# CVEs published 2015-11-11 67 CVEs were published on November 11, 2015: 0 critical, 0 high. Days are UTC. - [CVE-2015-1302](https://cve.now/CVE-2015-1302.md): The PDF viewer in Google Chrome before 46.0.2490.86 does not properly restrict scripting messages and API exposure, which allows remote atta (no CVSS) - [CVE-2015-2427](https://cve.now/CVE-2015-2427.md): Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft (no CVSS) - [CVE-2015-2478](https://cve.now/CVE-2015-2478.md): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Win (no CVSS) - [CVE-2015-2503](https://cve.now/CVE-2015-2503.md): Microsoft Access 2007 SP3, Excel 2007 SP3, InfoPath 2007 SP3, OneNote 2007 SP3, PowerPoint 2007 SP3, Project 2007 SP3, Publisher 2007 SP3, V (no CVSS) - [CVE-2015-6038](https://cve.now/CVE-2015-6038.md): Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Comp (no CVSS) - [CVE-2015-6061](https://cve.now/CVE-2015-6061.md): Cross-site scripting (XSS) vulnerability in Microsoft Skype for Business 2016, Lync 2010 and 2013 SP1, Lync 2010 Attendee, and Lync Room Sys (no CVSS) - [CVE-2015-6064](https://cve.now/CVE-2015-6064.md): Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memo (no CVSS) - [CVE-2015-6065](https://cve.now/CVE-2015-6065.md): Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2015-6066](https://cve.now/CVE-2015-6066.md): Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2015-6068](https://cve.now/CVE-2015-6068.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS) - [CVE-2015-6069](https://cve.now/CVE-2015-6069.md): Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2015-6070](https://cve.now/CVE-2015-6070.md): Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2015-6071](https://cve.now/CVE-2015-6071.md): Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2015-6072](https://cve.now/CVE-2015-6072.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS) - [CVE-2015-6073](https://cve.now/CVE-2015-6073.md): Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corr (no CVSS) - [CVE-2015-6074](https://cve.now/CVE-2015-6074.md): Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2015-6075](https://cve.now/CVE-2015-6075.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS) - [CVE-2015-6076](https://cve.now/CVE-2015-6076.md): Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2015-6077](https://cve.now/CVE-2015-6077.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS) - [CVE-2015-6078](https://cve.now/CVE-2015-6078.md): Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (m (no CVSS) - [CVE-2015-6079](https://cve.now/CVE-2015-6079.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS) - [CVE-2015-6080](https://cve.now/CVE-2015-6080.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS) - [CVE-2015-6081](https://cve.now/CVE-2015-6081.md): Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2015-6082](https://cve.now/CVE-2015-6082.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS) - [CVE-2015-6084](https://cve.now/CVE-2015-6084.md): Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS) - [CVE-2015-6085](https://cve.now/CVE-2015-6085.md): Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS) - [CVE-2015-6086](https://cve.now/CVE-2015-6086.md): Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, (no CVSS) - [CVE-2015-6087](https://cve.now/CVE-2015-6087.md): Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2015-6088](https://cve.now/CVE-2015-6088.md): Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to bypass the ASLR protection mechanism via a crafted web (no CVSS) - [CVE-2015-6089](https://cve.now/CVE-2015-6089.md): The Microsoft (1) VBScript and (2) JScript engines, as used in Internet Explorer 8 through 11, allow remote attackers to execute arbitrary c (no CVSS) - [CVE-2015-6091](https://cve.now/CVE-2015-6091.md): Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, and Word Viewer allow remote attackers (no CVSS) - [CVE-2015-6092](https://cve.now/CVE-2015-6092.md): Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Office Compatibility Pack SP3, and Word (no CVSS) - [CVE-2015-6093](https://cve.now/CVE-2015-6093.md): Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word Automation Services on SharePoint Server (no CVSS) - [CVE-2015-6094](https://cve.now/CVE-2015-6094.md): Microsoft Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, and Excel Services on Share (no CVSS) - [CVE-2015-6095](https://cve.now/CVE-2015-6095.md): Kerberos in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold (no CVSS) - [CVE-2015-6096](https://cve.now/CVE-2015-6096.md): The XML DTD parser in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, and 4.6 allows remote attackers to read arbitrary (no CVSS) - [CVE-2015-6097](https://cve.now/CVE-2015-6097.md): Heap-based buffer overflow in Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows r (no CVSS) - [CVE-2015-6098](https://cve.now/CVE-2015-6098.md): Buffer overflow in the Network Driver Interface Standard (NDIS) implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R (no CVSS) - [CVE-2015-6099](https://cve.now/CVE-2015-6099.md): Cross-site scripting (XSS) vulnerability in ASP.NET in Microsoft .NET Framework 4, 4.5, 4.5.1, 4.5.2, and 4.6 allows remote attackers to inj (no CVSS) - [CVE-2015-6100](https://cve.now/CVE-2015-6100.md): The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Go (no CVSS) - [CVE-2015-6101](https://cve.now/CVE-2015-6101.md): The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Go (no CVSS) - [CVE-2015-6102](https://cve.now/CVE-2015-6102.md): The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Go (no CVSS) - [CVE-2015-6103](https://cve.now/CVE-2015-6103.md): The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Wi (no CVSS) - [CVE-2015-6104](https://cve.now/CVE-2015-6104.md): The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Wi (no CVSS) - [CVE-2015-6109](https://cve.now/CVE-2015-6109.md): The kernel in Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to bypass the K (no CVSS) - [CVE-2015-6111](https://cve.now/CVE-2015-6111.md): IPSec in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandles (no CVSS) - [CVE-2015-6112](https://cve.now/CVE-2015-6112.md): SChannel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold (no CVSS) - [CVE-2015-6113](https://cve.now/CVE-2015-6113.md): The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Go (no CVSS) - [CVE-2015-6115](https://cve.now/CVE-2015-6115.md): Microsoft .NET Framework 2.0 SP2, 3.5, and 3.5.1 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka (no CVSS) - [CVE-2015-6123](https://cve.now/CVE-2015-6123.md): Cross-site scripting (XSS) vulnerability in Microsoft Excel for Mac 2011 and Excel 2016 for Mac allows remote attackers to inject arbitrary (no CVSS) - [CVE-2015-7651](https://cve.now/CVE-2015-7651.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 (no CVSS) - [CVE-2015-7652](https://cve.now/CVE-2015-7652.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 (no CVSS) - [CVE-2015-7653](https://cve.now/CVE-2015-7653.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 (no CVSS) - [CVE-2015-7654](https://cve.now/CVE-2015-7654.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 (no CVSS) - [CVE-2015-7655](https://cve.now/CVE-2015-7655.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 (no CVSS) - [CVE-2015-7656](https://cve.now/CVE-2015-7656.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 (no CVSS) - [CVE-2015-7657](https://cve.now/CVE-2015-7657.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 (no CVSS) - [CVE-2015-7658](https://cve.now/CVE-2015-7658.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 (no CVSS) - [CVE-2015-7659](https://cve.now/CVE-2015-7659.md): Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0. (no CVSS) - [CVE-2015-7660](https://cve.now/CVE-2015-7660.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 (no CVSS) - [CVE-2015-7661](https://cve.now/CVE-2015-7661.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 (no CVSS) - [CVE-2015-7662](https://cve.now/CVE-2015-7662.md): Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0. (no CVSS) - [CVE-2015-7663](https://cve.now/CVE-2015-7663.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 (no CVSS) - [CVE-2015-8042](https://cve.now/CVE-2015-8042.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 (no CVSS) - [CVE-2015-8043](https://cve.now/CVE-2015-8043.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 (no CVSS) - [CVE-2015-8044](https://cve.now/CVE-2015-8044.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 (no CVSS) - [CVE-2015-8046](https://cve.now/CVE-2015-8046.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2015-11-11 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.