# CVEs published 2015-10-14

109 CVEs were published on October 14, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-5569](https://cve.now/CVE-2015-5569.md): Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0. (no CVSS)
- [CVE-2015-5583](https://cve.now/CVE-2015-5583.md): Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrob (no CVSS)
- [CVE-2015-5586](https://cve.now/CVE-2015-5586.md): Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic (no CVSS)
- [CVE-2015-6683](https://cve.now/CVE-2015-6683.md): Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic (no CVSS)
- [CVE-2015-6684](https://cve.now/CVE-2015-6684.md): Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic (no CVSS)
- [CVE-2015-6685](https://cve.now/CVE-2015-6685.md): Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrob (no CVSS)
- [CVE-2015-6686](https://cve.now/CVE-2015-6686.md): Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrob (no CVSS)
- [CVE-2015-6687](https://cve.now/CVE-2015-6687.md): Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic (no CVSS)
- [CVE-2015-6688](https://cve.now/CVE-2015-6688.md): Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic (no CVSS)
- [CVE-2015-6689](https://cve.now/CVE-2015-6689.md): Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic (no CVSS)
- [CVE-2015-6690](https://cve.now/CVE-2015-6690.md): Use-after-free vulnerability in the popUpMenuEx method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and (no CVSS)
- [CVE-2015-6691](https://cve.now/CVE-2015-6691.md): Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic (no CVSS)
- [CVE-2015-6692](https://cve.now/CVE-2015-6692.md): Buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.0 (no CVSS)
- [CVE-2015-6693](https://cve.now/CVE-2015-6693.md): The signatureSetSeedValue method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Clas (no CVSS)
- [CVE-2015-6694](https://cve.now/CVE-2015-6694.md): Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrob (no CVSS)
- [CVE-2015-6695](https://cve.now/CVE-2015-6695.md): Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrob (no CVSS)
- [CVE-2015-6696](https://cve.now/CVE-2015-6696.md): Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic be (no CVSS)
- [CVE-2015-6697](https://cve.now/CVE-2015-6697.md): Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrob (no CVSS)
- [CVE-2015-6698](https://cve.now/CVE-2015-6698.md): Heap-based buffer overflow in the AcroForm implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat a (no CVSS)
- [CVE-2015-6699](https://cve.now/CVE-2015-6699.md): The addForegroundSprite function in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Clas (no CVSS)
- [CVE-2015-6700](https://cve.now/CVE-2015-6700.md): The setBackground function in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic be (no CVSS)
- [CVE-2015-6701](https://cve.now/CVE-2015-6701.md): The ambientIlluminationColor property implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Ac (no CVSS)
- [CVE-2015-6702](https://cve.now/CVE-2015-6702.md): The createSquareMesh function in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic (no CVSS)
- [CVE-2015-6703](https://cve.now/CVE-2015-6703.md): The loadFlashMovie function in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic b (no CVSS)
- [CVE-2015-6704](https://cve.now/CVE-2015-6704.md): The animations property implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader D (no CVSS)
- [CVE-2015-6705](https://cve.now/CVE-2015-6705.md): Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrob (no CVSS)
- [CVE-2015-6706](https://cve.now/CVE-2015-6706.md): Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrob (no CVSS)
- [CVE-2015-6707](https://cve.now/CVE-2015-6707.md): The ANSendForReview method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic be (no CVSS)
- [CVE-2015-6708](https://cve.now/CVE-2015-6708.md): The ANStartApproval method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic be (no CVSS)
- [CVE-2015-6709](https://cve.now/CVE-2015-6709.md): The CBBBRInvite method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before (no CVSS)
- [CVE-2015-6710](https://cve.now/CVE-2015-6710.md): The CBBBRInit method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2 (no CVSS)
- [CVE-2015-6711](https://cve.now/CVE-2015-6711.md): The DoIdentityDialog method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic b (no CVSS)
- [CVE-2015-6712](https://cve.now/CVE-2015-6712.md): The ANSendApprovalToAuthorEnabled method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader (no CVSS)
- [CVE-2015-6713](https://cve.now/CVE-2015-6713.md): The Function call implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Clas (no CVSS)
- [CVE-2015-6714](https://cve.now/CVE-2015-6714.md): The Function bind implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Clas (no CVSS)
- [CVE-2015-6715](https://cve.now/CVE-2015-6715.md): The Function apply implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Cla (no CVSS)
- [CVE-2015-6716](https://cve.now/CVE-2015-6716.md): The ANSendForFormDistribution method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC (no CVSS)
- [CVE-2015-6717](https://cve.now/CVE-2015-6717.md): The DynamicAnnotStore method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic (no CVSS)
- [CVE-2015-6718](https://cve.now/CVE-2015-6718.md): The CBSharedReviewIfOfflineDialog method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader (no CVSS)
- [CVE-2015-6719](https://cve.now/CVE-2015-6719.md): The CBSharedReviewCloseDialog method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC (no CVSS)
- [CVE-2015-6720](https://cve.now/CVE-2015-6720.md): The ANRunSharedReviewEmailStep method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC (no CVSS)
- [CVE-2015-6721](https://cve.now/CVE-2015-6721.md): The CBSharedReviewSecurityDialog method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader (no CVSS)
- [CVE-2015-6722](https://cve.now/CVE-2015-6722.md): The CBSharedReviewStatusDialog method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC (no CVSS)
- [CVE-2015-6723](https://cve.now/CVE-2015-6723.md): The ANTrustPropagateAll method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classi (no CVSS)
- [CVE-2015-6724](https://cve.now/CVE-2015-6724.md): The ANSendForApproval method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic (no CVSS)
- [CVE-2015-6725](https://cve.now/CVE-2015-6725.md): The ANSendForSharedReview method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Clas (no CVSS)
- [CVE-2015-7614](https://cve.now/CVE-2015-7614.md): Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrob (no CVSS)
- [CVE-2015-7615](https://cve.now/CVE-2015-7615.md): Use-after-free vulnerability in a SaveAs feature in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acroba (no CVSS)
- [CVE-2015-7616](https://cve.now/CVE-2015-7616.md): The ANVerifyComments method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic b (no CVSS)
- [CVE-2015-7617](https://cve.now/CVE-2015-7617.md): Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic (no CVSS)
- [CVE-2015-7618](https://cve.now/CVE-2015-7618.md): The CBAutoConfigCommentRepository method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader (no CVSS)
- [CVE-2015-7619](https://cve.now/CVE-2015-7619.md): The ANShareFile2 method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic befor (no CVSS)
- [CVE-2015-7620](https://cve.now/CVE-2015-7620.md): The ANSendForBrowserReview method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Cla (no CVSS)
- [CVE-2015-7621](https://cve.now/CVE-2015-7621.md): Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic (no CVSS)
- [CVE-2015-7622](https://cve.now/CVE-2015-7622.md): Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrob (no CVSS)
- [CVE-2015-7623](https://cve.now/CVE-2015-7623.md): The ANAuthenticateResource method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Cla (no CVSS)
- [CVE-2015-7624](https://cve.now/CVE-2015-7624.md): Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrob (no CVSS)
- [CVE-2015-7625](https://cve.now/CVE-2015-7625.md): Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0. (no CVSS)
- [CVE-2015-7626](https://cve.now/CVE-2015-7626.md): Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0. (no CVSS)
- [CVE-2015-7627](https://cve.now/CVE-2015-7627.md): Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0. (no CVSS)
- [CVE-2015-7628](https://cve.now/CVE-2015-7628.md): Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0. (no CVSS)
- [CVE-2015-7629](https://cve.now/CVE-2015-7629.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 (no CVSS)
- [CVE-2015-7630](https://cve.now/CVE-2015-7630.md): Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0. (no CVSS)
- [CVE-2015-7631](https://cve.now/CVE-2015-7631.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 (no CVSS)
- [CVE-2015-7632](https://cve.now/CVE-2015-7632.md): Buffer overflow in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Ado (no CVSS)
- [CVE-2015-7633](https://cve.now/CVE-2015-7633.md): Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0. (no CVSS)
- [CVE-2015-7634](https://cve.now/CVE-2015-7634.md): Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0. (no CVSS)
- [CVE-2015-7643](https://cve.now/CVE-2015-7643.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 (no CVSS)
- [CVE-2015-7644](https://cve.now/CVE-2015-7644.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 (no CVSS)
- [CVE-2015-7829](https://cve.now/CVE-2015-7829.md): Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrob (no CVSS)
- [CVE-2015-7364](https://cve.now/CVE-2015-7364.md): The HTML\_Quickform library, as used in Revive Adserver before 3.2.2, allows remote attackers to bypass the CSRF protection mechanism via an (no CVSS)
- [CVE-2015-7365](https://cve.now/CVE-2015-7365.md): Cross-site scripting (XSS) vulnerability in the plugin upgrade form in Revive Adserver before 3.2.2 allows remote attackers to inject arbitr (no CVSS)
- [CVE-2015-7366](https://cve.now/CVE-2015-7366.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Revive Adserver before 3.2.2 allow remote attackers to hijack the authenticati (no CVSS)
- [CVE-2015-7367](https://cve.now/CVE-2015-7367.md): Revive Adserver before 3.2.2 allows remote attackers to perform unspecified actions by leveraging an unexpired session after the user has be (no CVSS)
- [CVE-2015-7368](https://cve.now/CVE-2015-7368.md): Revive Adserver before 3.2.2 does not send the appropriate Cache-Control HTTP headers in responses for admin UI pages, which allows local us (no CVSS)
- [CVE-2015-7369](https://cve.now/CVE-2015-7369.md): The default Flash cross-domain policy (crossdomain.xml) in Revive Adserver before 3.2.2 does not restrict access cross domain access, which (no CVSS)
- [CVE-2015-7370](https://cve.now/CVE-2015-7370.md): Multiple cross-site scripting (XSS) vulnerabilities in open-flash-chart.swf in Open Flash Chart 2, as used in the VideoAds plugin in Revive (no CVSS)
- [CVE-2015-7371](https://cve.now/CVE-2015-7371.md): Revive Adserver before 3.2.2 does not restrict access to run-mpe.php, which allows remote attackers to run the Maintenance Priority Engine a (no CVSS)
- [CVE-2015-7372](https://cve.now/CVE-2015-7372.md): Directory traversal vulnerability in delivery-dev/al.php in Revive Adserver before 3.2.2 allows remote attackers to include and execute arbi (no CVSS)
- [CVE-2015-7373](https://cve.now/CVE-2015-7373.md): Cross-site scripting (XSS) vulnerability in the "magic-macros" feature in Revive Adserver before 3.2.2 allows remote attackers to inject arb (no CVSS)
- [CVE-2015-2482](https://cve.now/CVE-2015-2482.md): The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, al (no CVSS)
- [CVE-2015-2515](https://cve.now/CVE-2015-2515.md): Use-after-free vulnerability in Windows Shell in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, (no CVSS)
- [CVE-2015-2548](https://cve.now/CVE-2015-2548.md): Use-after-free vulnerability in the Tablet Input Band in Windows Shell in Microsoft Windows Vista SP2 and Windows 7 SP1 allows remote attack (no CVSS)
- [CVE-2015-2549](https://cve.now/CVE-2015-2549.md): The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Go (no CVSS)
- [CVE-2015-2550](https://cve.now/CVE-2015-2550.md): The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Go (no CVSS)
- [CVE-2015-2552](https://cve.now/CVE-2015-2552.md): The kernel in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows physically p (no CVSS)
- [CVE-2015-2553](https://cve.now/CVE-2015-2553.md): The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Go (no CVSS)
- [CVE-2015-2554](https://cve.now/CVE-2015-2554.md): The kernel in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows local users (no CVSS)
- [CVE-2015-2555](https://cve.now/CVE-2015-2555.md): Use-after-free vulnerability in Microsoft Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for (no CVSS)
- [CVE-2015-2556](https://cve.now/CVE-2015-2556.md): The InfoPath Forms Services component in Microsoft SharePoint Server 2007 SP3 and 2010 SP2 misparses DTDs, which allows remote attackers to (no CVSS)
- [CVE-2015-2557](https://cve.now/CVE-2015-2557.md): Buffer overflow in Microsoft Visio 2007 SP3 and 2010 SP2 allows remote attackers to execute arbitrary code via crafted UML data in an Office (no CVSS)
- [CVE-2015-2558](https://cve.now/CVE-2015-2558.md): Use-after-free vulnerability in Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, (no CVSS)
- [CVE-2015-6037](https://cve.now/CVE-2015-6037.md): Cross-site scripting (XSS) vulnerability in Microsoft Excel Services on SharePoint Server 2010 SP2 and 2013 SP1, Office Web Apps 2010 SP2, E (no CVSS)
- [CVE-2015-6039](https://cve.now/CVE-2015-6039.md): Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allows remote authentica (no CVSS)
- [CVE-2015-6042](https://cve.now/CVE-2015-6042.md): Use-after-free vulnerability in the CWindow object implementation in Microsoft Internet Explorer 11 allows remote attackers to execute arbit (no CVSS)
- [CVE-2015-6044](https://cve.now/CVE-2015-6044.md): Microsoft Internet Explorer 8 allows remote attackers to gain privileges via a crafted web site, as demonstrated by a transition from Low In (no CVSS)
- [CVE-2015-6046](https://cve.now/CVE-2015-6046.md): Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, (no CVSS)
- [CVE-2015-6047](https://cve.now/CVE-2015-6047.md): The broker EditWith feature in Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the AppContainer protection mechan (no CVSS)
- [CVE-2015-6048](https://cve.now/CVE-2015-6048.md): Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2015-6049](https://cve.now/CVE-2015-6049.md): Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2015-6050](https://cve.now/CVE-2015-6050.md): Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS)
- [CVE-2015-6051](https://cve.now/CVE-2015-6051.md): Microsoft Internet Explorer 10 and 11 allows remote attackers to gain privileges via a crafted web site, as demonstrated by a transition fro (no CVSS)
- [CVE-2015-6052](https://cve.now/CVE-2015-6052.md): The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, al (no CVSS)
- [CVE-2015-6053](https://cve.now/CVE-2015-6053.md): Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information from process memory via crafted parameters in an Arra (no CVSS)
- [CVE-2015-6055](https://cve.now/CVE-2015-6055.md): The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, al (no CVSS)
- [CVE-2015-6056](https://cve.now/CVE-2015-6056.md): The (1) JScript and (2) VBScript engines in Microsoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or cau (no CVSS)
- [CVE-2015-6057](https://cve.now/CVE-2015-6057.md): Microsoft Edge allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Microsoft Edge Infor (no CVSS)
- [CVE-2015-6058](https://cve.now/CVE-2015-6058.md): Microsoft Edge mishandles HTML attributes in HTTP responses, which allows remote attackers to bypass a cross-site scripting (XSS) protection (no CVSS)
- [CVE-2015-6059](https://cve.now/CVE-2015-6059.md): The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, al (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-10-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.
