# CVEs published 2015-05-13

95 CVEs were published on May 13, 2015: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2015-3456](https://cve.now/CVE-2015-3456.md): The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a denial of service (o (no CVSS)
- [CVE-2014-9160](https://cve.now/CVE-2014-9160.md): Multiple heap-based buffer overflows in Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attac (no CVSS)
- [CVE-2015-1658](https://cve.now/CVE-2015-1658.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS)
- [CVE-2015-1670](https://cve.now/CVE-2015-1670.md): The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2, allows remote attackers (no CVSS)
- [CVE-2015-1671](https://cve.now/CVE-2015-1671.md): The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 (CVSS 7.8, KEV)
- [CVE-2015-1672](https://cve.now/CVE-2015-1672.md): Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 allows remote attackers to cause a denial of service (recursion and p (no CVSS)
- [CVE-2015-1673](https://cve.now/CVE-2015-1673.md): The Windows Forms (aka WinForms) libraries in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 allow user-ass (no CVSS)
- [CVE-2015-1674](https://cve.now/CVE-2015-1674.md): The kernel in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly validate an u (no CVSS)
- [CVE-2015-1675](https://cve.now/CVE-2015-1675.md): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and (no CVSS)
- [CVE-2015-1676](https://cve.now/CVE-2015-1676.md): The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows (no CVSS)
- [CVE-2015-1677](https://cve.now/CVE-2015-1677.md): The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows (no CVSS)
- [CVE-2015-1678](https://cve.now/CVE-2015-1678.md): The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows (no CVSS)
- [CVE-2015-1679](https://cve.now/CVE-2015-1679.md): The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows (no CVSS)
- [CVE-2015-1680](https://cve.now/CVE-2015-1680.md): The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows (no CVSS)
- [CVE-2015-1681](https://cve.now/CVE-2015-1681.md): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and (no CVSS)
- [CVE-2015-1682](https://cve.now/CVE-2015-1682.md): Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Office 2013 SP1, Excel 2013 SP1, PowerPoint 2013 SP1, Word 20 (no CVSS)
- [CVE-2015-1683](https://cve.now/CVE-2015-1683.md): Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption (no CVSS)
- [CVE-2015-1684](https://cve.now/CVE-2015-1684.md): VBScript.dll in the Microsoft VBScript 5.6 through 5.8 engine, as used in Internet Explorer 8 through 11 and other products, allows remote a (no CVSS)
- [CVE-2015-1685](https://cve.now/CVE-2015-1685.md): Microsoft Internet Explorer 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explore (no CVSS)
- [CVE-2015-1686](https://cve.now/CVE-2015-1686.md): The Microsoft (1) VBScript 5.6 through 5.8 and (2) JScript 5.6 through 5.8 engines, as used in Internet Explorer 8 through 11 and other prod (no CVSS)
- [CVE-2015-1688](https://cve.now/CVE-2015-1688.md): Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation (no CVSS)
- [CVE-2015-1689](https://cve.now/CVE-2015-1689.md): Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2015-1691](https://cve.now/CVE-2015-1691.md): Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a (no CVSS)
- [CVE-2015-1692](https://cve.now/CVE-2015-1692.md): Microsoft Internet Explorer 7 through 11 allows user-assisted remote attackers to read the clipboard contents via crafted web script, aka "I (no CVSS)
- [CVE-2015-1694](https://cve.now/CVE-2015-1694.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2015-1695](https://cve.now/CVE-2015-1695.md): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and (no CVSS)
- [CVE-2015-1696](https://cve.now/CVE-2015-1696.md): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and (no CVSS)
- [CVE-2015-1697](https://cve.now/CVE-2015-1697.md): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and (no CVSS)
- [CVE-2015-1698](https://cve.now/CVE-2015-1698.md): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and (no CVSS)
- [CVE-2015-1699](https://cve.now/CVE-2015-1699.md): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and (no CVSS)
- [CVE-2015-1700](https://cve.now/CVE-2015-1700.md): Microsoft SharePoint Server 2007 SP3, SharePoint Foundation 2010 SP2, SharePoint Server 2010 SP2, and SharePoint Foundation 2013 SP1 allow r (no CVSS)
- [CVE-2015-1702](https://cve.now/CVE-2015-1702.md): The Service Control Manager (SCM) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1 (no CVSS)
- [CVE-2015-1703](https://cve.now/CVE-2015-1703.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation (no CVSS)
- [CVE-2015-1704](https://cve.now/CVE-2015-1704.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation (no CVSS)
- [CVE-2015-1705](https://cve.now/CVE-2015-1705.md): Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2015-1706](https://cve.now/CVE-2015-1706.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS)
- [CVE-2015-1708](https://cve.now/CVE-2015-1708.md): Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a (no CVSS)
- [CVE-2015-1709](https://cve.now/CVE-2015-1709.md): Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2015-1710](https://cve.now/CVE-2015-1710.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2015-1711](https://cve.now/CVE-2015-1711.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS)
- [CVE-2015-1712](https://cve.now/CVE-2015-1712.md): Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a (no CVSS)
- [CVE-2015-1713](https://cve.now/CVE-2015-1713.md): Microsoft Internet Explorer 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privil (no CVSS)
- [CVE-2015-1714](https://cve.now/CVE-2015-1714.md): Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS)
- [CVE-2015-1715](https://cve.now/CVE-2015-1715.md): Microsoft Silverlight 5 before 5.1.40416.00 allows remote attackers to bypass intended integrity-level restrictions via a crafted Silverligh (no CVSS)
- [CVE-2015-1716](https://cve.now/CVE-2015-1716.md): Schannel in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, (no CVSS)
- [CVE-2015-1717](https://cve.now/CVE-2015-1717.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS)
- [CVE-2015-1718](https://cve.now/CVE-2015-1718.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS)
- [CVE-2015-3046](https://cve.now/CVE-2015-3046.md): Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause (no CVSS)
- [CVE-2015-3047](https://cve.now/CVE-2015-3047.md): Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to cause a denial of service (NULL (no CVSS)
- [CVE-2015-3048](https://cve.now/CVE-2015-3048.md): Buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allows attackers to execute arbi (no CVSS)
- [CVE-2015-3049](https://cve.now/CVE-2015-3049.md): Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause (no CVSS)
- [CVE-2015-3050](https://cve.now/CVE-2015-3050.md): Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause (no CVSS)
- [CVE-2015-3051](https://cve.now/CVE-2015-3051.md): Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause (no CVSS)
- [CVE-2015-3052](https://cve.now/CVE-2015-3052.md): Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause (no CVSS)
- [CVE-2015-3053](https://cve.now/CVE-2015-3053.md): Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allows attackers to (no CVSS)
- [CVE-2015-3054](https://cve.now/CVE-2015-3054.md): Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allows attackers to (no CVSS)
- [CVE-2015-3055](https://cve.now/CVE-2015-3055.md): Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allows attackers to (no CVSS)
- [CVE-2015-3056](https://cve.now/CVE-2015-3056.md): Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause (no CVSS)
- [CVE-2015-3057](https://cve.now/CVE-2015-3057.md): Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause (no CVSS)
- [CVE-2015-3058](https://cve.now/CVE-2015-3058.md): Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to obtain sensitive information fro (no CVSS)
- [CVE-2015-3059](https://cve.now/CVE-2015-3059.md): Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allows attackers to (no CVSS)
- [CVE-2015-3060](https://cve.now/CVE-2015-3060.md): Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on (no CVSS)
- [CVE-2015-3061](https://cve.now/CVE-2015-3061.md): Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on (no CVSS)
- [CVE-2015-3062](https://cve.now/CVE-2015-3062.md): Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on (no CVSS)
- [CVE-2015-3063](https://cve.now/CVE-2015-3063.md): Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on (no CVSS)
- [CVE-2015-3064](https://cve.now/CVE-2015-3064.md): Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on (no CVSS)
- [CVE-2015-3065](https://cve.now/CVE-2015-3065.md): Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on (no CVSS)
- [CVE-2015-3066](https://cve.now/CVE-2015-3066.md): Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on (no CVSS)
- [CVE-2015-3067](https://cve.now/CVE-2015-3067.md): Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on (no CVSS)
- [CVE-2015-3068](https://cve.now/CVE-2015-3068.md): Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on (no CVSS)
- [CVE-2015-3069](https://cve.now/CVE-2015-3069.md): Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on (no CVSS)
- [CVE-2015-3070](https://cve.now/CVE-2015-3070.md): Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause (no CVSS)
- [CVE-2015-3071](https://cve.now/CVE-2015-3071.md): Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on (no CVSS)
- [CVE-2015-3072](https://cve.now/CVE-2015-3072.md): Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on (no CVSS)
- [CVE-2015-3073](https://cve.now/CVE-2015-3073.md): Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on (no CVSS)
- [CVE-2015-3074](https://cve.now/CVE-2015-3074.md): Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on (no CVSS)
- [CVE-2015-3075](https://cve.now/CVE-2015-3075.md): Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allows attackers to (no CVSS)
- [CVE-2015-3076](https://cve.now/CVE-2015-3076.md): Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause (no CVSS)
- [CVE-2015-3077](https://cve.now/CVE-2015-3077.md): Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR (no CVSS)
- [CVE-2015-3078](https://cve.now/CVE-2015-3078.md): Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR (no CVSS)
- [CVE-2015-3079](https://cve.now/CVE-2015-3079.md): Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR (no CVSS)
- [CVE-2015-3080](https://cve.now/CVE-2015-3080.md): Use-after-free vulnerability in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before (no CVSS)
- [CVE-2015-3081](https://cve.now/CVE-2015-3081.md): Race condition in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 o (no CVSS)
- [CVE-2015-3082](https://cve.now/CVE-2015-3082.md): Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR (no CVSS)
- [CVE-2015-3083](https://cve.now/CVE-2015-3083.md): Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR (no CVSS)
- [CVE-2015-3084](https://cve.now/CVE-2015-3084.md): Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR (no CVSS)
- [CVE-2015-3085](https://cve.now/CVE-2015-3085.md): Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR (no CVSS)
- [CVE-2015-3086](https://cve.now/CVE-2015-3086.md): Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR (no CVSS)
- [CVE-2015-3087](https://cve.now/CVE-2015-3087.md): Integer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 (no CVSS)
- [CVE-2015-3088](https://cve.now/CVE-2015-3088.md): Heap-based buffer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11 (no CVSS)
- [CVE-2015-3089](https://cve.now/CVE-2015-3089.md): Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR (no CVSS)
- [CVE-2015-3090](https://cve.now/CVE-2015-3090.md): Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR (no CVSS)
- [CVE-2015-3091](https://cve.now/CVE-2015-3091.md): Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR (no CVSS)
- [CVE-2015-3092](https://cve.now/CVE-2015-3092.md): Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR (no CVSS)
- [CVE-2015-3093](https://cve.now/CVE-2015-3093.md): Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-05-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.