated administrators to obtain sensitive password information for root accounts of virtual machines via unspecified vectors related to API calls.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200
References: http://mail-archives.apache.org/mod_mbox/cloudstack-users/201602.mbox/%3C94DD4CB4-F718-4F79-A934-3D677E497114%40gmail.com%3E; http://www.securityfocus.com/archive/1/537458/100/0/threaded; https://blogs.apache.org/cloudstack/entry/two_late_announced_security_advisories
CVE: CVE-2015-3252
Published: 2016-02-08
Description: Apache CloudStack before 4.5.2 does not properly preserve VNC passwords when migrating KVM virtual machines, which allows remote attackers to gain access by connecting to the VNC server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-255
References: http://mail-archives.apache.org/mod_mbox/cloudstack-users/201602.mbox/%3C7508580E-3D83-49FD-BE6E-B329B0503130%40gmail.com%3E; http://www.securityfocus.com/archive/1/537459/100/0/threaded; https://blogs.apache.org/cloudstack/entry/two_late_announced_security_advisories
CVE: CVE-2015-8360
Published: 2016-02-08
Description: An unspecified resource in Atlassian Bamboo before 5.9.9 and 5.10.x before 5.10.0 allows remote attackers to execute arbitrary Java code via serialized data to the JMS port.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://packetstormsecurity.com/files/135352/Bamboo-Deserialization-Missing-Authentication-Checks.html; http://www.securityfocus.com/archive/1/537347/100/0/threaded; https://confluence.atlassian.com/bamboo/bamboo-security-advisory-2016-01-20-794376535.html
CVE: CVE-2015-8361
Published: 2016-02-08
Description: Multiple unspecified services in Atlassian Bamboo before 5.9.9 and 5.10.x before 5.10.0 do not require authentication, which allows remote attackers to obtain sensitive information, modify settings, or manage build agents via unknown vectors involving the JMS port.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-284
References: http://packetstormsecurity.com/files/135352/Bamboo-Deserialization-Missing-Authentication-Checks.html; http://www.securityfocus.com/archive/1/537347/100/0/threaded; https://confluence.atlassian.com/bamboo/bamboo-security-advisory-2016-01-20-794376535.html
CVE: CVE-2016-2048
Published: 2016-02-08
Description: Django 1.9.x before 1.9.2, when ModelAdmin.save_as is set to True, allows remote authenticated users to bypass intended access restrictions and create ModelAdmin objects via the "Save as New" option when editing objects and leveraging the "change" permission.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: http://www.securityfocus.com/bid/82329; http://www.securitytracker.com/id/1034894; https://www.djangoproject.com/weblog/2016/feb/01/releases-192-and-189/
CVE: CVE-2016-2089
Published: 2016-02-08
Description: The jas_matrix_clip function in jas_seq.c in JasPer 1.900.1 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted JPEG 2000 image.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-updates/2016-02/msg00060.html; http://lists.opensuse.org/opensuse-updates/2016-02/msg00063.html; http://www.debian.org/security/2016/dsa-3508
CVE: CVE-2016-2091
Published: 2016-02-08
Description: The dwarf_read_cie_fde_prefix function in dwarf_frame2.c in libdwarf 20151114 allows attackers to cause a denial of service (out-of-bounds read) via a crafted ELF object file.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2016/01/19/3; http://www.openwall.com/lists/oss-security/2016/01/28/8; http://www.openwall.com/lists/oss-security/2016/01/19/3
CVE: CVE-2016-2214
Published: 2016-02-08
Description: Cross-site scripting (XSS) vulnerability in an unspecified portal authentication page in Huawei Agile Controller-Campus with software before V100R001C00SPC319 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160203-01-agilecontroller-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160203-01-agilecontroller-en
CVE: CVE-2016-2268
Published: 2016-02-08
Description: Dell SecureWorks app before 2.1 for iOS does not validate SSL certificates, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-310
References: http://packetstormsecurity.com/files/135617/Dell-SecureWorks-iOS-Certificate-Validation-Failure.html; http://seclists.org/fulldisclosure/2016/Feb/27; http://www.info-sec.ca/advisories/Dell-SecureWorks.html
CVE: CVE-2016-1316
Published: 2016-02-09
Description: Cisco TelePresence Video Communication Server (VCS) X8.1 through X8.7, as used in conjunction with Jabber Guest, allows remote attackers to obtain sensitive call-statistics information via a direct request to an unspecified URL, aka Bug ID CSCux73362.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160208-vcs; http://www.securitytracker.com/id/1034956; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160208-vcs
CVE: CVE-2016-1317
Published: 2016-02-09
Description: Cisco Unified Communications Manager 11.5(0.98000.480) allows remote authenticated users to obtain sensitive database table-name and entity-name information via a direct request to an unspecified URL, aka Bug ID CSCuy11098.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-201600208-ucm; http://www.securitytracker.com/id/1034957; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-201600208-ucm
CVE: CVE-2016-1318
Published: 2016-02-09
Description: Cross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.1 allows remote attackers to inject arbitrary web script or HTML via crafted markup data, aka Bug ID CSCux15489.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160208-apic; http://www.securitytracker.com/id/1034955; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160208-apic
CVE: CVE-2016-1319
Published: 2016-02-09
Description: Cisco Unified Communications Manager (aka CallManager) 9.1(2.10000.28), 10.5(2.10000.5), 10.5(2.12901.1), and 11.0(1.10000.10); Unified Communications Manager IM & Presence Service 10.5(2); Unified Contact Center Express 11.0(1); and Unity Connection 10.5(2) store a cleartext encryption key, which allows local users to obtain sensitive information via unspecified vectors, aka Bug ID CSCuv85958.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160208-ucm; http://www.securitytracker.com/id/1034958; http://www.securitytracker.com/id/1034959
CVE: CVE-2016-0022
Published: 2016-02-10
Description: Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps Server 2013 SP1, and SharePoint Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0052.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1034975; http://www.securitytracker.com/id/1034976; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-015
CVE: CVE-2016-0033
Published: 2016-02-10
Description: Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 does not prevent recursive compilation of XSLT transforms, which allows remote attackers to cause a denial of service (performance degradation) via crafted XSLT data, aka ".NET Framework Stack Overflow Denial of Service Vulnerability."
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://www.securitytracker.com/id/1034983; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-019; http://www.securitytracker.com/id/1034983
CVE: CVE-2016-0036
Published: 2016-02-10
Description: The Remote Desktop Protocol (RDP) implementation in Microsoft Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows remote authenticated users to execute arbitrary code via crafted data, aka "Remote Desktop Protocol (RDP) Elevation of Privilege Vulnerability."
CVSS Score: 8.1 (HIGH)
CWE: CWE-264
References: http://www.securitytracker.com/id/1034981; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-017; http://www.securitytracker.com/id/1034981
CVE: CVE-2016-0037
Published: 2016-02-10
Description: The forms-based authentication implementation in Active Directory Federation Services (ADFS) 3.0 in Microsoft Windows Server 2012 R2 allows remote attackers to cause a denial of service (daemon outage) via crafted data, aka "Microsoft Active Directory Federation Services Denial of Service Vulnerability."
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/82507; http://www.securitytracker.com/id/1034984; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-020
CVE: CVE-2016-0038
Published: 2016-02-10
Description: Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted Journal file, aka "Windows Journal Memory Corruption Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1034974; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-013; https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1219
CVE: CVE-2016-0039
Published: 2016-02-10
Description: Cross-site scripting (XSS) vulnerability in SharePoint Server in Microsoft SharePoint Foundation 2013 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka "Microsoft SharePoint XSS Vulnerability."
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securitytracker.com/id/1034975; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-015; http://www.securitytracker.com/id/1034975
CVE: CVE-2016-0040
Published: 2016-02-10
Description: The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a crafted application, aka "Windows Elevation of Privilege Vulnerability."
CVSS Score: 7.8 (HIGH)
References: http://www.securitytracker.com/id/1034985; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-014; https://www.exploit-db.com/exploits/44586/
CVE: CVE-2016-0041
Published: 2016-02-10
Description: Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold and 1511, and Internet Explorer 10 and 11 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka "DLL Loading Remote Code Execution Vulnerability."
CVSS Score: 7.8 (HIGH)
References: http://seclists.org/fulldisclosure/2016/Feb/49; http://www.securitytracker.com/id/1034971; http://www.securitytracker.com/id/1034985
CVE: CVE-2016-0042
Published: 2016-02-10
Description: Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka "Windows DLL Loading Remote Code Execution Vulnerability."
CVSS Score: 7.8 (HIGH)
References: http://www.securitytracker.com/id/1034985; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-014; http://www.securitytracker.com/id/1034985
CVE: CVE-2016-0044
Published: 2016-02-10
Description: Sync Framework in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1 allows remote attackers to cause a denial of service (SyncShareSvc service outage) via crafted "change batch" data, aka "Windows DLL Loading Denial of Service Vulnerability."
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securitytracker.com/id/1034985; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-014; http://www.securitytracker.com/id/1034985
CVE: CVE-2016-0046
Published: 2016-02-10
Description: Windows Reader in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows remote attackers to execute arbitrary code via a crafted Reader file, aka "Microsoft Windows Reader Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.securitytracker.com/id/1034973; http://www.zerodayinitiative.com/advisories/ZDI-16-156; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-012
CVE: CVE-2016-0047
Published: 2016-02-10
Description: WinForms in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 allows remote attackers to obtain sensitive information from process memory via crafted icon data, aka "Windows Forms Information Disclosure Vulnerability."
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securitytracker.com/id/1034983; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-019; http://www.securitytracker.com/id/1034983
CVE: CVE-2016-0048
Published: 2016-02-10
Description: The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securitytracker.com/id/1034982; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-018; http://www.securitytracker.com/id/1034982
CVE: CVE-2016-0049
Published: 2016-02-10
Description: Kerberos in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 Gold and 1511 does not properly validate password changes, which allows remote attackers to bypass authentication by deploying a crafted Key Distribution Center (KDC) and then performing a sign-in action, aka "Windows Kerberos Security Feature Bypass."
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-255
References: http://packetstormsecurity.com/files/135797/Windows-Kerberos-Security-Feature-Bypass.html; http://www.securityfocus.com/bid/82535; http://www.securitytracker.com/id/1034985
CVE: CVE-2016-0050
Published: 2016-02-10
Description: Network Policy Server (NPS) in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2 misparses username queries, which allows remote attackers to cause a denial of service (RADIUS authentication outage) via crafted requests, aka "Network Policy Server RADIUS Implementation Denial of Service Vulnerability."
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: http://www.securitytracker.com/id/1034986; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-021; http://www.securitytracker.com/id/1034986
CVE: CVE-2016-0051
Published: 2016-02-10
Description: The WebDAV client in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "WebDAV Elevation of Privilege Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securitytracker.com/id/1034980; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-016; https://www.exploit-db.com/exploits/39432/
CVE: CVE-2016-0052
Published: 2016-02-10
Description: Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps Server 2013 SP1, and SharePoint Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0022.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1034975; http://www.securitytracker.com/id/1034976; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-015
CVE: CVE-2016-0053
Published: 2016-02-10
Description: Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps Server 2013 SP1, and SharePoint Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1034975; http://www.securitytracker.com/id/1034976; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-015
CVE: CVE-2016-0054
Published: 2016-02-10
Description: Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3, Excel Services on SharePoint Server 2010 SP2, Excel Services on SharePoint Server 2013 SP1, and Office Web Apps 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1034976; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-015; http://www.securitytracker.com/id/1034976
CVE: CVE-2016-0055
Published: 2016-02-10
Description: Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1034976; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-015; http://www.securitytracker.com/id/1034976
CVE: CVE-2016-0056
Published: 2016-02-10
Description: Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1034976; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-015; http://www.securitytracker.com/id/1034976
CVE: CVE-2016-0058
Published: 2016-02-10
Description: Buffer overflow in the PDF Library in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows remote attackers to execute arbitrary code via a crafted PDF document that triggers API calls, aka "Microsoft PDF Library Buffer Overflow Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1034973; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-012; http://www.securitytracker.com/id/1034973
CVE: CVE-2016-0059
Published: 2016-02-10
Description: The Hyperlink Object Library in Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via a crafted URL in a (1) e-mail message or (2) Office document, aka "Internet Explorer Information Disclosure Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1034971; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-009; http://www.securitytracker.com/id/1034971
CVE: CVE-2016-0060
Published: 2016-02-10
Description: Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0061, CVE-2016-0063, CVE-2016-0067, and CVE-2016-0072.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1034971; http://www.securitytracker.com/id/1034972; http://www.zerodayinitiative.com/advisories/ZDI-16-159
CVE: CVE-2016-0061
Published: 2016-02-10
Description: Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0060, CVE-2016-0063, CVE-2016-0067, and CVE-2016-0072.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1034971; http://www.securitytracker.com/id/1034972; http://www.zerodayinitiative.com/advisories/ZDI-16-162
CVE: CVE-2016-0062
Published: 2016-02-10
Description: Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1034971; http://www.securitytracker.com/id/1034972; http://www.zerodayinitiative.com/advisories/ZDI-16-158
CVE: CVE-2016-0063
Published: 2016-02-10
Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0060, CVE-2016-0061, CVE-2016-0067, and CVE-2016-0072.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://blog.skylined.nl/[PII_REDACTED]1.html; http://www.securitytracker.com/id/1034971; http://www.zerodayinitiative.com/advisories/ZDI-16-166
CVE: CVE-2016-0064
Published: 2016-02-10
Description: Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1034971; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-009; http://www.securitytracker.com/id/1034971
CVE: CVE-2016-0067
Published: 2016-02-10
Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0060, CVE-2016-0061, CVE-2016-0063, and CVE-2016-0072.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1034971; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-009; http://www.securitytracker.com/id/1034971