cve.bz

Microsoft Patch Tuesday, April 2016: the CVEs

Filter

Microsoft Patch Tuesday April 2016: the CVEs Microsoft published on 12 April 2016, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Mar 2016, Feb 2016, Jan 2016, Dec 2015, Nov 2015, Oct 2015, Sep 2015, Aug 2015, Jul 2015, Jun 2015, May 2015, Apr 2015. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. 7.8CVE-2016-0167KEVEPSS 5.7%

    The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via …

  2. 7.8CVE-2016-0165KEVExploitEPSS 14%

    The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via …

  3. 4.3CVE-2016-0162KEVEPSS 22%

    Microsoft Internet Explorer 9 through 11 allows remote attackers to determine the existence of files via crafted JavaScript code, aka "Internet Explorer Information Disclosure Vulnerability."

  4. 7.8CVE-2016-0151KEVExploitEPSS 63%

    The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mismanages process tokens, which allows local users to gain privileges via a crafted appli…