2017-02-20 - CVE Archive

CVE-2017-0038 Feb 20, 16:59 MEDIUM POC PATCH THREAT This Month

gdi32.dll in Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 80.5%.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +5

NVD GitHub Exploit-DB

CVSS 3.0

5.5

EPSS

80.5%

Threat

5.0

CVE-2016-4669 Feb 20, 08:59 HIGH POC THREAT Act Now

An issue was discovered in certain Apple products. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and EPSS exploitation probability 36.1%.

RCE Denial Of Service Apple Iphone Os Tvos +2

NVD Exploit-DB

CVSS 3.0

7.8

EPSS

36.1%

Threat

4.1

CVE-2017-2370 Feb 20, 08:59 HIGH POC THREAT Act Now

An issue was discovered in certain Apple products. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 44.8%.

RCE Buffer Overflow Denial Of Service Apple Iphone Os +3

NVD Exploit-DB

CVSS 3.0

7.8

EPSS

44.8%

Threat

4.4

CVE-2017-2363 Feb 20, 08:59 MEDIUM POC THREAT This Month

An issue was discovered in certain Apple products. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 21.3%.

Information Disclosure Apple Iphone Os Safari Tvos +2

NVD Exploit-DB

CVSS 3.0

6.5

EPSS

21.3%

CVE-2017-2373 Feb 20, 08:59 HIGH POC This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Iphone Os +3

NVD Exploit-DB

CVSS 3.0

8.8

EPSS

6.8%

CVE-2017-2365 Feb 20, 08:59 MEDIUM POC THREAT This Month

An issue was discovered in certain Apple products. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 18.2%.

Information Disclosure Apple Iphone Os Safari Tvos +1

NVD Exploit-DB

CVSS 3.0

6.5

EPSS

18.2%

CVE-2017-2364 Feb 20, 08:59 MEDIUM POC THREAT This Month

An issue was discovered in certain Apple products. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 18.1%.

Information Disclosure Apple Iphone Os Safari

NVD Exploit-DB

CVSS 3.0

6.5

EPSS

18.1%

CVE-2017-2362 Feb 20, 08:59 HIGH POC This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Iphone Os +2

NVD Exploit-DB

CVSS 3.0

8.8

EPSS

4.5%

CVE-2016-7626 Feb 20, 08:59 HIGH POC This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Iphone Os +2

NVD Exploit-DB

CVSS 3.0

8.8

EPSS

4.3%

CVE-2017-2369 Feb 20, 08:59 HIGH POC This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Iphone Os +3

NVD Exploit-DB

CVSS 3.0

8.8

EPSS

3.7%

CVE-2016-7644 Feb 20, 08:59 HIGH POC This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Denial Of Service Use After Free Memory Corruption Apple +3

NVD Exploit-DB

CVSS 3.0

7.8

EPSS

3.6%

CVE-2017-2360 Feb 20, 08:59 HIGH POC This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Denial Of Service Use After Free Memory Corruption Apple +5

NVD Exploit-DB

CVSS 3.0

7.8

EPSS

3.2%

CVE-2017-2353 Feb 20, 08:59 HIGH POC This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Denial Of Service Use After Free Memory Corruption Apple +1

NVD Exploit-DB

CVSS 3.0

7.8

EPSS

1.6%

CVE-2016-7617 Feb 20, 08:59 HIGH POC This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Denial Of Service Apple Mac Os X

NVD Exploit-DB

CVSS 3.0

7.8

EPSS

1.4%

CVE-2016-7612 Feb 20, 08:59 HIGH POC This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Iphone Os +2

NVD Exploit-DB

CVSS 3.0

7.8

EPSS

1.4%

CVE-2017-2371 Feb 20, 08:59 MEDIUM POC This Month

An issue was discovered in certain Apple products. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Apple Iphone Os

NVD Exploit-DB

CVSS 3.1

6.5

EPSS

6.9%

CVE-2016-7661 Feb 20, 08:59 HIGH POC This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Privilege Escalation Apple Iphone Os Mac Os X

NVD Exploit-DB

CVSS 3.0

7.8

EPSS

0.2%

CVE-2016-7660 Feb 20, 08:59 HIGH POC This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Privilege Escalation Apple Iphone Os Watchos Mac Os X

NVD Exploit-DB

CVSS 3.0

7.8

EPSS

0.2%

CVE-2016-7637 Feb 20, 08:59 HIGH POC This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Denial Of Service Apple Iphone Os Watchos +1

NVD Exploit-DB

CVSS 3.0

7.8

EPSS

0.2%

CVE-2016-7633 Feb 20, 08:59 HIGH POC This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Use After Free Memory Corruption Apple Mac Os X

NVD Exploit-DB

CVSS 3.0

7.8

EPSS

0.2%

CVE-2016-7621 Feb 20, 08:59 HIGH POC This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

RCE Denial Of Service Use After Free Memory Corruption Apple +3

NVD Exploit-DB

CVSS 3.0

7.8

EPSS

0.2%

CVE-2017-2361 Feb 20, 08:59 MEDIUM POC This Month

An issue was discovered in certain Apple products. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Apple Mac Os X

NVD Exploit-DB

CVSS 3.0

6.1

EPSS

6.2%

CVE-2016-7663 Feb 20, 08:59 CRITICAL Act Now

An issue was discovered in certain Apple products. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Iphone Os +2

NVD

CVSS 3.0

9.8

EPSS

2.9%

CVE-2016-7630 Feb 20, 08:59 CRITICAL Act Now

An issue was discovered in certain Apple products. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Apple Iphone Os

NVD

CVSS 3.0

9.8

EPSS

0.5%

CVE-2016-7608 Feb 20, 08:59 MEDIUM POC This Month

An issue was discovered in certain Apple products. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Apple Mac Os X

NVD Exploit-DB

CVSS 3.0

5.5

EPSS

0.8%

CVE-2016-4677 Feb 20, 08:59 HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Iphone Os +2

NVD

CVSS 3.0

8.8

EPSS

1.5%

CVE-2016-4666 Feb 20, 08:59 HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Iphone Os +2

NVD

CVSS 3.0

8.8

EPSS

1.5%

CVE-2016-4688 Feb 20, 08:59 HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Tvos +2

NVD

CVSS 3.0

8.8

EPSS

1.4%

CVE-2016-7578 Feb 20, 08:59 HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Iphone Os +4

NVD

CVSS 3.0

8.8

EPSS

1.4%

CVE-2016-4764 Feb 20, 08:59 HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Iphone Os +3

NVD

CVSS 3.1

8.8

EPSS

1.0%

CVE-2016-4667 Feb 20, 08:59 HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Mac Os X

NVD

CVSS 3.0

8.8

EPSS

0.9%

CVE-2016-7594 Feb 20, 08:59 HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Iphone Os +2

NVD

CVSS 3.0

8.8

EPSS

0.9%

CVE-2016-7659 Feb 20, 08:59 HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Iphone Os +2

NVD

CVSS 3.0

8.8

EPSS

0.9%

CVE-2016-7658 Feb 20, 08:59 HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Iphone Os +2

NVD

CVSS 3.0

8.8

EPSS

0.9%

CVE-2016-7595 Feb 20, 08:59 HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Iphone Os +2

NVD

CVSS 3.0

8.8

EPSS

0.9%

CVE-2016-7588 Feb 20, 08:59 HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Iphone Os +2

NVD

CVSS 3.0

8.8

EPSS

0.9%

CVE-2016-4691 Feb 20, 08:59 HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Iphone Os +2

NVD

CVSS 3.0

8.8

EPSS

0.9%

CVE-2017-2355 Feb 20, 08:59 HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Iphone Os +5

NVD

CVSS 3.0

8.8

EPSS

0.9%

CVE-2016-7611 Feb 20, 08:59 HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Iphone Os +3

NVD

CVSS 3.0

8.8

EPSS

0.9%

CVE-2017-2372 Feb 20, 08:59 HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Garageband +1

NVD

CVSS 3.0

8.8

EPSS

0.8%

CVE-2016-7632 Feb 20, 08:59 HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Iphone Os +3

NVD

CVSS 3.0

8.8

EPSS

0.8%

CVE-2017-2366 Feb 20, 08:59 HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Iphone Os +3

NVD

CVSS 3.0

8.8

EPSS

0.7%

CVE-2016-7656 Feb 20, 08:59 HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Iphone Os +3

NVD

CVSS 3.0

8.8

EPSS

0.7%

CVE-2016-7654 Feb 20, 08:59 HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Iphone Os +3

NVD

CVSS 3.0

8.8

EPSS

0.7%

CVE-2016-7652 Feb 20, 08:59 HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Iphone Os +3

NVD

CVSS 3.0

8.8

EPSS

0.7%

CVE-2016-7649 Feb 20, 08:59 HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Iphone Os +3

NVD

CVSS 3.0

8.8

EPSS

0.7%

CVE-2016-7648 Feb 20, 08:59 HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Iphone Os +3

NVD

CVSS 3.0

8.8

EPSS

0.7%

CVE-2016-7646 Feb 20, 08:59 HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Iphone Os +3

NVD

CVSS 3.0

8.8

EPSS

0.7%

CVE-2016-7645 Feb 20, 08:59 HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Iphone Os +3

NVD

CVSS 3.0

8.8

EPSS

0.7%

CVE-2016-7642 Feb 20, 08:59 HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Iphone Os +3

NVD

CVSS 3.0

8.8

EPSS

0.7%