deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-0021
Published: 2016-03-09
Description: Microsoft InfoPath 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/84024; http://www.securitytracker.com/id/1035207; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-029
CVE: CVE-2016-0057
Published: 2016-03-09
Description: Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2016 does not properly sign an unspecified binary file, which allows local users to gain privileges via a Trojan horse file with a crafted signature, aka "Microsoft Office Security Feature Bypass Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/84030; http://www.securitytracker.com/id/1035207; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-029
CVE: CVE-2016-0087
Published: 2016-03-09
Description: Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 do not properly validate handles, which allows local users to gain privileges via a crafted application, aka "Windows Elevation of Privilege Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/84032; http://www.securitytracker.com/id/1035209; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-031
CVE: CVE-2016-0091
Published: 2016-03-09
Description: OLE in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted file, aka "Windows OLE Memory Remote Code Execution Vulnerability," a different vulnerability than CVE-2016-0092.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/83944; http://www.securitytracker.com/id/1035208; http://www.zerodayinitiative.com/advisories/ZDI-16-182
CVE: CVE-2016-0092
Published: 2016-03-09
Description: OLE in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted file, aka "Windows OLE Memory Remote Code Execution Vulnerability," a different vulnerability than CVE-2016-0091.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/84125; http://www.securitytracker.com/id/1035208; http://www.zerodayinitiative.com/advisories/ZDI-16-181
CVE: CVE-2016-0093
Published: 2016-03-09
Description: The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0094, CVE-2016-0095, and CVE-2016-0096.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/84054; http://www.securitytracker.com/id/1035212; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-034
CVE: CVE-2016-0094
Published: 2016-03-09
Description: The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0093, CVE-2016-0095, and CVE-2016-0096.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/84066; http://www.securitytracker.com/id/1035212; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-034
CVE: CVE-2016-0095
Published: 2016-03-09
Description: The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0093, CVE-2016-0094, and CVE-2016-0096.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/84072; http://www.securitytracker.com/id/1035212; http://www.zerodayinitiative.com/advisories/ZDI-16-196
CVE: CVE-2016-0096
Published: 2016-03-09
Description: The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0093, CVE-2016-0094, and CVE-2016-0095.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/84069; http://www.securitytracker.com/id/1035212; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-034
CVE: CVE-2016-0098
Published: 2016-03-09
Description: Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 allow remote attackers to execute arbitrary code via crafted media content, aka "Windows Media Parsing Remote Code Execution Vulnerability."
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/84089; http://www.securitytracker.com/id/1035200; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-027
CVE: CVE-2016-0099
Published: 2016-03-09
Description: The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 does not properly process request handles, which allows local users to gain privileges via a crafted application, aka "Secondary Logon Elevation of Privilege Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-120
References: http://www.securityfocus.com/bid/84034; http://www.securitytracker.com/id/1035210; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-032
CVE: CVE-2016-0100
Published: 2016-03-09
Description: Microsoft Windows Vista SP2 and Server 2008 SP2 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Library Loading Input Validation Remote Code Execution Vulnerability."
CVSS Score: 8.4 (HIGH)
CWE: CWE-20, CWE-264
References: http://www.securityfocus.com/bid/83930; http://www.securitytracker.com/id/1035205; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-025
CVE: CVE-2016-0101
Published: 2016-03-09
Description: Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow remote attackers to execute arbitrary code via crafted media content, aka "Windows Media Parsing Remote Code Execution Vulnerability."
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/84111; http://www.securitytracker.com/id/1035200; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-027
CVE: CVE-2016-0102
Published: 2016-03-09
Description: Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0103, CVE-2016-0106, CVE-2016-0108, CVE-2016-0109, and CVE-2016-0114.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/84018; http://www.securitytracker.com/id/1035203; http://www.securitytracker.com/id/1035204
CVE: CVE-2016-0103
Published: 2016-03-09
Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0102, CVE-2016-0106, CVE-2016-0108, CVE-2016-0109, and CVE-2016-0114.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/84013; http://www.securitytracker.com/id/1035203; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-023
CVE: CVE-2016-0104
Published: 2016-03-09
Description: Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/84009; http://www.securitytracker.com/id/1035203; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-023
CVE: CVE-2016-0105
Published: 2016-03-09
Description: Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0107, CVE-2016-0111, CVE-2016-0112, and CVE-2016-0113.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/84019; http://www.securitytracker.com/id/1035203; http://www.securitytracker.com/id/1035204
CVE: CVE-2016-0106
Published: 2016-03-09
Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0102, CVE-2016-0103, CVE-2016-0108, CVE-2016-0109, and CVE-2016-0114.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/84014; http://www.securitytracker.com/id/1035203; http://www.zerodayinitiative.com/advisories/ZDI-16-179
CVE: CVE-2016-0107
Published: 2016-03-09
Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0105, CVE-2016-0111, CVE-2016-0112, and CVE-2016-0113.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/84015; http://www.securitytracker.com/id/1035203; http://www.zerodayinitiative.com/advisories/ZDI-16-183
CVE: CVE-2016-0108
Published: 2016-03-09
Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0102, CVE-2016-0103, CVE-2016-0106, CVE-2016-0109, and CVE-2016-0114.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/84016; http://www.securitytracker.com/id/1035203; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-023
CVE: CVE-2016-0109
Published: 2016-03-09
Description: Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0102, CVE-2016-0103, CVE-2016-0106, CVE-2016-0108, and CVE-2016-0114.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/84020; http://www.securitytracker.com/id/1035203; http://www.securitytracker.com/id/1035204
CVE: CVE-2016-0110
Published: 2016-03-09
Description: Microsoft Internet Explorer 10 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/84021; http://www.securitytracker.com/id/1035203; http://www.securitytracker.com/id/1035204
CVE: CVE-2016-0111
Published: 2016-03-09
Description: Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0105, CVE-2016-0107, CVE-2016-0112, and CVE-2016-0113.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/84022; http://www.securitytracker.com/id/1035203; http://www.securitytracker.com/id/1035204
CVE: CVE-2016-0112
Published: 2016-03-09
Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0105, CVE-2016-0107, CVE-2016-0111, and CVE-2016-0113.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/84010; http://www.securitytracker.com/id/1035203; http://www.zerodayinitiative.com/advisories/ZDI-16-185
CVE: CVE-2016-0113
Published: 2016-03-09
Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0105, CVE-2016-0107, CVE-2016-0111, and CVE-2016-0112.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/84011; http://www.securitytracker.com/id/1035203; http://www.zerodayinitiative.com/advisories/ZDI-16-186
CVE: CVE-2016-0114
Published: 2016-03-09
Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0102, CVE-2016-0103, CVE-2016-0106, CVE-2016-0108, and CVE-2016-0109.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/84012; http://www.securitytracker.com/id/1035203; http://www.zerodayinitiative.com/advisories/ZDI-16-187
CVE: CVE-2016-0116
Published: 2016-03-09
Description: Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0123, CVE-2016-0124, CVE-2016-0129, and CVE-2016-0130.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1035204; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-024; http://www.securitytracker.com/id/1035204
CVE: CVE-2016-0117
Published: 2016-03-09
Description: The PDF library in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted PDF document, aka "Windows Remote Code Execution Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/84109; http://www.securitytracker.com/id/1035202; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-028
CVE: CVE-2016-0118
Published: 2016-03-09
Description: The PDF library in Microsoft Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted PDF document, aka "Windows Remote Code Execution Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/84112; http://www.securitytracker.com/id/1035202; http://www.zerodayinitiative.com/advisories/ZDI-16-177
CVE: CVE-2016-0120
Published: 2016-03-09
Description: The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to cause a denial of service (system hang) via a crafted OpenType font, aka "OpenType Font Parsing Vulnerability."
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/84071; http://www.securitytracker.com/id/1035198; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-026
CVE: CVE-2016-0121
Published: 2016-03-09
Description: The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted OpenType font, aka "OpenType Font Parsing Vulnerability."
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/84027; http://www.securitytracker.com/id/1035198; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-026
CVE: CVE-2016-0123
Published: 2016-03-09
Description: Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0116, CVE-2016-0124, CVE-2016-0129, and CVE-2016-0130.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/84114; http://www.securitytracker.com/id/1035204; http://www.zerodayinitiative.com/advisories/ZDI-16-178
CVE: CVE-2016-0124
Published: 2016-03-09
Description: Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0116, CVE-2016-0123, CVE-2016-0129, and CVE-2016-0130.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/84115; http://www.securitytracker.com/id/1035204; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-024
CVE: CVE-2016-0125
Published: 2016-03-09
Description: Microsoft Edge mishandles the Referer policy, which allows remote attackers to obtain sensitive browser-history and request information via a crafted HTTPS web site, aka "Microsoft Edge Information Disclosure Vulnerability."
CVSS Score: 3.1 (LOW)
CWE: CWE-200
References: http://www.securitytracker.com/id/1035204; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-024; http://www.securitytracker.com/id/1035204
CVE: CVE-2016-0129
Published: 2016-03-09
Description: Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0116, CVE-2016-0123, CVE-2016-0124, and CVE-2016-0130.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/84116; http://www.securitytracker.com/id/1035204; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-024
CVE: CVE-2016-0130
Published: 2016-03-09
Description: Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0116, CVE-2016-0123, CVE-2016-0124, and CVE-2016-0129.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/84117; http://www.securitytracker.com/id/1035204; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-024
CVE: CVE-2016-0132
Published: 2016-03-09
Description: Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 mishandles signature validation for unspecified elements of XML documents, which allows remote attackers to spoof signatures via a modified document, aka ".NET XML Validation Security Feature Bypass."
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.securityfocus.com/bid/84075; http://www.securitytracker.com/id/1035213; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-035
CVE: CVE-2016-0133
Published: 2016-03-09
Description: The USB Mass Storage Class driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows physically proximate attackers to execute arbitrary code by inserting a crafted USB device, aka "USB Mass Storage Elevation of Privilege Vulnerability."
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://www.securityfocus.com/bid/84035; http://www.securitytracker.com/id/1035211; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-033
CVE: CVE-2016-0134
Published: 2016-03-09
Description: Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, Office Web Apps 2010 SP2, and Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/84026; http://www.securitytracker.com/id/1035206; http://www.securitytracker.com/id/1035207
CVE: CVE-2016-0954
Published: 2016-03-09
Description: Adobe Digital Editions before 4.5.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/84214; http://www.securitytracker.com/id/1035201; https://helpx.adobe.com/security/products/Digital-Editions/apsb16-06.html
CVE: CVE-2016-1007
Published: 2016-03-09
Description: Adobe Reader and Acrobat before 11.0.15, Acrobat and Acrobat Reader DC Classic before 15.006.30121, and Acrobat and Acrobat Reader DC Continuous before 15.010.20060 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1009.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/84215; http://www.securitytracker.com/id/1035199; http://www.zerodayinitiative.com/advisories/ZDI-16-189
CVE: CVE-2016-1008
Published: 2016-03-09
Description: Untrusted search path vulnerability in Adobe Reader and Acrobat before 11.0.15, Acrobat and Acrobat Reader DC Classic before 15.006.30121, and Acrobat and Acrobat Reader DC Continuous before 15.010.20060 on Windows and OS X allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 8.4 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/84216; http://www.securitytracker.com/id/1035199; http://www.zerodayinitiative.com/advisories/ZDI-16-190
CVE: CVE-2016-1009
Published: 2016-03-09
Description: Adobe Reader and Acrobat before 11.0.15, Acrobat and Acrobat Reader DC Classic before 15.006.30121, and Acrobat and Acrobat Reader DC Continuous before 15.010.20060 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1007.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/84215; http://www.securitytracker.com/id/1035199; http://www.zerodayinitiative.com/advisories/ZDI-16-191
CVE: CVE-2016-2144
Published: 2016-03-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-0284. Reason: This candidate is a reservation duplicate of CVE-2015-0284. Notes: All CVE users should reference CVE-2015-0284 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.