Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: September 2016

68 records · 2 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2016-4264
    55Plan

    The Office Open XML (OOXML) feature in Adobe ColdFusion 10 before Update 21 and 11 before Update 10 allows remote attackers to read arbitrar

    HighCVSS 8.6Proof of conceptEPSS 69%

    adobe · coldfusionSep 1, 2016

  • CVE-2016-6483
    38Monitor

    The media-file upload feature in vBulletin before 3.8.7 Patch Level 6, 3.8.8 before Patch Level 2, 3.8.9 before Patch Level 1, 4.x before 4.

    HighCVSS 8.6Proof of conceptEPSS 11%

    vbulletin · vbulletinSep 1, 2016

  • CVE-2016-0772
    30Monitor

    The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS f

    MediumCVSS 6.5Proof of conceptEPSS 14%

    python · pythonSep 2, 2016

  • CVE-2016-5636
    47Plan

    Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 all

    CriticalCVSS 9.8Proof of conceptEPSS 25%

    python · pythonSep 2, 2016

  • CVE-2016-7152
    25Monitor

    The HTTPS protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it eas

    MediumCVSS 5.3No exploitEPSS 12%

    opera · operaSep 6, 2016

  • CVE-2016-7153
    25Monitor

    The HTTP/2 protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it ea

    MediumCVSS 5.3No exploitEPSS 12%

    microsoft · edgeSep 6, 2016

  • CVE-2016-6855
    36Monitor

    Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib before 2.44.1, allow remo

    HighCVSS 7.5Proof of conceptEPSS 18%

    gnome · eye of gnomeSep 7, 2016

  • CVE-2016-7124
    44Plan

    ext/standard/var_unserializer.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles certain invalid objects, which allows remote attackers

    CriticalCVSS 9.8No exploitEPSS 16%

    php · phpSep 11, 2016

  • CVE-2016-0138
    21Monitor

    Microsoft Exchange Server 2007 SP3, 2010 SP3, 2013 SP1, 2013 Cumulative Update 12, 2013 Cumulative Update 13, 2016 Cumulative Update 1, and

    MediumCVSS 4.3No exploitEPSS 13%

    microsoft · exchange serverSep 14, 2016

  • CVE-2016-3247
    51Plan

    Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corr

    HighCVSS 7.5Proof of conceptEPSS 71%

    microsoft · edgeSep 14, 2016

  • CVE-2016-3291
    13Monitor

    Microsoft Internet Explorer 11 and Microsoft Edge mishandle cross-origin requests, which allows remote attackers to obtain sensitive informa

    LowCVSS 2.4No exploitEPSS 13%

    microsoft · edgeSep 14, 2016

  • CVE-2016-3294
    34Monitor

    Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, ak

    HighCVSS 7.5No exploitEPSS 14%

    microsoft · edgeSep 14, 2016

  • CVE-2016-3295
    34Monitor

    Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memo

    HighCVSS 7.5No exploitEPSS 14%

    microsoft · edgeSep 14, 2016

  • CVE-2016-3297
    42Plan

    Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (m

    HighCVSS 8.8No exploitEPSS 22%

    microsoft · edgeSep 14, 2016

  • CVE-2016-3324
    44Plan

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    HighCVSS 8.8Proof of conceptEPSS 28%

    microsoft · internet explorerSep 14, 2016

  • CVE-2016-3325
    28Monitor

    Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Micros

    LowCVSS 3.1Proof of conceptEPSS 53%

    microsoft · edgeSep 14, 2016

  • CVE-2016-3330
    34Monitor

    Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, ak

    HighCVSS 7.5No exploitEPSS 13%

    microsoft · edgeSep 14, 2016

  • CVE-2016-3345
    45Plan

    The SMBv1 server in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold an

    HighCVSS 8.8No exploitEPSS 32%

    microsoft · windows 10Sep 14, 2016

  • CVE-2016-3348
    35Monitor

    The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012

    HighCVSS 7.8No exploitEPSS 12%

    microsoft · windows 10Sep 14, 2016

  • CVE-2016-3350
    35Monitor

    The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corrup

    HighCVSS 7.5No exploitEPSS 15%

    microsoft · edgeSep 14, 2016

  • CVE-2016-3351
    64This week

    Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, a

    MediumCVSS 6.5KEVWeaponizedEPSS 26%

    microsoft · internet explorerSep 14, 2016

  • CVE-2016-3352
    41Plan

    Microsoft Windows 8.1, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 do not properly check NTLM SSO requests for MSA logins, which mak

    HighCVSS 8.8No exploitEPSS 20%

    microsoft · windows 10Sep 14, 2016

  • CVE-2016-3353
    37Monitor

    Microsoft Internet Explorer 9 through 11 mishandles .url files from the Internet zone, which allows remote attackers to bypass intended acce

    HighCVSS 8.3No exploitEPSS 11%

    microsoft · internet explorerSep 14, 2016

  • CVE-2016-3354
    17Monitor

    The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows

    LowCVSS 3.3No exploitEPSS 14%

    microsoft · windows 10Sep 14, 2016

  • CVE-2016-3356
    37Monitor

    The Graphics Device Interface (GDI) in Microsoft Windows 10 1607 allows remote attackers to execute arbitrary code via a crafted document, a

    HighCVSS 7.8No exploitEPSS 19%

    microsoft · windows 10Sep 14, 2016

  • CVE-2016-3358
    37Monitor

    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel 2016 for Mac, Office Compatibility Pack SP3,

    HighCVSS 7.8No exploitEPSS 18%

    microsoft · excelSep 14, 2016

  • CVE-2016-3359
    36Monitor

    Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code v

    HighCVSS 7.8No exploitEPSS 17%

    microsoft · excelSep 14, 2016

  • CVE-2016-3360
    36Monitor

    Microsoft PowerPoint 2007 SP3, PowerPoint 2010 SP2, PowerPoint 2013 SP1, PowerPoint 2013 RT SP1, PowerPoint 2016 for Mac, Office Compatibili

    HighCVSS 7.8No exploitEPSS 17%

    microsoft · office compatibility packSep 14, 2016

  • CVE-2016-3361
    36Monitor

    Microsoft Excel 2010 SP2 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption V

    HighCVSS 7.8No exploitEPSS 17%

    microsoft · excelSep 14, 2016

  • CVE-2016-3362
    36Monitor

    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, Excel

    HighCVSS 7.8No exploitEPSS 17%

    microsoft · excelSep 14, 2016

  • CVE-2016-3363
    37Monitor

    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer all

    HighCVSS 7.8No exploitEPSS 20%

    microsoft · excelSep 14, 2016

  • CVE-2016-3364
    37Monitor

    Microsoft Visio 2016 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulne

    HighCVSS 7.8No exploitEPSS 18%

    microsoft · visioSep 14, 2016

  • CVE-2016-3365
    37Monitor

    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, Excel

    HighCVSS 7.8No exploitEPSS 19%

    microsoft · excelSep 14, 2016

  • CVE-2016-3366
    31Monitor

    Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, Outlook 2016, and Outlook 2016 for Mac do not properly

    MediumCVSS 6.5No exploitEPSS 16%

    microsoft · outlookSep 14, 2016

  • CVE-2016-3367
    40Plan

    StringBuilder in Microsoft Silverlight 5 before 5.1.50709.0 does not properly allocate memory for string-insert and string-append operations

    HighCVSS 8.8No exploitEPSS 17%

    microsoft · silverlightSep 14, 2016

  • CVE-2016-3368
    40Plan

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1

    HighCVSS 8.8No exploitEPSS 18%

    microsoft · windows 10Sep 14, 2016

  • CVE-2016-3369
    34Monitor

    Microsoft Windows 10 Gold and 1511 allows attackers to cause a denial of service via unspecified vectors, aka "Windows Denial of Service Vul

    HighCVSS 7.5No exploitEPSS 12%

    microsoft · windows 10Sep 14, 2016

  • CVE-2016-3370
    33Monitor

    The PDF library in Microsoft Edge, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows

    MediumCVSS 6.5No exploitEPSS 22%

    microsoft · edgeSep 14, 2016

  • CVE-2016-3371
    34Monitor

    The kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and

    MediumCVSS 5.5Proof of conceptEPSS 40%

    microsoft · windows 10Sep 14, 2016

  • CVE-2016-3373
    27Monitor

    The kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and

    MediumCVSS 5.5Proof of conceptEPSS 17%

    microsoft · windows 10Sep 14, 2016

  • CVE-2016-3374
    34Monitor

    The PDF library in Microsoft Edge, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows

    MediumCVSS 6.5No exploitEPSS 25%

    microsoft · edgeSep 14, 2016

  • CVE-2016-3375
    35Monitor

    The OLE Automation mechanism and VBScript scripting engine in Microsoft Internet Explorer 9 through 11, Windows Vista SP2, Windows Server 20

    HighCVSS 7.5No exploitEPSS 17%

    microsoft · internet explorerSep 14, 2016

  • CVE-2016-3377
    35Monitor

    The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corrup

    HighCVSS 7.5No exploitEPSS 15%

    microsoft · edgeSep 14, 2016

  • CVE-2016-3378
    34Monitor

    Open redirect vulnerability in Microsoft Exchange Server 2013 SP1, 2013 Cumulative Update 12, 2013 Cumulative Update 13, 2016 Cumulative Upd

    HighCVSS 7.4No exploitEPSS 15%

    microsoft · exchange serverSep 14, 2016

  • CVE-2016-3381
    35Monitor

    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer all

    HighCVSS 7.8No exploitEPSS 14%

    microsoft · excelSep 14, 2016

  • CVE-2016-3357
    47Plan

    Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word for Mac 2011, Word 2016 for Mac, Word Vie

    HighCVSS 7.8Proof of conceptEPSS 54%

    microsoft · officeSep 14, 2016

  • CVE-2016-4275
    41Plan

    Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows att

    HighCVSS 8.8Proof of conceptEPSS 19%

    adobe · flash playerSep 14, 2016

  • CVE-2016-2179
    38Monitor

    The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries associated with unused out-of-order

    HighCVSS 7.5No exploitEPSS 26%

    openssl · opensslSep 16, 2016

  • CVE-2016-2181
    37Monitor

    The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number in conjunction with a

    HighCVSS 7.5No exploitEPSS 22%

    openssl · opensslSep 16, 2016

  • CVE-2016-2182
    53Plan

    The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote atta

    CriticalCVSS 9.8No exploitEPSS 46%

    openssl · opensslSep 16, 2016

  • CVE-2016-6302
    38Monitor

    The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket leng

    HighCVSS 7.5No exploitEPSS 27%

    openssl · opensslSep 16, 2016

  • CVE-2016-6303
    49Plan

    Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0 allows remote attackers to cause a denial of

    CriticalCVSS 9.8No exploitEPSS 31%

    openssl · opensslSep 16, 2016

  • CVE-2016-7418
    33Monitor

    The php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.26 and 7.x before 7.0.11 allows remote attackers to cause a denial o

    HighCVSS 7.5No exploitEPSS 11%

    php · phpSep 17, 2016

  • CVE-2016-6415
    86Now

    The server IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.x and 5.0.x through 5

    HighCVSS 7.5KEVWeaponizedEPSS 87%

    cisco · iosSep 18, 2016

  • CVE-2015-8921
    34Monitor

    The ae_strtofflags function in archive_entry.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bound

    HighCVSS 7.5No exploitEPSS 11%

    libarchive · libarchiveSep 20, 2016

  • CVE-2016-6662
    59Plan

    Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before

    CriticalCVSS 9.8Proof of conceptEPSS 67%

    oracle · mysqlSep 20, 2016

  • CVE-2016-5426
    39Monitor

    PowerDNS (aka pdns) Authoritative Server before 3.4.10 allows remote attackers to cause a denial of service (backend CPU consumption) via a

    HighCVSS 7.5No exploitEPSS 30%

    powerdns · authoritativeSep 21, 2016

  • CVE-2016-5427
    49Plan

    PowerDNS (aka pdns) Authoritative Server before 3.4.10 does not properly handle a .

    HighCVSS 7.5No exploitEPSS 62%

    powerdns · authoritativeSep 21, 2016

  • CVE-2016-6304
    49Plan

    Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a d

    HighCVSS 7.5No exploitEPSS 63%

    openssl · opensslSep 26, 2016

  • CVE-2016-6305
    35Monitor

    The ssl3_read_bytes function in record/rec_layer_s3.c in OpenSSL 1.1.0 before 1.1.0a allows remote attackers to cause a denial of service (i

    HighCVSS 7.5No exploitEPSS 15%

    openssl · opensslSep 26, 2016

  • CVE-2016-6306
    36Monitor

    The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bo

    MediumCVSS 5.9No exploitEPSS 41%

    openssl · opensslSep 26, 2016

  • CVE-2016-6307
    27Monitor

    The state-machine implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow

    MediumCVSS 5.9No exploitEPSS 13%

    openssl · opensslSep 26, 2016

  • CVE-2016-6308
    27Monitor

    statem/statem_dtls.c in the DTLS implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, whi

    MediumCVSS 5.9No exploitEPSS 14%

    openssl · opensslSep 26, 2016

  • CVE-2016-6309
    60This week

    statem/statem.c in OpenSSL 1.1.0a does not consider memory-block movement after a realloc call, which allows remote attackers to cause a den

    CriticalCVSS 9.8No exploitEPSS 70%

    openssl · opensslSep 26, 2016

  • CVE-2016-7052
    39Monitor

    crypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service (NULL pointer dereference and application cras

    HighCVSS 7.5No exploitEPSS 29%

    openssl · opensslSep 26, 2016

  • CVE-2016-6330
    42Plan

    The server in Red Hat JBoss Operations Network (JON), when SSL authentication is not configured for JON server / agent communication, allows

    CriticalCVSS 9.8No exploitEPSS 10%

    redhat · jboss operations networkSep 27, 2016

  • CVE-2016-2776
    60This week

    buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses,

    HighCVSS 7.5WeaponizedEPSS 89%

    isc · bindSep 28, 2016

  • CVE-2016-7191
    41Plan

    The Microsoft Azure Active Directory Passport (aka Passport-Azure-AD) library 1.x before 1.4.6 and 2.x before 2.0.1 for Node.js does not rec

    HighCVSS 8.1No exploitEPSS 29%

    microsoft · azure active directory passportSep 28, 2016