| | CVE-2015-3628 |  F5 | critical | 9.0 | 75.2%
| | The iControl API in F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.0 before … | Dec 7, 2015 | May 6, 2026 |
| | CVE-2015-6040 |  Microsoft | critical | 9.3 | 37.5%
| | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibili… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6083 | Microsoft | critical | 9.3 | 16.5%
| | Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause … | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6106 | Microsoft | critical | 9.3 | 44.8%
| | The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2, Office 2007 SP3, O… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6107 | Microsoft | critical | 9.3 | 49.4%
| | The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6108 | Microsoft | critical | 9.3 | 44.4%
| | The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6114 | Microsoft | medium | 4.3 | 17.5%
| | Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to bypass the ASLR protection me… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6118 | Microsoft | critical | 9.3 | 34.3%
| | Microsoft Office 2007 SP3 and Office 2010 SP2 allow remote attackers to execute arbitrary code via a… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6122 | Microsoft | critical | 9.3 | 37.5%
| | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011, Office Compatibility Pack SP3, and Exc… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6124 | Microsoft | critical | 9.3 | 37.5%
| | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, and Office… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6134 | Microsoft | critical | 9.3 | 16.5%
| | Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6135 | Microsoft | medium | 5.0 | 8.5%
| | The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Expl… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6136 | Microsoft | critical | 9.3 | 44.6%
| | The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Expl… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6138 | Microsoft | medium | 4.3 | 19.8%
| | Microsoft Internet Explorer 8 through 11 mishandles HTML attributes in HTTP responses, which allows … | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6139 | Microsoft | critical | 9.3 | 16.1%
| | Microsoft Internet Explorer 11 and Microsoft Edge mishandle content types, which allows remote attac… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6140 | Microsoft | critical | 9.3 | 14.8%
| | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code o… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6141 | Microsoft | critical | 9.3 | 16.5%
| | Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6142 | Microsoft | critical | 9.3 | 23.5%
| | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code o… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6143 | Microsoft | critical | 9.3 | 16.5%
| | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial o… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6144 | Microsoft | medium | 4.3 | 21.3%
| | Microsoft Internet Explorer 8 through 11 and Microsoft Edge mishandle HTML attributes in HTTP respon… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6145 | Microsoft | critical | 9.3 | 26.0%
| | Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code or cause a den… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6146 | Microsoft | critical | 9.3 | 26.0%
| | Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code or cause a den… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6147 | Microsoft | critical | 9.3 | 16.5%
| | Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a den… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6148 | Microsoft | critical | 9.3 | 18.9%
| | Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitr… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6149 | Microsoft | critical | 9.3 | 16.5%
| | Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a den… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6150 | Microsoft | critical | 9.3 | 16.5%
| | Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause … | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6151 | Microsoft | critical | 9.3 | 16.3%
| | Microsoft Internet Explorer 8 through 11 and Microsoft Edge allow remote attackers to execute arbitr… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6152 | Microsoft | critical | 9.3 | 14.8%
| | Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial o… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6153 | Microsoft | critical | 9.3 | 16.3%
| | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code o… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6154 | Microsoft | critical | 9.3 | 14.8%
| | Microsoft Internet Explorer 7 through 11 and Microsoft Edge allow remote attackers to execute arbitr… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6155 | Microsoft | critical | 9.3 | 16.3%
| | Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6156 | Microsoft | critical | 9.3 | 26.0%
| | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause … | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6157 | Microsoft | medium | 4.3 | 22.3%
| | Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information from process … | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6158 | Microsoft | critical | 9.3 | 16.3%
| | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code o… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6159 | Microsoft | critical | 9.3 | 18.9%
| | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code o… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6160 | Microsoft | critical | 9.3 | 16.5%
| | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial o… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6161 | Microsoft | medium | 4.3 | 10.0%
| | Microsoft Internet Explorer 7 through 11 and Microsoft Edge allow remote attackers to bypass the ASL… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6162 | Microsoft | critical | 9.3 | 28.1%
| | Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial o… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6164 | Microsoft | medium | 6.8 | 14.6%
| | Microsoft Internet Explorer 9 through 11 improperly implements a cross-site scripting (XSS) protecti… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6165 | Microsoft | medium | 4.3 | 17.5%
| | Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to bypass the ASLR protection me… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6166 | Microsoft | critical | 9.3 | 20.5%
| | Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to execute arbitrary code or cau… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6168 | Microsoft | critical | 9.3 | 32.5%
| | Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memor… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6169 | Microsoft | medium | 4.3 | 10.8%
| | Microsoft Edge misparses HTTP responses, which allows remote attackers to redirect users to arbitrar… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6170 | Microsoft | medium | 6.8 | 14.4%
| | Microsoft Edge allows remote attackers to gain privileges via a crafted web site, aka "Microsoft Bro… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6172 | Microsoft | critical | 9.3 | 32.8%
| | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2016, Word 2013 RT SP1,… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6176 | Microsoft | medium | 4.3 | 4.3%
| | Microsoft Edge mishandles HTML attributes in HTTP responses, which allows remote attackers to bypass… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6177 | Microsoft | critical | 9.3 | 37.5%
| | Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to … | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6395 |  Cisco | medium | 6.5 | 0.4%
| | Cisco Prime Service Catalog 10.0, 10.0(R2), 10.1, and 11.0 does not properly restrict access to web … | Dec 12, 2015 | May 6, 2026 |
| | CVE-2015-6417 | Cisco | medium | 6.5 | 0.1%
| | Cisco Videoscape Distribution Suite Service Manager (VDS-SM) 3.4.0 and earlier does not always use R… | Dec 12, 2015 | May 6, 2026 |
| | CVE-2015-6408 | Cisco | medium | 6.8 | 0.1%
| | Cross-site request forgery (CSRF) vulnerability in Cisco Unity Connection 11.5(0.98) allows remote a… | Dec 12, 2015 | May 6, 2026 |