ByteOS

Product

Windows 7

Versions

Affected

32-bit Systems Service Pack 1
x64-based Systems Service Pack 1

Vendor

Microsoft.PowerShell.Archive

Product

Versions

Affected

1.2.2.0

Vendor

Product

Windows 10 Servers

Versions

Affected

version 1709 (Server Core Installation)
version 1803 (Server Core Installation)

Vendor

Product

Windows Server 2012 R2

Versions

Affected

(Server Core installation)

Vendor

Product

Windows RT 8.1

Versions

Affected

Windows RT 8.1

Vendor

Product

Windows Server 2008 R2

Versions

Affected

Itanium-Based Systems Service Pack 1
x64-based Systems Service Pack 1
x64-based Systems Service Pack 1 (Server Core installation)

Vendor

Product

Windows Server 2012

Versions

Affected

(Server Core installation)

Vendor

Product

PowerShell Core

Versions

Affected

Vendor

Product

Windows Server 2016

Versions

Affected

(Server Core installation)

Vendor

Product

Windows 8.1

Versions

Affected

32-bit systems
x64-based systems

Vendor

Product

Windows 10

Versions

Affected

32-bit Systems
Version 1607 for 32-bit Systems
Version 1607 for x64-based Systems
Version 1703 for 32-bit Systems
Version 1703 for x64-based Systems
Version 1709 for 32-bit Systems
Version 1709 for ARM64-based Systems
Version 1709 for x64-based Systems
Version 1803 for 32-bit Systems
Version 1803 for ARM64-based Systems
Version 1803 for x64-based Systems
Version 1809 for 32-bit Systems
Version 1809 for ARM64-based Systems
Version 1809 for x64-based Systems
x64-based Systems

Vendor

Product

Windows Server 2019

Versions

Affected

(Server Core installation)

Problem Types

Type	CWE ID	Description
text	N/A	Remote Code Execution

Type: text

CWE ID: N/A

Description: Remote Code Execution

References

Hyperlink	Resource
http://www.securitytracker.com/id/1042108	vdb-entry x_refsource_SECTRACK
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8256	x_refsource_CONFIRM
http://www.securityfocus.com/bid/105781	vdb-entry x_refsource_BID

Hyperlink: http://www.securitytracker.com/id/1042108

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8256

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securityfocus.com/bid/105781

Resource:

vdb-entry

x_refsource_BID

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.securitytracker.com/id/1042108	vdb-entry x_refsource_SECTRACK x_transferred
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8256	x_refsource_CONFIRM x_transferred
http://www.securityfocus.com/bid/105781	vdb-entry x_refsource_BID x_transferred

Hyperlink: http://www.securitytracker.com/id/1042108

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8256

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.securityfocus.com/bid/105781

Resource:

vdb-entry

x_refsource_BID

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:secure@microsoft.com

Published At:14 Nov, 2018 | 01:29

Updated At:30 Sep, 2021 | 16:07

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	8.8	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.0

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

cpe:2.3:a:microsoft:microsoft.powershell.archive:1.2.2.0:*:*:*:*:*:*:*

>>microsoft.powershell.archive>>1.2.2.0

cpe:2.3:a:microsoft:powershell_core:6.0:*:*:*:*:*:*:*

>>powershell_core>>6.0

cpe:2.3:a:microsoft:powershell_core:6.1:*:*:*:*:*:*:*

>>powershell_core>>6.1

cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*

>>windows_10>>-

cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*

>>windows_10>>1607

cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*

>>windows_10>>1703

cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*

>>windows_10>>1709

cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*

>>windows_10>>1803

cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*

>>windows_10>>1809

cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*

>>windows_7>>-

cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*

>>windows_8.1>>-

cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*

>>windows_rt_8.1>>-

cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*

>>windows_server_2008>>r2

cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*

>>windows_server_2008>>r2

cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*

>>windows_server_2012>>-

cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*

>>windows_server_2012>>r2

cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*

>>windows_server_2016>>-

cpe:2.3:o:microsoft:windows_server_2016:1709:*:*:*:*:*:*:*

>>windows_server_2016>>1709

cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*

>>windows_server_2016>>1803

cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*

>>windows_server_2019>>-

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.securityfocus.com/bid/105781	secure@microsoft.com	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1042108	secure@microsoft.com	VDB Entry Third Party Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8256	secure@microsoft.com	Patch Vendor Advisory

Hyperlink: http://www.securityfocus.com/bid/105781

Source: secure@microsoft.com

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.securitytracker.com/id/1042108

Source: secure@microsoft.com

Resource:

VDB Entry

Third Party Advisory

Hyperlink: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8256

Source: secure@microsoft.com

Resource:

Patch

Vendor Advisory

Similar CVEs

3878Records found

CVE-2010-1885

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-91.20% / 99.64%

7 Day CHG~0.00%

Published-14 Jun, 2010 | 18:00

Updated-11 Apr, 2025 | 00:51

The MPC::HexToNum function in helpctr.exe in Microsoft Windows Help and Support Center in Windows XP and Windows Server 2003 does not properly handle malformed escape sequences, which allows remote attackers to bypass the trusted documents whitelist (fromHCP option) and execute arbitrary commands via a crafted hcp:// URL, aka "Help Center URL Validation Vulnerability."

Product-windows_server_2003 windows_xp windows_2003_server n/a

CWE ID-CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CVE-2010-1774

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-5.28% / 89.80%

7 Day CHG~0.00%

Published-11 Jun, 2010 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, accesses out-of-bounds memory during processing of HTML tables, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document.

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-1260

Matching Score-8

Matching Score-8

CVSS Score-7.5||HIGH

EPSS-48.00% / 97.65%

7 Day CHG~0.00%

Published-08 Jun, 2010 | 22:00

Updated-11 Apr, 2025 | 00:51

The IE8 Developer Toolbar in Microsoft Internet Explorer 8 SP1, SP2, and SP3 allows user-assisted remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Element Memory Corruption Vulnerability."

Product-windows_7 windows_xp windows_server_2008 windows_2003_server windows_vista internet_explorer n/a ie

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2016-0054

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-31.52% / 96.67%

7 Day CHG~0.00%

Published-10 Feb, 2016 | 11:00

Updated-12 Apr, 2025 | 10:46

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3, Excel Services on SharePoint Server 2010 SP2, Excel Services on SharePoint Server 2013 SP1, and Office Web Apps 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."

Product-sharepoint_designer office_web_apps office_compatibility_pack excel sharepoint_server excel_viewer excel_for_mac sharepoint_foundation n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-1262

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-63.35% / 98.36%

7 Day CHG~0.00%

Published-08 Jun, 2010 | 22:00

Updated-11 Apr, 2025 | 00:51

Microsoft Internet Explorer 6 SP1 and SP2, 7, and 8 allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, related to the CStyleSheet object and a free of the root container, aka "Memory Corruption Vulnerability."

Product-windows_7 windows_xp windows_server_2008 windows_2000 windows_2003_server windows_vista internet_explorer n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2010-1261

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-56.43% / 98.06%

7 Day CHG~0.00%

Published-08 Jun, 2010 | 22:00

Updated-11 Apr, 2025 | 00:51

Product-windows_7 windows_xp windows_server_2008 windows_2003_server windows_vista internet_explorer n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2010-1287

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-4.40% / 88.78%

7 Day CHG~0.00%

Published-13 May, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-2010-1286, CVE-2010-1289, CVE-2010-1290, and CVE-2010-1291.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows windows_7 shockwave_player windows_server_2008 windows_server_2003 windows_vista macos n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-1285

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-7.70% / 91.74%

7 Day CHG~0.00%

Published-30 Jun, 2010 | 18:00

Updated-11 Apr, 2025 | 00:51

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via unspecified manipulations involving the newclass (0x58) operator and an "invalid pointer vulnerability" that triggers memory corruption, a different vulnerability than CVE-2010-2168 and CVE-2010-2201.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2010-1403

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-11.05% / 93.29%

7 Day CHG~0.00%

Published-11 Jun, 2010 | 17:28

Updated-11 Apr, 2025 | 00:51

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, accesses uninitialized memory during the handling of a use element in an SVG document, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted document containing XML that triggers a parsing error, related to ProcessInstruction.

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-1396

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-4.83% / 89.31%

7 Day CHG~0.00%

Published-11 Jun, 2010 | 17:28

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to the contentEditable attribute and removing container elements.

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CVE-2010-1283

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-8.61% / 92.25%

7 Day CHG~0.00%

Published-13 May, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

Adobe Shockwave Player before 11.5.7.609 does not properly parse 3D objects in .dir (aka Director) files, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a modified field in a 0xFFFFFF49 record.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows shockwave_player macos n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-1286

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-4.40% / 88.78%

7 Day CHG~0.00%

Published-13 May, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-2010-1287, CVE-2010-1289, CVE-2010-1290, and CVE-2010-1291.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows windows_7 shockwave_player windows_server_2008 windows_server_2003 windows_vista macos n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-1241

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-26.20% / 96.18%

7 Day CHG~0.00%

Published-05 Apr, 2010 | 15:15

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in the custom heap management system in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, aka FG-VD-10-005.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-1245

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-61.40% / 98.28%

7 Day CHG~0.00%

Published-08 Jun, 2010 | 20:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed SxView (0xB0) record, aka "Excel Record Memory Corruption Vulnerability," a different vulnerability than CVE-2010-0824 and CVE-2010-0821.

Product-open_xml_file_format_converter office excel n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2010-1297

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-93.39% / 99.81%

7 Day CHG~0.00%

Published-08 Jun, 2010 | 18:00

Updated-22 Oct, 2025 | 01:15

Known KEV||Action Due Date - 2022-06-22||The impacted product is end-of-life and should be disconnected if still in use.

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content, related to authplay.dll and the ActionScript Virtual Machine 2 (AVM2) newfunction instruction, as exploited in the wild in June 2010.

Vendor-n/a SUSE Microsoft Corporation openSUSE Apple Inc.Adobe Inc.

Product-mac_os_x flash_player air windows opensuse linux_enterprise acrobat n/a Flash Player

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-0071

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-20.46% / 95.42%

7 Day CHG~0.00%

Published-10 Feb, 2016 | 11:00

Updated-12 Apr, 2025 | 10:46

Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."

Product-internet_explorer n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-1385

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-3.26% / 86.89%

7 Day CHG~0.00%

Published-11 Jun, 2010 | 17:28

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document.

Product-windows_7 windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CVE-2010-1414

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-12.60% / 93.81%

7 Day CHG~0.00%

Published-11 Jun, 2010 | 17:28

Updated-11 Apr, 2025 | 00:51

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CVE-2010-1412

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-14.68% / 94.34%

7 Day CHG~0.00%

Published-11 Jun, 2010 | 17:28

Updated-11 Apr, 2025 | 00:51

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CVE-2010-1383

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-0.56% / 67.89%

7 Day CHG~0.00%

Published-21 Jul, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

CFNetwork in Apple Safari before 5.0.6 on Windows allows remote web servers to execute arbitrary code by replaying the NTLM credentials of a client user, related to a "credential reflection" issue.

Product-windows_7 cfnetwork windows_xp windows_vista safari n/a

CVE-2020-9657

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-3.00% / 86.29%

7 Day CHG~0.00%

Published-25 Jun, 2020 | 21:15

Updated-04 Aug, 2024 | 10:34

Adobe Premiere Rush versions 1.5.12 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Microsoft Corporation Adobe Inc.

Product-windows premiere_rush Adobe Premiere Rush

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-1793

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-18.46% / 95.09%

7 Day CHG~0.00%

Published-30 Jul, 2010 | 20:00

Updated-11 Apr, 2025 | 00:51

Multiple use-after-free vulnerabilities in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a (1) font-face or (2) use element in an SVG document.

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CVE-2010-1787

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-7.11% / 91.36%

7 Day CHG~0.00%

Published-30 Jul, 2010 | 20:00

Updated-11 Apr, 2025 | 00:51

WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a floating element in an SVG document.

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-1792

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-7.11% / 91.36%

7 Day CHG~0.00%

Published-30 Jul, 2010 | 20:00

Updated-11 Apr, 2025 | 00:51

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-1786

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-7.06% / 91.33%

7 Day CHG~0.00%

Published-30 Jul, 2010 | 20:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a foreignObject element in an SVG document.

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CVE-2015-8635

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-47.08% / 97.60%

7 Day CHG-2.37%

Published-28 Dec, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8634, CVE-2015-8638, CVE-2015-8639, CVE-2015-8640, CVE-2015-8641, CVE-2015-8642, CVE-2015-8643, CVE-2015-8646, CVE-2015-8647, CVE-2015-8648, CVE-2015-8649, and CVE-2015-8650.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2010-1771

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-7.64% / 91.71%

7 Day CHG~0.00%

Published-11 Jun, 2010 | 19:00

Updated-11 Apr, 2025 | 00:51

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CVE-2010-1292

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-5.85% / 90.38%

7 Day CHG~0.00%

Published-13 May, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

The implementation of pami RIFF chunk parsing in Adobe Shockwave Player before 11.5.7.609 does not validate a certain value from a file before using it in file-pointer calculations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dir (aka Director) file.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows windows_7 shockwave_player windows_server_2008 windows_server_2003 windows_vista macos n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-1397

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-11.25% / 93.36%

7 Day CHG~0.00%

Published-11 Jun, 2010 | 17:28

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to a layout change during selection rendering and the DOCUMENT_POSITION_DISCONNECTED attribute in a container of an unspecified type.

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CVE-2010-1251

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-57.32% / 98.10%

7 Day CHG~0.00%

Published-08 Jun, 2010 | 20:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Excel file, aka "Excel Record Stack Corruption Vulnerability."

Product-office excel n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2010-1399

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-3.76% / 87.79%

7 Day CHG~0.00%

Published-11 Jun, 2010 | 17:28

Updated-11 Apr, 2025 | 00:51

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, accesses uninitialized memory during a selection change on a form input element, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document.

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-1410

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-17.91% / 95.00%

7 Day CHG~0.00%

Published-11 Jun, 2010 | 17:28

Updated-11 Apr, 2025 | 00:51

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via an SVG document with nested use elements.

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-1247

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-61.40% / 98.28%

7 Day CHG~0.00%

Published-08 Jun, 2010 | 20:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel file with a malformed RTD (0x813) record that triggers heap corruption, aka "Excel Memory Corruption Vulnerability," a different vulnerability than CVE-2010-0823 and CVE-2010-1249.

Product-excel n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2010-1248

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-62.25% / 98.31%

7 Day CHG~0.00%

Published-08 Jun, 2010 | 20:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed HFPicture (0x866) record, aka "Excel HFPicture Memory Corruption Vulnerability."

Product-office excel n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2010-1392

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-8.59% / 92.24%

7 Day CHG~0.00%

Published-11 Jun, 2010 | 17:28

Updated-11 Apr, 2025 | 00:51

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CVE-2010-1901

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-47.91% / 97.64%

7 Day CHG~0.00%

Published-11 Aug, 2010 | 18:00

Updated-11 Apr, 2025 | 00:51

Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Word Viewer; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly handle unspecified properties in rich text data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted RTF document, aka "Word RTF Parsing Engine Memory Corruption Vulnerability."

Product-office open_xml_file_format_converter word office_compatibility_pack office_word_viewer n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2010-1253

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-60.98% / 98.26%

7 Day CHG~0.00%

Published-08 Jun, 2010 | 20:00

Updated-11 Apr, 2025 | 00:51

Microsoft Office Excel 2002 SP3, 2007 SP1, and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML File Format Converter for Mac; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2; allows remote attackers to execute arbitrary code via an Excel file with crafted DBQueryExt records that allow a function call to a "user-controlled pointer," aka "Excel ADO Object Vulnerability."

Product-open_xml_file_format_converter office_compatibility_pack office excel n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2010-1790

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-3.08% / 86.50%

7 Day CHG~0.00%

Published-30 Jul, 2010 | 20:00

Updated-11 Apr, 2025 | 00:51

WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; does not properly handle just-in-time (JIT) compiled JavaScript stubs, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document, related to a "reentrancy issue."

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CVE-2010-0807

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-62.10% / 98.30%

7 Day CHG~0.00%

Published-31 Mar, 2010 | 19:00

Updated-11 Apr, 2025 | 00:51

Microsoft Internet Explorer 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, leading to memory corruption, aka "HTML Rendering Memory Corruption Vulnerability."

Product-windows_xp windows_server_2008 windows_server_2003 windows_2003_server windows_vista internet_explorer n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2010-1028

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-9.90% / 92.86%

7 Day CHG~0.00%

Published-19 Mar, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Integer overflow in the decompression functionality in the Web Open Fonts Format (WOFF) decoder in Mozilla Firefox 3.6 before 3.6.2 and 3.7 before 3.7 alpha 3 allows remote attackers to execute arbitrary code via a crafted WOFF file that triggers a buffer overflow, as demonstrated by the vd_ff module in VulnDisco 9.0.

Vendor-n/a Mozilla Corporation Microsoft Corporation

Product-windows_xp windows_vista firefox n/a

CVE-2010-0033

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-79.58% / 99.06%

7 Day CHG~0.00%

Published-10 Feb, 2010 | 18:00

Updated-11 Apr, 2025 | 00:51

Stack-based buffer overflow in Microsoft Office PowerPoint 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint Viewer TextBytesAtom Record Stack Overflow Vulnerability."

Product-powerpoint n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-0201

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-9.51% / 92.68%

7 Day CHG~0.00%

Published-14 Apr, 2010 | 15:44

Updated-11 Apr, 2025 | 00:51

Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allow attackers to cause a denial of service (memory corruption) or execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-0194, CVE-2010-0197, and CVE-2010-0204.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2020-9559

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-3.92% / 88.07%

7 Day CHG~0.00%

Published-26 Jun, 2020 | 20:09

Updated-05 May, 2025 | 17:16

Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Microsoft Corporation Adobe Inc.

Product-bridge windows Adobe Bridge

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-0244

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-35.63% / 96.97%

7 Day CHG~0.00%

Published-22 Jan, 2010 | 21:20

Updated-11 Apr, 2025 | 00:51

Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2009-2530 and CVE-2009-2531.

Product-windows_7 windows_xp windows_server_2008 windows_server_2003 windows_2000 windows_vista internet_explorer n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2010-0043

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-16.21% / 94.67%

7 Day CHG~0.00%

Published-12 Mar, 2010 | 20:00

Updated-11 Apr, 2025 | 00:51

ImageIO in Apple Safari before 4.0.5 and iTunes before 9.1 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted TIFF image.

Product-windows safari n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2010-0204

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-6.58% / 90.96%

7 Day CHG~0.00%

Published-14 Apr, 2010 | 15:44

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-0202

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-12.77% / 93.85%

7 Day CHG~0.00%

Published-14 Apr, 2010 | 15:44

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-0198, CVE-2010-0199, and CVE-2010-0203.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-0246

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-33.81% / 96.85%

7 Day CHG~0.00%

Published-22 Jan, 2010 | 21:20

Updated-11 Apr, 2025 | 00:51

Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2009-3671, CVE-2009-3674, and CVE-2010-0245.

Product-windows_7 windows_xp windows_server_2008 windows_server_2003 windows_vista internet_explorer n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2010-0268

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-44.91% / 97.50%

7 Day CHG~0.00%

Published-14 Apr, 2010 | 15:44

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the Windows Media Player ActiveX control in Windows Media Player (WMP) 9 on Microsoft Windows 2000 SP4 and XP SP2 and SP3 allows remote attackers to execute arbitrary code via crafted media content, aka "Media Player Remote Code Execution Vulnerability."

Product-windows_xp windows_media_player windows_2000 n/a

CVE-2010-0028

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-64.10% / 98.39%

7 Day CHG~0.00%

Published-10 Feb, 2010 | 18:00

Updated-11 Apr, 2025 | 00:51

Integer overflow in Microsoft Paint in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted JPEG (.JPG) file, aka "MS Paint Integer Overflow Vulnerability."