Vulnerabilities > Information Exposure

DATE CVE VULNERABILITY TITLE RISK
2016-07-13 CVE-2016-3261 Information Exposure vulnerability in Microsoft Internet Explorer 11
Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability."
network
high complexity
microsoft CWE-200
5.3
2016-07-13 CVE-2016-3256 Information Exposure vulnerability in Microsoft Windows 10 1511
Microsoft Windows 10 Gold and 1511 allows local users to bypass the Secure Kernel Mode protection mechanism and obtain sensitive information via a crafted application, aka "Windows Secure Kernel Mode Information Disclosure Vulnerability."
local
low complexity
microsoft CWE-200
5.0
2016-07-13 CVE-2016-3251 Information Exposure vulnerability in Microsoft products
The GDI component in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to obtain sensitive kernel-address information via a crafted application, aka "Win32k Information Disclosure Vulnerability."
local
low complexity
microsoft CWE-200
2.8
2016-07-12 CVE-2016-4985 Information Exposure vulnerability in multiple products
The ironic-api service in OpenStack Ironic before 4.2.5 (Liberty) and 5.x before 5.1.2 (Mitaka) allows remote attackers to obtain sensitive information about a registered node by leveraging knowledge of the MAC address of a network card belonging to that node and sending a crafted POST request to the v1/drivers/$DRIVER_NAME/vendor_passthru resource.
network
low complexity
redhat canonical CWE-200
7.5
2016-07-11 CVE-2016-3816 Information Exposure vulnerability in Google Android
The MediaTek display driver in Android before 2016-07-05 on Android One devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28402240.
local
low complexity
google CWE-200
5.5
2016-07-11 CVE-2016-3815 Information Exposure vulnerability in Google Android
The NVIDIA camera driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28522274.
local
low complexity
google CWE-200
5.5
2016-07-11 CVE-2016-3814 Information Exposure vulnerability in Google Android
The NVIDIA camera driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28193342.
local
low complexity
google CWE-200
5.5
2016-07-11 CVE-2016-3813 Information Exposure vulnerability in Google Android
The Qualcomm USB driver in Android before 2016-07-05 on Nexus 5, 5X, 6, and 6P devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28172322 and Qualcomm internal bug CR1010222.
local
low complexity
google CWE-200
5.5
2016-07-11 CVE-2016-3812 Information Exposure vulnerability in Google Android
The MediaTek video codec driver in Android before 2016-07-05 on Android One devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28174833 and MediaTek internal bug ALPS02688832.
local
low complexity
google CWE-200
5.5
2016-07-11 CVE-2016-3810 Information Exposure vulnerability in Google Android
The MediaTek Wi-Fi driver in Android before 2016-07-05 on Android One devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28175522 and MediaTek internal bug ALPS02694389.
local
low complexity
google CWE-200
5.5