CVE-2016-7256 is a remote code execution vulnerability in the Microsoft Windows font library caused by improper handling of specially crafted embedded fonts. Successful exploitation allows an attacker to take control of the affected system. This vulnerability has been exploited in the wild.
CVE-2016-1010 is an integer overflow vulnerability in Adobe Flash Player and AIR that allows attackers to execute arbitrary code. This vulnerability has been exploited in the wild. It affects Adobe Flash Player and AIR products, but specific affected versions are not provided. The severity is high due to the potential for code execution.
CVE-2016-0984 is a use-after-free vulnerability in Adobe Flash Player and Adobe AIR that allows attackers to execute arbitrary code. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2016-0034 is a vulnerability in Microsoft Silverlight where improper handling of negative offsets during decoding can lead to remote code execution or denial-of-service conditions. It has been exploited in the wild and is associated with known ransomware campaigns. The vulnerability is rated as high severity due to its potential impact on affected systems.
CVE-2015-0310 is a vulnerability in Adobe Flash Player where the software does not properly restrict the discovery of memory addresses. This flaw allows attackers to bypass the address space layout randomization (ASLR) protection mechanism, which is designed to prevent exploitation by randomizing memory locations. The vulnerability has been exploited in the wild, indicating active use by attackers. No specific affected versions or patch information is provided in the available data.
CVE-2015-0016 is a directory traversal vulnerability in the TS WebProxy component of Microsoft Windows that allows remote attackers to escalate privileges. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.
CVE-2015-0071 is a vulnerability in Microsoft Internet Explorer that allows remote attackers to bypass the address space layout randomization (ASLR) protection mechanism via a crafted website. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2015-2360 is a privilege escalation vulnerability in the Win32k.sys kernel-mode driver in Microsoft Windows. It allows local users to gain elevated privileges or cause a denial-of-service (DoS) condition. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2015-2425 is a memory corruption vulnerability in Microsoft Internet Explorer that allows remote attackers to execute arbitrary code or cause a denial-of-service (DoS) condition. It has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2015-1769 is a privilege escalation vulnerability in Microsoft Windows affecting the Mount Manager component. It arises from improper processing of symbolic links, allowing an attacker to gain elevated privileges. This vulnerability has been exploited in the wild. No specific affected Windows versions or patch information are provided in the available data.
CVE-2015-4495 is a security feature bypass vulnerability in Mozilla Firefox that allows remote attackers to bypass the Same Origin Policy, potentially enabling them to read arbitrary files or escalate privileges.
CVE-2015-8651 is an integer overflow vulnerability in Adobe Flash Player that allows attackers to execute arbitrary code. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2015-6175 is a privilege escalation vulnerability in the Microsoft Windows kernel that allows local users to gain elevated privileges by running a specially crafted application. This vulnerability has been exploited in the wild. No specific affected Windows versions or patch information is provided in the available data.
CVE-2015-1671 is a remote code execution vulnerability in Microsoft Windows and related components including .NET Framework, Office, Lync, and Silverlight. The flaw arises from improper handling of TrueType fonts, allowing attackers to execute arbitrary code remotely. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.
CVE-2014-4148 is a high-severity remote code execution vulnerability in Microsoft Windows. It arises from improper handling of TrueType fonts by a Windows kernel-mode driver. This vulnerability has been exploited in the wild.
CVE-2014-8439 is a high-severity vulnerability in Adobe Flash Player involving improper handling of a dereferenced memory pointer. This flaw can lead to arbitrary code execution. The vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data.
CVE-2014-4123 is a high-severity privilege escalation vulnerability in Microsoft Internet Explorer. It allows remote attackers to gain elevated privileges by tricking users into visiting a crafted website. The vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data.
CVE-2014-0546 is a vulnerability in Adobe Reader and Acrobat on Windows that allows attackers to bypass sandbox protections and execute native code with elevated privileges. This flaw has been exploited in the wild. No specific affected versions or patch information are provided in the input data.
CVE-2014-2817 is a high-severity privilege escalation vulnerability in Microsoft Internet Explorer. It allows remote attackers to gain elevated privileges by tricking users into visiting a crafted website. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2014-4077 is a privilege escalation vulnerability in Microsoft Input Method Editor (IME) Japanese, specifically involving the IMJPDCT.EXE component. This vulnerability allows attackers to bypass sandbox restrictions and escalate privileges on affected Windows systems. The IME Japanese keyboard is included by default in Windows but is disabled by default. Exploitation of this vulnerability has been observed in the wild.