cve.nowby Sazabi

CVEs published December 9, 2015

58 CVEs were published on December 9, 2015: 0 critical, 1 high. 1 is now in CISA KEV.

Published: 58
Critical: 0
High: 1
Medium: 0
Low: 0
Unrated: 57
Now in CISA KEV: 1
Fix available: 0

High 1

CVE-2015-6175The kernel in Microsoft Windows 10 Gold allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory ElevatioHigh · 7.8KEVDec 9, 2015

Medium, low and unrated 57

CVE-2015-6040Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, and Excel Viewer allow…UnratedDec 9, 2015
CVE-2015-6083Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory…UnratedDec 9, 2015
CVE-2015-6106The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for…UnratedDec 9, 2015
CVE-2015-6107The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1…UnratedDec 9, 2015
CVE-2015-6108The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8; Windows 8.1…UnratedDec 9, 2015
CVE-2015-6114Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka…UnratedDec 9, 2015
CVE-2015-6118Microsoft Office 2007 SP3 and Office 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka…UnratedDec 9, 2015
CVE-2015-6122Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to…UnratedDec 9, 2015
CVE-2015-6124Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, and Office Compatibility Pack SP3 allow remote…UnratedDec 9, 2015
CVE-2015-6125Use-after-free vulnerability in the DNS server in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2 allows remote…UnratedDec 9, 2015
CVE-2015-6126Race condition in the Pragmatic General Multicast (PGM) protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2…UnratedDec 9, 2015
CVE-2015-6127Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1 allows remote attackers to read arbitrary…UnratedDec 9, 2015
CVE-2015-6128Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 mishandle library loading, which allows local users to…UnratedDec 9, 2015
CVE-2015-6130Integer underflow in Uniscribe in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows remote attackers to execute arbitrary code…UnratedDec 9, 2015
CVE-2015-6131Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1 allows remote attackers to execute…UnratedDec 9, 2015
CVE-2015-6132Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2…UnratedDec 9, 2015
CVE-2015-6133Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandle library…UnratedDec 9, 2015
CVE-2015-6134Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…UnratedDec 9, 2015
CVE-2015-6135The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products…UnratedDec 9, 2015
CVE-2015-6136The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products…UnratedDec 9, 2015
CVE-2015-6138Microsoft Internet Explorer 8 through 11 mishandles HTML attributes in HTTP responses, which allows remote attackers to bypass a…UnratedDec 9, 2015
CVE-2015-6139Microsoft Internet Explorer 11 and Microsoft Edge mishandle content types, which allows remote attackers to execute arbitrary web script…UnratedDec 9, 2015
CVE-2015-6140Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory…UnratedDec 9, 2015
CVE-2015-6141Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…UnratedDec 9, 2015
CVE-2015-6142Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory…UnratedDec 9, 2015

Show all 57 entriesShow fewer entries