# CVEs published 2016-08-09 32 CVEs were published on August 9, 2016: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC. - [CVE-2016-3237](https://cve.now/CVE-2016-3237.md): Kerberos in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Wi (no CVSS) - [CVE-2016-3288](https://cve.now/CVE-2016-3288.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code via a crafted web page, aka "Internet Explorer Memory Corru (no CVSS) - [CVE-2016-3289](https://cve.now/CVE-2016-3289.md): Microsoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, aka "Microsoft Browser Memo (no CVSS) - [CVE-2016-3290](https://cve.now/CVE-2016-3290.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code via a crafted web page, aka "Internet Explorer Memory Corru (no CVSS) - [CVE-2016-3293](https://cve.now/CVE-2016-3293.md): Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, aka "Microsoft Br (no CVSS) - [CVE-2016-3296](https://cve.now/CVE-2016-3296.md): The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engi (no CVSS, Microsoft.ChakraCore) - [CVE-2016-3299](https://cve.now/CVE-2016-3299.md): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1 (no CVSS) - [CVE-2016-3300](https://cve.now/CVE-2016-3300.md): The Netlogon service in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT 8.1 improperly establishes secure communicati (no CVSS) - [CVE-2016-3301](https://cve.now/CVE-2016-3301.md): The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 (no CVSS) - [CVE-2016-3303](https://cve.now/CVE-2016-3303.md): The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007 SP3, Office 2010 SP2 (no CVSS) - [CVE-2016-3304](https://cve.now/CVE-2016-3304.md): The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007 SP3, Office 2010 SP2 (no CVSS) - [CVE-2016-3308](https://cve.now/CVE-2016-3308.md): The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 (no CVSS) - [CVE-2016-3309](https://cve.now/CVE-2016-3309.md): The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 (CVSS 7.8, KEV) - [CVE-2016-3310](https://cve.now/CVE-2016-3310.md): The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 (no CVSS) - [CVE-2016-3311](https://cve.now/CVE-2016-3311.md): The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 (no CVSS) - [CVE-2016-3312](https://cve.now/CVE-2016-3312.md): ActiveSyncProvider in Microsoft Windows 10 Gold and 1511 allows attackers to discover credentials by leveraging failure of Universal Outlook (no CVSS) - [CVE-2016-3313](https://cve.now/CVE-2016-3313.md): Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016, Word 2016 for Mac, and Word Viewer allow remote attackers to execute a (no CVSS) - [CVE-2016-3315](https://cve.now/CVE-2016-3315.md): Microsoft OneNote 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to obtain sensitive information v (no CVSS) - [CVE-2016-3316](https://cve.now/CVE-2016-3316.md): Microsoft Word 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to execute arbitrary code via a crafted file, aka "Micro (no CVSS) - [CVE-2016-3317](https://cve.now/CVE-2016-3317.md): Microsoft Office 2010 SP2, Word 2007 SP3, Word 2010 SP2, Word for Mac 2011, Word 2016 for Mac, and Word Viewer allow remote attackers to exe (no CVSS) - [CVE-2016-3318](https://cve.now/CVE-2016-3318.md): Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allow remote attackers to execute arbitrary code via a crafted file, aka "Gra (no CVSS) - [CVE-2016-3319](https://cve.now/CVE-2016-3319.md): The PDF library in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and 1511, and Microsoft Edge allows remote attack (no CVSS) - [CVE-2016-3320](https://cve.now/CVE-2016-3320.md): Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow attackers to bypass the Secure Bo (no CVSS) - [CVE-2016-3321](https://cve.now/CVE-2016-3321.md): Microsoft Internet Explorer 10 and 11 load different files for attempts to open a file:// URL depending on whether the file exists, which al (no CVSS) - [CVE-2016-3322](https://cve.now/CVE-2016-3322.md): Microsoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, aka "Microsoft Browser Memo (no CVSS) - [CVE-2016-3326](https://cve.now/CVE-2016-3326.md): Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to obtain sensitive information via a crafted web page, aka "Micros (no CVSS) - [CVE-2016-3327](https://cve.now/CVE-2016-3327.md): Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to obtain sensitive information via a crafted web page, aka "Micros (no CVSS) - [CVE-2016-3329](https://cve.now/CVE-2016-3329.md): Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to determine the existence of files via a crafted webpage, aka "Int (no CVSS) - [CVE-2016-4168](https://cve.now/CVE-2016-4168.md): Cross-site scripting (XSS) vulnerability in Adobe Experience Manager 5.6.1, 6.0, and 6.1 allows remote attackers to inject arbitrary web scr (no CVSS) - [CVE-2016-4169](https://cve.now/CVE-2016-4169.md): Adobe Experience Manager 6.0, 6.1, and 6.2 allow attackers to obtain sensitive audit log event information via unspecified vectors. (no CVSS) - [CVE-2016-4170](https://cve.now/CVE-2016-4170.md): Cross-site scripting (XSS) vulnerability in Adobe Experience Manager 5.6.1, 6.0, 6.1, and 6.2 allows remote attackers to inject arbitrary we (no CVSS) - [CVE-2016-4253](https://cve.now/CVE-2016-4253.md): The Backup functionality in Adobe Experience Manager 5.6.1, 6.0, 6.1, and 6.2 allows attackers to obtain sensitive information via unspecifi (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2016-08-09 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.