cve.bz

Microsoft Patch Tuesday, August 2006: the CVEs

Filter

Microsoft Patch Tuesday August 2006: the CVEs Microsoft published on 8 August 2006, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Jul 2006, Jun 2006, May 2006, Apr 2006, Mar 2006, Feb 2006, Jan 2006, Dec 2005, Nov 2005, Oct 2005, Sep 2005, Aug 2005. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. –CVE-2006-3638EPSS 37%

    Microsoft Internet Explorer 5.01 and 6 does not properly handle uninitialized COM objects, which allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code, as demonstrated by the Nth funct…

  2. –CVE-2006-3637ExploitEPSS 44%

    Microsoft Internet Explorer 5.01 SP4 and 6 does not properly handle various HTML layout component combinations, which allows user-assisted remote attackers to execute arbitrary code via a crafted HTML file that leads to memory corruption, …

  3. –CVE-2006-3451EPSS 41%

    Microsoft Internet Explorer 5 SP4 and 6 do not properly garbage collect when "multiple imports are used on a styleSheets collection" to construct a chain of Cascading Style Sheets (CSS), which allows remote attackers to execute arbitrary c…

  4. –CVE-2006-3450EPSS 41%

    Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code by using the document.getElementByID Javascript function to access crafted Cascading Style Sheet (CSS) elements, and possibly other unspecified vectors involvi…