# CVEs published 2016-03-09 53 CVEs were published on March 9, 2016: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC. - [CVE-2015-6184](https://cve.now/CVE-2015-6184.md): The CAttrArray object implementation in Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause (no CVSS) - [CVE-2016-0886](https://cve.now/CVE-2016-0886.md): EMC Documentum xCP 2.1 before patch 24 and 2.2 before patch 12 allows remote authenticated users to obtain sensitive user-account metadata v (no CVSS) - [CVE-2016-1285](https://cve.now/CVE-2016-1285.md): named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, (no CVSS) - [CVE-2016-1286](https://cve.now/CVE-2016-1286.md): named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (assertion failure an (no CVSS) - [CVE-2016-2088](https://cve.now/CVE-2016-2088.md): resolver.c in named in ISC BIND 9.10.x before 9.10.3-P4, when DNS cookies are enabled, allows remote attackers to cause a denial of service (no CVSS) - [CVE-2016-1312](https://cve.now/CVE-2016-1312.md): The HTTPS inspection engine in the Content Security and Control Security Services Module (CSC-SSM) 6.6 before 6.6.1164.0 for Cisco ASA 5500 (no CVSS) - [CVE-2016-1325](https://cve.now/CVE-2016-1325.md): The administration interface on Cisco DPC3939B and DPC3941 devices allows remote attackers to obtain sensitive information via a crafted HTT (no CVSS) - [CVE-2016-1326](https://cve.now/CVE-2016-1326.md): The administration interface on Cisco DPQ3925 devices with firmware r1 allows remote attackers to cause a denial of service (device restart) (no CVSS) - [CVE-2016-1327](https://cve.now/CVE-2016-1327.md): Buffer overflow in the web server on Cisco DPC2203 and EPC2203 devices with firmware r1\_customer\_image allows remote attackers to execute ar (no CVSS) - [CVE-2016-2774](https://cve.now/CVE-2016-2774.md): ISC DHCP 4.1.x before 4.1-ESV-R13 and 4.2.x and 4.3.x before 4.3.4 does not restrict the number of concurrent TCP sessions, which allows rem (no CVSS) - [CVE-2016-0021](https://cve.now/CVE-2016-0021.md): Microsoft InfoPath 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Mi (no CVSS) - [CVE-2016-0057](https://cve.now/CVE-2016-0057.md): Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2016 does not properly sign an unspecified binary file, which allows local users to gain (no CVSS) - [CVE-2016-0087](https://cve.now/CVE-2016-0087.md): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 do not properly validate handles, which allows local user (no CVSS) - [CVE-2016-0091](https://cve.now/CVE-2016-0091.md): OLE in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows (no CVSS) - [CVE-2016-0092](https://cve.now/CVE-2016-0092.md): OLE in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows (no CVSS) - [CVE-2016-0093](https://cve.now/CVE-2016-0093.md): The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 G (no CVSS) - [CVE-2016-0094](https://cve.now/CVE-2016-0094.md): The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 G (no CVSS) - [CVE-2016-0095](https://cve.now/CVE-2016-0095.md): The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 G (no CVSS) - [CVE-2016-0096](https://cve.now/CVE-2016-0096.md): The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 G (no CVSS) - [CVE-2016-0098](https://cve.now/CVE-2016-0098.md): Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 allow remo (no CVSS) - [CVE-2016-0099](https://cve.now/CVE-2016-0099.md): The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2 (CVSS 7.8, KEV) - [CVE-2016-0100](https://cve.now/CVE-2016-0100.md): Microsoft Windows Vista SP2 and Server 2008 SP2 mishandle library loading, which allows local users to gain privileges via a crafted applica (no CVSS) - [CVE-2016-0101](https://cve.now/CVE-2016-0101.md): Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1 (no CVSS) - [CVE-2016-0102](https://cve.now/CVE-2016-0102.md): Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corr (no CVSS) - [CVE-2016-0103](https://cve.now/CVE-2016-0103.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS) - [CVE-2016-0104](https://cve.now/CVE-2016-0104.md): Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS) - [CVE-2016-0105](https://cve.now/CVE-2016-0105.md): Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (m (no CVSS) - [CVE-2016-0106](https://cve.now/CVE-2016-0106.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS) - [CVE-2016-0107](https://cve.now/CVE-2016-0107.md): Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2016-0108](https://cve.now/CVE-2016-0108.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS) - [CVE-2016-0109](https://cve.now/CVE-2016-0109.md): Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corr (no CVSS) - [CVE-2016-0110](https://cve.now/CVE-2016-0110.md): Microsoft Internet Explorer 10 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service ( (no CVSS) - [CVE-2016-0111](https://cve.now/CVE-2016-0111.md): Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (m (no CVSS) - [CVE-2016-0112](https://cve.now/CVE-2016-0112.md): Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2016-0113](https://cve.now/CVE-2016-0113.md): Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2016-0114](https://cve.now/CVE-2016-0114.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS) - [CVE-2016-0116](https://cve.now/CVE-2016-0116.md): Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, ak (no CVSS) - [CVE-2016-0117](https://cve.now/CVE-2016-0117.md): The PDF library in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attack (no CVSS) - [CVE-2016-0118](https://cve.now/CVE-2016-0118.md): The PDF library in Microsoft Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted PDF document, aka "Win (no CVSS) - [CVE-2016-0120](https://cve.now/CVE-2016-0120.md): The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Serve (no CVSS) - [CVE-2016-0121](https://cve.now/CVE-2016-0121.md): The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Serve (no CVSS) - [CVE-2016-0123](https://cve.now/CVE-2016-0123.md): Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, ak (no CVSS) - [CVE-2016-0124](https://cve.now/CVE-2016-0124.md): Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, ak (no CVSS) - [CVE-2016-0125](https://cve.now/CVE-2016-0125.md): Microsoft Edge mishandles the Referer policy, which allows remote attackers to obtain sensitive browser-history and request information via (no CVSS) - [CVE-2016-0129](https://cve.now/CVE-2016-0129.md): Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, ak (no CVSS) - [CVE-2016-0130](https://cve.now/CVE-2016-0130.md): Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, ak (no CVSS) - [CVE-2016-0132](https://cve.now/CVE-2016-0132.md): Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 mishandles signature validation for unspecified elements of XML (no CVSS) - [CVE-2016-0133](https://cve.now/CVE-2016-0133.md): The USB Mass Storage Class driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Se (no CVSS) - [CVE-2016-0134](https://cve.now/CVE-2016-0134.md): Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, O (no CVSS) - [CVE-2016-0954](https://cve.now/CVE-2016-0954.md): Adobe Digital Editions before 4.5.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecif (no CVSS) - [CVE-2016-1007](https://cve.now/CVE-2016-1007.md): Adobe Reader and Acrobat before 11.0.15, Acrobat and Acrobat Reader DC Classic before 15.006.30121, and Acrobat and Acrobat Reader DC Contin (no CVSS) - [CVE-2016-1008](https://cve.now/CVE-2016-1008.md): Untrusted search path vulnerability in Adobe Reader and Acrobat before 11.0.15, Acrobat and Acrobat Reader DC Classic before 15.006.30121, a (no CVSS) - [CVE-2016-1009](https://cve.now/CVE-2016-1009.md): Adobe Reader and Acrobat before 11.0.15, Acrobat and Acrobat Reader DC Classic before 15.006.30121, and Acrobat and Acrobat Reader DC Contin (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2016-03-09 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.