deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-1719
Published: 2015-06-10
Description: The kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to obtain sensitive information from kernel memory via a crafted application, aka "Microsoft Windows Kernel Information Disclosure Vulnerability."
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://www.securitytracker.com/id/1032525; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-061; http://www.securitytracker.com/id/1032525
CVE: CVE-2015-1720
Published: 2015-06-10
Description: Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, aka "Microsoft Windows Kernel Use After Free Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-416
References: http://www.securitytracker.com/id/1032525; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-061; http://www.securitytracker.com/id/1032525
CVE: CVE-2015-1721
Published: 2015-06-10
Description: The kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via a crafted application, aka "Win32k Null Pointer Dereference Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-476
References: http://www.securitytracker.com/id/1032525; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-061; https://www.exploit-db.com/exploits/38274/
CVE: CVE-2015-1722
Published: 2015-06-10
Description: Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, aka "Microsoft Windows Kernel Bitmap Handling Use After Free Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-416
References: http://www.securitytracker.com/id/1032525; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-061; https://www.exploit-db.com/exploits/38265/
CVE: CVE-2015-1723
Published: 2015-06-10
Description: Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, aka "Microsoft Windows Station Use After Free Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-416
References: http://www.securitytracker.com/id/1032525; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-061; https://www.exploit-db.com/exploits/38273/
CVE: CVE-2015-1724
Published: 2015-06-10
Description: Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, aka "Microsoft Windows Kernel Object Use After Free Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-416
References: http://www.securitytracker.com/id/1032525; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-061; https://www.exploit-db.com/exploits/38272/
CVE: CVE-2015-1725
Published: 2015-06-10
Description: Buffer overflow in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, aka "Win32k Buffer Overflow Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1032525; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-061; https://www.exploit-db.com/exploits/38270/
CVE: CVE-2015-1726
Published: 2015-06-10
Description: Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, aka "Microsoft Windows Kernel Brush Object Use After Free Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-416
References: http://www.securitytracker.com/id/1032525; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-061; https://www.exploit-db.com/exploits/38269/
CVE: CVE-2015-1727
Published: 2015-06-10
Description: Buffer overflow in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, aka "Win32k Pool Buffer Overflow Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1032525; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-061; https://www.exploit-db.com/exploits/38268/
CVE: CVE-2015-1728
Published: 2015-06-10
Description: Microsoft Windows Media Player 10 through 12 allows remote attackers to execute arbitrary code via a crafted DataObject on a web site, aka "Windows Media Player RCE via DataObject Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-17
References: http://www.securitytracker.com/id/1032522; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-057; https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1200
CVE: CVE-2015-1730
Published: 2015-06-10
Description: Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://blog.skylined.nl/[PII_REDACTED]1.html; http://packetstormsecurity.com/files/140050/Microsoft-Internet-Explorer-9-jscript9-JavaScriptStackWalker-Memory-Corruption.html; http://www.securitytracker.com/id/1032521
CVE: CVE-2015-1731
Published: 2015-06-10
Description: Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1736, CVE-2015-1737, and CVE-2015-1755.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.securitytracker.com/id/1032521; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-056; http://www.securitytracker.com/id/1032521
CVE: CVE-2015-1732
Published: 2015-06-10
Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1742, CVE-2015-1747, CVE-2015-1750, and CVE-2015-1753.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.securitytracker.com/id/1032521; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-056; http://www.securitytracker.com/id/1032521
CVE: CVE-2015-1735
Published: 2015-06-10
Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1740, CVE-2015-1744, CVE-2015-1745, and CVE-2015-1766.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.securityfocus.com/bid/74972; http://www.securitytracker.com/id/1032521; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-056
CVE: CVE-2015-1736
Published: 2015-06-10
Description: Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1731, CVE-2015-1737, and CVE-2015-1755.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.securityfocus.com/bid/74978; http://www.securitytracker.com/id/1032521; http://www.zerodayinitiative.com/advisories/ZDI-15-253
CVE: CVE-2015-1737
Published: 2015-06-10
Description: Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1731, CVE-2015-1736, and CVE-2015-1755.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.securityfocus.com/bid/74979; http://www.securitytracker.com/id/1032521; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-056
CVE: CVE-2015-1739
Published: 2015-06-10
Description: Microsoft Internet Explorer 10 and 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability."
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://www.securityfocus.com/bid/74995; http://www.securitytracker.com/id/1032521; http://www.zerodayinitiative.com/advisories/ZDI-15-249
CVE: CVE-2015-1740
Published: 2015-06-10
Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1735, CVE-2015-1744, CVE-2015-1745, and CVE-2015-1766.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.securityfocus.com/bid/74981; http://www.securitytracker.com/id/1032521; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-056
CVE: CVE-2015-1741
Published: 2015-06-10
Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1752.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.securityfocus.com/bid/74982; http://www.securitytracker.com/id/1032521; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-056
CVE: CVE-2015-1742
Published: 2015-06-10
Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1732, CVE-2015-1747, CVE-2015-1750, and CVE-2015-1753.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.securityfocus.com/bid/74983; http://www.securitytracker.com/id/1032521; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-056
CVE: CVE-2015-1743
Published: 2015-06-10
Description: Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability," a different vulnerability than CVE-2015-1748.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-367
References: http://www.securityfocus.com/bid/74996; http://www.securitytracker.com/id/1032521; http://www.zerodayinitiative.com/advisories/ZDI-15-377
CVE: CVE-2015-1744
Published: 2015-06-10
Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1735, CVE-2015-1740, CVE-2015-1745, and CVE-2015-1766.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.securityfocus.com/bid/74984; http://www.securitytracker.com/id/1032521; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-056
CVE: CVE-2015-1745
Published: 2015-06-10
Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1735, CVE-2015-1740, CVE-2015-1744, and CVE-2015-1766.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.securityfocus.com/bid/74985; http://www.securitytracker.com/id/1032521; http://www.zerodayinitiative.com/advisories/ZDI-15-252
CVE: CVE-2015-1747
Published: 2015-06-10
Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1732, CVE-2015-1742, CVE-2015-1750, and CVE-2015-1753.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.securityfocus.com/bid/74986; http://www.securitytracker.com/id/1032521; http://www.zerodayinitiative.com/advisories/ZDI-15-250
CVE: CVE-2015-1748
Published: 2015-06-10
Description: Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability," a different vulnerability than CVE-2015-1743.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://www.securityfocus.com/bid/74997; http://www.securitytracker.com/id/1032521; http://www.zerodayinitiative.com/advisories/ZDI-15-251
CVE: CVE-2015-1750
Published: 2015-06-10
Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1732, CVE-2015-1742, CVE-2015-1747, and CVE-2015-1753.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.securityfocus.com/bid/74987; http://www.securitytracker.com/id/1032521; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-056
CVE: CVE-2015-1751
Published: 2015-06-10
Description: Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.securityfocus.com/bid/74988; http://www.securitytracker.com/id/1032521; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-056
CVE: CVE-2015-1752
Published: 2015-06-10
Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1741.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.securityfocus.com/bid/74989; http://www.securitytracker.com/id/1032521; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-056
CVE: CVE-2015-1753
Published: 2015-06-10
Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1732, CVE-2015-1742, CVE-2015-1747, and CVE-2015-1750.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.securityfocus.com/bid/74990; http://www.securitytracker.com/id/1032521; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-056
CVE: CVE-2015-1754
Published: 2015-06-10
Description: Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.securityfocus.com/bid/74991; http://www.securitytracker.com/id/1032521; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-056
CVE: CVE-2015-1755
Published: 2015-06-10
Description: Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1731, CVE-2015-1736, and CVE-2015-1737.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.securityfocus.com/bid/74992; http://www.securitytracker.com/id/1032521; http://www.zerodayinitiative.com/advisories/ZDI-15-254
CVE: CVE-2015-1756
Published: 2015-06-10
Description: Use-after-free vulnerability in Microsoft Common Controls in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows user-assisted remote attackers to execute arbitrary code via a crafted web site that is accessed with the F12 Developer Tools feature of Internet Explorer, aka "Microsoft Common Control Use After Free Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/75017; http://www.securitytracker.com/id/1032524; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-060
CVE: CVE-2015-1757
Published: 2015-06-10
Description: Cross-site scripting (XSS) vulnerability in adfs/ls in Active Directory Federation Services (AD FS) in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 allows remote attackers to inject arbitrary web script or HTML via the wct parameter, aka "ADFS XSS Elevation of Privilege Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/75023; http://www.securitytracker.com/id/1032526; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-062
CVE: CVE-2015-1758
Published: 2015-06-10
Description: Untrusted search path vulnerability in the LoadLibrary function in the kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a Trojan horse DLL in an unspecified directory, aka "Windows LoadLibrary EoP Vulnerability."
CVSS Score: 6.9 (MEDIUM)
References: http://jvn.jp/en/jp/JVN18146081/index.html; http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000086.html; http://www.securityfocus.com/bid/75004
CVE: CVE-2015-1759
Published: 2015-06-10
Description: Microsoft Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-19
References: http://www.securityfocus.com/bid/75014; http://www.securitytracker.com/id/1032523; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-059
CVE: CVE-2015-1760
Published: 2015-06-10
Description: Microsoft Office Compatibility Pack SP3, Office 2010 SP2, Office 2013 SP1, and Office 2013 RT SP1 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-19
References: http://www.securityfocus.com/bid/75015; http://www.securitytracker.com/id/1032523; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-059
CVE: CVE-2015-1764
Published: 2015-06-10
Description: The web applications in Microsoft Exchange Server 2013 SP1 and Cumulative Update 8 allow remote attackers to bypass the Same Origin Policy and send HTTP traffic to intranet servers via a crafted request, related to a Server-Side Request Forgery (SSRF) issue, aka "Exchange Server-Side Request Forgery Vulnerability."
CVSS Score: 4.3 (MEDIUM)
References: http://www.securityfocus.com/bid/75007; http://www.securitytracker.com/id/1032528; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-064
CVE: CVE-2015-1765
Published: 2015-06-10
Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to read the browser history via a crafted web site.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/74994; http://www.securitytracker.com/id/1032521; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-056
CVE: CVE-2015-1766
Published: 2015-06-10
Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1735, CVE-2015-1740, CVE-2015-1744, and CVE-2015-1745.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.securityfocus.com/bid/74993; http://www.securitytracker.com/id/1032521; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-056
CVE: CVE-2015-1768
Published: 2015-06-10
Description: win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application, aka "Win32k Memory Corruption Elevation of Privilege Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/75024; http://www.securitytracker.com/id/1032525; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-061
CVE: CVE-2015-1770
Published: 2015-06-10
Description: Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Uninitialized Memory Use Vulnerability."
CVSS Score: 8.8 (HIGH)
CWE: CWE-824, CWE-824
References: http://www.securityfocus.com/bid/75016; http://www.securitytracker.com/id/1032523; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-059
CVE: CVE-2015-1771
Published: 2015-06-10
Description: Cross-site request forgery (CSRF) vulnerability in the web applications in Microsoft Exchange Server 2013 SP1 and Cumulative Update 8 allows remote attackers to hijack the authentication of arbitrary users, aka "Exchange Cross-Site Request Forgery Vulnerability."
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://www.securityfocus.com/bid/75011; http://www.securitytracker.com/id/1032528; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-064
CVE: CVE-2015-2359
Published: 2015-06-10
Description: Cross-site scripting (XSS) vulnerability in the web applications in Microsoft Exchange Server 2013 Cumulative Update 8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Exchange HTML Injection Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/75013; http://www.securitytracker.com/id/1032528; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-064