By publication date

Exploited and new serious CVEs: December 2016

53 records · 4 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
43Plan	CVE-2016-9796Proof of concept	Alcatel-Lucent OmniVista 8770 2.0 through 3.0 exposes different ORBs interfaces, which can be queried using the GIOP protocol on TCP port 30alcatel-lucent · omnivista 8770 network management system · CWE-264 Pre-auth Auth bypass	Critical9.8	—	13.3%	Dec 3, 2016
54Plan	CVE-2016-8740Proof of concept	The mod_http2 module in the Apache HTTP Server 2.4.17 through 2.4.23, when the Protocols configuration includes h2 or h2c, does not restrictapache · http server · CWE-20 Pre-auth Denial of service	High7.5	—	79.0%	Dec 5, 2016
40Plan	CVE-2016-8655Weaponized	Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cause a denial of servilinux · linux kernel · CWE-362 Local privilege escalation Race condition	High7.8	—	11.1%	Dec 8, 2016
39Monitor	CVE-2016-8858Proof of concept	The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service (memory consopenbsd · openssh · CWE-399 Pre-auth Denial of service	High7.5	—	29.4%	Dec 9, 2016
35Monitor	CVE-2016-6321No exploit	Directory traversal vulnerability in the safer_name_suffix function in GNU tar 1.14 through 1.29 might allow remote attackers to bypass an ignu · tar · CWE-22 Pre-auth Path traversal	High7.5	—	15.7%	Dec 9, 2016
43Plan	CVE-2016-5841No exploit	Integer overflow in MagickCore/profile.c in ImageMagick before 7.0.2-1 allows remote attackers to cause a denial of service (segmentation faimagemagick · imagemagick · CWE-190 pre-auth RCE Memory safety	Critical9.8	—	13.3%	Dec 13, 2016
35Monitor	CVE-2016-2334Proof of concept	Heap-based buffer overflow in the NArchive::NHfs::CHandler::ExtractZlibFile method in 7zip before 16.00 and p7zip allows remote attackers to7-zip · 7-zip · CWE-119 RCE Memory safety	High7.8	—	14.7%	Dec 13, 2016
95Now	CVE-2016-6277Weaponized	NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before netgear · d6220 firmware · CWE-352 pre-auth RCE CSRF	High8.8	KEV	99.8%	Dec 14, 2016
44Plan	CVE-2016-7866Proof of concept	Adobe Animate versions 15.2.1.95 and earlier have an exploitable memory corruption vulnerability.adobe · animate · CWE-119 pre-auth RCE Memory safety	Critical9.8	—	15.7%	Dec 15, 2016
38Monitor	CVE-2016-7867No exploit	Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability iadobe · flash player desktop runtime · CWE-787 pre-auth RCE Memory safety	High8.8	—	10.7%	Dec 15, 2016
38Monitor	CVE-2016-7868No exploit	Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability iadobe · flash player desktop runtime · CWE-787 pre-auth RCE Memory safety	High8.8	—	11.0%	Dec 15, 2016
38Monitor	CVE-2016-7869No exploit	Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability iadobe · flash player desktop runtime · CWE-787 pre-auth RCE Memory safety	High8.8	—	11.0%	Dec 15, 2016
38Monitor	CVE-2016-7870No exploit	Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability iadobe · flash player desktop runtime · CWE-787 pre-auth RCE Memory safety	High8.8	—	10.7%	Dec 15, 2016
71This week	CVE-2016-7892Weaponized	Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextFieadobe · flash player desktop runtime · CWE-416 pre-auth RCE Memory safety	High8.8	KEV	18.7%	Dec 15, 2016
46Plan	CVE-2016-9565Proof of concept	MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files bnagios · nagios · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.8	—	22.6%	Dec 15, 2016
34Monitor	CVE-2016-9838Proof of concept	An issue was discovered in components/com_users/models/registration.php in Joomla! before 3.6.5.joomla · joomla\! · CWE-284 Pre-auth Broken access control (IDOR)	High7.5	—	14.0%	Dec 16, 2016
36Monitor	CVE-2016-9949Proof of concept	An issue was discovered in Apport before 2.20.4.apport project · apport · CWE-94 RCE	High7.8	—	17.7%	Dec 16, 2016
34Monitor	CVE-2016-7181No exploit	Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, akmicrosoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	13.9%	Dec 20, 2016
27Monitor	CVE-2016-7206No exploit	Cross-site scripting (XSS) vulnerability in Microsoft Edge allows remote attackers to inject arbitrary web script or HTML via unspecified vemicrosoft · edge · CWE-79 Pre-auth XSS	Medium6.1	—	11.6%	Dec 20, 2016
33Monitor	CVE-2016-7257No exploit	The GDI component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office for Mac 2011, and Office 2016 fomicrosoft · office for mac · CWE-200 Pre-auth Info leak	Medium6.5	—	22.5%	Dec 20, 2016
78This week	CVE-2016-7262Weaponized	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allmicrosoft · excel RCE	High7.8	KEV	57.7%	Dec 20, 2016
37Monitor	CVE-2016-7263No exploit	Microsoft Excel for Mac 2011 and Excel 2016 for Mac allow remote attackers to execute arbitrary code or cause a denial of service (memory comicrosoft · excel for mac · CWE-119 RCE Memory safety	High7.8	—	19.1%	Dec 20, 2016
35Monitor	CVE-2016-7264No exploit	Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, Excel for Mac 2011, and Excel 2016 for Mac allow remote attackers to microsoft · excel · CWE-125 Memory safety	High7.1	—	23.2%	Dec 20, 2016
34Monitor	CVE-2016-7265No exploit	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, Excel microsoft · excel · CWE-125 Memory safety	High7.1	—	21.0%	Dec 20, 2016
38Monitor	CVE-2016-7266No exploit	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, and Exmicrosoft · excel · CWE-20 RCE	High7.8	—	22.1%	Dec 20, 2016
28Monitor	CVE-2016-7267No exploit	Microsoft Excel 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016 misparses file formats, which makes it easier for remote attackers to execute arbimicrosoft · excel · CWE-20 RCE	Medium5.5	—	19.4%	Dec 20, 2016
35Monitor	CVE-2016-7268No exploit	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word for Mac 2011, Word Automation Servmicrosoft · office · CWE-125 Memory safety	High7.1	—	22.5%	Dec 20, 2016
36Monitor	CVE-2016-7270No exploit	The Data Provider for SQL Server in Microsoft .NET Framework 4.6.2 mishandles a developer-supplied key, which allows remote attackers to bypmicrosoft · .net framework · CWE-310 Pre-auth	High7.5	—	20.0%	Dec 20, 2016
47Plan	CVE-2016-7272No exploit	The Graphics component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gmicrosoft · windows 10 · CWE-19 pre-auth RCE	High8.8	—	39.2%	Dec 20, 2016
41Plan	CVE-2016-7273No exploit	The Graphics component in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allows remote attackers to execute arbitrary codmicrosoft · windows 10 · CWE-19 pre-auth RCE	High8.8	—	18.9%	Dec 20, 2016
48Plan	CVE-2016-7274Proof of concept	Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Wmicrosoft · windows 10 · CWE-19 pre-auth RCE	High8.8	—	42.4%	Dec 20, 2016
43Plan	CVE-2016-7277No exploit	Microsoft Office 2016 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted docummicrosoft · office · CWE-119 pre-auth RCE Memory safety	Critical9.6	—	17.9%	Dec 20, 2016
25Monitor	CVE-2016-7278No exploit	Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site,microsoft · internet explorer · CWE-200 Pre-auth Info leak	Medium5.3	—	14.6%	Dec 20, 2016
35Monitor	CVE-2016-7279No exploit	Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (mmicrosoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	15.4%	Dec 20, 2016
25Monitor	CVE-2016-7281No exploit	The Web Workers implementation in Microsoft Internet Explorer 10 and 11 and Microsoft Edge allows remote attackers to bypass the Same Originmicrosoft · edge · CWE-254 Pre-auth	Medium5.3	—	13.7%	Dec 20, 2016
27Monitor	CVE-2016-7282No exploit	Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allows remote attackers to inject armicrosoft · edge · CWE-79 Pre-auth XSS	Medium6.1	—	10.3%	Dec 20, 2016
40Plan	CVE-2016-7283No exploit	Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	High8.8	—	17.7%	Dec 20, 2016
21Monitor	CVE-2016-7284No exploit	Microsoft Internet Explorer 10 and 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, akmicrosoft · internet explorer · CWE-200 Pre-auth Info leak	Medium4.3	—	14.9%	Dec 20, 2016
51Plan	CVE-2016-7286Proof of concept	The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vimicrosoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	68.8%	Dec 20, 2016
51Plan	CVE-2016-7287Proof of concept	The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a deniamicrosoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	68.8%	Dec 20, 2016
51Plan	CVE-2016-7288Proof of concept	The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vimicrosoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	70.3%	Dec 20, 2016
39Monitor	CVE-2016-7289No exploit	Microsoft Publisher 2010 SP2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craftemicrosoft · publisher · CWE-119 RCE Memory safety	High7.8	—	25.1%	Dec 20, 2016
35Monitor	CVE-2016-7290No exploit	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Services on Sharemicrosoft · office · CWE-125 Memory safety	High7.1	—	22.7%	Dec 20, 2016
35Monitor	CVE-2016-7291No exploit	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Services on Sharemicrosoft · office · CWE-125 Memory safety	High7.1	—	22.7%	Dec 20, 2016
35Monitor	CVE-2016-7296No exploit	The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vimicrosoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	16.7%	Dec 20, 2016
38Monitor	CVE-2016-7297No exploit	The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vimicrosoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	26.7%	Dec 20, 2016
38Monitor	CVE-2016-7298No exploit	Microsoft Office 2007 SP3, Office 2010 SP2, Word Viewer, Office for Mac 2011, and Office 2016 for Mac allow remote attackers to execute arbimicrosoft · office · CWE-119 RCE Memory safety	High7.8	—	22.6%	Dec 20, 2016
36Monitor	CVE-2016-7276No exploit	Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office for Mac 2011, and Office 2016 for Mac allow remote attackers to obtain smicrosoft · office · CWE-125 Memory safety	High7.1	—	25.0%	Dec 20, 2016
60This week	CVE-2016-7456Weaponized	VMware vSphere Data Protection (VDP) 5.5.x though 6.1.x has an SSH private key with a publicly known password, which makes it easier for remvmware · vsphere data protection · CWE-255 Pre-auth	Critical9.8	—	32.7%	Dec 29, 2016
99Now	CVE-2016-10033Weaponized	The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail cphpmailer project · phpmailer · CWE-88 pre-auth RCE	Critical9.8	KEV	99.7%	Dec 30, 2016
51Plan	CVE-2016-10034Proof of concept	The setFrom function in the Sendmail adapter in the zend-mail component before 2.4.11, 2.5.x, 2.6.x, and 2.7.x before 2.7.2, and Zend Framewzend · zend framework · CWE-77 pre-auth RCE Command injection	Critical9.8	—	38.4%	Dec 30, 2016
68This week	CVE-2016-10045Weaponized	The isMail transport in PHPMailer before 5.2.20 might allow remote attackers to pass extra parameters to the mail command and consequently ephpmailer project · phpmailer · CWE-77 pre-auth RCE Command injection	Critical9.8	—	97.7%	Dec 30, 2016
52Plan	CVE-2016-10074Proof of concept	The mail transport (aka Swift_Transport_MailTransport) in Swift Mailer before 5.4.5 might allow remote attackers to pass extra parameters toswiftmailer · swiftmailer · CWE-77 pre-auth RCE Command injection	Critical9.8	—	43.7%	Dec 30, 2016

CVE-2016-9796
43Plan
Alcatel-Lucent OmniVista 8770 2.0 through 3.0 exposes different ORBs interfaces, which can be queried using the GIOP protocol on TCP port 30
CriticalCVSS 9.8Proof of conceptEPSS 13%
- Pre-auth
- Auth bypass
alcatel-lucent · omnivista 8770 network management systemDec 3, 2016
CVE-2016-8740
54Plan
The mod_http2 module in the Apache HTTP Server 2.4.17 through 2.4.23, when the Protocols configuration includes h2 or h2c, does not restrict
HighCVSS 7.5Proof of conceptEPSS 79%
- Pre-auth
- Denial of service
apache · http serverDec 5, 2016
CVE-2016-8655
40Plan
Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cause a denial of servi
HighCVSS 7.8WeaponizedEPSS 11%
- Local privilege escalation
- Race condition
linux · linux kernelDec 8, 2016
CVE-2016-8858
39Monitor
The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service (memory cons
HighCVSS 7.5Proof of conceptEPSS 29%
- Pre-auth
- Denial of service
openbsd · opensshDec 9, 2016
CVE-2016-6321
35Monitor
Directory traversal vulnerability in the safer_name_suffix function in GNU tar 1.14 through 1.29 might allow remote attackers to bypass an i
HighCVSS 7.5No exploitEPSS 15%
- Pre-auth
- Path traversal
gnu · tarDec 9, 2016
CVE-2016-5841
43Plan
Integer overflow in MagickCore/profile.c in ImageMagick before 7.0.2-1 allows remote attackers to cause a denial of service (segmentation fa
CriticalCVSS 9.8No exploitEPSS 13%
- pre-auth RCE
- Memory safety
imagemagick · imagemagickDec 13, 2016
CVE-2016-2334
35Monitor
Heap-based buffer overflow in the NArchive::NHfs::CHandler::ExtractZlibFile method in 7zip before 16.00 and p7zip allows remote attackers to
HighCVSS 7.8Proof of conceptEPSS 14%
- RCE
- Memory safety
7-zip · 7-zipDec 13, 2016
CVE-2016-6277
95Now
NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before
HighCVSS 8.8KEVWeaponizedEPSS 99%
- pre-auth RCE
- CSRF
netgear · d6220 firmwareDec 14, 2016
CVE-2016-7866
44Plan
Adobe Animate versions 15.2.1.95 and earlier have an exploitable memory corruption vulnerability.
CriticalCVSS 9.8Proof of conceptEPSS 15%
- pre-auth RCE
- Memory safety
adobe · animateDec 15, 2016
CVE-2016-7867
38Monitor
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability i
HighCVSS 8.8No exploitEPSS 10%
- pre-auth RCE
- Memory safety
adobe · flash player desktop runtimeDec 15, 2016
CVE-2016-7868
38Monitor
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability i
HighCVSS 8.8No exploitEPSS 11%
- pre-auth RCE
- Memory safety
adobe · flash player desktop runtimeDec 15, 2016
CVE-2016-7869
38Monitor
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability i
HighCVSS 8.8No exploitEPSS 11%
- pre-auth RCE
- Memory safety
adobe · flash player desktop runtimeDec 15, 2016
CVE-2016-7870
38Monitor
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability i
HighCVSS 8.8No exploitEPSS 10%
- pre-auth RCE
- Memory safety
adobe · flash player desktop runtimeDec 15, 2016
CVE-2016-7892
71This week
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextFie
HighCVSS 8.8KEVWeaponizedEPSS 18%
- pre-auth RCE
- Memory safety
adobe · flash player desktop runtimeDec 15, 2016
CVE-2016-9565
46Plan
MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files b
CriticalCVSS 9.8Proof of conceptEPSS 22%
- Pre-auth
- Broken access control (IDOR)
nagios · nagiosDec 15, 2016
CVE-2016-9838
34Monitor
An issue was discovered in components/com_users/models/registration.php in Joomla! before 3.6.5.
HighCVSS 7.5Proof of conceptEPSS 14%
- Pre-auth
- Broken access control (IDOR)
joomla · joomla\!Dec 16, 2016
CVE-2016-9949
36Monitor
An issue was discovered in Apport before 2.20.4.
HighCVSS 7.8Proof of conceptEPSS 17%
- RCE
apport project · apportDec 16, 2016
CVE-2016-7181
34Monitor
Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, ak
HighCVSS 7.5No exploitEPSS 13%
- pre-auth RCE
- Memory safety
microsoft · edgeDec 20, 2016
CVE-2016-7206
27Monitor
Cross-site scripting (XSS) vulnerability in Microsoft Edge allows remote attackers to inject arbitrary web script or HTML via unspecified ve
MediumCVSS 6.1No exploitEPSS 11%
- Pre-auth
- XSS
microsoft · edgeDec 20, 2016
CVE-2016-7257
33Monitor
The GDI component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office for Mac 2011, and Office 2016 fo
MediumCVSS 6.5No exploitEPSS 22%
- Pre-auth
- Info leak
microsoft · office for macDec 20, 2016
CVE-2016-7262
78This week
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer all
HighCVSS 7.8KEVWeaponizedEPSS 57%
- RCE
microsoft · excelDec 20, 2016
CVE-2016-7263
37Monitor
Microsoft Excel for Mac 2011 and Excel 2016 for Mac allow remote attackers to execute arbitrary code or cause a denial of service (memory co
HighCVSS 7.8No exploitEPSS 19%
- RCE
- Memory safety
microsoft · excel for macDec 20, 2016
CVE-2016-7264
35Monitor
Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, Excel for Mac 2011, and Excel 2016 for Mac allow remote attackers to
HighCVSS 7.1No exploitEPSS 23%
- Memory safety
microsoft · excelDec 20, 2016
CVE-2016-7265
34Monitor
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, Excel
HighCVSS 7.1No exploitEPSS 21%
- Memory safety
microsoft · excelDec 20, 2016
CVE-2016-7266
38Monitor
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, and Ex
HighCVSS 7.8No exploitEPSS 22%
- RCE
microsoft · excelDec 20, 2016
CVE-2016-7267
28Monitor
Microsoft Excel 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016 misparses file formats, which makes it easier for remote attackers to execute arbi
MediumCVSS 5.5No exploitEPSS 19%
- RCE
microsoft · excelDec 20, 2016
CVE-2016-7268
35Monitor
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word for Mac 2011, Word Automation Serv
HighCVSS 7.1No exploitEPSS 22%
- Memory safety
microsoft · officeDec 20, 2016
CVE-2016-7270
36Monitor
The Data Provider for SQL Server in Microsoft .NET Framework 4.6.2 mishandles a developer-supplied key, which allows remote attackers to byp
HighCVSS 7.5No exploitEPSS 20%
- Pre-auth
microsoft · .net frameworkDec 20, 2016
CVE-2016-7272
47Plan
The Graphics component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 G
HighCVSS 8.8No exploitEPSS 39%
- pre-auth RCE
microsoft · windows 10Dec 20, 2016
CVE-2016-7273
41Plan
The Graphics component in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allows remote attackers to execute arbitrary cod
HighCVSS 8.8No exploitEPSS 18%
- pre-auth RCE
microsoft · windows 10Dec 20, 2016
CVE-2016-7274
48Plan
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, W
HighCVSS 8.8Proof of conceptEPSS 42%
- pre-auth RCE
microsoft · windows 10Dec 20, 2016
CVE-2016-7277
43Plan
Microsoft Office 2016 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted docum
CriticalCVSS 9.6No exploitEPSS 17%
- pre-auth RCE
- Memory safety
microsoft · officeDec 20, 2016
CVE-2016-7278
25Monitor
Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site,
MediumCVSS 5.3No exploitEPSS 14%
- Pre-auth
- Info leak
microsoft · internet explorerDec 20, 2016
CVE-2016-7279
35Monitor
Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (m
HighCVSS 7.5No exploitEPSS 15%
- pre-auth RCE
- Memory safety
microsoft · edgeDec 20, 2016
CVE-2016-7281
25Monitor
The Web Workers implementation in Microsoft Internet Explorer 10 and 11 and Microsoft Edge allows remote attackers to bypass the Same Origin
MediumCVSS 5.3No exploitEPSS 13%
- Pre-auth
microsoft · edgeDec 20, 2016
CVE-2016-7282
27Monitor
Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allows remote attackers to inject ar
MediumCVSS 6.1No exploitEPSS 10%
- Pre-auth
- XSS
microsoft · edgeDec 20, 2016
CVE-2016-7283
40Plan
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
HighCVSS 8.8No exploitEPSS 17%
- pre-auth RCE
- Memory safety
microsoft · internet explorerDec 20, 2016
CVE-2016-7284
21Monitor
Microsoft Internet Explorer 10 and 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, ak
MediumCVSS 4.3No exploitEPSS 14%
- Pre-auth
- Info leak
microsoft · internet explorerDec 20, 2016
CVE-2016-7286
51Plan
The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vi
HighCVSS 7.5Proof of conceptEPSS 68%
- pre-auth RCE
- Memory safety
microsoft · edgeDec 20, 2016
CVE-2016-7287
51Plan
The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denia
HighCVSS 7.5Proof of conceptEPSS 68%
- pre-auth RCE
- Memory safety
microsoft · edgeDec 20, 2016
CVE-2016-7288
51Plan
The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vi
HighCVSS 7.5Proof of conceptEPSS 70%
- pre-auth RCE
- Memory safety
microsoft · edgeDec 20, 2016
CVE-2016-7289
39Monitor
Microsoft Publisher 2010 SP2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafte
HighCVSS 7.8No exploitEPSS 25%
- RCE
- Memory safety
microsoft · publisherDec 20, 2016
CVE-2016-7290
35Monitor
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Services on Share
HighCVSS 7.1No exploitEPSS 22%
- Memory safety
microsoft · officeDec 20, 2016
CVE-2016-7291
35Monitor
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Services on Share
HighCVSS 7.1No exploitEPSS 22%
- Memory safety
microsoft · officeDec 20, 2016
CVE-2016-7296
35Monitor
The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vi
HighCVSS 7.5No exploitEPSS 16%
- pre-auth RCE
- Memory safety
microsoft · edgeDec 20, 2016
CVE-2016-7297
38Monitor
The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vi
HighCVSS 7.5No exploitEPSS 26%
- pre-auth RCE
- Memory safety
microsoft · edgeDec 20, 2016
CVE-2016-7298
38Monitor
Microsoft Office 2007 SP3, Office 2010 SP2, Word Viewer, Office for Mac 2011, and Office 2016 for Mac allow remote attackers to execute arbi
HighCVSS 7.8No exploitEPSS 22%
- RCE
- Memory safety
microsoft · officeDec 20, 2016
CVE-2016-7276
36Monitor
Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office for Mac 2011, and Office 2016 for Mac allow remote attackers to obtain s
HighCVSS 7.1No exploitEPSS 25%
- Memory safety
microsoft · officeDec 20, 2016
CVE-2016-7456
60This week
VMware vSphere Data Protection (VDP) 5.5.x though 6.1.x has an SSH private key with a publicly known password, which makes it easier for rem
CriticalCVSS 9.8WeaponizedEPSS 32%
- Pre-auth
vmware · vsphere data protectionDec 29, 2016
CVE-2016-10033
99Now
The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail c
CriticalCVSS 9.8KEVWeaponizedEPSS 99%
- pre-auth RCE
phpmailer project · phpmailerDec 30, 2016
CVE-2016-10034
51Plan
The setFrom function in the Sendmail adapter in the zend-mail component before 2.4.11, 2.5.x, 2.6.x, and 2.7.x before 2.7.2, and Zend Framew
CriticalCVSS 9.8Proof of conceptEPSS 38%
- pre-auth RCE
- Command injection
zend · zend frameworkDec 30, 2016
CVE-2016-10045
68This week
The isMail transport in PHPMailer before 5.2.20 might allow remote attackers to pass extra parameters to the mail command and consequently e
CriticalCVSS 9.8WeaponizedEPSS 97%
- pre-auth RCE
- Command injection
phpmailer project · phpmailerDec 30, 2016
CVE-2016-10074
52Plan
The mail transport (aka Swift_Transport_MailTransport) in Swift Mailer before 5.4.5 might allow remote attackers to pass extra parameters to
CriticalCVSS 9.8Proof of conceptEPSS 43%
- pre-auth RCE
- Command injection
swiftmailer · swiftmailerDec 30, 2016