deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-3385
Published: 2016-10-14
Description: The scripting engine in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/93397; http://www.securitytracker.com/id/1036992; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-118
CVE: CVE-2016-3386
Published: 2016-10-14
Description: The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3389, CVE-2016-7190, and CVE-2016-7194.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/93426; http://www.securitytracker.com/id/1036993; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-119
CVE: CVE-2016-3387
Published: 2016-10-14
Description: Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, which allows remote attackers to gain privileges via unspecified vectors, aka "Microsoft Browser Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3388.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/93381; http://www.securitytracker.com/id/1036992; http://www.securitytracker.com/id/1036993
CVE: CVE-2016-3388
Published: 2016-10-14
Description: Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, which allows remote attackers to gain privileges via unspecified vectors, aka "Microsoft Browser Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3387.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-264
References: http://www.securityfocus.com/bid/93382; http://www.securitytracker.com/id/1036992; http://www.securitytracker.com/id/1036993
CVE: CVE-2016-3389
Published: 2016-10-14
Description: The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3386, CVE-2016-7190, and CVE-2016-7194.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/93398; http://www.securitytracker.com/id/1036993; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-119
CVE: CVE-2016-3390
Published: 2016-10-14
Description: The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, as demonstrated by the Chakra JavaScript engine, aka "Scripting Engine Memory Corruption Vulnerability."
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/93383; http://www.securitytracker.com/id/1036992; http://www.securitytracker.com/id/1036993
CVE: CVE-2016-3391
Published: 2016-10-14
Description: Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow context-dependent attackers to discover credentials by leveraging access to a memory dump, aka "Microsoft Browser Information Disclosure Vulnerability."
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/93379; http://www.securitytracker.com/id/1036992; http://www.securitytracker.com/id/1036993
CVE: CVE-2016-3392
Published: 2016-10-14
Description: The Edge Content Security Policy feature in Microsoft Edge does not properly validate documents, which allows remote attackers to bypass intended access restrictions via a crafted web site, aka "Microsoft Browser Security Feature Bypass Vulnerability."
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: http://www.securityfocus.com/bid/93401; http://www.securitytracker.com/id/1036993; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-119
CVE: CVE-2016-3393
Published: 2016-10-14
Description: Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows remote attackers to execute arbitrary code via a crafted web site, aka "Windows Graphics Component RCE Vulnerability."
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/93377; http://www.securitytracker.com/id/1036988; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-120
CVE: CVE-2016-3396
Published: 2016-10-14
Description: Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010 Attendee; and Live Meeting 2007 Console allows remote attackers to execute arbitrary code via a crafted embedded font, aka "GDI+ Remote Code Execution Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/93380; http://www.securitytracker.com/id/1036988; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-120
CVE: CVE-2016-7182
Published: 2016-10-14
Description: The Graphics component in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010 Attendee; and Live Meeting 2007 Console allows attackers to execute arbitrary code via a crafted True Type font, aka "True Type Font Parsing Elevation of Privilege Vulnerability."
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.securityfocus.com/bid/93395; http://www.securitytracker.com/id/1036988; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-120
CVE: CVE-2016-7185
Published: 2016-10-14
Description: The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." a different vulnerability than CVE-2016-3266, CVE-2016-3376, and CVE-2016-7211.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/93389; http://www.securitytracker.com/id/1036996; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-123
CVE: CVE-2016-7188
Published: 2016-10-14
Description: The Standard Collector Service in Windows Diagnostics Hub in Microsoft Windows 10 Gold, 1511, and 1607 mishandles library loading, which allows local users to gain privileges via a crafted application, aka "Windows Diagnostics Hub Elevation of Privilege Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/93359; http://www.securitytracker.com/id/1036997; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-125
CVE: CVE-2016-7189
Published: 2016-10-14
Description: The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Remote Code Execution Vulnerability."
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/93427; http://www.securitytracker.com/id/1036993; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-119
CVE: CVE-2016-7190
Published: 2016-10-14
Description: The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3386, CVE-2016-3389, and CVE-2016-7194.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/93428; http://www.securitytracker.com/id/1036993; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-119
CVE: CVE-2016-7193
Published: 2016-10-14
Description: Microsoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, Office Web Apps Server 2013 SP1, and Office Online Server allow remote attackers to execute arbitrary code via a crafted RTF document, aka "Microsoft Office Memory Corruption Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/93372; http://www.securitytracker.com/id/1036984; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-121
CVE: CVE-2016-7194
Published: 2016-10-14
Description: The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3386, CVE-2016-3389, and CVE-2016-7190.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/93399; http://www.securitytracker.com/id/1036993; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-119
CVE: CVE-2016-7211
Published: 2016-10-14
Description: The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." a different vulnerability than CVE-2016-3266, CVE-2016-3376, and CVE-2016-7185.
CVSS Score: 7.3 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/93556; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-123; http://www.securityfocus.com/bid/93556
CVE: CVE-2005-4900
Published: 2016-10-14
Description: SHA-1 is not collision resistant, which makes it easier for context-dependent attackers to conduct spoofing attacks, as demonstrated by attacks on the use of SHA-1 in TLS 1.2.  NOTE: this CVE exists to provide a common identifier for referencing this SHA-1 issue; the existence of an identifier is not, by itself, a technology recommendation.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-326
References: http://ia.cr/2007/474; http://shattered.io/; http://www.cwi.nl/news/2017/cwi-and-google-announce-first-collision-industry-security-standard-sha-1
CVE: CVE-2015-3288
Published: 2016-10-16
Description: mm/memory.c in the Linux kernel before 4.1.4 mishandles anonymous pages, which allows local users to gain privileges or cause a denial of service (page tainting) via a crafted application that triggers writing to page zero.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6b7339f4c31ad69c8e9c0b2859276e22cf72176d; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.4; http://www.securityfocus.com/bid/93591
CVE: CVE-2015-8952
Published: 2016-10-16
Description: The mbcache feature in the ext2 and ext4 filesystem implementations in the Linux kernel before 4.6 mishandles xattr block caching, which allows local users to cause a denial of service (soft lockup) via filesystem operations in environments that use many attributes, as demonstrated by Ceph and Samba.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-19
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=82939d7999dfc1f1998c4b1c12e2f19edbdff272; http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=be0726d33cb8f[PII_REDACTED]64924bed3cb8c70ee; http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f9a61eb4e2471c56a63cd804c[PII_REDACTED]c38ac
CVE: CVE-2015-8953
Published: 2016-10-16
Description: fs/overlayfs/copy_up.c in the Linux kernel before 4.2.6 uses an incorrect cleanup code path, which allows local users to cause a denial of service (dentry reference leak) via filesystem operations on a large file in a lower overlayfs layer.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-399
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ab79efab0a0ba01a74df782eb7fa44b044dae8b5; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.2.6; http://www.openwall.com/lists/oss-security/2016/08/23/9
CVE: CVE-2016-0204
Published: 2016-10-16
Description: Open redirect vulnerability in IBM Cloud Orchestrator 2.4.x before 2.4.0 FP3 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-601
References: http://www-01.ibm.com/support/docview.wss?uid=swg2C1000124; http://www.securityfocus.com/bid/93512; http://www-01.ibm.com/support/docview.wss?uid=swg2C1000124
CVE: CVE-2016-0249
Published: 2016-10-16
Description: SQL injection vulnerability in IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 8.6 (HIGH)
CWE: CWE-89
References: http://www-01.ibm.com/support/docview.wss?uid=swg21990363; http://www.securityfocus.com/bid/93339; http://www-01.ibm.com/support/docview.wss?uid=swg21990363
CVE: CVE-2016-6327
Published: 2016-10-16
Description: drivers/infiniband/ulp/srpt/ib_srpt.c in the Linux kernel before 4.5.1 allows local users to cause a denial of service (NULL pointer dereference and system crash) by using an ABORT_TASK command to abort a device write operation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=51093254bf879bc9ce96590400a87897c7498463; http://rhn.redhat.com/errata/RHSA-2016-2574.html; http://rhn.redhat.com/errata/RHSA-2016-2584.html
CVE: CVE-2016-6828
Published: 2016-10-16
Description: The tcp_check_send_head function in include/net/tcp.h in the Linux kernel before 4.7.5 does not properly maintain certain SACK state after a failed data copy, which allows local users to cause a denial of service (tcp_xmit_retransmit_queue use-after-free and system crash) via a crafted SACK option.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=bb1fceca22492109be12640d49f5ea5a544c6bb4; http://rhn.redhat.com/errata/RHSA-2017-0036.html; http://rhn.redhat.com/errata/RHSA-2017-0086.html
CVE: CVE-2016-7039
Published: 2016-10-16
Description: The IP stack in the Linux kernel through 4.8.2 allows remote attackers to cause a denial of service (stack consumption and panic) or possibly have unspecified other impact by triggering use of the GRO path for large crafted packets, as demonstrated by packets that contain only VLAN headers, a related issue to CVE-2016-8666.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://rhn.redhat.com/errata/RHSA-2016-2047.html; http://rhn.redhat.com/errata/RHSA-2016-2107.html; http://rhn.redhat.com/errata/RHSA-2016-2110.html
CVE: CVE-2016-7042
Published: 2016-10-16
Description: The proc_keys_show function in security/keys/proc.c in the Linux kernel through 4.8.2, when the GNU Compiler Collection (gcc) stack protector is enabled, uses an incorrect buffer size for certain timeout data, which allows local users to cause a denial of service (stack memory corruption and panic) by reading the /proc/keys file.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-119
References: http://rhn.redhat.com/errata/RHSA-2017-0817.html; http://www.openwall.com/lists/oss-security/2016/10/13/5; http://www.securityfocus.com/bid/93544
CVE: CVE-2016-7097
Published: 2016-10-16
Description: The filesystem implementation in the Linux kernel through 4.8.2 preserves the setgid bit during a setxattr call, which allows local users to gain group privileges by leveraging the existence of a setgid program with restrictions on execute permissions.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-285
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=073931017b49d9458aa351605b43a7e34598caef; http://marc.info/?l=linux-fsdevel&m=[PII_REDACTED]0259&w=2; http://rhn.redhat.com/errata/RHSA-2017-0817.html
CVE: CVE-2016-7425
Published: 2016-10-16
Description: The arcmsr_iop_message_xfer function in drivers/scsi/arcmsr/arcmsr_hba.c in the Linux kernel through 4.8.2 does not restrict a certain length field, which allows local users to gain privileges or cause a denial of service (heap-based buffer overflow) via an ARCMSR_MESSAGE_WRITE_WQBUFFER control code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7bc2b55a5c030685b399bb65b6baa9ccc3d1f167; http://marc.info/?l=linux-scsi&m=[PII_REDACTED]8707&w=2; http://marc.info/?l=linux-scsi&m=[PII_REDACTED]8991&w=2
CVE: CVE-2016-8658
Published: 2016-10-16
Description: Stack-based buffer overflow in the brcmf_cfg80211_start_ap function in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux kernel before 4.7.5 allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via a long SSID Information Element in a command to a Netlink socket.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-119
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ded89912156b1a47d940a0c954c43afbabd0c42c; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.7.5; http://www.openwall.com/lists/oss-security/2016/10/13/1
CVE: CVE-2016-8660
Published: 2016-10-16
Description: The XFS subsystem in the Linux kernel through 4.8.2 allows local users to cause a denial of service (fdatasync failure and system hang) by using the vfs syscall group in the trinity program, related to a "page lock order bug in the XFS seek hole/data implementation."
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-19
References: http://www.openwall.com/lists/oss-security/2016/10/13/8; http://www.securityfocus.com/bid/93558; https://bugzilla.redhat.com/show_bug.cgi?id=1384851
CVE: CVE-2016-8666
Published: 2016-10-16
Description: The IP stack in the Linux kernel before 4.6 allows remote attackers to cause a denial of service (stack consumption and panic) or possibly have unspecified other impact by triggering use of the GRO path for packets with tunnel stacking, as demonstrated by interleaved IPv4 headers and GRE headers, a related issue to CVE-2016-7039.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fac8e0f579695a3ecbc4d3cac369139d7f819971; http://rhn.redhat.com/errata/RHSA-2016-2047.html; http://rhn.redhat.com/errata/RHSA-2016-2107.html
CVE: CVE-2016-2848
Published: 2016-10-21
Description: ISC BIND 9.1.0 through 9.8.4-P2 and 9.9.0 through 9.9.2-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via malformed options data in an OPT resource record.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://rhn.redhat.com/errata/RHSA-2016-2093.html; http://rhn.redhat.com/errata/RHSA-2016-2094.html; http://rhn.redhat.com/errata/RHSA-2016-2099.html
CVE: CVE-2[PII_REDACTED]
Published: 2016-10-21
Description: Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSS
CVSS Score: 7.2 (HIGH)
CWE: CWE-79, CWE-89
References: http://huge-it.com/joomla-portfolio-gallery/; http://www.securityfocus.com/bid/93821; http://www.vapidlabs.com/advisory.php?v=165
CVE: CVE-2[PII_REDACTED]
Published: 2016-10-21
Description: XSS & SQLi in HugeIT slideshow v1.0.4
CVSS Score: 7.2 (HIGH)
CWE: CWE-79, CWE-89
References: http://extensions.joomla.org/extensions/extension/photos-a-images/slideshow/slideshow; http://www.securityfocus.com/bid/93822; http://www.vapidlabs.com/advisory.php?v=166
CVE: CVE-2[PII_REDACTED]
Published: 2016-10-21
Description: SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla
CVSS Score: 7.2 (HIGH)
CWE: CWE-79, CWE-89
References: http://extensions.joomla.org/extensions/extension/e-commerce/shopping-cart/catalog; http://www.securityfocus.com/bid/92185; http://www.vapidlabs.com/advisory.php?v=167
CVE: CVE-2016-0236
Published: 2016-10-21
Description: IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote authenticated users to execute arbitrary commands with root privileges via the search field.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: http://www-01.ibm.com/support/docview.wss?uid=swg21990372; http://www.securityfocus.com/bid/93823; http://www-01.ibm.com/support/docview.wss?uid=swg21990372
CVE: CVE-2016-7852
Published: 2016-10-21
Description: Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-6940, CVE-2016-6941, CVE-2016-6942, CVE-2016-6943, CVE-2016-6947, CVE-2016-6948, CVE-2016-6950, CVE-2016-6951, CVE-2016-6954, CVE-2016-6955, CVE-2016-6956, CVE-2016-6959, CVE-2016-6960, CVE-2016-6966, CVE-2016-6970, CVE-2016-6972, CVE-2016-6973, CVE-2016-6974, CVE-2016-6975, CVE-2016-6976, CVE-2016-6977, CVE-2016-6978, CVE-2016-6995, CVE-2016-6996, CVE-2016-6997, CVE-2016-6998, CVE-2016-7000, CVE-2016-7001, CVE-2016-7002, CVE-2016-7003, CVE-2016-7004, CVE-2016-7005, CVE-2016-7006, CVE-2016-7007, CVE-2016-7008, CVE-2016-7009, CVE-2016-7010, CVE-2016-7011, CVE-2016-7012, CVE-2016-7013, CVE-2016-7014, CVE-2016-7015, CVE-2016-7016, CVE-2016-7017, CVE-2016-7018, CVE-2016-7019, CVE-2016-7853, and CVE-2016-7854.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/93496; https://helpx.adobe.com/security/products/acrobat/apsb16-33.html; http://www.securityfocus.com/bid/93496
CVE: CVE-2016-7853
Published: 2016-10-21
Description: Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-6940, CVE-2016-6941, CVE-2016-6942, CVE-2016-6943, CVE-2016-6947, CVE-2016-6948, CVE-2016-6950, CVE-2016-6951, CVE-2016-6954, CVE-2016-6955, CVE-2016-6956, CVE-2016-6959, CVE-2016-6960, CVE-2016-6966, CVE-2016-6970, CVE-2016-6972, CVE-2016-6973, CVE-2016-6974, CVE-2016-6975, CVE-2016-6976, CVE-2016-6977, CVE-2016-6978, CVE-2016-6995, CVE-2016-6996, CVE-2016-6997, CVE-2016-6998, CVE-2016-7000, CVE-2016-7001, CVE-2016-7002, CVE-2016-7003, CVE-2016-7004, CVE-2016-7005, CVE-2016-7006, CVE-2016-7007, CVE-2016-7008, CVE-2016-7009, CVE-2016-7010, CVE-2016-7011, CVE-2016-7012, CVE-2016-7013, CVE-2016-7014, CVE-2016-7015, CVE-2016-7016, CVE-2016-7017, CVE-2016-7018, CVE-2016-7019, CVE-2016-7852, and CVE-2016-7854.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/93496; https://helpx.adobe.com/security/products/acrobat/apsb16-33.html; http://www.securityfocus.com/bid/93496