Vulnerabilitycritical
Microsoft Patch Tuesday
- CVEs
- CVE-2016-0060CVE-2016-0061CVE-2016-0062CVE-2016-0077CVE-2016-0063CVE-2016-0067CVE-2016-0072CVE-2016-0084CVE-2016-0058CVE-2016-0046CVE-2016-0038CVE-2016-0052CVE-2016-0053CVE-2016-0055CVE-2016-0022CVE-2016-0040CVE-2016-0041CVE-2016-0042CVE-2016-0044CVE-2016-0049CVE-2016-0051CVE-2016-0036CVE-2016-0048CVE-2016-0033CVE-2016-0047CVE-2016-0037CVE-2016-0050
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2016-0022+3 related CVEs | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility… | 7.8 | 19% | ||
CVE-2016-0047+1 related CVE | WinForms in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 allows remote attackers to obtain sensitive information from process memory via… | 7.5 | 20% | ||
| CVE-2016-0036 | The Remote Desktop Protocol (RDP) implementation in Microsoft Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows remote… | 8.1 group max | 11% | ||
| CVE-2016-0037 | The forms-based authentication implementation in Active Directory Federation Services (ADFS) 3.0 in Microsoft Windows Server 2012 R2 allows remote attackers to… | 7.5 | 26% | ||
| CVE-2016-0040 | Local Privilege Escalation in Microsoft Windows Kernel (Win32k) | 7.8 | 24% | KEVPoC | KEV |
CVE-2016-0063+3 related CVEs | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… | 8.8 group max | 39% | PoC ×2 | |
| CVE-2016-0044 | Sync Framework in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1 allows remote attackers to cause a denial of service (SyncShareSvc service… | 7.5 | 14% | ||
| CVE-2016-0050 | Network Policy Server (NPS) in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2 misparses username queries, which allows remote… | 5.3 | 18% | ||
CVE-2016-0060+4 related CVEs | Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption)… | 8.8 group max | 27% |
From the original article
3 min read at blog.talosintelligence.com
Today, Microsoft has released their monthly set of security bulletins designed to address security vulnerabilities within their products. This month’s release contains twelve bulletins addressing 37 vulnerabilities. Five bulletins are rated critical and address vulnerabilities in Internet Explorer, Edge, Windows Journal, Office and Windows PDF.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.