[ Exploited · 1,754 CVEs ]
Exploited in the wild.
Every CVE on CISA's Known Exploited Vulnerabilities catalogue, most recently added first. If you run one of these products, patch it now.
KEV catalogue version 2026.10.21
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2018-0155 | 28 Mar 2018 | CVSS 8.6 | Cisco Catalyst Bidirectional Forwarding Detection Denial-of-ServiceA vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Switches and Cisco Catalyst… | Exploited |
| CVE-2018-0154 | 28 Mar 2018 | CVSS 7.5 | Cisco IOS Software Integrated Services Module for VPN Denial-of-ServiceA vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software could allow an… | Exploited |
| CVE-2018-0151 | 28 Mar 2018 | CVSS 9.8 | Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code ExecutionA vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote… | Exploited |
| CVE-2017-8540 | 26 May 2017 | CVSS 7.8 | Microsoft Malware Protection Engine Improper Restriction of OperationsThe Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1… | ExploitedFix |
| CVE-2017-6744 | 17 Jul 2017 | CVSS 8.8 | Cisco IOS Software SNMP Remote Code ExecutionThe Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an… | Exploited |
| CVE-2017-6743 | 17 Jul 2017 | CVSS 8.8 | Cisco IOS and IOS XE Software SNMP Remote Code ExecutionThe Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an… | Exploited |
| CVE-2017-6740 | 17 Jul 2017 | CVSS 8.8 | Cisco IOS and IOS XE Software SNMP Remote Code ExecutionThe Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an… | Exploited |
| CVE-2017-6739 | 17 Jul 2017 | CVSS 8.8 | Cisco IOS and IOS XE Software SNMP Remote Code ExecutionA vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely… | Exploited |
| CVE-2017-6738 | 17 Jul 2017 | CVSS 8.8 | Cisco IOS and IOS XE Software SNMP Remote Code ExecutionThe Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an… | Exploited |
| CVE-2017-6737 | 17 Jul 2017 | CVSS 8.8 | Cisco IOS and IOS XE Software SNMP Remote Code ExecutionA vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely… | Exploited |
| CVE-2017-6736 | 17 Jul 2017 | CVSS 8.8 | Cisco IOS and IOS XE Software SNMP Remote Code ExecutionThe Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an… | Exploited |
| CVE-2017-6663 | 7 Aug 2017 | CVSS 6.5 | Cisco IOS Software and Cisco IOS XE Software Denial-of-ServiceA vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker… | Exploited |
| CVE-2017-6627 | 7 Sep 2017 | CVSS 7.5 | Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-ServiceA vulnerability in the UDP processing code of Cisco IOS 15.1, 15.2, and 15.4 and IOS XE 3.14 through 3.18 could allow an unauthenticated, remote… | Exploited |
| CVE-2017-12319 | 27 Mar 2018 | CVSS 5.9 | Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-ServiceA vulnerability in the Border Gateway Protocol (BGP) over an Ethernet Virtual Private Network (EVPN) for Cisco IOS XE Software could allow an… | Exploited |
| CVE-2017-12240 | 29 Sep 2017 | CVSS 9.8 | Cisco IOS and IOS XE Software DHCP Remote Code ExecutionThe DHCP relay subsystem of Cisco IOS 12.2 through 15.6 and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated… | Exploited |
| CVE-2017-12238 | 29 Sep 2017 | CVSS 6.5 | Cisco Catalyst 6800 Series Switches VPLS Denial-of-ServiceA vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS 15.0 through 15.4 for Cisco Catalyst 6800 Series Switches could allow an… | Exploited |
| CVE-2017-12237 | 29 Sep 2017 | CVSS 7.5 | Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-ServiceA vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS 15.0 through 15.6 and Cisco IOS XE 3.5 through 16.5 could allow an… | Exploited |
| CVE-2017-12235 | 29 Sep 2017 | CVSS 7.5 | Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-ServiceA vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol (PN-DCP) for Cisco IOS 12.2 through 15.6 could allow an… | Exploited |
| CVE-2017-12234 | 29 Sep 2017 | CVSS 7.5 | Cisco IOS Software Common Industrial Protocol Request Denial-of-ServiceMultiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an… | Exploited |
| CVE-2017-12233 | 29 Sep 2017 | CVSS 7.5 | Cisco IOS Software Common Industrial Protocol Request Denial-of-ServiceMultiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an… | Exploited |
| CVE-2017-12232 | 29 Sep 2017 | CVSS 6.5 | Cisco IOS Software for Cisco Integrated Services Routers Denial-of-ServiceA vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS 15.0 through… | Exploited |
| CVE-2017-12231 | 29 Sep 2017 | CVSS 7.5 | Cisco IOS Software Network Address Translation Denial-of-ServiceA vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS 12.4 through 15.6 could allow an… | Exploited |
| CVE-2017-11826 | 13 Oct 2017 | CVSS 7.8 | Microsoft Office Remote Code ExecutionMicrosoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word… | ExploitedFix |
| CVE-2017-11292 | 22 Oct 2017 | CVSS 8.8 | Adobe Flash Player Type ConfusionAdobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an untrusted value to be used in the… | ExploitedFix |
| CVE-2017-0261 | 12 May 2017 | CVSS 7.8 | Microsoft Office Use-After-FreeMicrosoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle… | ExploitedFix |
| CVE-2017-0001 | 17 Mar 2017 | CVSS 7.8 | Microsoft Graphics Device Interface (GDI) Privilege EscalationThe Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server… | ExploitedFix |
| CVE-2016-8562 | 18 Nov 2016 | CVSS 7.5 | Siemens SIMATIC CP 1543-1 Improper Privilege ManagementA vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS NET CP 1543-1 (All versions < V2.0.28). Under special… | ExploitedFix |
| CVE-2016-7855 | 1 Nov 2016 | CVSS 8.8 | Adobe Flash Player Use-After-FreeUse-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Linux allows remote attackers to… | ExploitedFix |
| CVE-2016-7262 | 20 Dec 2016 | CVSS 7.8 | Microsoft Office Security Feature BypassMicrosoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow… | ExploitedFix |
| CVE-2016-7193 | 14 Oct 2016 | CVSS 7.8 | Microsoft Office Memory CorruptionMicrosoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack… | ExploitedFix |
| CVE-2016-5195 | 10 Nov 2016 | CVSS 7.0 | Linux Kernel Race ConditionRace condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of… | ExploitedFix |
| CVE-2016-4117 | 11 May 2016 | CVSS 9.8 | Adobe Flash Player Arbitrary Code ExecutionAdobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May… | Exploited |
| CVE-2016-1019 | 7 Apr 2016 | CVSS 9.8 | Adobe Flash Player Arbitrary Code ExecutionAdobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code… | ExploitedFix |
| CVE-2016-0099 | 9 Mar 2016 | CVSS 7.8 | Microsoft Windows Secondary Logon Service Privilege EscalationThe Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold… | ExploitedFix |
| CVE-2015-7645 | 15 Oct 2015 | CVSS 7.8 | Adobe Flash Player Arbitrary Code ExecutionAdobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote… | ExploitedFix |
| CVE-2015-5119 | 8 Jul 2015 | CVSS 9.8 | Adobe Flash Player Use-After-FreeUse-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x… | ExploitedFix |
| CVE-2015-4902 | 22 Oct 2015 | CVSS 5.3 | Oracle Java SE Integrity CheckUnspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to… | ExploitedFix |
| CVE-2015-3043 | 14 Apr 2015 | CVSS 9.8 | Adobe Flash Player Memory CorruptionAdobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to… | ExploitedFix |
| CVE-2015-2590 | 16 Jul 2015 | CVSS 9.8 | Oracle Java SE and Java SE Embedded Remote Code ExecutionUnspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect… | ExploitedFix |
| CVE-2015-2545 | 9 Sep 2015 | CVSS 7.8 | Microsoft Office Malformed EPS FileMicrosoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted EPS image, aka… | ExploitedFix |
| CVE-2015-2424 | 14 Jul 2015 | CVSS 8.8 | Microsoft PowerPoint Memory CorruptionMicrosoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, and PowerPoint 2013 RT SP1… | ExploitedFix |
| CVE-2015-2387 | 14 Jul 2015 | CVSS 7.8 | Microsoft ATM Font Driver Privilege EscalationATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows… | ExploitedFix |
| CVE-2015-1701 | 21 Apr 2015 | CVSS 7.8 | Microsoft Win32k Privilege EscalationWin32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via… | ExploitedFix |
| CVE-2015-1642 | 15 Aug 2015 | CVSS 7.8 | Microsoft Office Memory CorruptionMicrosoft Office 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office… | ExploitedFix |
| CVE-2014-4114 | 15 Oct 2014 | CVSS 7.8 | Microsoft Windows Object Linking & Embedding (OLE) Remote Code ExecutionMicrosoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows… | ExploitedFix |
| CVE-2014-0496 | 15 Jan 2014 | CVSS 8.8 | Adobe Reader and Acrobat Use-After-FreeUse-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allows attackers to… | Exploited |
| CVE-2013-5065 | 28 Nov 2013 | CVSS 7.8 | Microsoft Windows Kernel Privilege EscalationNDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, as… | ExploitedFix |
| CVE-2013-3897 | 9 Oct 2013 | CVSS 8.8 | Microsoft Internet Explorer Use-After-FreeUse-after-free vulnerability in the CDisplayPointer class in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to… | ExploitedFix |
| CVE-2013-3346 | 30 Aug 2013 | CVSS 9.8 | Adobe Reader and Acrobat Memory CorruptionAdobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of… | Exploited |
| CVE-2013-1675 | 16 May 2013 | CVSS 6.5 | Mozilla Firefox Information DisclosureMozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly… | Exploited |
| CVE-2013-1347 | 5 May 2013 | CVSS 8.8 | Microsoft Internet Explorer Remote Code ExecutionMicrosoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an… | ExploitedFix |
| CVE-2013-0641 | 14 Feb 2013 | CVSS 7.8 | Adobe Reader Buffer OverflowBuffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute… | Exploited |
| CVE-2013-0640 | 14 Feb 2013 | CVSS 7.8 | Adobe Reader and Acrobat Memory CorruptionAdobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a… | Exploited |
| CVE-2013-0632 | 17 Jan 2013 | CVSS 9.8 | Adobe ColdFusion Authentication Bypassadministrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and possibly execute arbitrary code… | Exploited |
| CVE-2012-4681 | 28 Aug 2012 | CVSS 9.8 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code ExecutionMultiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute… | Exploited |
| CVE-2012-1856 | 15 Aug 2012 | CVSS 8.8 | Microsoft Office MSCOMCTL.OCX Remote Code ExecutionThe TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and… | ExploitedFix |
| CVE-2012-1723 | 16 Jun 2012 | CVSS 9.8 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code ExecutionUnspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update… | Exploited |
| CVE-2012-1535 | 15 Aug 2012 | CVSS 7.8 | Adobe Flash Player Arbitrary Code ExecutionUnspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers… | ExploitedFix |
| CVE-2012-0507 | 7 Jun 2012 | CVSS 9.8 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code ExecutionUnspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0… | Exploited |
| CVE-2011-3544 | 19 Oct 2011 | CVSS 9.8 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code ExecutionUnspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote… | ExploitedFix |
| CVE-2011-1889 | 16 Jun 2011 | CVSS 9.8 | Microsoft Forefront TMG Remote Code ExecutionThe NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remote attackers to execute… | ExploitedFix |
| CVE-2011-0611 | 13 Apr 2011 | CVSS 8.8 | Adobe Flash Player Remote Code ExecutionAdobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140… | ExploitedFix |
| CVE-2010-3333 | 10 Nov 2010 | CVSS 7.8 | Microsoft Office Stack-based Buffer OverflowStack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac… | ExploitedFix |
| CVE-2010-0232 | 21 Jan 2010 | CVSS 7.8 | Microsoft Windows Kernel Exception HandlerThe kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista… | ExploitedFix |
| CVE-2010-0188 | 22 Feb 2010 | CVSS 7.8 | Adobe Reader and Acrobat Arbitrary Code ExecutionUnspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a denial of service… | Exploited |
| CVE-2009-3129 | 11 Nov 2009 | CVSS 7.8 | Microsoft Excel Featheader Record Memory CorruptionMicrosoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel… | ExploitedFix |
| CVE-2009-1123 | 10 Jun 2009 | CVSS 7.8 | Microsoft Windows Improper Input ValidationThe kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate… | ExploitedFix |
| CVE-2008-3431 | 5 Aug 2008 | CVSS 8.8 | Oracle VirtualBox Insufficient Input ValidationThe VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communication method for IOCTLs and… | Exploited |
| CVE-2008-2992 | 4 Nov 2008 | CVSS 7.8 | Adobe Reader and Acrobat Input ValidationStack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a PDF file that calls… | ExploitedFix |
| CVE-2004-0210 | 6 Aug 2004 | CVSS 7.8 | Microsoft Windows Privilege EscalationThe POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by… | ExploitedFix |
| CVE-2002-0367 | 25 Jun 2002 | CVSS 7.8 | Microsoft Windows Privilege Escalationsmss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows… | ExploitedFix |
| CVE-2022-24682 | 9 Feb 2022 | CVSS 6.1 | Synacor Zimbra Collaborate Suite (ZCS) Cross-Site ScriptingAn issue was discovered in the Calendar feature in Zimbra Collaboration Suite 8.8.x before 8.8.15 patch 30 (update 1), as exploited in the wild… | Exploited |
| CVE-2017-8570 | 11 Jul 2017 | CVSS 7.8 | Microsoft Office Remote Code ExecutionMicrosoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote Code… | ExploitedFix |
| CVE-2017-0222 | 12 May 2017 | CVSS 8.8 | Microsoft Internet Explorer Remote Code ExecutionA remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption… | ExploitedFix |
| CVE-2014-6352 | 22 Oct 2014 | CVSS 7.8 | Microsoft Windows Code InjectionMicrosoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows… | ExploitedFix |
| CVE-2022-23134 | 13 Jan 2022 | CVSS 5.3 | Zabbix Frontend Improper Access ControlAfter the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well… | ExploitedFix |
| CVE-2022-23131 | 13 Jan 2022 | CVSS 9.8 | Zabbix Frontend Authentication BypassIn the case of instances where the SAML SSO authentication is enabled (non-default), session data can be modified by a malicious actor, because a… | ExploitedFix |
| CVE-2022-24086 | 16 Feb 2022 | CVSS 9.8 | Adobe Commerce and Magento Open Source Improper Input ValidationAdobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability during the… | ExploitedFix |
| CVE-2022-0609 | 5 Apr 2022 | CVSS 8.8 | Google Chromium Animation Use-After-FreeUse after free in Animation in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted… | Exploited |
| CVE-2019-0752 | 9 Apr 2019 | CVSS 7.5 | Microsoft Internet Explorer Type ConfusionA remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting… | ExploitedFix |
| CVE-2018-8174 | 9 May 2018 | CVSS 7.5 | Microsoft Windows VBScript Engine Out-of-Bounds WriteA remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code… | ExploitedFix |
| CVE-2018-20250 | 5 Feb 2019 | CVSS 7.8 | WinRAR Absolute Path TraversalIn WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format (in… | Exploited |
| CVE-2018-15982 | 18 Jan 2019 | CVSS 7.8 | Adobe Flash Player Use-After-FreeFlash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to… | ExploitedFix |
| CVE-2017-9841 | 27 Jun 2017 | CVSS 9.8 | PHPUnit Command InjectionUtil/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data… | ExploitedFix |
| CVE-2014-1761 | 25 Mar 2014 | CVSS 7.8 | Microsoft Word Memory CorruptionMicrosoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word… | ExploitedFix |
| CVE-2013-3906 | 6 Nov 2013 | CVSS 7.8 | Microsoft Graphics Component Memory CorruptionGDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Lync… | ExploitedFix |
| CVE-2022-22620 | 18 Mar 2022 | CVSS 8.8 | Apple iOS, iPadOS, and macOS Webkit Use-After-FreeA use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS 15.3.1 and iPadOS 15.3.1… | Exploited |
| CVE-2021-36934 | 22 Jul 2021 | CVSS 7.8 | Microsoft Windows SAM Local Privilege EscalationAn elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the… | ExploitedFix |
| CVE-2020-0796 | 12 Mar 2020 | CVSS 10.0 | Microsoft SMBv3 Remote Code ExecutionA remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka… | ExploitedFix |
| CVE-2018-1000861 | 10 Dec 2018 | CVSS 9.8 | Jenkins Stapler Web Framework Deserialization of Untrusted DataA code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in… | Exploited |
| CVE-2017-9791 | 10 Jul 2017 | CVSS 9.8 | Apache Struts 1 Improper Input ValidationThe Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passed in a raw message to the… | ExploitedFix |
| CVE-2017-8464 | 15 Jun 2017 | CVSS 8.8 | Microsoft Windows Shell (.lnk) Remote Code ExecutionWindows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT… | ExploitedFix |
| CVE-2017-10271 | 19 Oct 2017 | CVSS 7.5 | Oracle Corporation WebLogic Server Remote Code ExecutionVulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supported versions that are affected… | ExploitedFix |
| CVE-2017-0263 | 12 May 2017 | CVSS 7.8 | Microsoft Win32k Privilege EscalationThe kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1… | ExploitedFix |
| CVE-2017-0262 | 12 May 2017 | CVSS 7.8 | Microsoft Office Remote Code ExecutionMicrosoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle… | ExploitedFix |
| CVE-2017-0145 | 17 Mar 2017 | CVSS 8.8 | Microsoft SMBv1 Remote Code ExecutionThe SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2… | ExploitedFix |
| CVE-2017-0144 | 17 Mar 2017 | CVSS 8.8 | Microsoft SMBv1 Remote Code ExecutionThe SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2… | ExploitedFix |
| CVE-2016-3088 | 1 Jun 2016 | CVSS 9.8 | Apache ActiveMQ Improper Input ValidationThe Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT… | ExploitedFix |
| CVE-2015-2051 | 23 Feb 2015 | CVSS 8.8 | D-Link DIR-645 Router Remote Code ExecutionThe D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute arbitrary commands via a… | Exploited |
| CVE-2015-1635 | 14 Apr 2015 | CVSS 9.8 | Microsoft HTTP.sys Remote Code ExecutionHTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers… | ExploitedFix |
Page 14 of 18