Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

827 records

Priority CRITICAL 93KEV

Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1 allow remote attackers to execute a…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.99497 Published 2017-04-12 No fix listed
Priority LOW 29

The Adobe Type Manager Font Driver (ATMFD.dll) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold , 1511,…

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.06034 Published 2017-04-12 No fix listed CWE-200
Priority LOW 28

A Win32k information disclosure vulnerability exists in Microsoft Windows when the win32k component improperly provides kernel information.

CVSS 3.0MEDIUM 4.7 Local Low privileges No interaction EPSS 0.03655 Published 2017-04-12 No fix listed CWE-200
Priority CRITICAL 90KEV

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 20…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.99693 Published 2017-03-17 No fix listed
Priority MEDIUM 40

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Informati…

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.23249 Published 2017-03-17 No fix listed CWE-200
Priority MEDIUM 40

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Informati…

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.23249 Published 2017-03-17 No fix listed CWE-200
Priority MEDIUM 40

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Informati…

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.23249 Published 2017-03-17 No fix listed CWE-200
Priority MEDIUM 40

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Informati…

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.23249 Published 2017-03-17 No fix listed CWE-200
Priority MEDIUM 40

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Informati…

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.23249 Published 2017-03-17 No fix listed CWE-200
Priority MEDIUM 40

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Informati…

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.23249 Published 2017-03-17 No fix listed CWE-200
Priority MEDIUM 40

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Informati…

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.23249 Published 2017-03-17 No fix listed CWE-200
Priority MEDIUM 49

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows r…

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.43581 Published 2017-03-17 No fix listed CWE-200
Priority MEDIUM 40

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Windows Uniscribe I…

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.22811 Published 2017-03-17 No fix listed CWE-200
Priority MEDIUM 40

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Informati…

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.23249 Published 2017-03-17 No fix listed CWE-200
Priority MEDIUM 40

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows r…

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.22951 Published 2017-03-17 No fix listed CWE-200
Priority MEDIUM 40

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Informati…

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.23249 Published 2017-03-17 No fix listed CWE-200
Priority MEDIUM 40

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Informati…

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.23249 Published 2017-03-17 No fix listed CWE-200
Priority MEDIUM 40

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Informati…

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.23249 Published 2017-03-17 No fix listed CWE-200
Load more