CVE-2016-7295: Exposure of Sensitive Information to an Unauthorized Actor

The Common Log File System CLFS driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to obtain sensitive information from...

CVE-2016-7257: Exposure of Sensitive Information to an Unauthorized Actor

The GDI component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office for Mac 2011, and Office 2016 for Mac allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "GDI Information Disclosure Vulnerability."...

CVE-2016-7278: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Windows Hyperlink Object Library Information Disclosure Vulnerability."...

CVE-2016-7284: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Internet Explorer 10 and 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability."...

About the security content of iCloud for Windows 6.1

About the security content of iCloud for Windows 6.1 This document describes the security content of iCloud for Windows 6.1. For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent...

About the security content of iTunes 12.5.4 for Windows

About the security content of iTunes 12.5.4 for Windows This document describes the security content of iTunes 12.5.4 for Windows. For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

PT-2016-7294

Name of the Vulnerable Software and Affected Versions Windows Vista version SP2 Windows Server 2008 versions SP2 and R2 SP1 Windows 7 version SP1 Windows 8.1 Windows Server 2012 versions Gold and R2 Windows RT 8.1 Windows 10 versions Gold, 1511, and 1607 Windows Server 2016 Description The issue...

PT-2016-3010

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 10 through 11 Description The issue is related to the handling of objects in memory, allowing remote attackers to obtain sensitive information from process memory via a crafted web site. This could enable a...

PT-2016-3016

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 9 through 11 Description The issue allows remote attackers to obtain sensitive information from process memory via a crafted web site. This is due to the lack of protection for internal data. An attacker wh...

Microsoft Edge Windows Information Disclosure

The vulnerability of Microsoft Edge browser and the Windows operating system allows a perpetrator to obtain confidential information from the process memory...

Information disclosure

atmfd.dll in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to obtain sensitive information from process memory via a...

CVE-2016-7210

atmfd.dll in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to obtain sensitive information from process memory via a...

CVE-2016-7210: Exposure of Sensitive Information to an Unauthorized Actor

atmfd.dll in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to obtain sensitive information from process memory via a...

PT-2016-2966

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Description The issue allows remote attackers to obtain sensitive information from process memory via a crafted Open Type font on a web site. It is also related to insufficient access contr...

PT-2016-2967

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to a spoofing vulnerability that exists when Microsoft Edge does not properly parse HTTP content. This could allow an attacker to trick a user by redirecting them ...

CVE-2015-2080

The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header, aka JetLeak...

CVE-2015-2080

The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header, aka JetLeak...

CVE-2015-2080

CVE-2015-2080 affects Eclipse Jetty; vulnerability in exception handling allows remote attackers to disclose sensitive memory contents via illegal characters in HTTP headers (JetLeak). Affected product: Jetty versions before 9.2.9.v20150224. Impact per sources: information disclosure; no integrit...

CVE-2015-2080

The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header, aka JetLeak...

FontParser Buffer Overflow Vulnerability in Multiple Apple Products

Apple iOS and tvOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; tvOS is a smart TV operating system; Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems; watchOS is a smart watch FontParser is one ...