Microsoft Patch Tuesday
- CVEs
- CVE-2016-0187CVE-2016-0189CVE-2016-0192CVE-2016-0186CVE-2016-0191CVE-2016-0188CVE-2016-0194CVE-2016-0126CVE-2016-0140CVE-2016-0183CVE-2016-0198CVE-2016-0170CVE-2016-0184CVE-2016-0195CVE-2016-0168CVE-2016-0169CVE-2016-0182CVE-2016-0179CVE-2016-0152CVE-2016-0185CVE-2016-0180CVE-2016-0171CVE-2016-0173CVE-2016-0174CVE-2016-0176CVE-2016-0196CVE-2016-0197CVE-2016-0175CVE-2016-0178CVE-2016-0149CVE-2016-0181
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2016-0183+3 related CVEs | The Windows font library in Microsoft Office 2010 SP2, Word 2010 SP2, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2… | 8.8 group max | 16% | ||
| CVE-2016-0149 | Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 allows man-in-the-middle attackers to obtain sensitive cleartext information via… | 5.9 | 8% | ||
| CVE-2016-0152 | Internet Information Services (IIS) in Microsoft Windows Vista SP2 and Server 2008 SP2 mishandles library loading, which allows local users to gain privileges… | 7.8 | 4% | ||
| CVE-2016-0170 | GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and… | 8.8 group max | 49% | ||
| CVE-2016-0185 | Remote Code Execution in Windows Media Center (.mcl) on Windows Vista, 7, and 8.1 | 7.8 | 70% | KEV | KEV |
CVE-2016-0191+2 related CVEs | The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted… | 7.5 | 28% | ||
| CVE-2016-0187 | The Microsoft (1) JScript 5.8 and (2) VBScript 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute… | 7.5 | 22% | ||
CVE-2016-0189+2 related CVEs | Memory Corruption RCE in Microsoft IE Scripting Engines (JScript/VBScript) | 7.5 group max | 94% | KEVRansomwarePoC | KEV |
From the original article
5 min read at blog.talosintelligence.com
Patch Tuesday for May 2016 has arrived where Microsoft releases their monthly set of security bulletins designed to address security vulnerabilities within their products. This month's release contains 16 bulletins addressing 33 vulnerabilities. Eight bulletins are rated critical, addressing vulnerabilities in Edge, Internet Explorer, Office, Graphic Components, VBScript, and Windows Shell.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.