NVD disclosure day
CVE-2015-2387
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A memory corruption vulnerability in the Adobe Type Manager Font Driver affects various Microsoft Windows operating systems, allowing local users to gain elevated privileges by running a crafted application. This poses a business risk by enabling unauthorized access and control over sensitive data and systems. organiza
CVE-2015-2425
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A crafted website can cause memory corruption in Internet Explorer 11, allowing attackers to execute code or cause a denial of service on affected systems. This impacts system availability and data integrity, posing a risk to business operations.
CVE-2015-2424
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
Microsoft Office applications are susceptible to a memory corruption vulnerability that could allow attackers to execute arbitrary code or cause a denial of service via a crafted document. This poses a business risk if employees open malicious files. Organizations should address this by applying vendor security updates
CVE-2015-2419
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in JScript for Internet Explorer may allow attackers to execute code or disrupt service via crafted websites. This could lead to system compromise and data corruption for affected organizations.
CVE-2015-5123
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in Adobe Flash Player could permit attackers to execute code or disrupt services through malicious content. Organizations utilizing this software face a business risk of unauthorized code execution or denial of service. The affected product is end-of-life and should be disconnected.
CVE-2015-5122
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in Adobe Flash Player could permit attackers to execute arbitrary code or cause denial-of-service by exploiting memory corruption. This impacts organizations using affected versions, posing a risk to system integrity and data. The vulnerability has been observed in the wild.