CISA Known Exploited Vulnerabilities catalog (page 12)
Page 12 of 18 of the CISA Known Exploited Vulnerabilities catalog, newest additions first, with PoC counts, Metasploit and EPSS.
Known exploited CVEs, newest addition first (page 12 of 18)
| CVE | Product | Severity | Added to KEV | Due date | Ransomware use | Public PoCs | Metasploit | EPSS | Summary |
|---|---|---|---|---|---|---|---|---|---|
CVE-2021-0920 | Debian Debian Linux +3 | Medium 6.4 | — | 0 | — | 0.009 (59.0th percentile) | In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. | ||
CVE-2020-1027 | Microsoft Windows +26 | High 7.8 | — | 0 | — | 0.047 (91.9th percentile) | An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. | ||
CVE-2020-0638 | Microsoft Windows +18 | High 7.8 | Known | 0 | — | 0.025 (85.1th percentile) | An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker would first have to gain execution on the victim sys… | ||
CVE-2019-8720 | Webkitgtk +23 | High 8.8 | — | 0 | — | 0.016 (75.4th percentile) | A vulnerability was found in WebKit. | ||
CVE-2019-7287 | Apple iOS +1 | High 7.8 | — | 0 | — | 0.046 (91.7th percentile) | A memory corruption issue was addressed with improved input validation. | ||
CVE-2019-7286 | Apple iOS +3 | High 7.8 | — | 0 | — | 0.159 (96.9th percentile) | A memory corruption issue was addressed with improved input validation. | ||
CVE-2019-5786 | Google Chrome | Medium 6.5 | — | 1 | Yes | 0.611 (99.2th percentile) | Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. | ||
CVE-2019-18426 | Facebook Whatsapp Desktop +1 | High 8.2 | — | 2 | — | 0.681 (99.3th percentile) | A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-site scripting and local file reading. | ||
CVE-2019-1385 | Microsoft Windows +11 | High 7.8 | Known | 2 | — | 0.036 (89.6th percentile) | An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit this vulnerability… | ||
CVE-2019-13720 | Google Chrome +1 | High 8.8 | — | 3 | — | 0.494 (98.9th percentile) | Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||
CVE-2019-11708 | Mozilla Firefox +2 | Critical 10.0 | — | 1 | — | 0.559 (99.1th percentile) | Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process opening web content chosen by a compromise… | ||
CVE-2019-11707 | Mozilla Firefox +2 | High 8.8 | — | 5 | — | 0.380 (98.6th percentile) | A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. | ||
CVE-2019-1130 | Microsoft Windows +19 | High 7.8 | Known | 0 | — | 0.017 (77.7th percentile) | An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. | ||
CVE-2019-0880 | Microsoft Windows +18 | High 7.8 | — | 0 | — | 0.023 (83.5th percentile) | A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'. | ||
CVE-2019-0703 | Microsoft Windows +16 | Medium 6.5 | — | 0 | — | 0.094 (95.4th percentile) | An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnerability'. | ||
CVE-2019-0676 | Microsoft Internet Explorer +2 | Medium 6.5 | — | 0 | — | 0.081 (94.9th percentile) | An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker who successfully exploited this vulnerability could test for the presence of fil… | ||
CVE-2018-8589 | Microsoft Windows 7 +4 | High 7.8 | — | 0 | — | 0.030 (87.6th percentile) | An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Window… | ||
CVE-2018-5002 | Adobe Flash Player +5 | High 7.8 | — | 0 | — | 0.244 (97.9th percentile) | Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. | ||
CVE-2022-30525 | Zyxel Atp100 Firmware +23 | Critical 9.8 | — | 21 | Yes | 0.999 (100.0th percentile) | A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Patch 1, USG FLEX 200 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 500 fi… | ||
CVE-2022-22947 | Spring Cloud Gateway +10 | Critical 10.0 | — | 87 | Yes | 0.983 (99.9th percentile) | In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. | ||
CVE-2022-1388 | F5 Big-Ip +11 | Critical 9.8 | Known | 93 | Yes | 1.000 (100.0th percentile) | On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all 12.1.x and 11.6.x versions, undisclosed… | ||
CVE-2021-1789 | Apple iOS And Ipados +8 | High 8.8 | — | 0 | — | 0.140 (96.6th percentile) | A type confusion issue was addressed with improved state handling. | ||
CVE-2019-8506 | Apple Icloud +11 | High 8.8 | — | 0 | — | 0.162 (97.0th percentile) | A type confusion issue was addressed with improved memory handling. | ||
CVE-2014-4113 | Microsoft Windows 7 +9 | High 7.8 | — | 4 | Yes | 0.866 (99.7th percentile) | win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and… | ||
CVE-2014-0322 | Microsoft Internet Explorer +1 | High 8.8 | — | 0 | Yes | 0.851 (99.7th percentile) | Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via vectors involving crafted JavaScript code, CMarkup, and the onpropertychange… | ||
CVE-2014-0160 | Broadcom Symantec Messaging Gateway +28 | High 7.5 | — | 92 | Yes | 1.000 (100.0th percentile) | The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process… | ||
CVE-2022-29464 | — | Critical 9.8 | Known | 53 | Yes | 1.000 (100.0th percentile) | Certain WSO2 products allow unrestricted file upload with resultant remote code execution. | ||
CVE-2022-26904 | Microsoft Windows 10 1507 +42 | High 7.0 | — | 0 | Yes | 0.169 (97.1th percentile) | Windows User Profile Service Elevation of Privilege Vulnerability | ||
CVE-2022-21919 | Microsoft Windows 10 1507 +42 | High 7.0 | — | 0 | — | 0.026 (85.3th percentile) | Windows User Profile Service Elevation of Privilege Vulnerability | ||
CVE-2022-0847 | Fedoraproject Fedora +29 | High 7.8 | — | 152 | Yes | 0.928 (99.8th percentile) | A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus… | ||
CVE-2021-41357 | Microsoft Windows 10 2004 +13 | High 7.8 | — | 0 | — | 0.015 (74.8th percentile) | Win32k Elevation of Privilege Vulnerability | ||
CVE-2021-40450 | Microsoft Windows 10 1809 +20 | High 7.8 | — | 0 | — | 0.015 (74.8th percentile) | Win32k Elevation of Privilege Vulnerability | ||
CVE-2019-1003029 | Jenkins Script Security +2 | Critical 9.9 | — | 0 | Yes | 0.744 (99.5th percentile) | A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.53 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java, src/main/java/org/jen… | ||
CVE-2022-22718 | Microsoft Windows 10 1507 +42 | High 7.8 | — | 1 | — | 0.185 (97.3th percentile) | Windows Print Spooler Elevation of Privilege Vulnerability | ||
CVE-2019-3568 | Facebook Whatsapp Business For Android +7 | Critical 9.8 | — | 0 | — | 0.301 (98.2th percentile) | A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number. | ||
CVE-2018-6882 | — | Medium 6.1 | Known | 0 | — | 0.298 (98.2th percentile) | Cross-site scripting (XSS) vulnerability in the ZmMailMsgView.getAttachmentLinkHtml function in Zimbra Collaboration Suite (ZCS) before 8.7 Patch 1 and 8.8.x before 8.8.7 might allow remote attackers… | ||
CVE-2022-22960 | VMware Workspace One Access, Identity Manager And Vrealize Automation +5 | High 7.8 | — | 0 | Yes | 0.355 (98.5th percentile) | VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts. | ||
CVE-2022-1364 | Google Chrome | High 8.8 | — | 3 | — | 0.139 (96.6th percentile) | Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||
CVE-2019-3929 | Barco Wepresent Wipg-1000p Firmware +12 | Critical 9.8 | — | 1 | Yes | 0.990 (99.9th percentile) | The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 fir… | ||
CVE-2019-16057 | Dlink Dns-320 Firmware +1 | Critical 9.8 | Known | 0 | — | 0.865 (99.7th percentile) | The login_mgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection. | ||
CVE-2018-7841 | Schneider-Electric U.motion Builder +1 | Critical 9.8 | — | 0 | — | 0.725 (99.4th percentile) | A SQL Injection (CWE-89) vulnerability exists in U.motion Builder software version 1.3.4 which could cause unwanted code execution when an improper set of characters is entered. | ||
CVE-2016-4523 | — | High 7.5 | — | 0 | — | 0.312 (98.3th percentile) | The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via unspecified v… | ||
CVE-2014-0780 | Indusoft Web Studio +1 | Critical 9.8 | — | 0 | — | 0.747 (99.5th percentile) | Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 7.1 before SP2 Patch 4 allows remote attackers to read administrative passwords in APP files, and consequently execute arbitrar… | ||
CVE-2010-5330 | — | Critical 9.8 | — | 0 | — | 0.402 (98.7th percentile) | On certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi (aka Show AP info) because the ifname variable is not sanitized, as demonstrated by shell metacharacters. | ||
CVE-2007-3010 | Al-Enterprise Omnipcx Enterprise Communication Server +1 | Critical 9.8 | — | 0 | Yes | 0.974 (99.9th percentile) | masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the use… | ||
CVE-2022-22954 | VMware Workspace One Access And Identity Manager +5 | Critical 9.8 | Known | 36 | Yes | 1.000 (100.0th percentile) | VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. | ||
CVE-2022-24521 | Microsoft Windows 10 1507 +42 | High 7.8 | Known | 1 | — | 0.071 (94.3th percentile) | Windows Common Log File System Driver Elevation of Privilege Vulnerability | ||
CVE-2018-7602 | Debian Debian Linux +2 | Critical 9.8 | Known | 6 | — | 0.992 (99.9th percentile) | A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. | ||
CVE-2018-20753 | Kaseya Virtual System Administrator +1 | Critical 9.8 | Known | 0 | — | 0.296 (98.2th percentile) | Kaseya VSA RMM before R9.3 9.3.0.35, R9.4 before 9.4.0.36, and R9.5 before 9.5.0.5 allows unprivileged remote attackers to execute PowerShell payloads on all managed devices. | ||
CVE-2015-5123 | Adobe Flash Player +9 | Critical 9.8 | — | 0 | — | 0.188 (97.3th percentile) | Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows a… | ||
CVE-2015-5122 | Adobe Flash Player +9 | Critical 9.8 | — | 0 | Yes | 0.870 (99.8th percentile) | Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Window… | ||
CVE-2015-3113 | Adobe Flash Player +15 | Critical 9.8 | — | 0 | Yes | 0.998 (100.0th percentile) | Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbi… | ||
CVE-2015-2502 | Microsoft Internet Explorer +1 | High 8.8 | — | 0 | — | 0.510 (98.9th percentile) | Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerabilit… | ||
CVE-2015-0313 | Adobe Flash Player +7 | Critical 9.8 | — | 1 | Yes | 0.953 (99.9th percentile) | Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute ar… | ||
CVE-2015-0311 | Adobe Flash Player +5 | Critical 9.8 | — | 1 | Yes | 0.856 (99.7th percentile) | Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute… | ||
CVE-2014-9163 | Adobe Flash Player +1 | High 7.8 | — | 0 | — | 0.449 (98.8th percentile) | Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code… | ||
CVE-2022-23176 | — | High 8.8 | — | 0 | — | 0.109 (95.9th percentile) | WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session via exposed management access. | ||
CVE-2021-42287 | Microsoft Windows Server 2004 +21 | High 7.5 | Known | 3 | — | 0.772 (99.6th percentile) | Active Directory Domain Services Elevation of Privilege Vulnerability | ||
CVE-2021-42278 | Microsoft Windows Server 2004 +21 | High 7.5 | Known | 6 | — | 0.733 (99.5th percentile) | Active Directory Domain Services Elevation of Privilege Vulnerability | ||
CVE-2021-39793 | Google Android +1 | High 7.8 | — | 0 | — | 0.007 (52.9th percentile) | In kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due to a logic error in the code. | ||
CVE-2021-27852 | Checkbox Survey | Critical 9.8 | — | 0 | — | 0.303 (98.2th percentile) | Deserialization of Untrusted Data vulnerability in CheckboxWeb.dll of Checkbox Survey allows an unauthenticated remote attacker to execute arbitrary code. | ||
CVE-2021-22600 | Debian Debian Linux +11 | Medium 6.6 | — | 2 | — | 0.066 (93.9th percentile) | A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. | ||
CVE-2020-2509 | QNAP Qts +3 | Critical 9.8 | — | 1 | — | 0.340 (98.4th percentile) | A command injection vulnerability has been reported to affect QTS and QuTS hero. | ||
CVE-2017-11317 | — | Critical 9.8 | — | 5 | Yes | 0.842 (99.7th percentile) | Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which allows remote attackers to perform arbitrary file uploads or… | ||
CVE-2021-3156 | Beyondtrust Privilege Management For Mac +24 | High 7.8 | — | 108 | Yes | 1.000 (100.0th percentile) | Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends wit… | ||
CVE-2021-31166 | Microsoft Windows 10 2004 +7 | Critical 9.8 | — | 18 | Yes | 0.999 (100.0th percentile) | HTTP Protocol Stack Remote Code Execution Vulnerability | ||
CVE-2017-0148 | Microsoft Server Message Block +9 | High 8.1 | Known | 1 | Yes | 0.994 (99.9th percentile) | The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607… | ||
CVE-2022-22965 | Cisco Cx Cloud Agent +38 | Critical 9.8 | — | 126 | Yes | 0.996 (99.9th percentile) | A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. | ||
CVE-2022-22675 | Apple iOS And Ipados +5 | High 7.8 | — | 0 | — | 0.125 (96.3th percentile) | An out-of-bounds write issue was addressed with improved bounds checking. | ||
CVE-2022-22674 | Apple macOS +1 | Medium 5.5 | — | 0 | — | 0.011 (65.6th percentile) | An out-of-bounds read issue existed that led to the disclosure of kernel memory. | ||
CVE-2021-45382 | Dlink Dir-810l Firmware +6 | Critical 9.8 | — | 0 | — | 0.978 (99.9th percentile) | A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file. | ||
CVE-2022-26871 | Trend Micro Trend Micro Apex Central +2 | Critical 9.8 | — | 0 | — | 0.195 (97.4th percentile) | An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution. | ||
CVE-2022-1040 | Sophos Sfos +1 | Critical 9.8 | — | 12 | — | 0.998 (100.0th percentile) | An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v18.5 MR3 and older. | ||
CVE-2021-34484 | Microsoft Windows 10 1507 +39 | High 7.8 | — | 0 | — | 0.218 (97.7th percentile) | Windows User Profile Service Elevation of Privilege Vulnerability | ||
CVE-2021-28799 | QNAP Hybrid Backup Sync +1 | Critical 10.0 | Known | 0 | — | 0.782 (99.6th percentile) | An improper authorization vulnerability has been reported to affect QNAP NAS running HBS 3 (Hybrid Backup Sync. | ||
CVE-2021-21551 | Dell Dbutil | High 8.8 | — | 12 | Yes | 0.796 (99.6th percentile) | Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. | ||
CVE-2018-10562 | Dasannetworks Gpon Router Firmware +1 | Critical 9.8 | Known | 6 | — | 0.999 (100.0th percentile) | An issue was discovered on Dasan GPON home routers. | ||
CVE-2018-10561 | Dasannetworks Gpon Router Firmware +1 | Critical 9.8 | — | 0 | — | 0.928 (99.8th percentile) | An issue was discovered on Dasan GPON home routers. | ||
CVE-2022-1096 | Google Chrome | High 8.8 | — | 1 | — | 0.247 (97.9th percentile) | Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||
CVE-2022-0543 | Debian Redis +1 | Critical 10.0 | — | 13 | Yes | 0.994 (99.9th percentile) | It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution. | ||
CVE-2021-38646 | Microsoft 365 Apps +7 | High 7.8 | Known | 0 | — | 0.080 (94.8th percentile) | Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability | ||
CVE-2021-34486 | Microsoft Windows 10 1809 +16 | High 7.8 | — | 2 | — | 0.093 (95.4th percentile) | Windows Event Tracing Elevation of Privilege Vulnerability | ||
CVE-2021-26085 | Atlassian Confluence Data Center +3 | Medium 5.3 | Known | 2 | — | 0.999 (100.0th percentile) | Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authorization Arbitrary File Read vulnerability in the /s/ endpoint. | ||
CVE-2021-20028 | SonicWall Sma 210 Firmware +6 | Critical 9.8 | Known | 1 | — | 0.301 (98.2th percentile) | Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products, specifically the SRA appliances running all 8.x firmware and… | ||
CVE-2019-7483 | SonicWall Sma100 +1 | High 7.5 | — | 0 | — | 0.040 (90.6th percentile) | In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server. | ||
CVE-2018-8440 | Microsoft Windows 10 +19 | High 7.8 | Known | 1 | Yes | 0.185 (97.3th percentile) | An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Elevation of Privilege Vulnerability." This affects Win… | ||
CVE-2018-8406 | Microsoft Windows 10 +10 | High 7.8 | Known | 0 | — | 0.034 (89.1th percentile) | An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerabilit… | ||
CVE-2018-8405 | Microsoft Windows 10 +16 | High 7.8 | Known | 0 | — | 0.034 (89.1th percentile) | An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerabilit… | ||
CVE-2017-0213 | Microsoft Windows 10 1507 +10 | High 7.3 | Known | 8 | — | 0.843 (99.7th percentile) | Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, an… | ||
CVE-2017-0059 | Microsoft Internet Explorer +1 | Medium 4.3 | — | 0 | — | 0.620 (99.2th percentile) | Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability… | ||
CVE-2017-0037 | Microsoft Edge +2 | High 8.1 | — | 1 | — | 0.804 (99.6th percentile) | Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilder::HandleColumnBreakOnColumnSpanningElement function in mshtml.dll, which allow… | ||
CVE-2016-7201 | Microsoft Edge +1 | High 8.8 | — | 0 | — | 0.800 (99.6th percentile) | The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engi… | ||
CVE-2016-7200 | Microsoft Edge +1 | High 8.8 | — | 1 | — | 0.828 (99.7th percentile) | The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engi… | ||
CVE-2016-0189 | Microsoft Internet Explorer +3 | High 7.5 | Known | 2 | Yes | 0.941 (99.8th percentile) | The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of… | ||
CVE-2016-0151 | Microsoft Windows 10 1507 +5 | High 7.8 | Known | 0 | — | 0.628 (99.2th percentile) | The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mismanages process tokens, which allows local user… | ||
CVE-2016-0040 | Microsoft Windows 7 +3 | High 7.8 | — | 2 | Yes | 0.243 (97.9th percentile) | The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a crafted application, aka "Windows Elevation of Privilege V… | ||
CVE-2015-2426 | Microsoft Windows 10 +9 | High 8.8 | — | 0 | Yes | 0.866 (99.7th percentile) | Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012… | ||
CVE-2015-2419 | Microsoft Internet Explorer +1 | High 8.8 | — | 0 | — | 0.530 (99.0th percentile) | JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "JScript9 Memory Corr… | ||
CVE-2015-1770 | Microsoft Office +1 | High 8.8 | — | 0 | — | 0.350 (98.4th percentile) | Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Uninitialized Memory Use Vulnerability." | ||
CVE-2013-3660 | Microsoft Windows 7 +8 | High 7.8 | — | 2 | Yes | 0.393 (98.6th percentile) | The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Wind… |