# CVEs published 2016-01-13 28 CVEs were published on January 13, 2016: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC. - [CVE-2015-8466](https://cve.now/CVE-2015-8466.md): Swift3 before 1.9 allows remote attackers to conduct replay attacks via an Authorization request that lacks a Date header. (no CVSS) - [CVE-2015-8607](https://cve.now/CVE-2015-8607.md): The canonpath function in the File::Spec module in PathTools before 3.62, as used in Perl, does not properly preserve the taint attribute of (no CVSS) - [CVE-2016-1494](https://cve.now/CVE-2016-1494.md): The verify function in the RSA package for Python (Python-RSA) before 3.3 allows attackers to spoof signatures with a small public exponent (no CVSS, rsa) - [CVE-2016-1569](https://cve.now/CVE-2016-1569.md): FireBird 2.5.5 allows remote authenticated users to cause a denial of service (daemon crash) by using service manager to invoke the gbak uti (no CVSS) - [CVE-2015-6117](https://cve.now/CVE-2015-6117.md): Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass intended Access Control P (no CVSS) - [CVE-2016-0002](https://cve.now/CVE-2016-0002.md): The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, al (no CVSS) - [CVE-2016-0003](https://cve.now/CVE-2016-0003.md): Microsoft Edge allows remote attackers to execute arbitrary code via unspecified vectors, aka "Microsoft Edge Memory Corruption Vulnerabilit (no CVSS) - [CVE-2016-0005](https://cve.now/CVE-2016-0005.md): Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Internet Exp (no CVSS) - [CVE-2016-0006](https://cve.now/CVE-2016-0006.md): The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Window (no CVSS) - [CVE-2016-0007](https://cve.now/CVE-2016-0007.md): The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Window (no CVSS) - [CVE-2016-0008](https://cve.now/CVE-2016-0008.md): The graphics device interface in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Win (no CVSS) - [CVE-2016-0009](https://cve.now/CVE-2016-0009.md): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows 10 Gold and 1511 allow remote attackers to execu (no CVSS) - [CVE-2016-0010](https://cve.now/CVE-2016-0010.md): Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Excel for Mac 2011, PowerPoint for Mac 2011, W (no CVSS) - [CVE-2016-0011](https://cve.now/CVE-2016-0011.md): Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass intended Access Control P (no CVSS) - [CVE-2016-0012](https://cve.now/CVE-2016-0012.md): Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2 (no CVSS) - [CVE-2016-0014](https://cve.now/CVE-2016-0014.md): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Win (no CVSS) - [CVE-2016-0015](https://cve.now/CVE-2016-0015.md): DirectShow in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Go (no CVSS) - [CVE-2016-0016](https://cve.now/CVE-2016-0016.md): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Win (no CVSS) - [CVE-2016-0018](https://cve.now/CVE-2016-0018.md): Microsoft Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 R2, and Windows 10 Gold and 1511 mishandle DLL loading, which allows lo (no CVSS) - [CVE-2016-0019](https://cve.now/CVE-2016-0019.md): The Remote Desktop Protocol (RDP) service implementation in Microsoft Windows 10 Gold and 1511 allows remote attackers to bypass intended ac (no CVSS) - [CVE-2016-0020](https://cve.now/CVE-2016-0020.md): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 mishandle DLL loading, which allows local users to gain p (no CVSS) - [CVE-2016-0024](https://cve.now/CVE-2016-0024.md): The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via unspecified vectors, aka "Scripting Eng (no CVSS, Microsoft.ChakraCore) - [CVE-2016-0029](https://cve.now/CVE-2016-0029.md): Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2016 allows remote attackers to inject arb (no CVSS) - [CVE-2016-0030](https://cve.now/CVE-2016-0030.md): Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2013 PS1, 2013 Cumulative Update 10, and 2 (no CVSS) - [CVE-2016-0031](https://cve.now/CVE-2016-0031.md): Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2016 allows remote attackers to inject arb (no CVSS) - [CVE-2016-0032](https://cve.now/CVE-2016-0032.md): Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2013 PS1, 2013 Cumulative Update 10, 2013 (no CVSS) - [CVE-2016-0034](https://cve.now/CVE-2016-0034.md): Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary c (CVSS 8.8, KEV) - [CVE-2016-0035](https://cve.now/CVE-2016-0035.md): Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Comp (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2016-01-13 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.