Skip to main content

Microsoft

20700 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest
CVE-2013-3172 Jul 10, 03:46 MEDIUM This Month

Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows. Rated medium severity (CVSS 4.9), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Microsoft Windows Server 2008 Windows 7 +3
NVD
CVSS 2.0
4.9
EPSS
0.4%
CVE-2013-3171 Jul 10, 03:46 CRITICAL Act Now

The serialization functionality in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5 SP1, 3.5.1, 4, and 4.5 does not properly check the permissions of delegate objects, which allows remote attackers to. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.

RCE Microsoft Code Injection Net Framework
NVD
CVSS 2.0
9.3
EPSS
8.6%
CVE-2013-3167 Jul 10, 03:46 HIGH This Week

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 does not properly handle. Rated high severity (CVSS 7.2), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Information Disclosure Microsoft Windows Server 2008 Windows 7 +3
NVD
CVSS 2.0
7.2
EPSS
1.9%
CVE-2013-3166 Jul 10, 03:46 MEDIUM POC THREAT This Month

Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to inject arbitrary web script or HTML via vectors involving incorrect auto-selection of. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 18.0%.

XSS Microsoft Internet Explorer
NVD Exploit-DB
CVSS 2.0
4.3
EPSS
18.0%
CVE-2013-3164 Jul 10, 03:46 CRITICAL POC THREAT Emergency

Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 15.4%.

RCE Buffer Overflow Denial Of Service Microsoft Code Injection +1
NVD Exploit-DB
CVSS 2.0
9.3
EPSS
15.4%
CVE-2013-3162 Jul 10, 03:46 CRITICAL POC THREAT Emergency

Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 11.0%.

RCE Buffer Overflow Denial Of Service Microsoft Code Injection +1
NVD Exploit-DB
CVSS 2.0
9.3
EPSS
11.0%
CVE-2013-3161 Jul 10, 03:46 CRITICAL POC Act Now

Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Denial Of Service Microsoft Code Injection +1
NVD Exploit-DB
CVSS 2.0
9.3
EPSS
9.4%
CVE-2013-3154 Jul 10, 03:46 MEDIUM This Month

The signature-update functionality in Windows Defender on Microsoft Windows 7 and Windows Server 2008 R2 relies on an incorrect pathname, which allows local users to gain privileges via a Trojan. Rated medium severity (CVSS 6.9). No vendor patch available.

Privilege Escalation Microsoft Windows Server 2008 Windows 7 Windows Defender
NVD
CVSS 2.0
6.9
EPSS
3.8%
CVE-2013-3153 Jul 10, 03:46 CRITICAL POC THREAT Emergency

Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 11.0%.

RCE Buffer Overflow Denial Of Service Microsoft Code Injection +1
NVD Exploit-DB
CVSS 2.0
9.3
EPSS
11.0%
CVE-2013-3152 Jul 10, 03:46 CRITICAL POC THREAT Emergency

Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 15.4%.

RCE Buffer Overflow Denial Of Service Microsoft Code Injection +1
NVD Exploit-DB
CVSS 2.0
9.3
EPSS
15.4%
CVE-2013-3151 Jul 10, 03:46 CRITICAL POC Act Now

Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Denial Of Service Microsoft Code Injection +1
NVD Exploit-DB
CVSS 2.0
9.3
EPSS
8.4%
CVE-2013-3150 Jul 10, 03:46 CRITICAL POC THREAT Emergency

Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 11.0%.

RCE Buffer Overflow Denial Of Service Microsoft Code Injection +1
NVD Exploit-DB
CVSS 2.0
9.3
EPSS
11.0%
CVE-2013-3149 Jul 10, 03:46 CRITICAL POC THREAT Emergency

Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 11.0%.

RCE Buffer Overflow Denial Of Service Microsoft Code Injection +1
NVD Exploit-DB
CVSS 2.0
9.3
EPSS
11.0%
CVE-2013-3148 Jul 10, 03:46 CRITICAL POC THREAT Emergency

Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 11.0%.

RCE Buffer Overflow Denial Of Service Microsoft Code Injection +1
NVD Exploit-DB
CVSS 2.0
9.3
EPSS
11.0%
CVE-2013-3147 Jul 10, 03:46 CRITICAL POC THREAT Emergency

Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 11.0%.

RCE Buffer Overflow Denial Of Service Microsoft Code Injection +1
NVD Exploit-DB
CVSS 2.0
9.3
EPSS
11.0%
CVE-2013-3146 Jul 10, 03:46 CRITICAL POC THREAT Emergency

Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 15.4%.

RCE Buffer Overflow Denial Of Service Microsoft Code Injection +1
NVD Exploit-DB
CVSS 2.0
9.3
EPSS
15.4%
CVE-2013-3145 Jul 10, 03:46 CRITICAL POC THREAT Emergency

Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 11.0%.

RCE Buffer Overflow Denial Of Service Microsoft Code Injection +1
NVD Exploit-DB
CVSS 2.0
9.3
EPSS
11.0%
CVE-2013-3144 Jul 10, 03:46 CRITICAL POC Act Now

Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Denial Of Service Microsoft Code Injection +1
NVD Exploit-DB
CVSS 2.0
9.3
EPSS
8.4%
CVE-2013-3143 Jul 10, 03:46 CRITICAL POC THREAT Emergency

Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 31.0%.

RCE Buffer Overflow Denial Of Service Microsoft Code Injection +1
NVD Exploit-DB
CVSS 2.0
9.3
EPSS
31.0%
Threat
4.3
CVE-2013-3134 Jul 10, 03:46 CRITICAL Emergency

The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 on 64-bit platforms does not properly allocate arrays of structures, which allows remote attackers to. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 57.7% and no vendor patch available.

RCE Microsoft Code Injection Net Framework
NVD
CVSS 2.0
9.3
EPSS
57.7%
CVE-2013-3133 Jul 10, 03:46 CRITICAL Act Now

Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly check the permissions of objects that use reflection, which allows remote attackers to execute arbitrary code via (1) a. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.

RCE Microsoft Code Injection Net Framework
NVD
CVSS 2.0
9.3
EPSS
8.6%
CVE-2013-3132 Jul 10, 03:46 CRITICAL Act Now

Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly check the permissions of objects that use reflection, which allows remote attackers to execute arbitrary. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.

RCE Microsoft Code Injection Net Framework
NVD
CVSS 2.0
9.3
EPSS
7.1%
CVE-2013-3131 Jul 10, 03:46 CRITICAL Emergency

Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5, and Silverlight 5 before 5.1.20513.0, does not properly prevent changes to data in multidimensional arrays of structures, which allows remote. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 54.7% and no vendor patch available.

RCE Microsoft Code Injection Net Framework Silverlight
NVD
CVSS 2.0
9.3
EPSS
54.7%
CVE-2013-3129 Jul 10, 03:46 HIGH Act Now

Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5; Silverlight 5 before 5.1.20513.0; win32k.sys in the kernel-mode drivers, and GDI+, DirectWrite, and Journal, in Windows XP SP2 and SP3,. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Epss exploitation probability 51.7% and no vendor patch available.

RCE Microsoft Code Injection Office Windows Server 2008 +12
NVD
CVSS 3.1
7.8
EPSS
51.7%
CVE-2013-3127 Jul 10, 03:46 CRITICAL Emergency

The Microsoft WMV video codec in wmv9vcm.dll, wmvdmod.dll in Windows Media Format Runtime 9 and 9.5, and wmvdecod.dll in Windows Media Format Runtime 11 and Windows Media Player 11 and 12 allows. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 35.5% and no vendor patch available.

RCE Microsoft Code Injection Windows Media Player Windows Media Format Runtime
NVD
CVSS 2.0
9.3
EPSS
35.5%
CVE-2013-3115 Jul 10, 03:46 CRITICAL POC THREAT Emergency

Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 26.1%.

RCE Buffer Overflow Denial Of Service Microsoft Internet Explorer
NVD Exploit-DB
CVSS 2.0
9.3
EPSS
26.1%
Threat
4.1
CVE-2013-1345 Jul 10, 03:46 HIGH This Week

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server. Rated high severity (CVSS 7.2), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Windows Server 2008 Windows Server 2012 Windows 7 +5
NVD
CVSS 2.0
7.2
EPSS
3.1%
CVE-2013-1340 Jul 10, 03:46 HIGH This Week

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server. Rated high severity (CVSS 8.4), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Windows Server 2008 Windows Server 2012 Windows 7 +5
NVD
CVSS 3.1
8.4
EPSS
1.0%
CVE-2013-4786 Jul 08, 22:55 HIGH POC THREAT Act Now

The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote attackers to obtain password hashes and conduct offline password guessing. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 67.8%.

Authentication Bypass Microsoft Oracle Intel Fujitsu M10 Firmware +1
NVD Exploit-DB
CVSS 3.0
7.5
EPSS
67.8%
Threat
5.0
CVE-2013-3028 Jul 02, 21:55 MEDIUM This Month

Multiple buffer overflows in mqm programs in IBM WebSphere MQ 7.0.x before 7.0.1.11, 7.1.x before 7.1.0.3, and 7.5.x before 7.5.0.2 on non-Windows platforms allow local users to gain privileges via. Rated medium severity (CVSS 4.6), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow IBM Microsoft Websphere Mq
NVD
CVSS 2.0
4.6
EPSS
0.1%
CVE-2013-3393 Jun 26, 19:55 MEDIUM This Month

The Precision Video Engine component in Cisco Jabber for Windows and Cisco Virtualization Experience Media Engine allows remote attackers to cause a denial of service (process crash and call. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Microsoft Cisco Jabber Virtualization Experience Media Engine
NVD
CVSS 2.0
5.0
EPSS
0.5%
CVE-2013-1700 Jun 26, 03:19 HIGH This Week

The Mozilla Maintenance Service in Mozilla Firefox before 22.0 on Windows does not properly handle inability to launch the Mozilla Updater executable file, which allows local users to gain privileges. Rated high severity (CVSS 7.2), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Mozilla Firefox
NVD
CVSS 2.0
7.2
EPSS
0.1%
CVE-2013-4669 Jun 25, 14:38 MEDIUM This Month

FortiClient before 4.3.5.472 on Windows, before 4.0.3.134 on Mac OS X, and before 4.0 on Android; FortiClient Lite before 4.3.4.461 on Windows; FortiClient Lite 2.0 through 2.0.0223 on Android; and. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable. No vendor patch available.

Authentication Bypass Fortinet Google Microsoft Forticlient +2
NVD
CVSS 2.0
5.4
EPSS
0.2%
CVE-2013-2451 Jun 18, 22:55 LOW Monitor

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows local users to affect. Rated low severity (CVSS 3.7). No vendor patch available.

Java Information Disclosure Microsoft Oracle Jdk +2
NVD
CVSS 2.0
3.7
EPSS
0.1%
CVE-2013-2310 Jun 17, 03:29 LOW Monitor

SoftBank Wi-Fi Spot Configuration Software, as used on SoftBank SHARP 3G handsets, SoftBank Panasonic 3G handsets, SoftBank NEC 3G handsets, SoftBank Samsung 3G handsets, SoftBank mobile Wi-Fi. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Google Samsung Microsoft Wi Fi Spot Configuration Software +11
NVD
CVSS 2.0
3.3
EPSS
0.2%
CVE-2013-3343 Jun 12, 03:30 CRITICAL PATCH Act Now

Adobe Flash Player before 10.3.183.90 and 11.x before 11.7.700.224 on Windows, before 10.3.183.90 and 11.x before 11.7.700.225 on Mac OS X, before 10.3.183.90 and 11.x before 11.2.202.291 on Linux,. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service Google Microsoft +4
NVD
CVSS 2.0
10.0
EPSS
5.3%
CVE-2013-3142 Jun 12, 03:30 CRITICAL Act Now

Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 26.9% and no vendor patch available.

RCE Buffer Overflow Denial Of Service Microsoft Internet Explorer
NVD
CVSS 2.0
9.3
EPSS
26.9%
CVE-2013-3141 Jun 12, 03:30 CRITICAL Emergency

Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 31.1% and no vendor patch available.

RCE Buffer Overflow Denial Of Service Microsoft Internet Explorer
NVD
CVSS 2.0
9.3
EPSS
31.1%
CVE-2013-3139 Jun 12, 03:30 CRITICAL Emergency

Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 31.1% and no vendor patch available.

RCE Buffer Overflow Denial Of Service Microsoft Internet Explorer
NVD
CVSS 2.0
9.3
EPSS
31.1%
CVE-2013-3138 Jun 12, 03:30 HIGH Act Now

Integer overflow in the TCP/IP kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows remote. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable. Epss exploitation probability 88.3% and no vendor patch available.

Denial Of Service Microsoft Windows Server 2008 Windows 7 Windows Vista +2
NVD
CVSS 2.0
7.1
EPSS
88.3%
Threat
4.1
CVE-2013-3136 Jun 12, 03:30 MEDIUM This Month

The kernel in Microsoft Windows XP SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8 on 32-bit platforms does not properly handle unspecified. Rated medium severity (CVSS 4.4). No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows 7 Windows Xp +3
NVD
CVSS 2.0
4.4
EPSS
1.0%
CVE-2013-3126 Jun 12, 03:30 CRITICAL Act Now

Microsoft Internet Explorer 9 and 10, when script debugging is enabled, does not properly handle objects in memory during the processing of script, which allows remote attackers to execute arbitrary. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 10.8% and no vendor patch available.

RCE Buffer Overflow Microsoft Internet Explorer
NVD
CVSS 2.0
9.3
EPSS
10.8%
CVE-2013-3125 Jun 12, 03:30 CRITICAL Emergency

Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 31.1% and no vendor patch available.

RCE Buffer Overflow Denial Of Service Microsoft Internet Explorer
NVD
CVSS 2.0
9.3
EPSS
31.1%
CVE-2013-3124 Jun 12, 03:30 CRITICAL Emergency

Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 31.1% and no vendor patch available.

RCE Buffer Overflow Denial Of Service Microsoft Internet Explorer
NVD
CVSS 2.0
9.3
EPSS
31.1%
CVE-2013-3123 Jun 12, 03:30 CRITICAL Emergency

Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 31.1% and no vendor patch available.

RCE Buffer Overflow Denial Of Service Microsoft Internet Explorer
NVD
CVSS 2.0
9.3
EPSS
31.1%
CVE-2013-3122 Jun 12, 03:30 CRITICAL Emergency

Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 31.1% and no vendor patch available.

RCE Buffer Overflow Denial Of Service Microsoft Internet Explorer
NVD
CVSS 2.0
9.3
EPSS
31.1%
CVE-2013-3121 Jun 12, 03:30 CRITICAL Emergency

Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 31.1% and no vendor patch available.

RCE Buffer Overflow Denial Of Service Microsoft Internet Explorer
NVD
CVSS 2.0
9.3
EPSS
31.1%
CVE-2013-3120 Jun 12, 03:30 CRITICAL POC THREAT Emergency

Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 23.2%.

RCE Buffer Overflow Denial Of Service Microsoft Internet Explorer
NVD Exploit-DB
CVSS 2.0
9.3
EPSS
23.2%
Threat
4.1
CVE-2013-3119 Jun 12, 03:29 CRITICAL Emergency

Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 31.1% and no vendor patch available.

RCE Buffer Overflow Denial Of Service Microsoft Internet Explorer
NVD
CVSS 2.0
9.3
EPSS
31.1%
CVE-2013-3118 Jun 12, 03:29 CRITICAL Emergency

Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 31.1% and no vendor patch available.

RCE Buffer Overflow Denial Of Service Microsoft Internet Explorer
NVD
CVSS 2.0
9.3
EPSS
31.1%
CVE-2013-3117 Jun 12, 03:29 CRITICAL Act Now

Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 27.2% and no vendor patch available.

RCE Buffer Overflow Denial Of Service Microsoft Internet Explorer
NVD
CVSS 2.0
9.3
EPSS
27.2%
CVE-2013-3116 Jun 12, 03:29 CRITICAL Act Now

Microsoft Internet Explorer 7 through 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 27.2% and no vendor patch available.

RCE Buffer Overflow Denial Of Service Microsoft Internet Explorer
NVD
CVSS 2.0
9.3
EPSS
27.2%
CVE-2013-3114 Jun 12, 03:29 CRITICAL Emergency

Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 31.1% and no vendor patch available.

RCE Buffer Overflow Denial Of Service Microsoft Internet Explorer
NVD
CVSS 2.0
9.3
EPSS
31.1%
CVE-2013-3113 Jun 12, 03:29 CRITICAL Emergency

Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 31.1% and no vendor patch available.

RCE Buffer Overflow Denial Of Service Microsoft Internet Explorer
NVD
CVSS 2.0
9.3
EPSS
31.1%
CVE-2013-3112 Jun 12, 03:29 CRITICAL Emergency

Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 31.1% and no vendor patch available.

RCE Buffer Overflow Denial Of Service Microsoft Internet Explorer
NVD
CVSS 2.0
9.3
EPSS
31.1%
CVE-2013-3111 Jun 12, 03:29 CRITICAL POC THREAT Emergency

Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 41.5%.

RCE Buffer Overflow Denial Of Service Microsoft Internet Explorer
NVD Exploit-DB
CVSS 2.0
9.3
EPSS
41.5%
Threat
4.6
CVE-2013-3110 Jun 12, 03:29 CRITICAL Emergency

Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 31.1% and no vendor patch available.

RCE Buffer Overflow Denial Of Service Microsoft Internet Explorer
NVD
CVSS 2.0
9.3
EPSS
31.1%
CVE-2013-1339 Jun 12, 03:29 CRITICAL Act Now

The Print Spooler in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly manage memory during deletion of. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 26.4% and no vendor patch available.

RCE Microsoft Windows Server 2008 Windows Server 2012 Windows 7 +3
NVD
CVSS 2.0
9.0
EPSS
26.4%
CVE-2013-2854 Jun 05, 00:55 HIGH This Week

Google Chrome before 27.0.1453.110 on Windows provides an incorrect handle to a renderer process in unspecified circumstances, which allows remote attackers to cause a denial of service or possibly. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Chrome Google Microsoft
NVD
CVSS 2.0
7.5
EPSS
0.6%
CVE-2013-3661 May 24, 20:55 MEDIUM POC This Month

The EPATHOBJ::bFlatten function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows. Rated medium severity (CVSS 4.9), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Path Traversal Microsoft Windows Server 2008 Windows Server 2012 +6
NVD Exploit-DB
CVSS 2.0
4.9
EPSS
1.8%
CVE-2013-0941 May 22, 13:29 LOW Monitor

EMC RSA Authentication API before 8.1 SP1, RSA Web Agent before 5.3.5 for Apache Web Server, RSA Web Agent before 5.3.5 for IIS, RSA PAM Agent before 7.0, and RSA Agent before 6.1.4 for Microsoft. Rated low severity (CVSS 2.1), this vulnerability is low attack complexity. No vendor patch available.

Apache Information Disclosure Microsoft Rsa Securid Web Agent +3
NVD
CVSS 2.0
2.1
EPSS
0.0%
CVE-2013-0992 May 20, 14:44 MEDIUM This Month

WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Epss exploitation probability 18.2% and no vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Microsoft +2
NVD
CVSS 2.0
6.8
EPSS
18.2%
CVE-2013-3335 May 16, 11:45 CRITICAL PATCH Act Now

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service Google Microsoft +13
NVD
CVSS 2.0
10.0
EPSS
4.0%
CVE-2013-3334 May 16, 11:45 CRITICAL PATCH Act Now

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service Google Microsoft +13
NVD
CVSS 2.0
10.0
EPSS
4.0%
CVE-2013-3333 May 16, 11:45 CRITICAL PATCH Act Now

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service Google Microsoft +13
NVD
CVSS 2.0
10.0
EPSS
2.0%
CVE-2013-3332 May 16, 11:45 CRITICAL PATCH Act Now

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service Google Microsoft +13
NVD
CVSS 2.0
10.0
EPSS
2.0%
CVE-2013-3331 May 16, 11:45 CRITICAL PATCH Act Now

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service Google Microsoft +13
NVD
CVSS 2.0
10.0
EPSS
2.0%
CVE-2013-3330 May 16, 11:45 CRITICAL PATCH Act Now

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service Google Microsoft +13
NVD
CVSS 2.0
10.0
EPSS
4.0%
CVE-2013-3329 May 16, 11:45 CRITICAL PATCH Act Now

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service Google Microsoft +13
NVD
CVSS 2.0
10.0
EPSS
4.0%
CVE-2013-3328 May 16, 11:45 CRITICAL PATCH Act Now

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service Google Microsoft +13
NVD
CVSS 2.0
10.0
EPSS
4.0%
CVE-2013-3327 May 16, 11:45 CRITICAL PATCH Act Now

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service Google Microsoft +13
NVD
CVSS 2.0
10.0
EPSS
4.0%
CVE-2013-3326 May 16, 11:45 CRITICAL PATCH Act Now

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service Google Microsoft +13
NVD
CVSS 2.0
10.0
EPSS
4.0%
CVE-2013-3325 May 16, 11:45 CRITICAL PATCH Act Now

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service Google Microsoft +13
NVD
CVSS 2.0
10.0
EPSS
4.0%
CVE-2013-3324 May 16, 11:45 CRITICAL PATCH Act Now

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service Google Microsoft +13
NVD
CVSS 2.0
10.0
EPSS
4.0%
CVE-2013-2728 May 16, 11:45 CRITICAL PATCH Act Now

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service Google Microsoft +13
NVD
CVSS 2.0
10.0
EPSS
4.0%
CVE-2013-1673 May 16, 11:45 MEDIUM This Month

The Mozilla Updater in Mozilla Firefox before 21.0 on Windows does not properly maintain Mozilla Maintenance Service registry entries in certain situations involving upgrades from older Firefox. Rated medium severity (CVSS 6.9). No vendor patch available.

Privilege Escalation Microsoft Mozilla Firefox
NVD
CVSS 2.0
6.9
EPSS
0.0%
CVE-2013-1672 May 16, 11:45 MEDIUM This Month

The Mozilla Maintenance Service in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 on Windows allows local users to. Rated medium severity (CVSS 6.9). No vendor patch available.

Privilege Escalation Microsoft Mozilla Firefox Thunderbird +1
NVD
CVSS 2.0
6.9
EPSS
0.0%
CVE-2013-1346 May 15, 10:55 CRITICAL PATCH Act Now

mpengine.dll in Microsoft Malware Protection Engine before 1.1.9506.0 on x64 platforms allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 18.3%.

RCE Buffer Overflow Denial Of Service Microsoft Malware Protection Engine
NVD
CVSS 2.0
9.3
EPSS
18.3%
CVE-2013-1337 May 15, 03:36 HIGH Act Now

Microsoft .NET Framework 4.5 does not properly create policy requirements for custom Windows Communication Foundation (WCF) endpoint authentication in certain situations involving passwords over. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 22.8% and no vendor patch available.

Authentication Bypass Microsoft Net Framework
NVD
CVSS 2.0
7.5
EPSS
22.8%
CVE-2013-1336 May 15, 03:36 MEDIUM This Month

The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly check signatures, which allows remote attackers to make undetected changes to signed. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 60.2% and no vendor patch available.

Information Disclosure Microsoft Net Framework
NVD
CVSS 2.0
5.0
EPSS
60.2%
CVE-2013-1335 May 15, 03:36 CRITICAL Emergency

Microsoft Word 2003 SP3 and Word Viewer allow remote attackers to execute arbitrary code via crafted shape data in a Word document, aka "Word Shape Corruption Vulnerability.". Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 54.9% and no vendor patch available.

RCE Microsoft Code Injection Word Word Viewer
NVD
CVSS 2.0
9.3
EPSS
54.9%
CVE-2013-1334 May 15, 03:36 HIGH This Week

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server. Rated high severity (CVSS 7.2), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Microsoft Windows Server 2008 Windows Server 2012 Windows 7 +5
NVD
CVSS 2.0
7.2
EPSS
3.4%
CVE-2013-1333 May 15, 03:36 HIGH This Week

Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows 7 SP1 allows local users to gain privileges via a crafted application that leverages improper handling of objects in. Rated high severity (CVSS 7.2), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Microsoft Windows 7
NVD
CVSS 2.0
7.2
EPSS
3.5%
CVE-2013-1332 May 15, 03:36 HIGH This Week

dxgkrnl.sys (aka the DirectX graphics kernel subsystem) in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012,. Rated high severity (CVSS 7.2), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Microsoft Windows Server 2008 Windows Server 2012 Windows 7 +3
NVD
CVSS 2.0
7.2
EPSS
3.9%
CVE-2013-1329 May 15, 03:36 CRITICAL Emergency

Integer signedness error in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers a buffer underflow, aka "Publisher Buffer. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 58.6% and no vendor patch available.

RCE Microsoft Publisher
NVD
CVSS 2.0
9.3
EPSS
58.6%
CVE-2013-1328 May 15, 03:36 CRITICAL Emergency

Microsoft Publisher 2003 SP3, 2007 SP3, and 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers incorrect pointer handling, aka "Publisher Pointer. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 58.6% and no vendor patch available.

RCE Microsoft Publisher
NVD
CVSS 2.0
9.3
EPSS
58.6%
CVE-2013-1327 May 15, 03:36 CRITICAL Emergency

Integer signedness error in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers an improper memory allocation, aka "Publisher. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 58.6% and no vendor patch available.

RCE Microsoft Publisher
NVD
CVSS 2.0
9.3
EPSS
58.6%
CVE-2013-1323 May 15, 03:36 CRITICAL Emergency

Microsoft Publisher 2003 SP3 does not properly handle NULL values for unspecified data items, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 54.9% and no vendor patch available.

RCE Microsoft Code Injection Publisher
NVD
CVSS 2.0
9.3
EPSS
54.9%
CVE-2013-1322 May 15, 03:36 CRITICAL Emergency

Microsoft Publisher 2003 SP3 does not properly check table range data, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Invalid Range Check. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 61.0% and no vendor patch available.

RCE Microsoft Publisher
NVD
CVSS 2.0
10.0
EPSS
61.0%
CVE-2013-1321 May 15, 03:36 CRITICAL Emergency

Microsoft Publisher 2003 SP3 does not properly check the data type of an unspecified return value, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 53.3% and no vendor patch available.

RCE Microsoft Publisher
NVD
CVSS 2.0
9.3
EPSS
53.3%
CVE-2013-3172
EPSS 0% CVSS 4.9
MEDIUM This Month

Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows. Rated medium severity (CVSS 4.9), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Microsoft +5
NVD
CVE-2013-3171
EPSS 9% CVSS 9.3
CRITICAL Act Now

The serialization functionality in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5 SP1, 3.5.1, 4, and 4.5 does not properly check the permissions of delegate objects, which allows remote attackers to. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.

RCE Microsoft Code Injection +1
NVD
CVE-2013-3167
EPSS 2% CVSS 7.2
HIGH This Week

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 does not properly handle. Rated high severity (CVSS 7.2), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Information Disclosure Microsoft +5
NVD
CVE-2013-3166
EPSS 18% CVSS 4.3
MEDIUM POC THREAT This Month

Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to inject arbitrary web script or HTML via vectors involving incorrect auto-selection of. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 18.0%.

XSS Microsoft Internet Explorer
NVD Exploit-DB
CVE-2013-3164
EPSS 15% CVSS 9.3
CRITICAL POC THREAT Emergency

Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 15.4%.

RCE Buffer Overflow Denial Of Service +3
NVD Exploit-DB
CVE-2013-3162
EPSS 11% CVSS 9.3
CRITICAL POC THREAT Emergency

Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 11.0%.

RCE Buffer Overflow Denial Of Service +3
NVD Exploit-DB
CVE-2013-3161
EPSS 9% CVSS 9.3
CRITICAL POC Act Now

Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Denial Of Service +3
NVD Exploit-DB
CVE-2013-3154
EPSS 4% CVSS 6.9
MEDIUM This Month

The signature-update functionality in Windows Defender on Microsoft Windows 7 and Windows Server 2008 R2 relies on an incorrect pathname, which allows local users to gain privileges via a Trojan. Rated medium severity (CVSS 6.9). No vendor patch available.

Privilege Escalation Microsoft Windows Server 2008 +2
NVD
CVE-2013-3153
EPSS 11% CVSS 9.3
CRITICAL POC THREAT Emergency

Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 11.0%.

RCE Buffer Overflow Denial Of Service +3
NVD Exploit-DB
CVE-2013-3152
EPSS 15% CVSS 9.3
CRITICAL POC THREAT Emergency

Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 15.4%.

RCE Buffer Overflow Denial Of Service +3
NVD Exploit-DB
CVE-2013-3151
EPSS 8% CVSS 9.3
CRITICAL POC Act Now

Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Denial Of Service +3
NVD Exploit-DB
CVE-2013-3150
EPSS 11% CVSS 9.3
CRITICAL POC THREAT Emergency

Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 11.0%.

RCE Buffer Overflow Denial Of Service +3
NVD Exploit-DB
CVE-2013-3149
EPSS 11% CVSS 9.3
CRITICAL POC THREAT Emergency

Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 11.0%.

RCE Buffer Overflow Denial Of Service +3
NVD Exploit-DB
CVE-2013-3148
EPSS 11% CVSS 9.3
CRITICAL POC THREAT Emergency

Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 11.0%.

RCE Buffer Overflow Denial Of Service +3
NVD Exploit-DB
CVE-2013-3147
EPSS 11% CVSS 9.3
CRITICAL POC THREAT Emergency

Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 11.0%.

RCE Buffer Overflow Denial Of Service +3
NVD Exploit-DB
CVE-2013-3146
EPSS 15% CVSS 9.3
CRITICAL POC THREAT Emergency

Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 15.4%.

RCE Buffer Overflow Denial Of Service +3
NVD Exploit-DB
CVE-2013-3145
EPSS 11% CVSS 9.3
CRITICAL POC THREAT Emergency

Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 11.0%.

RCE Buffer Overflow Denial Of Service +3
NVD Exploit-DB
CVE-2013-3144
EPSS 8% CVSS 9.3
CRITICAL POC Act Now

Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Denial Of Service +3
NVD Exploit-DB
CVE-2013-3143
EPSS 31% 4.3 CVSS 9.3
CRITICAL POC THREAT Emergency

Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 31.0%.

RCE Buffer Overflow Denial Of Service +3
NVD Exploit-DB
CVE-2013-3134
EPSS 58% CVSS 9.3
CRITICAL Emergency

The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 on 64-bit platforms does not properly allocate arrays of structures, which allows remote attackers to. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 57.7% and no vendor patch available.

RCE Microsoft Code Injection +1
NVD
CVE-2013-3133
EPSS 9% CVSS 9.3
CRITICAL Act Now

Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly check the permissions of objects that use reflection, which allows remote attackers to execute arbitrary code via (1) a. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.

RCE Microsoft Code Injection +1
NVD
CVE-2013-3132
EPSS 7% CVSS 9.3
CRITICAL Act Now

Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly check the permissions of objects that use reflection, which allows remote attackers to execute arbitrary. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.

RCE Microsoft Code Injection +1
NVD
CVE-2013-3131
EPSS 55% CVSS 9.3
CRITICAL Emergency

Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5, and Silverlight 5 before 5.1.20513.0, does not properly prevent changes to data in multidimensional arrays of structures, which allows remote. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 54.7% and no vendor patch available.

RCE Microsoft Code Injection +2
NVD
CVE-2013-3129
EPSS 52% CVSS 7.8
HIGH Act Now

Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5; Silverlight 5 before 5.1.20513.0; win32k.sys in the kernel-mode drivers, and GDI+, DirectWrite, and Journal, in Windows XP SP2 and SP3,. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Epss exploitation probability 51.7% and no vendor patch available.

RCE Microsoft Code Injection +14
NVD
CVE-2013-3127
EPSS 36% CVSS 9.3
CRITICAL Emergency

The Microsoft WMV video codec in wmv9vcm.dll, wmvdmod.dll in Windows Media Format Runtime 9 and 9.5, and wmvdecod.dll in Windows Media Format Runtime 11 and Windows Media Player 11 and 12 allows. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 35.5% and no vendor patch available.

RCE Microsoft Code Injection +2
NVD
CVE-2013-3115
EPSS 26% 4.1 CVSS 9.3
CRITICAL POC THREAT Emergency

Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 26.1%.

RCE Buffer Overflow Denial Of Service +2
NVD Exploit-DB
CVE-2013-1345
EPSS 3% CVSS 7.2
HIGH This Week

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server. Rated high severity (CVSS 7.2), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Windows Server 2008 +7
NVD
CVE-2013-1340
EPSS 1% CVSS 8.4
HIGH This Week

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server. Rated high severity (CVSS 8.4), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Windows Server 2008 +7
NVD
CVE-2013-4786
EPSS 68% 5.0 CVSS 7.5
HIGH POC THREAT Act Now

The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote attackers to obtain password hashes and conduct offline password guessing. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 67.8%.

Authentication Bypass Microsoft Oracle +3
NVD Exploit-DB
CVE-2013-3028
EPSS 0% CVSS 4.6
MEDIUM This Month

Multiple buffer overflows in mqm programs in IBM WebSphere MQ 7.0.x before 7.0.1.11, 7.1.x before 7.1.0.3, and 7.5.x before 7.5.0.2 on non-Windows platforms allow local users to gain privileges via. Rated medium severity (CVSS 4.6), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow IBM Microsoft +1
NVD
CVE-2013-3393
EPSS 0% CVSS 5.0
MEDIUM This Month

The Precision Video Engine component in Cisco Jabber for Windows and Cisco Virtualization Experience Media Engine allows remote attackers to cause a denial of service (process crash and call. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Microsoft Cisco +2
NVD
CVE-2013-1700
EPSS 0% CVSS 7.2
HIGH This Week

The Mozilla Maintenance Service in Mozilla Firefox before 22.0 on Windows does not properly handle inability to launch the Mozilla Updater executable file, which allows local users to gain privileges. Rated high severity (CVSS 7.2), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Mozilla +1
NVD
CVE-2013-4669
EPSS 0% CVSS 5.4
MEDIUM This Month

FortiClient before 4.3.5.472 on Windows, before 4.0.3.134 on Mac OS X, and before 4.0 on Android; FortiClient Lite before 4.3.4.461 on Windows; FortiClient Lite 2.0 through 2.0.0223 on Android; and. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable. No vendor patch available.

Authentication Bypass Fortinet Google +4
NVD
CVE-2013-2451
EPSS 0% CVSS 3.7
LOW Monitor

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows local users to affect. Rated low severity (CVSS 3.7). No vendor patch available.

Java Information Disclosure Microsoft +4
NVD
CVE-2013-2310
EPSS 0% CVSS 3.3
LOW Monitor

SoftBank Wi-Fi Spot Configuration Software, as used on SoftBank SHARP 3G handsets, SoftBank Panasonic 3G handsets, SoftBank NEC 3G handsets, SoftBank Samsung 3G handsets, SoftBank mobile Wi-Fi. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Google Samsung +13
NVD
CVE-2013-3343
EPSS 5% CVSS 10.0
CRITICAL PATCH Act Now

Adobe Flash Player before 10.3.183.90 and 11.x before 11.7.700.224 on Windows, before 10.3.183.90 and 11.x before 11.7.700.225 on Mac OS X, before 10.3.183.90 and 11.x before 11.2.202.291 on Linux,. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service +6
NVD
CVE-2013-3142
EPSS 27% CVSS 9.3
CRITICAL Act Now

Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 26.9% and no vendor patch available.

RCE Buffer Overflow Denial Of Service +2
NVD
CVE-2013-3141
EPSS 31% CVSS 9.3
CRITICAL Emergency

Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 31.1% and no vendor patch available.

RCE Buffer Overflow Denial Of Service +2
NVD
CVE-2013-3139
EPSS 31% CVSS 9.3
CRITICAL Emergency

Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 31.1% and no vendor patch available.

RCE Buffer Overflow Denial Of Service +2
NVD
CVE-2013-3138
EPSS 88% 4.1 CVSS 7.1
HIGH Act Now

Integer overflow in the TCP/IP kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows remote. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable. Epss exploitation probability 88.3% and no vendor patch available.

Denial Of Service Microsoft Windows Server 2008 +4
NVD
CVE-2013-3136
EPSS 1% CVSS 4.4
MEDIUM This Month

The kernel in Microsoft Windows XP SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8 on 32-bit platforms does not properly handle unspecified. Rated medium severity (CVSS 4.4). No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 +5
NVD
CVE-2013-3126
EPSS 11% CVSS 9.3
CRITICAL Act Now

Microsoft Internet Explorer 9 and 10, when script debugging is enabled, does not properly handle objects in memory during the processing of script, which allows remote attackers to execute arbitrary. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 10.8% and no vendor patch available.

RCE Buffer Overflow Microsoft +1
NVD
CVE-2013-3125
EPSS 31% CVSS 9.3
CRITICAL Emergency

Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 31.1% and no vendor patch available.

RCE Buffer Overflow Denial Of Service +2
NVD
CVE-2013-3124
EPSS 31% CVSS 9.3
CRITICAL Emergency

Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 31.1% and no vendor patch available.

RCE Buffer Overflow Denial Of Service +2
NVD
CVE-2013-3123
EPSS 31% CVSS 9.3
CRITICAL Emergency

Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 31.1% and no vendor patch available.

RCE Buffer Overflow Denial Of Service +2
NVD
CVE-2013-3122
EPSS 31% CVSS 9.3
CRITICAL Emergency

Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 31.1% and no vendor patch available.

RCE Buffer Overflow Denial Of Service +2
NVD
CVE-2013-3121
EPSS 31% CVSS 9.3
CRITICAL Emergency

Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 31.1% and no vendor patch available.

RCE Buffer Overflow Denial Of Service +2
NVD
CVE-2013-3120
EPSS 23% 4.1 CVSS 9.3
CRITICAL POC THREAT Emergency

Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 23.2%.

RCE Buffer Overflow Denial Of Service +2
NVD Exploit-DB
CVE-2013-3119
EPSS 31% CVSS 9.3
CRITICAL Emergency

Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 31.1% and no vendor patch available.

RCE Buffer Overflow Denial Of Service +2
NVD
CVE-2013-3118
EPSS 31% CVSS 9.3
CRITICAL Emergency

Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 31.1% and no vendor patch available.

RCE Buffer Overflow Denial Of Service +2
NVD
CVE-2013-3117
EPSS 27% CVSS 9.3
CRITICAL Act Now

Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 27.2% and no vendor patch available.

RCE Buffer Overflow Denial Of Service +2
NVD
CVE-2013-3116
EPSS 27% CVSS 9.3
CRITICAL Act Now

Microsoft Internet Explorer 7 through 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 27.2% and no vendor patch available.

RCE Buffer Overflow Denial Of Service +2
NVD
CVE-2013-3114
EPSS 31% CVSS 9.3
CRITICAL Emergency

Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 31.1% and no vendor patch available.

RCE Buffer Overflow Denial Of Service +2
NVD
CVE-2013-3113
EPSS 31% CVSS 9.3
CRITICAL Emergency

Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 31.1% and no vendor patch available.

RCE Buffer Overflow Denial Of Service +2
NVD
CVE-2013-3112
EPSS 31% CVSS 9.3
CRITICAL Emergency

Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 31.1% and no vendor patch available.

RCE Buffer Overflow Denial Of Service +2
NVD
CVE-2013-3111
EPSS 42% 4.6 CVSS 9.3
CRITICAL POC THREAT Emergency

Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 41.5%.

RCE Buffer Overflow Denial Of Service +2
NVD Exploit-DB
CVE-2013-3110
EPSS 31% CVSS 9.3
CRITICAL Emergency

Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 31.1% and no vendor patch available.

RCE Buffer Overflow Denial Of Service +2
NVD
CVE-2013-1339
EPSS 26% CVSS 9.0
CRITICAL Act Now

The Print Spooler in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly manage memory during deletion of. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 26.4% and no vendor patch available.

RCE Microsoft Windows Server 2008 +5
NVD
CVE-2013-2854
EPSS 1% CVSS 7.5
HIGH This Week

Google Chrome before 27.0.1453.110 on Windows provides an incorrect handle to a renderer process in unspecified circumstances, which allows remote attackers to cause a denial of service or possibly. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Chrome Google +1
NVD
CVE-2013-3661
EPSS 2% CVSS 4.9
MEDIUM POC This Month

The EPATHOBJ::bFlatten function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows. Rated medium severity (CVSS 4.9), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Path Traversal Microsoft +8
NVD Exploit-DB
CVE-2013-0941
EPSS 0% CVSS 2.1
LOW Monitor

EMC RSA Authentication API before 8.1 SP1, RSA Web Agent before 5.3.5 for Apache Web Server, RSA Web Agent before 5.3.5 for IIS, RSA PAM Agent before 7.0, and RSA Agent before 6.1.4 for Microsoft. Rated low severity (CVSS 2.1), this vulnerability is low attack complexity. No vendor patch available.

Apache Information Disclosure Microsoft +5
NVD
CVE-2013-0992
EPSS 18% CVSS 6.8
MEDIUM This Month

WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Epss exploitation probability 18.2% and no vendor patch available.

RCE Buffer Overflow Denial Of Service +4
NVD
CVE-2013-3335
EPSS 4% CVSS 10.0
CRITICAL PATCH Act Now

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service +15
NVD
CVE-2013-3334
EPSS 4% CVSS 10.0
CRITICAL PATCH Act Now

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service +15
NVD
CVE-2013-3333
EPSS 2% CVSS 10.0
CRITICAL PATCH Act Now

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service +15
NVD
CVE-2013-3332
EPSS 2% CVSS 10.0
CRITICAL PATCH Act Now

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service +15
NVD
CVE-2013-3331
EPSS 2% CVSS 10.0
CRITICAL PATCH Act Now

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service +15
NVD
CVE-2013-3330
EPSS 4% CVSS 10.0
CRITICAL PATCH Act Now

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service +15
NVD
CVE-2013-3329
EPSS 4% CVSS 10.0
CRITICAL PATCH Act Now

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service +15
NVD
CVE-2013-3328
EPSS 4% CVSS 10.0
CRITICAL PATCH Act Now

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service +15
NVD
CVE-2013-3327
EPSS 4% CVSS 10.0
CRITICAL PATCH Act Now

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service +15
NVD
CVE-2013-3326
EPSS 4% CVSS 10.0
CRITICAL PATCH Act Now

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service +15
NVD
CVE-2013-3325
EPSS 4% CVSS 10.0
CRITICAL PATCH Act Now

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service +15
NVD
CVE-2013-3324
EPSS 4% CVSS 10.0
CRITICAL PATCH Act Now

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service +15
NVD
CVE-2013-2728
EPSS 4% CVSS 10.0
CRITICAL PATCH Act Now

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service +15
NVD
CVE-2013-1673
EPSS 0% CVSS 6.9
MEDIUM This Month

The Mozilla Updater in Mozilla Firefox before 21.0 on Windows does not properly maintain Mozilla Maintenance Service registry entries in certain situations involving upgrades from older Firefox. Rated medium severity (CVSS 6.9). No vendor patch available.

Privilege Escalation Microsoft Mozilla +1
NVD
CVE-2013-1672
EPSS 0% CVSS 6.9
MEDIUM This Month

The Mozilla Maintenance Service in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 on Windows allows local users to. Rated medium severity (CVSS 6.9). No vendor patch available.

Privilege Escalation Microsoft Mozilla +3
NVD
CVE-2013-1346
EPSS 18% CVSS 9.3
CRITICAL PATCH Act Now

mpengine.dll in Microsoft Malware Protection Engine before 1.1.9506.0 on x64 platforms allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 18.3%.

RCE Buffer Overflow Denial Of Service +2
NVD
CVE-2013-1337
EPSS 23% CVSS 7.5
HIGH Act Now

Microsoft .NET Framework 4.5 does not properly create policy requirements for custom Windows Communication Foundation (WCF) endpoint authentication in certain situations involving passwords over. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 22.8% and no vendor patch available.

Authentication Bypass Microsoft Net Framework
NVD
CVE-2013-1336
EPSS 60% CVSS 5.0
MEDIUM This Month

The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly check signatures, which allows remote attackers to make undetected changes to signed. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 60.2% and no vendor patch available.

Information Disclosure Microsoft Net Framework
NVD
CVE-2013-1335
EPSS 55% CVSS 9.3
CRITICAL Emergency

Microsoft Word 2003 SP3 and Word Viewer allow remote attackers to execute arbitrary code via crafted shape data in a Word document, aka "Word Shape Corruption Vulnerability.". Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 54.9% and no vendor patch available.

RCE Microsoft Code Injection +2
NVD
CVE-2013-1334
EPSS 3% CVSS 7.2
HIGH This Week

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server. Rated high severity (CVSS 7.2), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Microsoft Windows Server 2008 +7
NVD
CVE-2013-1333
EPSS 4% CVSS 7.2
HIGH This Week

Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows 7 SP1 allows local users to gain privileges via a crafted application that leverages improper handling of objects in. Rated high severity (CVSS 7.2), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Microsoft Windows 7
NVD
CVE-2013-1332
EPSS 4% CVSS 7.2
HIGH This Week

dxgkrnl.sys (aka the DirectX graphics kernel subsystem) in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012,. Rated high severity (CVSS 7.2), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Microsoft Windows Server 2008 +5
NVD
CVE-2013-1329
EPSS 59% CVSS 9.3
CRITICAL Emergency

Integer signedness error in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers a buffer underflow, aka "Publisher Buffer. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 58.6% and no vendor patch available.

RCE Microsoft Publisher
NVD
CVE-2013-1328
EPSS 59% CVSS 9.3
CRITICAL Emergency

Microsoft Publisher 2003 SP3, 2007 SP3, and 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers incorrect pointer handling, aka "Publisher Pointer. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 58.6% and no vendor patch available.

RCE Microsoft Publisher
NVD
CVE-2013-1327
EPSS 59% CVSS 9.3
CRITICAL Emergency

Integer signedness error in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers an improper memory allocation, aka "Publisher. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 58.6% and no vendor patch available.

RCE Microsoft Publisher
NVD
CVE-2013-1323
EPSS 55% CVSS 9.3
CRITICAL Emergency

Microsoft Publisher 2003 SP3 does not properly handle NULL values for unspecified data items, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 54.9% and no vendor patch available.

RCE Microsoft Code Injection +1
NVD
CVE-2013-1322
EPSS 61% CVSS 10.0
CRITICAL Emergency

Microsoft Publisher 2003 SP3 does not properly check table range data, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Invalid Range Check. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 61.0% and no vendor patch available.

RCE Microsoft Publisher
NVD
CVE-2013-1321
EPSS 53% CVSS 9.3
CRITICAL Emergency

Microsoft Publisher 2003 SP3 does not properly check the data type of an unspecified return value, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 53.3% and no vendor patch available.

RCE Microsoft Publisher
NVD
Prev Page 224 of 230 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy