Patchfirst
Patchfirst

Microsoft Security

download.microsoft.com · Undated · Licence: not cleared; local research copy only

Read the original ↗

CVEs this report names

46 CVEs
  1. CVE-2012-0158Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability
    Microsoft · MSCOMCTL.OCXKEVRansomwarePublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution15 reports
    >99.9%Top 0.02%
    89.2priority
  2. CVE-2014-6332Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability
    Microsoft · WindowsKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution5 reports
    94.9%Top 0.14%
    89.1priority
  3. CVE-2015-1641Microsoft Office Memory Corruption Vulnerability
    Microsoft · OfficeKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1203Exploitation for Client Execution4 reports
    97.2%Top 0.1%
    87.4priority
  4. CVE-2010-0840Oracle JRE Unspecified Vulnerability
    Oracle · Java Runtime Environment (JRE)KEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter2 reports
    96.3%Top 0.12%
    86.0priority
  5. CVE-2012-0507Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
    Oracle · Java SEKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1211Exploitation for Stealth+1 more · 2 reports
    98.2%Top 0.09%
    86.0priority
  6. CVE-2015-1701Microsoft Win32k Privilege Escalation Vulnerability
    Microsoft · Win32kKEVRansomwarePublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation3 reports
    55.9%Top 0.95%
    86.0priority
  7. CVE-2015-0311Adobe Flash Player Remote Code Execution Vulnerability
    Adobe · Flash PlayerKEVPublic exploitCritical · 9.82 reports
    85.6%Top 0.28%
    85.9priority
  8. CVE-2010-0188Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability
    Adobe · Reader and AcrobatKEVRansomwarePublic exploitHigh · 7.8T1189Drive-by CompromiseT1105Ingress Tool Transfer2 reports
    88.2%Top 0.23%
    84.5priority
  9. CVE-2014-8439Adobe Flash Player Dereferenced Pointer Vulnerability
    Adobe · Flash PlayerKEVHigh · 8.8T1189Drive-by Compromise2 reports
    20.4%Top 2.5%
    79.8priority
  10. CVE-2014-0515Buffer overflow in Adobe Flash Player before 11.7.700.279 and 11.8.x through 13.0.x before 13.0.0.206 on Windows and…
    Public exploitT1189Drive-by CompromiseT1203Exploitation for Client Execution2 reports
    94.5%Top 0.15%
    78.2priority
  11. CVE-2015-3105Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before…
    Public exploitT1189Drive-by CompromiseT1203Exploitation for Client Execution+1 more · 2 reports
    90.1%Top 0.2%
    77.9priority
  12. CVE-2015-3113Adobe Flash Player Heap-Based Buffer Overflow Vulnerability
    Adobe · Flash PlayerKEVPublic exploitCritical · 9.8T1497Virtualization/Sandbox EvasionT1622Debugger Evasion+1 more · 3 reports
    99.8%Top 0.04%
    77.6priority
  13. CVE-2010-2568Microsoft Windows Remote Code Execution Vulnerability
    Microsoft · WindowsKEVPublic exploitHigh · 7.8T1204.001Malicious LinkT1059Command and Scripting Interpreter4 reports
    89.6%Top 0.21%
    77.4priority
  14. CVE-2012-1889Microsoft XML Core Services Memory Corruption Vulnerability
    Microsoft · XML Core ServicesKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter+1 more · 3 reports
    83.5%Top 0.32%
    76.8priority
  15. CVE-2014-0497Adobe Flash Player Integer Underflow Vulnerablity
    Adobe · Flash PlayerKEVPublic exploitCritical · 9.82 reports
    99.9%Top 0.03%
    76.0priority
  16. CVE-2015-0313Adobe Flash Player Use-After-Free Vulnerability
    Adobe · Flash PlayerKEVPublic exploitCritical · 9.82 reports
    95.3%Top 0.13%
    76.0priority
  17. CVE-2015-5119Adobe Flash Player Use-After-Free Vulnerability
    Adobe · Flash PlayerKEVPublic exploitEnd of lifeCritical · 9.8T1566.002Spearphishing LinkT1059.007JavaScript+3 more · 5 reports
    98.6%Top 0.08%
    74.8priority
  18. CVE-2011-1823Android OS Privilege Escalation Vulnerability
    Android · Android OSKEVPublic exploitHigh · 7.8T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation2 reports
    41.4%Top 1.3%
    74.3priority
  19. CVE-2012-1723Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
    Oracle · Java SEKEVRansomwarePublic exploitEnd of lifeCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter4 reports
    93.6%Top 0.16%
    73.8priority
  20. CVE-2013-0422Oracle JRE Remote Code Execution Vulnerability
    Oracle · Java Runtime Environment (JRE)KEVRansomwarePublic exploitEnd of lifeCritical · 9.8T1059Command and Scripting Interpreter2 reports
    97.0%Top 0.11%
    71.0priority
  21. CVE-2015-2590Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability
    Oracle · Java SEKEVCritical · 9.8T1190Exploit Public-Facing Application2 reports
    25.5%Top 2%
    70.6priority
  22. CVE-2013-2551Microsoft Internet Explorer Use-After-Free Vulnerability
    Microsoft · Internet ExplorerKEVRansomwarePublic exploitEnd of lifeHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution2 reports
    73.9%Top 0.52%
    70.2priority
  23. CVE-2015-1770Microsoft Office Uninitialized Memory Use Vulnerability
    Microsoft · OfficeKEVHigh · 8.8T1204.002Malicious FileT1059Command and Scripting Interpreter2 reports
    35.0%Top 1.6%
    70.0priority
  24. CVE-2015-1769Microsoft Windows Mount Manager Privilege Escalation Vulnerability
    Microsoft · WindowsKEVPublic exploitMedium · 6.6T1200Hardware AdditionsT1068Exploitation for Privilege Escalation1 report
    4.1%Top 9.3%
    69.6priority
  25. CVE-2013-0074Microsoft Silverlight Double Dereference Vulnerability
    Microsoft · SilverlightKEVRansomwarePublic exploitEnd of lifeHigh · 7.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter2 reports
    78.9%Top 0.41%
    69.5priority
  26. CVE-2015-7645Adobe Flash Player Arbitrary Code Execution Vulnerability
    Adobe · Flash PlayerKEVRansomwarePublic exploitEnd of lifeHigh · 7.8T1204.002Malicious File2 reports
    65.3%Top 0.74%
    69.4priority
  27. CVE-2015-2387Microsoft ATM Font Driver Privilege Escalation Vulnerability
    Microsoft · ATM Font DriverKEVHigh · 7.8T1068Exploitation for Privilege Escalation2 reports
    34.9%Top 1.6%
    69.3priority
  28. CVE-2013-7331Microsoft Internet Explorer Information Disclosure Vulnerability
    Microsoft · Internet ExplorerKEVPublic exploitEnd of lifeMedium · 6.5T1592Gather Victim Host Information2 reports
    50.2%Top 1.1%
    68.5priority
  29. CVE-2015-2424Microsoft PowerPoint Memory Corruption Vulnerability
    Microsoft · PowerPointKEVHigh · 8.8T1204.002Malicious FileT1203Exploitation for Client Execution+1 more · 1 report
    40.1%Top 1.4%
    67.8priority
  30. CVE-2013-2460Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier…
    Public exploitT1190Exploit Public-Facing ApplicationT1211Exploitation for Stealth2 reports
    70.0%Top 0.62%
    67.4priority
  31. CVE-2015-2360Microsoft Win32k Privilege Escalation Vulnerability
    Microsoft · Win32kKEVHigh · 8.8T1068Exploitation for Privilege Escalation1 report
    14.8%Top 3.3%
    67.4priority
  32. CVE-2015-0359Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows…
    Public exploitT1189Drive-by CompromiseT1203Exploitation for Client Execution1 report
    92.1%Top 0.18%
    66.4priority
  33. CVE-2015-0336Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before…
    Public exploitT1189Drive-by CompromiseT1203Exploitation for Client Execution1 report
    70.4%Top 0.61%
    65.7priority
  34. CVE-2015-3090Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before…
    Public exploitT1189Drive-by CompromiseT1203Exploitation for Client Execution+1 more · 1 report
    83.2%Top 0.32%
    65.4priority
  35. CVE-2009-0075Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows…
    Public exploitT1189Drive-by CompromiseT1203Exploitation for Client Execution1 report
    84.6%Top 0.3%
    64.9priority
  36. CVE-2015-4902Oracle Java SE Integrity Check Vulnerability
    Oracle · Java SEKEVMedium · 5.3T1190Exploit Public-Facing ApplicationT1565Data Manipulation1 report
    13.6%Top 3.5%
    64.9priority
  37. CVE-2015-0310Adobe Flash Player ASLR Bypass Vulnerability
    Adobe · Flash PlayerKEVEnd of lifeHigh · 7.8T1189Drive-by Compromise2 reports
    15.1%Top 3.3%
    63.9priority
  38. CVE-2014-0322Microsoft Internet Explorer Use-After-Free Vulnerability
    Microsoft · Internet ExplorerKEVPublic exploitEnd of lifeHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter3 reports
    85.1%Top 0.29%
    61.8priority
  39. CVE-2010-3336Microsoft Office XP SP3, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac…
    2 reports
    23.9%Top 2.2%
    61.4priority
  40. CVE-2014-1776Microsoft Internet Explorer Memory Corruption Vulnerability
    Microsoft · Internet ExplorerKEVPublic exploitEnd of lifeCritical · 9.8T1059Command and Scripting InterpreterT1499.004Application or System Exploitation2 reports
    82.7%Top 0.33%
    60.9priority
  41. CVE-2015-3043Adobe Flash Player Memory Corruption Vulnerability
    Adobe · Flash PlayerKEVPublic exploitEnd of lifeCritical · 9.8T1499.004Application or System Exploitation2 reports
    73.9%Top 0.52%
    60.9priority
  42. CVE-2006-6456Unspecified vulnerability in Microsoft Word 2000, 2002, and 2003 and Word Viewer 2003 allows remote attackers to…
    1 report
    32.2%Top 1.7%
    59.2priority
  43. CVE-2015-3104Integer overflow in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X…
    1 report
    5.7%Top 7%
    57.5priority
  44. CVE-2015-0097Microsoft Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Excel 2010 SP2, PowerPoint 2010 SP2, and Word 2010 SP2…
    Public exploit1 report
    40.9%Top 1.3%
    29.7priority
  45. CVE-2011-3874Stack-based buffer overflow in libsysutils in Android 2.2.x through 2.2.2 and 2.3.x through 2.3.6 allows user-assisted…
    1 report
    11.4%Top 4%
    23.1priority
  46. CVE-2014-3897Cross-site scripting (XSS) vulnerability in Homepage Decorator PerlMailer 3.10 and earlier allows remote attackers to…
    1 report
    1.1%Top 33%
    17.9priority

Where it names them

CVE-2012-0158
CVE-2012-0158
Original (opens in a new tab) ↗
CVE-2012-0158, 52
Original (opens in a new tab) ↗
CVE-2014-6332
CVE-2014-6332
Original (opens in a new tab) ↗
Exploit kit 0.60% 0.42% 0.22% 0.04% JS/Neclu Exploit kit 0.11% 0.06% 0.03% 0.14% HTML/IframeRef Generic 0.10% 0.09% 0.07% 0.05% HTML/Meadgive Exploit kit 0.15% 0.08% 0.06% 0.05% JS/NeutrinoEK Exploit kit 0.00% 0.01% 0.07% 0.04% Win32/Sdbby Other — — 0.00% 0.09% CVE-2014-6332 Operating system — 0.03% 0.04%
Original (opens in a new tab) ↗
CVE-2014-6332 is a vulnerability in Windows Object Linking and Embedding
Original (opens in a new tab) ↗
CVE-2014-6332 is a vulnerability in Windows Object Linking and Embedding
Original (opens in a new tab) ↗
f an exploit” on pages 3–10 of Microsoft Security Intelligence Report, Volume 18 (July–December 2014), available from the Microsoft Download Center, for 0.00% 0.05% 0.10% 0.15% 0.20% 0.25% 0.30% 0.35% 0.40% 3Q14 4Q14 1Q15 2Q15 Encounter rate (percent of all reporting computers) Win32/CplLnk CVE-2014-6332
Original (opens in a new tab) ↗
CVE-2015-1641
CVE-2015-1641
Original (opens in a new tab) ↗
 The STRONTIUM exploits that target CVE-2015-1641 and CVE-2015-
Original (opens in a new tab) ↗
CVE-2015-1641 Word RTF Microsoft Word MS15-033
Original (opens in a new tab) ↗
46 CVE-2013-2551, 46, 54 CVE-2013-7331, 54 CVE-2014-0322, 54 CVE-2014-0497, 53 CVE-2014-0515, 53 CVE-2014-6332, 43, 44, 50 CVE-2014-8439, 46, 53 CVE-2015-0097, 57 CVE-2015-0310, 47 CVE-2015-0311, 46, 47, 53 CVE-2015-0313, 46, 47, 53 CVE-2015-0336, 47, 53 CVE-2015-0359, 47, 53 CVE-2015-1641, 16,
Original (opens in a new tab) ↗
CVE-2010-0840
CVE-2010-0840
Original (opens in a new tab) ↗
CVE-2010-0840 is a JRE vulnerability that was first
Original (opens in a new tab) ↗
CVE-2010-0840, 47, 49
Original (opens in a new tab) ↗
CVE-2012-0507
CVE-2012-0507
Original (opens in a new tab) ↗
CVE-2012-0507 allows an unsigned Java applet to gain elevated permissions
Original (opens in a new tab) ↗
CVE-2012-0507, 47, 49
Original (opens in a new tab) ↗
CVE-2015-1701
ash CVE-2015-3043 CVE-2015-5119 CVE-2015-7645 (0-day) Internet Explorer CVE-2014-1776 CVE-2014-6332 CVE-2014-3897 Remote code execution through malicious attachment Microsoft Word CVE-2015-1641 (0-day) Microsoft Word CVE-2015-2424 (0-day) Privilege escalation or sandbox escape Win32k CVE-2015-1701
Original (opens in a new tab) ↗
privilege escalation exploit (CVE-2015-1701, addressed by Security Bulletin
Original (opens in a new tab) ↗
 The kernel vulnerabilities exploited by STRONTIUM (CVE-2015-1701,
Original (opens in a new tab) ↗
STRONTIUM's CVE-2015-1701 exploit terminates execution on the newest versions of Windows
Original (opens in a new tab) ↗
CVE-2015-1701 Win32k EoP Microsoft Windows MS15-051
Original (opens in a new tab) ↗
CVE-2015-0311
Player (CVE-2014-8439, CVE-2015-0311, and CVE-2015-0313,
Original (opens in a new tab) ↗
CVE-2015-0311 Adobe Flash Player APSB15-03 Angler
Original (opens in a new tab) ↗
CVE-2014-8439, CVE-2015-0311, CVE-2015-0313, and CVE-2015-0359;
Original (opens in a new tab) ↗
CVE-2015-0311
Original (opens in a new tab) ↗
47, 48, 49 CVE-2012-1889, 54 CVE-2013-0074, 46 CVE-2013-0422, 47, 49 CVE-2013-2460, 46 CVE-2013-2551, 46, 54 CVE-2013-7331, 54 CVE-2014-0322, 54 CVE-2014-0497, 53 CVE-2014-0515, 53 CVE-2014-6332, 43, 44, 50 CVE-2014-8439, 46, 53 CVE-2015-0097, 57 CVE-2015-0310, 47 CVE-2015-0311, 46, 47,
Original (opens in a new tab) ↗
CVE-2010-0188
files containing malicious JavaScript that targets CVE-2010-0188 and other
Original (opens in a new tab) ↗
to address CVE-2010-0188.
Original (opens in a new tab) ↗
CVE-2010-0188, 52
Original (opens in a new tab) ↗
CVE-2014-8439
Player (CVE-2014-8439, CVE-2015-0311, and CVE-2015-0313,
Original (opens in a new tab) ↗
CVE-2014-8439, CVE-2015-0311, CVE-2015-0313, and CVE-2015-0359;
Original (opens in a new tab) ↗
50, 51 CVE-2012-0158, 52 CVE-2012-0507, 47, 49 CVE-2012-1723, 47, 48, 49 CVE-2012-1889, 54 CVE-2013-0074, 46 CVE-2013-0422, 47, 49 CVE-2013-2460, 46 CVE-2013-2551, 46, 54 CVE-2013-7331, 54 CVE-2014-0322, 54 CVE-2014-0497, 53 CVE-2014-0515, 53 CVE-2014-6332, 43, 44, 50 CVE-2014-8439, 46,
Original (opens in a new tab) ↗
CVE-2014-0515
CVE-2014-0515, the most commonly exploited Adobe Flash Player
Original (opens in a new tab) ↗
CVE-2014-0515
Original (opens in a new tab) ↗
43, 50 CVE-2010-3336, 52 CVE-2011-1823, 50, 51 CVE-2011-3874, 50, 51 CVE-2012-0158, 52 CVE-2012-0507, 47, 49 CVE-2012-1723, 47, 48, 49 CVE-2012-1889, 54 CVE-2013-0074, 46 CVE-2013-0422, 47, 49 CVE-2013-2460, 46 CVE-2013-2551, 46, 54 CVE-2013-7331, 54 CVE-2014-0322, 54 CVE-2014-0497, 53 CVE-2014-0515,
Original (opens in a new tab) ↗
CVE-2015-3105
Player APSB15-04 Angler CVE-2015-0336 Adobe Flash Player APSB15-05 Nuclear (JS/Neclu); Angler CVE-2015-0359 Adobe Flash Player APSB15-06 Angler CVE-2015-3090 Adobe Flash Player APSB15-09 Angler CVE-2015-3104 Adobe Flash Player APSB15-11 Angler CVE-2015-3105 Adobe Flash Player APSB15-11 Magnitude
Original (opens in a new tab) ↗
46, 47, 53 CVE-2015-0313, 46, 47, 53 CVE-2015-0336, 47, 53 CVE-2015-0359, 47, 53 CVE-2015-1641, 16, 57 CVE-2015-1701, 14, 18, 19, 57 CVE-2015-1769, 57 CVE-2015-1770, 57 CVE-2015-2360, 57 CVE-2015-2424, 16, 17 CVE-2015-3043, 17, 18, 57 CVE-2015-3090, 47 CVE-2015-3104, 47 CVE-2015-3105,
Original (opens in a new tab) ↗
CVE-2015-3113
APSB15-05 Nuclear (JS/Neclu); Angler CVE-2015-0359 Adobe Flash Player APSB15-06 Angler CVE-2015-3090 Adobe Flash Player APSB15-09 Angler CVE-2015-3104 Adobe Flash Player APSB15-11 Angler CVE-2015-3105 Adobe Flash Player APSB15-11 Magnitude (HTML/Pangimop) CVE-2015-3113 Adobe Flash Player APSB15-14
Original (opens in a new tab) ↗
47, 53 CVE-2015-0313, 46, 47, 53 CVE-2015-0336, 47, 53 CVE-2015-0359, 47, 53 CVE-2015-1641, 16, 57 CVE-2015-1701, 14, 18, 19, 57 CVE-2015-1769, 57 CVE-2015-1770, 57 CVE-2015-2360, 57 CVE-2015-2424, 16, 17 CVE-2015-3043, 17, 18, 57 CVE-2015-3090, 47 CVE-2015-3104, 47 CVE-2015-3105, 47 CVE-2015-3113,
Original (opens in a new tab) ↗
CVE-2010-2568
For example, the CVE-2010-2568 CplLnk
Original (opens in a new tab) ↗
CVE-2010-2568 (CplLnk) Operating system 0.35% 0.35% 0.30% 0.23%
Original (opens in a new tab) ↗
CVE-2010-2568, the most commonly targeted individual vulnerability in
Original (opens in a new tab) ↗
An attacker exploits CVE-2010- 2568 by creating a malformed shortcut file—typically distributed through
Original (opens in a new tab) ↗
exploits of CVE-2010-2568.
Original (opens in a new tab) ↗
CVE-2012-1889
CVE-2012-1889
Original (opens in a new tab) ↗
43, 50, 65, 143 Croatia, 128 Crowti, 74, 80, 143 CVE identifier, 31, 32, 40 CVE-2009-0075, 54 CVE-2010-0188, 52 CVE-2010-0840, 47, 49 CVE-2010-2568, 40, 43, 50 CVE-2010-3336, 52 CVE-2011-1823, 50, 51 CVE-2011-3874, 50, 51 CVE-2012-0158, 52 CVE-2012-0507, 47, 49 CVE-2012-1723, 47, 48, 49 CVE-2012-1889,
Original (opens in a new tab) ↗
CVE-2014-0497
CVE-2014-0497 is an integer underflow vulnerability.
Original (opens in a new tab) ↗
CVE-2014-0497
Original (opens in a new tab) ↗
40, 43, 50 CVE-2010-3336, 52 CVE-2011-1823, 50, 51 CVE-2011-3874, 50, 51 CVE-2012-0158, 52 CVE-2012-0507, 47, 49 CVE-2012-1723, 47, 48, 49 CVE-2012-1889, 54 CVE-2013-0074, 46 CVE-2013-0422, 47, 49 CVE-2013-2460, 46 CVE-2013-2551, 46, 54 CVE-2013-7331, 54 CVE-2014-0322, 54 CVE-2014-0497,
Original (opens in a new tab) ↗
CVE-2015-0313
Player (CVE-2014-8439, CVE-2015-0311, and CVE-2015-0313,
Original (opens in a new tab) ↗
CVE-2015-0313 Adobe Flash Player APSB15-04 Angler
Original (opens in a new tab) ↗
CVE-2014-8439, CVE-2015-0311, CVE-2015-0313, and CVE-2015-0359;
Original (opens in a new tab) ↗
54 CVE-2013-0074, 46 CVE-2013-0422, 47, 49 CVE-2013-2460, 46 CVE-2013-2551, 46, 54 CVE-2013-7331, 54 CVE-2014-0322, 54 CVE-2014-0497, 53 CVE-2014-0515, 53 CVE-2014-6332, 43, 44, 50 CVE-2014-8439, 46, 53 CVE-2015-0097, 57 CVE-2015-0310, 47 CVE-2015-0311, 46, 47, 53 CVE-2015-0313, 46, 47,
Original (opens in a new tab) ↗
CVE-2015-5119
CVE-2015-5119
Original (opens in a new tab) ↗
CVE-2011-1823
of Microsoft Security Intelligence Report, Volume 18 (July–December 2014), available from the Microsoft Download Center, for 0.00% 0.05% 0.10% 0.15% 0.20% 0.25% 0.30% 0.35% 0.40% 3Q14 4Q14 1Q15 2Q15 Encounter rate (percent of all reporting computers) Win32/CplLnk CVE-2014-6332 Unix/Lotoor CVE-2011-1823
Original (opens in a new tab) ↗
CVE-2011-1823 is sometimes called the GingerBreak
Original (opens in a new tab) ↗
bundled with clean applications, and includes an exploit for the CVE- 2011-1823 vulnerability disguised as an image file.
Original (opens in a new tab) ↗
CVE-2011-1823, 50, 51
Original (opens in a new tab) ↗
See CVE-2011-1823
Original (opens in a new tab) ↗
CVE-2012-1723
CVE-2012-1723
Original (opens in a new tab) ↗
CVE-2012-1723, the most commonly encountered individual Java exploit in
Original (opens in a new tab) ↗
“The rise of a new Java vulnerability - CVE-2012-1723”
Original (opens in a new tab) ↗
40, 43, 50, 65, 143 Croatia, 128 Crowti, 74, 80, 143 CVE identifier, 31, 32, 40 CVE-2009-0075, 54 CVE-2010-0188, 52 CVE-2010-0840, 47, 49 CVE-2010-2568, 40, 43, 50 CVE-2010-3336, 52 CVE-2011-1823, 50, 51 CVE-2011-3874, 50, 51 CVE-2012-0158, 52 CVE-2012-0507, 47, 49 CVE-2012-1723, 47, 48,
Original (opens in a new tab) ↗
CVE-2013-0422
CVE-2013-0422
Original (opens in a new tab) ↗
CVE-2013-0422 first appeared in January 2013 as a zero-day vulnerability.
Original (opens in a new tab) ↗
CVE-2013-0422 is a package access check vulnerability that allows an
Original (opens in a new tab) ↗
For more information about CVE-2013-0422, see the entry “A technical
Original (opens in a new tab) ↗
analysis of a new Java vulnerability (CVE-2013-0422)” (January 20, 2013) in
Original (opens in a new tab) ↗
CVE-2015-2590
CVE-2015-2590
Original (opens in a new tab) ↗
CVE-2013-2551
2013-0074), Internet Explorer (CVE-2013-2551), Adobe Flash
Original (opens in a new tab) ↗
 Encounters involving exploits targeting CVE-2013-2551, a use-after-free
Original (opens in a new tab) ↗
CVE-2013-2551
Original (opens in a new tab) ↗
54 CVE-2010-0188, 52 CVE-2010-0840, 47, 49 CVE-2010-2568, 40, 43, 50 CVE-2010-3336, 52 CVE-2011-1823, 50, 51 CVE-2011-3874, 50, 51 CVE-2012-0158, 52 CVE-2012-0507, 47, 49 CVE-2012-1723, 47, 48, 49 CVE-2012-1889, 54 CVE-2013-0074, 46 CVE-2013-0422, 47, 49 CVE-2013-2460, 46 CVE-2013-2551, 46,
Original (opens in a new tab) ↗
CVE-2015-1770
CVE-2015-1770 Word OSF Microsoft Word MS15-059
Original (opens in a new tab) ↗
53 CVE-2014-0515, 53 CVE-2014-6332, 43, 44, 50 CVE-2014-8439, 46, 53 CVE-2015-0097, 57 CVE-2015-0310, 47 CVE-2015-0311, 46, 47, 53 CVE-2015-0313, 46, 47, 53 CVE-2015-0336, 47, 53 CVE-2015-0359, 47, 53 CVE-2015-1641, 16, 57 CVE-2015-1701, 14, 18, 19, 57 CVE-2015-1769, 57 CVE-2015-1770,
Original (opens in a new tab) ↗
CVE-2015-1769
CVE-2015-1769 USB vector Microsoft Windows MS15-085
Original (opens in a new tab) ↗
54 CVE-2014-0497, 53 CVE-2014-0515, 53 CVE-2014-6332, 43, 44, 50 CVE-2014-8439, 46, 53 CVE-2015-0097, 57 CVE-2015-0310, 47 CVE-2015-0311, 46, 47, 53 CVE-2015-0313, 46, 47, 53 CVE-2015-0336, 47, 53 CVE-2015-0359, 47, 53 CVE-2015-1641, 16, 57 CVE-2015-1701, 14, 18, 19, 57 CVE-2015-1769,
Original (opens in a new tab) ↗
CVE-2013-0074
It is known to target a number of vulnerabilities in Silverlight (CVE- 2013-0074), Internet Explorer (CVE-2013-2551), Adobe Flash
Original (opens in a new tab) ↗
128 Crowti, 74, 80, 143 CVE identifier, 31, 32, 40 CVE-2009-0075, 54 CVE-2010-0188, 52 CVE-2010-0840, 47, 49 CVE-2010-2568, 40, 43, 50 CVE-2010-3336, 52 CVE-2011-1823, 50, 51 CVE-2011-3874, 50, 51 CVE-2012-0158, 52 CVE-2012-0507, 47, 49 CVE-2012-1723, 47, 48, 49 CVE-2012-1889, 54 CVE-2013-0074,
Original (opens in a new tab) ↗
CVE-2015-7645
CVE-2015-7645
Original (opens in a new tab) ↗
CVE-2015-2387
19 CVE-2015-7645 (0-day) Internet Explorer CVE-2014-1776 CVE-2014-6332 CVE-2014-3897 Remote code execution through malicious attachment Microsoft Word CVE-2015-1641 (0-day) Microsoft Word CVE-2015-2424 (0-day) Privilege escalation or sandbox escape Win32k CVE-2015-1701 (0-day) ATMFD CVE-2015-2387
Original (opens in a new tab) ↗
addressed by Security Bulletin MS15-051, and CVE-2015-2387,
Original (opens in a new tab) ↗
CVE-2013-7331
 Exploits targeting CVE-2013-7331, a vulnerability affecting the
Original (opens in a new tab) ↗
exploits targeting CVE-2013-2551, a use-after-free vulnerability in versions 6 through 10 of Internet Explorer, accounted for the largest share of browser-related exploit encounters in 2H14, then fell to negligible levels in 1H15 as exploit kit authors dropped them in favor of exploits targeting CVE-2013-7331.
Original (opens in a new tab) ↗
CVE-2013-7331
Original (opens in a new tab) ↗
52 CVE-2010-0840, 47, 49 CVE-2010-2568, 40, 43, 50 CVE-2010-3336, 52 CVE-2011-1823, 50, 51 CVE-2011-3874, 50, 51 CVE-2012-0158, 52 CVE-2012-0507, 47, 49 CVE-2012-1723, 47, 48, 49 CVE-2012-1889, 54 CVE-2013-0074, 46 CVE-2013-0422, 47, 49 CVE-2013-2460, 46 CVE-2013-2551, 46, 54 CVE-2013-7331,
Original (opens in a new tab) ↗
CVE-2015-2424
e execution through browser drive -by Java CVE-2015-2590 (0-day) Flash CVE-2015-3043 CVE-2015-5119 CVE-2015-7645 (0-day) Internet Explorer CVE-2014-1776 CVE-2014-6332 CVE-2014-3897 Remote code execution through malicious attachment Microsoft Word CVE-2015-1641 (0-day) Microsoft Word CVE-2015-2424
Original (opens in a new tab) ↗
 The STRONTIUM exploits that target CVE-2015-1641 and CVE-2015- 2424, which affect Microsoft Word and have been addressed by Security
Original (opens in a new tab) ↗
Snippet of the ROP chain used in the CVE-2015-2424 exploit; it fails against Office installations with ASLR enabled
Original (opens in a new tab) ↗
43, 44, 50 CVE-2014-8439, 46, 53 CVE-2015-0097, 57 CVE-2015-0310, 47 CVE-2015-0311, 46, 47, 53 CVE-2015-0313, 46, 47, 53 CVE-2015-0336, 47, 53 CVE-2015-0359, 47, 53 CVE-2015-1641, 16, 57 CVE-2015-1701, 14, 18, 19, 57 CVE-2015-1769, 57 CVE-2015-1770, 57 CVE-2015-2360, 57 CVE-2015-2424, 16,
Original (opens in a new tab) ↗
CVE-2013-2460
among others), and Java (CVE-2013-2460), although exploit kit
Original (opens in a new tab) ↗
31, 32, 40 CVE-2009-0075, 54 CVE-2010-0188, 52 CVE-2010-0840, 47, 49 CVE-2010-2568, 40, 43, 50 CVE-2010-3336, 52 CVE-2011-1823, 50, 51 CVE-2011-3874, 50, 51 CVE-2012-0158, 52 CVE-2012-0507, 47, 49 CVE-2012-1723, 47, 48, 49 CVE-2012-1889, 54 CVE-2013-0074, 46 CVE-2013-0422, 47, 49 CVE-2013-2460,
Original (opens in a new tab) ↗
CVE-2015-2360
Security update CVE-2015-0097 Word HTA Microsoft Word MS15-022 CVE-2015-1641 Word RTF Microsoft Word MS15-033 CVE-2015-1701 Win32k EoP Microsoft Windows MS15-051 CVE-2015-1769 USB vector Microsoft Windows MS15-085 CVE-2015-1770 Word OSF Microsoft Word MS15-059 CVE-2015-2360 Win32k EoP Microsoft Windows
Original (opens in a new tab) ↗
53 CVE-2014-6332, 43, 44, 50 CVE-2014-8439, 46, 53 CVE-2015-0097, 57 CVE-2015-0310, 47 CVE-2015-0311, 46, 47, 53 CVE-2015-0313, 46, 47, 53 CVE-2015-0336, 47, 53 CVE-2015-0359, 47, 53 CVE-2015-1641, 16, 57 CVE-2015-1701, 14, 18, 19, 57 CVE-2015-1769, 57 CVE-2015-1770, 57 CVE-2015-2360,
Original (opens in a new tab) ↗
CVE-2015-0359
Addressed by Exploit kit(s) CVE-2015-0310 Adobe Flash Player APSB15-02 Angler (JS/Axpergle) CVE-2015-0311 Adobe Flash Player APSB15-03 Angler CVE-2015-0313 Adobe Flash Player APSB15-04 Angler CVE-2015-0336 Adobe Flash Player APSB15-05 Nuclear (JS/Neclu); Angler CVE-2015-0359 Adobe Flash Player APSB15-06
Original (opens in a new tab) ↗
CVE-2014-8439, CVE-2015-0311, CVE-2015-0313, and CVE-2015-0359;
Original (opens in a new tab) ↗
CVE-2015-0359, a double free vulnerability, was first disclosed in April 2015
Original (opens in a new tab) ↗
CVE-2015-0359
Original (opens in a new tab) ↗
47, 49 CVE-2013-2460, 46 CVE-2013-2551, 46, 54 CVE-2013-7331, 54 CVE-2014-0322, 54 CVE-2014-0497, 53 CVE-2014-0515, 53 CVE-2014-6332, 43, 44, 50 CVE-2014-8439, 46, 53 CVE-2015-0097, 57 CVE-2015-0310, 47 CVE-2015-0311, 46, 47, 53 CVE-2015-0313, 46, 47, 53 CVE-2015-0336, 47, 53 CVE-2015-0359, 47,
Original (opens in a new tab) ↗
CVE-2015-0336
CVE-2015-0336 Adobe Flash Player APSB15-05 Nuclear (JS/Neclu); Angler
Original (opens in a new tab) ↗
Exploit:SWF/Obfuscator.L mainly targets CVE-2015-0336.
Original (opens in a new tab) ↗
46 CVE-2013-0422, 47, 49 CVE-2013-2460, 46 CVE-2013-2551, 46, 54 CVE-2013-7331, 54 CVE-2014-0322, 54 CVE-2014-0497, 53 CVE-2014-0515, 53 CVE-2014-6332, 43, 44, 50 CVE-2014-8439, 46, 53 CVE-2015-0097, 57 CVE-2015-0310, 47 CVE-2015-0311, 46, 47, 53 CVE-2015-0313, 46, 47, 53 CVE-2015-0336, 47,
Original (opens in a new tab) ↗
CVE-2015-3090
Flash Player APSB15-02 Angler (JS/Axpergle) CVE-2015-0311 Adobe Flash Player APSB15-03 Angler CVE-2015-0313 Adobe Flash Player APSB15-04 Angler CVE-2015-0336 Adobe Flash Player APSB15-05 Nuclear (JS/Neclu); Angler CVE-2015-0359 Adobe Flash Player APSB15-06 Angler CVE-2015-3090 Adobe Flash Player APSB15-09
Original (opens in a new tab) ↗
57 CVE-2015-0310, 47 CVE-2015-0311, 46, 47, 53 CVE-2015-0313, 46, 47, 53 CVE-2015-0336, 47, 53 CVE-2015-0359, 47, 53 CVE-2015-1641, 16, 57 CVE-2015-1701, 14, 18, 19, 57 CVE-2015-1769, 57 CVE-2015-1770, 57 CVE-2015-2360, 57 CVE-2015-2424, 16, 17 CVE-2015-3043, 17, 18, 57 CVE-2015-3090,
Original (opens in a new tab) ↗
CVE-2009-0075
targeted CVE-2009-0075, an uninitialized memory corruption vulnerability
Original (opens in a new tab) ↗
CVE-2009-0075, 54
Original (opens in a new tab) ↗
CVE-2015-4902
1776 CVE-2014-6332 CVE-2014-3897 Remote code execution through malicious attachment Microsoft Word CVE-2015-1641 (0-day) Microsoft Word CVE-2015-2424 (0-day) Privilege escalation or sandbox escape Win32k CVE-2015-1701 (0-day) ATMFD CVE-2015-2387 (0-day) Security feature bypass Java CVE-2015-4902
Original (opens in a new tab) ↗
CVE-2015-0310
CVE-2015-0310 Adobe Flash Player APSB15-02 Angler (JS/Axpergle)
Original (opens in a new tab) ↗
52 CVE-2012-0507, 47, 49 CVE-2012-1723, 47, 48, 49 CVE-2012-1889, 54 CVE-2013-0074, 46 CVE-2013-0422, 47, 49 CVE-2013-2460, 46 CVE-2013-2551, 46, 54 CVE-2013-7331, 54 CVE-2014-0322, 54 CVE-2014-0497, 53 CVE-2014-0515, 53 CVE-2014-6332, 43, 44, 50 CVE-2014-8439, 46, 53 CVE-2015-0097, 57 CVE-2015-0310,
Original (opens in a new tab) ↗
CVE-2014-0322
CVE-2014-0322
Original (opens in a new tab) ↗
47, 49 CVE-2010-2568, 40, 43, 50 CVE-2010-3336, 52 CVE-2011-1823, 50, 51 CVE-2011-3874, 50, 51 CVE-2012-0158, 52 CVE-2012-0507, 47, 49 CVE-2012-1723, 47, 48, 49 CVE-2012-1889, 54 CVE-2013-0074, 46 CVE-2013-0422, 47, 49 CVE-2013-2460, 46 CVE-2013-2551, 46, 54 CVE-2013-7331, 54 CVE-2014-0322,
Original (opens in a new tab) ↗
CVE-2010-3336
CVE-2010-3336
Original (opens in a new tab) ↗
CVE-2010-3336, 52
Original (opens in a new tab) ↗
CVE-2014-1776
CVE-2014-1776
Original (opens in a new tab) ↗
CVE-2015-3043
CVE-2015-3043
Original (opens in a new tab) ↗
 The exploit targeting CVE-2015-3043, a vulnerability in Adobe Flash
Original (opens in a new tab) ↗
Snippet from the STRONTIUM ActionScript exploit code targeting CVE-2015-3043 in Adobe Flash
Original (opens in a new tab) ↗
MS15-022 CVE-2015-1641 Word RTF Microsoft Word MS15-033 CVE-2015-1701 Win32k EoP Microsoft Windows MS15-051 CVE-2015-1769 USB vector Microsoft Windows MS15-085 CVE-2015-1770 Word OSF Microsoft Word MS15-059 CVE-2015-2360 Win32k EoP Microsoft Windows MS15-061 CVE-2015-3043 Flash codec Adobe Flash Player
Original (opens in a new tab) ↗
46, 53 CVE-2015-0097, 57 CVE-2015-0310, 47 CVE-2015-0311, 46, 47, 53 CVE-2015-0313, 46, 47, 53 CVE-2015-0336, 47, 53 CVE-2015-0359, 47, 53 CVE-2015-1641, 16, 57 CVE-2015-1701, 14, 18, 19, 57 CVE-2015-1769, 57 CVE-2015-1770, 57 CVE-2015-2360, 57 CVE-2015-2424, 16, 17 CVE-2015-3043, 17, 18,
Original (opens in a new tab) ↗
CVE-2006-6456
attempts to exploit the vulnerability CVE-2006-6456, addressed by Microsoft
Original (opens in a new tab) ↗
CVE-2015-3104
Adobe Flash Player APSB15-03 Angler CVE-2015-0313 Adobe Flash Player APSB15-04 Angler CVE-2015-0336 Adobe Flash Player APSB15-05 Nuclear (JS/Neclu); Angler CVE-2015-0359 Adobe Flash Player APSB15-06 Angler CVE-2015-3090 Adobe Flash Player APSB15-09 Angler CVE-2015-3104 Adobe Flash Player APSB15-11
Original (opens in a new tab) ↗
47 CVE-2015-0311, 46, 47, 53 CVE-2015-0313, 46, 47, 53 CVE-2015-0336, 47, 53 CVE-2015-0359, 47, 53 CVE-2015-1641, 16, 57 CVE-2015-1701, 14, 18, 19, 57 CVE-2015-1769, 57 CVE-2015-1770, 57 CVE-2015-2360, 57 CVE-2015-2424, 16, 17 CVE-2015-3043, 17, 18, 57 CVE-2015-3090, 47 CVE-2015-3104,
Original (opens in a new tab) ↗
CVE-2015-0097
CVE-2015-0097 Word HTA Microsoft Word MS15-022
Original (opens in a new tab) ↗
51 CVE-2012-0158, 52 CVE-2012-0507, 47, 49 CVE-2012-1723, 47, 48, 49 CVE-2012-1889, 54 CVE-2013-0074, 46 CVE-2013-0422, 47, 49 CVE-2013-2460, 46 CVE-2013-2551, 46, 54 CVE-2013-7331, 54 CVE-2014-0322, 54 CVE-2014-0497, 53 CVE-2014-0515, 53 CVE-2014-6332, 43, 44, 50 CVE-2014-8439, 46, 53 CVE-2015-0097,
Original (opens in a new tab) ↗
CVE-2011-3874
gence Report, Volume 18 (July–December 2014), available from the Microsoft Download Center, for 0.00% 0.05% 0.10% 0.15% 0.20% 0.25% 0.30% 0.35% 0.40% 3Q14 4Q14 1Q15 2Q15 Encounter rate (percent of all reporting computers) Win32/CplLnk CVE-2014-6332 Unix/Lotoor CVE-2011-1823 (GingerBreak) CVE-2011-3874
Original (opens in a new tab) ↗
CVE-2011-3874 can also be used to gain root privileges on devices
Original (opens in a new tab) ↗
CVE-2011-3874, 50, 51
Original (opens in a new tab) ↗
CVE-2014-3897
CVE-2014-3897
Original (opens in a new tab) ↗

Techniques drawn from this report

None

No passage in this report has been tied to an ATT&CK technique.

↑ ↓ chooseEnter openEsc close