ByteOS

Hyperlink: http://blog.trendmicro.com/trendlabs-security-intelligence/a-look-at-the-open-type-font-manager-vulnerability-from-the-hacking-team-leak/

Product:Windows

Added At:28 Mar, 2022

Due At:18 Apr, 2022

Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts.

Used in Ransomware

Unknown

CWE

CWE-119

Required Action:

Apply updates per vendor instructions.

Additional Notes:

https://nvd.nist.gov/vuln/detail/CVE-2015-2426

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:microsoft

Assigner Org ID:f38d906d-7342-40ea-92c1-6c4a2c6478c8

Published At:20 Jul, 2015 | 18:00

Updated At:21 Oct, 2025 | 23:55

▼CVE Numbering Authority (CNA)

Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted OpenType font, aka "OpenType Font Driver Vulnerability."

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.securitytracker.com/id/1032991	vdb-entry x_refsource_SECTRACK
http://www.kb.cert.org/vuls/id/103336	third-party-advisory x_refsource_CERT-VN
http://blog.trendmicro.com/trendlabs-security-intelligence/a-look-at-the-open-type-font-manager-vulnerability-from-the-hacking-team-leak/	x_refsource_MISC
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-078	vendor-advisory x_refsource_MS
https://www.exploit-db.com/exploits/38222/	exploit x_refsource_EXPLOIT-DB
http://www.securityfocus.com/bid/75951	vdb-entry x_refsource_BID

Hyperlink: http://www.securitytracker.com/id/1032991

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://www.kb.cert.org/vuls/id/103336

Resource:

third-party-advisory

x_refsource_CERT-VN

Resource:

x_refsource_MISC

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-078

Resource:

vendor-advisory

x_refsource_MS

Hyperlink: https://www.exploit-db.com/exploits/38222/

Resource:

exploit

x_refsource_EXPLOIT-DB

Hyperlink: http://www.securityfocus.com/bid/75951

Resource:

vdb-entry

x_refsource_BID

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
http://www.securitytracker.com/id/1032991	vdb-entry x_refsource_SECTRACK x_transferred
http://www.kb.cert.org/vuls/id/103336	third-party-advisory x_refsource_CERT-VN x_transferred
http://blog.trendmicro.com/trendlabs-security-intelligence/a-look-at-the-open-type-font-manager-vulnerability-from-the-hacking-team-leak/	x_refsource_MISC x_transferred
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-078	vendor-advisory x_refsource_MS x_transferred
https://www.exploit-db.com/exploits/38222/	exploit x_refsource_EXPLOIT-DB x_transferred
http://www.securityfocus.com/bid/75951	vdb-entry x_refsource_BID x_transferred

Hyperlink: http://www.securitytracker.com/id/1032991

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://www.kb.cert.org/vuls/id/103336

Resource:

third-party-advisory

x_refsource_CERT-VN

x_transferred

Hyperlink: http://blog.trendmicro.com/trendlabs-security-intelligence/a-look-at-the-open-type-font-manager-vulnerability-from-the-hacking-team-leak/

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-078

Resource:

vendor-advisory

x_refsource_MS

x_transferred

Hyperlink: https://www.exploit-db.com/exploits/38222/

Resource:

exploit

x_refsource_EXPLOIT-DB

x_transferred

Hyperlink: http://www.securityfocus.com/bid/75951

Resource:

vdb-entry

x_refsource_BID

x_transferred

2. CISA ADP Vulnrichment

Problem Types

Type	CWE ID	Description
CWE	CWE-124	CWE-124 Buffer Underwrite ('Buffer Underflow')

Type: CWE

CWE ID: CWE-124

Description: CWE-124 Buffer Underwrite ('Buffer Underflow')

Metrics

Version	Base score	Base severity	Vector
3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Metrics Other Info

kev

dateAdded:

2022-03-28

reference:

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-2426

Timeline

Event	Date
CVE-2015-2426 added to CISA KEV	2022-03-28 00:00:00

Event: CVE-2015-2426 added to CISA KEV

Date: 2022-03-28 00:00:00

References

Hyperlink	Resource
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-2426	government-resource

Hyperlink: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-2426

Resource:

government-resource

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:secure@microsoft.com

Published At:20 Jul, 2015 | 18:59

Updated At:22 Apr, 2026 | 16:43

CISA Catalog

Date Added	Due Date	Vulnerability Name	Required Action
2022-03-28	2022-04-18	Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability	Apply updates per vendor instructions.

Date Added: 2022-03-28

Due Date: 2022-04-18

Vulnerability Name: Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability

Required Action: Apply updates per vendor instructions.

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Secondary

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*

>>windows_10>>-

cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*

>>windows_7>>-

cpe:2.3:o:microsoft:windows_8:-:*:*:*:*:*:*:*

>>windows_8>>-

cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*

>>windows_8.1>>-

cpe:2.3:o:microsoft:windows_rt:-:*:*:*:*:*:*:*

>>windows_rt>>-

cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*

>>windows_rt_8.1>>-

cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*

>>windows_server_2008>>-

cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*

>>windows_server_2008>>r2

cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*

>>windows_server_2008>>r2

cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*

>>windows_server_2012>>-

cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*

>>windows_server_2012>>r2

cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*

>>windows_vista>>-

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov
CWE-124	Secondary	134c704f-9b21-4f2e-91b3-4a467353bcc0

CWE ID: CWE-119

Type: Primary

Source: nvd@nist.gov

CWE ID: CWE-124

Type: Secondary

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

References

Hyperlink	Source	Resource
http://blog.trendmicro.com/trendlabs-security-intelligence/a-look-at-the-open-type-font-manager-vulnerability-from-the-hacking-team-leak/	secure@microsoft.com	Exploit Third Party Advisory
http://www.kb.cert.org/vuls/id/103336	secure@microsoft.com	Third Party Advisory US Government Resource
http://www.securityfocus.com/bid/75951	secure@microsoft.com	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1032991	secure@microsoft.com	Third Party Advisory VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-078	secure@microsoft.com	Patch Vendor Advisory
https://www.exploit-db.com/exploits/38222/	secure@microsoft.com	Third Party Advisory VDB Entry
http://blog.trendmicro.com/trendlabs-security-intelligence/a-look-at-the-open-type-font-manager-vulnerability-from-the-hacking-team-leak/	af854a3a-2127-422b-91ae-364da2661108	Exploit Third Party Advisory
http://www.kb.cert.org/vuls/id/103336	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory US Government Resource
http://www.securityfocus.com/bid/75951	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1032991	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-078	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
https://www.exploit-db.com/exploits/38222/	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-2426	134c704f-9b21-4f2e-91b3-4a467353bcc0	US Government Resource

Hyperlink: http://blog.trendmicro.com/trendlabs-security-intelligence/a-look-at-the-open-type-font-manager-vulnerability-from-the-hacking-team-leak/

Source: secure@microsoft.com

Resource:

Exploit

Third Party Advisory

Hyperlink: http://www.kb.cert.org/vuls/id/103336

Source: secure@microsoft.com

Resource:

Third Party Advisory

US Government Resource

Hyperlink: http://www.securityfocus.com/bid/75951

Source: secure@microsoft.com

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.securitytracker.com/id/1032991

Source: secure@microsoft.com

Resource:

Third Party Advisory

VDB Entry

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-078

Source: secure@microsoft.com

Resource:

Patch

Vendor Advisory

Hyperlink: https://www.exploit-db.com/exploits/38222/

Source: secure@microsoft.com

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://blog.trendmicro.com/trendlabs-security-intelligence/a-look-at-the-open-type-font-manager-vulnerability-from-the-hacking-team-leak/

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Exploit

Third Party Advisory

Hyperlink: http://www.kb.cert.org/vuls/id/103336

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

US Government Resource

Hyperlink: http://www.securityfocus.com/bid/75951

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.securitytracker.com/id/1032991

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

VDB Entry

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-078

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Vendor Advisory

Hyperlink: https://www.exploit-db.com/exploits/38222/

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

VDB Entry

Hyperlink: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-2426

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Resource:

US Government Resource

Similar CVEs

7567Records found

CVE-2012-0162

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-57.60% / 98.20%

7 Day CHG~0.00%

Published-09 May, 2012 | 00:00

Updated-29 Apr, 2026 | 01:13

Microsoft .NET Framework 4 does not properly allocate buffers, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka ".NET Framework Buffer Allocation Vulnerability."

Product-.net_framework n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-0265

Matching Score-10

Assigner-Flexera Software LLC

Matching Score-10

Assigner-Flexera Software LLC

CVSS Score-9.3||HIGH

EPSS-4.28% / 89.05%

7 Day CHG~0.00%

Published-16 May, 2012 | 01:00

Updated-29 Apr, 2026 | 01:13

Stack-based buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted pathname for a file.

Product-windows quicktime n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-0663

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-69.62% / 98.68%

7 Day CHG~0.00%

Published-16 May, 2012 | 01:00

Updated-29 Apr, 2026 | 01:13

Multiple stack-based buffer overflows in Apple QuickTime before 7.7.2 on Windows allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TeXML file.

Product-windows quicktime n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-0669

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-3.34% / 87.55%

7 Day CHG~0.00%

Published-16 May, 2012 | 01:00

Updated-29 Apr, 2026 | 01:13

Buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with Sorenson encoding.

Product-windows quicktime n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-0141

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-61.59% / 98.36%

7 Day CHG~0.00%

Published-09 May, 2012 | 00:00

Updated-29 Apr, 2026 | 01:13

Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel File Format Memory Corruption Vulnerability."

Product-office_compatibility_pack office excel_viewer excel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2006-0005

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-75.52% / 98.91%

7 Day CHG~0.00%

Published-14 Feb, 2006 | 19:00

Updated-16 Apr, 2026 | 00:27

Buffer overflow in the plug-in for Microsoft Windows Media Player (WMP) 9 and 10, when used in browsers other than Internet Explorer and set as the default application to handle media files, allows remote attackers to execute arbitrary code via HTML with an EMBED element containing a long src attribute.

Product-windows-nt windows_server_2000 windows_server_2003 windows_2000 windows_2003_server windows_xp windows_2000_advanced_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2006-0007

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-62.17% / 98.38%

7 Day CHG~0.00%

Published-11 Jul, 2006 | 21:00

Updated-16 Apr, 2026 | 00:27

Buffer overflow in GIFIMP32.FLT, as used in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via a crafted GIF image that triggers memory corruption when it is parsed.

Product-office n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2006-0010

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-49.82% / 97.87%

7 Day CHG~0.00%

Published-10 Jan, 2006 | 22:00

Updated-16 Apr, 2026 | 00:27

Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows ME allows remote attackers to execute arbitrary code via an e-mail message or web page with a crafted Embedded Open Type (EOT) web font that triggers the overflow during decompression.

Product-windows_98 windows_nt windows_me windows_98se windows_2000 windows_2003_server windows_xp n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-0725

Matching Score-10

Assigner-IBM Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-9.3||HIGH

EPSS-1.03% / 77.74%

7 Day CHG~0.00%

Published-06 Apr, 2012 | 20:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 11.2.202.229 in Google Chrome before 18.0.1025.151 allow attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2012-0724.

Vendor-n/a Apple Inc.Oracle Corporation Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-air solaris windows flash_player macos chrome android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-0724

Matching Score-10

Assigner-IBM Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-9.3||HIGH

EPSS-1.03% / 77.74%

7 Day CHG~0.00%

Published-06 Apr, 2012 | 20:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.Oracle Corporation Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-air solaris windows flash_player macos chrome android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-15951

Matching Score-10

Matching Score-10

CVSS Score-7.8||HIGH

EPSS-2.74% / 86.26%

7 Day CHG~0.00%

Published-12 Oct, 2018 | 18:00

Updated-05 Aug, 2024 | 10:10

Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a buffer errors vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-mac_os_x acrobat_dc windows acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-8725

Matching Score-10

Matching Score-10

CVSS Score-7.8||HIGH

EPSS-32.41% / 96.95%

7 Day CHG~0.00%

Published-13 Sep, 2017 | 01:00

Updated-13 May, 2026 | 00:24

A remote code execution vulnerability exists in Microsoft Publisher 2007 Service Pack 3 and Microsoft Publisher 2010 Service Pack 2 when they fail to properly handle objects in memory, aka "Microsoft Office Publisher Remote Code Execution".

Product-publisher Microsoft Office

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-4186

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-11.62% / 93.80%

7 Day CHG~0.00%

Published-20 Feb, 2012 | 21:00

Updated-29 Apr, 2026 | 01:13

Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.78 on Windows allows remote attackers to execute arbitrary code via a crafted client-file-name parameter in a printer-url, a different vulnerability than CVE-2011-1705.

Vendor-n/a Microsoft Corporation Novell

Product-iprint windows n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-8744

Matching Score-10

Matching Score-10

CVSS Score-7.8||HIGH

EPSS-22.84% / 96.00%

7 Day CHG~0.00%

Published-13 Sep, 2017 | 01:00

Updated-13 May, 2026 | 00:24

A remote code execution vulnerability exists in Excel Services, Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, and Microsoft Excel 2016 when they fail to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8630, CVE-2017-8632, and CVE-2017-8731.

Product-office Microsoft Office

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-8630

Matching Score-10

Matching Score-10

CVSS Score-7.8||HIGH

EPSS-22.84% / 96.00%

7 Day CHG~0.00%

Published-13 Sep, 2017 | 01:00

Updated-13 May, 2026 | 00:24

Microsoft Office 2016 allows a remote code execution vulnerability when it fails to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8631, CVE-2017-8632, and CVE-2017-8744.

Product-office Microsoft Office

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-8632

Matching Score-10

Matching Score-10

CVSS Score-7.8||HIGH

EPSS-19.05% / 95.47%

7 Day CHG~0.00%

Published-13 Sep, 2017 | 01:00

Updated-13 May, 2026 | 00:24

A remote code execution vulnerability exists in Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Web Apps 2013, Microsoft Excel for Mac 2011, Microsoft Excel 2016 for Mac, and Microsoft Office Compatibility Pack Service Pack 3, when they fail to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8630, CVE-2017-8631, and CVE-2017-8744.

Product-office_compatibility_pack excel_for_mac office_web_apps excel Microsoft Office

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-8691

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-41.64% / 97.50%

7 Day CHG~0.00%

Published-08 Aug, 2017 | 21:00

Updated-13 May, 2026 | 00:24

Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow an attacker to execute code remotely on a target system when the Windows font library fails to properly handle specially crafted embedded fonts, aka "Express Compressed Fonts Remote Code Execution Vulnerability."

Product-windows_7 windows_server_2008 Windows Kernel-Mode Drivers

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-8513

Matching Score-10

Matching Score-10

CVSS Score-7.8||HIGH

EPSS-36.53% / 97.22%

7 Day CHG~0.00%

Published-15 Jun, 2017 | 01:00

Updated-13 May, 2026 | 00:24

A remote code execution vulnerability exists in Microsoft PowerPoint when the software fails to properly handle objects in memory, aka "Microsoft PowerPoint Remote Code Execution Vulnerability".

Product-powerpoint sharepoint_server Microsoft PowerPoint

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-8692

Matching Score-10

Matching Score-10

CVSS Score-7.5||HIGH

EPSS-25.59% / 96.34%

7 Day CHG~0.00%

Published-13 Sep, 2017 | 01:00

Updated-13 May, 2026 | 00:24

The Windows Uniscribe component on Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows remote code execution vulnerability when it fails to properly handle objects in memory, aka "Uniscribe Remote Code Execution Vulnerability".

Product-windows_server_2016 windows_10 windows_rt_8.1 windows_server_2012 Windows Uniscribe

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-8501

Matching Score-10

Matching Score-10

CVSS Score-7.8||HIGH

EPSS-31.29% / 96.87%

7 Day CHG~0.00%

Published-11 Jul, 2017 | 21:00

Updated-13 May, 2026 | 00:24

Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8502.

Product-office_online_server excel_viewer excel office_compatibility_pack office sharepoint_server Microsoft Office 2007 SP3, Microsoft Excel Viewer 2007 SP3, Microsoft Office 2010 SP2, Excel Services on Microsoft SharePoint Server 2010 SP1, Microsoft Office for Mac 2011, Microsoft Excel 2013 SP1, Microsoft Excel 2013 RT SP1, Microsoft SharePoint Enterprise Server 2013, Microsoft Excel 2016, Microsoft Office 2016 for Mac, Microsoft Office Online Server 2016, and Microsoft Office Compatibility Pack SP3.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-8538

Matching Score-10

Matching Score-10

CVSS Score-7.8||HIGH

EPSS-62.58% / 98.40%

7 Day CHG~0.00%

Published-26 May, 2017 | 20:00

Updated-13 May, 2026 | 00:24

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to memory corruption. aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability", a different vulnerability than CVE-2017-8540 and CVE-2017-8541.

Product-windows_10 windows_7 windows_8.1 windows_server_2008 forefront_security exchange_server windows_defender windows_server_2016 malware_protection_engine windows_rt_8.1 windows_server_2012 Malware Protection Engine

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-3251

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.11% / 84.42%

7 Day CHG~0.00%

Published-28 Oct, 2011 | 01:00

Updated-29 Apr, 2026 | 01:13

Apple QuickTime before 7.7.1 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted TKHD atoms in a QuickTime movie file.

Product-windows_vista quicktime windows_7 windows_xp n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-3219

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-3.57% / 87.96%

7 Day CHG~0.00%

Published-12 Oct, 2011 | 18:00

Updated-29 Apr, 2026 | 01:13

Buffer overflow in CoreMedia, as used in Apple iTunes before 10.5, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with H.264 encoding.

Product-itunes windows_vista windows_7 windows_xp n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-3252

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-6.20% / 91.03%

7 Day CHG~0.00%

Published-12 Oct, 2011 | 18:00

Updated-29 Apr, 2026 | 01:13

Buffer overflow in CoreAudio, as used in Apple iTunes before 10.5, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Advanced Audio Coding (AAC) stream.

Product-itunes windows_vista windows_7 windows_xp n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-8507

Matching Score-10

Matching Score-10

CVSS Score-7.8||HIGH

EPSS-22.84% / 96.00%

7 Day CHG~0.00%

Published-15 Jun, 2017 | 01:00

Updated-13 May, 2026 | 00:24

A remote code execution vulnerability exists in the way Microsoft Office software parses specially crafted email messages, aka "Microsoft Office Memory Corruption Vulnerability".

Product-outlook Microsoft Office

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-3249

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-3.50% / 87.84%

7 Day CHG~0.00%

Published-28 Oct, 2011 | 01:00

Updated-29 Apr, 2026 | 01:13

Buffer overflow in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with FLC encoding.

Product-windows_vista quicktime windows_7 windows_xp n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-8743

Matching Score-10

Matching Score-10

CVSS Score-7.8||HIGH

EPSS-32.44% / 96.95%

7 Day CHG~0.00%

Published-13 Sep, 2017 | 01:00

Updated-13 May, 2026 | 00:24

A remote code execution vulnerability exists in Microsoft PowerPoint 2016, Microsoft SharePoint Enterprise Server 2016, and Office Online Server when they fail to properly handle objects in memory, aka "PowerPoint Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8742.

Product-powerpoint office_online_server sharepoint_server Microsoft Office

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2424

Matching Score-10

Matching Score-10

Vendor-n/a Apple Inc.Sun Microsystems (Oracle Corporation)Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-16.13% / 94.93%

7 Day CHG~0.00%

Published-15 Aug, 2011 | 21:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted SWF file, as demonstrated by "about 400 unique crash signatures."

Product-adobe_air mac_os_x sunos windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2003

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-49.40% / 97.85%

7 Day CHG~0.00%

Published-12 Oct, 2011 | 01:00

Updated-29 Apr, 2026 | 01:13

Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted .fon file, aka "Font Library File Buffer Overrun Vulnerability."

Product-windows_7 windows_server_2008 windows_vista windows_xp windows_2003_server windows_server_2003 n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2099

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-8.76% / 92.66%

7 Day CHG~0.00%

Published-16 Jun, 2011 | 23:00

Updated-29 Apr, 2026 | 01:13

Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2098.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-7845

Matching Score-10

Assigner-Mozilla Corporation

Matching Score-10

Assigner-Mozilla Corporation

CVSS Score-8.8||HIGH

EPSS-0.76% / 73.78%

7 Day CHG~0.00%

Published-11 Jun, 2018 | 21:00

Updated-25 Nov, 2025 | 17:50

A buffer overflow occurs when drawing and validating elements using Direct 3D 9 with the ANGLE graphics library, used for WebGL content. This is due to an incorrect value being passed within the library during checks and results in a potentially exploitable crash. Note: This attack only affects Windows operating systems. Other operating systems are unaffected. This vulnerability affects Thunderbird < 52.5.2, Firefox ESR < 52.5.2, and Firefox < 57.0.2.

Vendor-Mozilla Corporation Microsoft Corporation

Product-windows thunderbird firefox Thunderbird Firefox ESR Firefox

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2096

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-13.51% / 94.36%

7 Day CHG~0.00%

Published-16 Jun, 2011 | 23:00

Updated-29 Apr, 2026 | 01:13

Heap-based buffer overflow in Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2103

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-10.81% / 93.50%

7 Day CHG~0.00%

Published-16 Jun, 2011 | 23:00

Updated-29 Apr, 2026 | 01:13

Adobe Reader and Acrobat 8.x before 8.3 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2097

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-10.65% / 93.44%

7 Day CHG~0.00%

Published-16 Jun, 2011 | 23:00

Updated-29 Apr, 2026 | 01:13

Buffer overflow in Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2094 and CVE-2011-2095.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2094

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-22.98% / 96.02%

7 Day CHG~0.00%

Published-16 Jun, 2011 | 23:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2427

Matching Score-10

Matching Score-10

Vendor-n/a Apple Inc.Sun Microsystems (Oracle Corporation)Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-2.11% / 84.43%

7 Day CHG~0.00%

Published-22 Sep, 2011 | 01:00

Updated-29 Apr, 2026 | 01:13

Stack-based buffer overflow in the ActionScript Virtual Machine (AVM) component in Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows attackers to execute arbitrary code or cause a denial of service via unspecified vectors.

Product-mac_os_x sunos windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2095

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-22.98% / 96.02%

7 Day CHG~0.00%

Published-16 Jun, 2011 | 23:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3119

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-31.11% / 96.86%

7 Day CHG~0.00%

Published-12 Jun, 2013 | 01:00

Updated-29 Apr, 2026 | 01:13

Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3114.

Product-internet_explorer n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2426

Matching Score-10

Matching Score-10

Vendor-n/a Apple Inc.Sun Microsystems (Oracle Corporation)Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-13.77% / 94.42%

7 Day CHG~0.00%

Published-22 Sep, 2011 | 01:00

Updated-29 Apr, 2026 | 01:13

Stack-based buffer overflow in the ActionScript Virtual Machine (AVM) component in Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows remote attackers to execute arbitrary code via unspecified vectors.

Product-mac_os_x sunos windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-1990

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-63.52% / 98.43%

7 Day CHG~0.00%

Published-15 Sep, 2011 | 10:00

Updated-29 Apr, 2026 | 01:13

Microsoft Excel 2007 SP2; Excel in Office 2007 SP2; Excel Viewer SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and Excel Services on Office SharePoint Server 2007 SP2 do not properly validate the sign of an unspecified array index, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Out of Bounds Array Indexing Vulnerability."

Product-excel_viewer excel office_compatibility_pack office sharepoint_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2098

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-7.09% / 91.68%

7 Day CHG~0.00%

Published-16 Jun, 2011 | 23:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-1988

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-62.10% / 98.37%

7 Day CHG~0.00%

Published-15 Sep, 2011 | 10:00

Updated-29 Apr, 2026 | 01:13

Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly parse records in Excel spreadsheets, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Heap Corruption Vulnerability."

Product-excel_viewer excel office_compatibility_pack open_xml_file_format_converter office n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-1278

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-50.08% / 97.88%

7 Day CHG~0.00%

Published-16 Jun, 2011 | 20:21

Updated-29 Apr, 2026 | 01:13

Microsoft Excel 2002 SP3 and Office 2004 for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel WriteAV Vulnerability."

Product-office excel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-1274

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-50.12% / 97.88%

7 Day CHG~0.00%

Published-16 Jun, 2011 | 20:21

Updated-29 Apr, 2026 | 01:13

Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Out of Bounds Array Access Vulnerability."

Product-excel_viewer excel office_compatibility_pack open_xml_file_format_converter office n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-1279

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-43.53% / 97.59%

7 Day CHG~0.00%

Published-16 Jun, 2011 | 20:21

Updated-29 Apr, 2026 | 01:13

Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Out of Bounds WriteAV Vulnerability."

Product-open_xml_file_format_converter office excel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-1243

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-43.73% / 97.60%

7 Day CHG~0.00%

Published-13 Apr, 2011 | 18:00

Updated-29 Apr, 2026 | 01:13

The Windows Messenger ActiveX control in msgsc.dll in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via unspecified vectors that "corrupt the system state," aka "Microsoft Windows Messenger ActiveX Control Vulnerability."

Product-windows_xp n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-7022

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.49% / 66.07%

7 Day CHG~0.00%

Published-20 Jul, 2017 | 16:00

Updated-13 May, 2026 | 00:24

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

Product-itunes windows iphone_os safari tvos icloud n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-1457

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-4.02% / 88.69%

7 Day CHG~0.00%

Published-21 Jul, 2011 | 23:00

Updated-29 Apr, 2026 | 01:13

WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.

Product-webkit windows_7 mac_os_x windows_vista windows_xp safari mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-1260

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-79.87% / 99.13%

7 Day CHG~0.00%

Published-16 Jun, 2011 | 20:21

Updated-29 Apr, 2026 | 01:13

Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "Layout Memory Corruption Vulnerability."

Product-internet_explorer windows_7 windows_server_2008 windows_vista windows_xp windows_2003_server windows_server_2003 n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-1288

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-4.02% / 88.69%

7 Day CHG~0.00%

Published-21 Jul, 2011 | 23:00

Updated-29 Apr, 2026 | 01:13