CISA Known Exploited Vulnerabilities catalog (page 14)
Page 14 of 18 of the CISA Known Exploited Vulnerabilities catalog, newest additions first, with PoC counts, Metasploit and EPSS.
Known exploited CVEs, newest addition first (page 14 of 18)
| CVE | Product | Severity | Added to KEV | Due date | Ransomware use | Public PoCs | Metasploit | EPSS | Summary |
|---|---|---|---|---|---|---|---|---|---|
CVE-2013-0625 | Adobe Coldfusion +1 | Critical 9.8 | — | 0 | — | 0.938 (99.8th percentile) | Adobe ColdFusion 9.0, 9.0.1, and 9.0.2, when a password is not configured, allows remote attackers to bypass authentication and possibly execute arbitrary code via unspecified vectors, as exploited i… | ||
CVE-2009-3960 | Adobe Blazeds +5 | Medium 6.5 | Known | 0 | Yes | 0.901 (99.8th percentile) | Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Services 2.5.1, 2.6.1, and 3.0, Flex Data Services 2.0.1, and ColdFusion 7.0.2, 8.0, 8… | ||
CVE-2022-20708 | Cisco Cisco Small Business Rv Series Router Firmware +4 | Critical 10.0 | — | 0 | — | 0.149 (96.7th percentile) | Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute ar… | ||
CVE-2022-20703 | Cisco Cisco Small Business Rv Series Router Firmware +9 | Critical 10.0 | — | 0 | — | 0.092 (95.4th percentile) | Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute ar… | ||
CVE-2022-20701 | Cisco Cisco Small Business Rv Series Router Firmware +4 | Critical 10.0 | — | 0 | — | 0.097 (95.6th percentile) | Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute ar… | ||
CVE-2022-20700 | Cisco Cisco Small Business Rv Series Router Firmware +9 | Critical 10.0 | — | 0 | — | 0.057 (93.0th percentile) | Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute ar… | ||
CVE-2022-20699 | Cisco Cisco Small Business Rv Series Router Firmware +4 | Critical 10.0 | — | 5 | Yes | 0.725 (99.4th percentile) | Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute ar… | ||
CVE-2021-41379 | Microsoft Windows 10 1507 +43 | Medium 5.5 | Known | 0 | — | 0.195 (97.4th percentile) | Windows Installer Elevation of Privilege Vulnerability | ||
CVE-2020-1938 | Apache Apache Tomcat +21 | Critical 9.8 | — | 49 | Yes | 0.993 (99.9th percentile) | When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. | ||
CVE-2020-11899 | Dell Wyse 5030 Firmware +4 | Medium 5.4 | — | 0 | — | 0.184 (97.3th percentile) | The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read. | ||
CVE-2019-16928 | Canonical Ubuntu Linux +4 | Critical 9.8 | — | 0 | — | 0.416 (98.7th percentile) | Exim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than CVE-2019-15846. | ||
CVE-2019-1652 | Cisco Cisco Small Business Rv Series Router Firmware +2 | High 7.2 | — | 1 | Yes | 0.959 (99.9th percentile) | A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker with administrative privileges… | ||
CVE-2019-1297 | Microsoft Excel +5 | High 8.8 | — | 0 | — | 0.218 (97.7th percentile) | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. | ||
CVE-2018-8581 | Microsoft Exchange Server +1 | High 7.4 | Known | 3 | — | 0.276 (98.1th percentile) | An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability." This affects Microsoft Exchange Server. | ||
CVE-2018-8298 | Microsoft Chakracore | High 7.5 | — | 0 | — | 0.747 (99.5th percentile) | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. | ||
CVE-2018-0180 | Cisco iOS +1 | Medium 5.9 | — | 0 | — | 0.049 (92.2th percentile) | Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in… | ||
CVE-2018-0179 | Cisco iOS +1 | Medium 5.9 | — | 0 | — | 0.049 (92.2th percentile) | Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in… | ||
CVE-2018-0175 | Cisco iOS +3 | High 8.0 | — | 0 | — | 0.035 (89.2th percentile) | Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent atta… | ||
CVE-2018-0174 | Cisco iOS +2 | High 8.6 | — | 0 | — | 0.076 (94.6th percentile) | A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload… | ||
CVE-2018-0173 | Cisco iOS +2 | High 8.6 | — | 0 | — | 0.076 (94.6th percentile) | A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 information in DHCP Version 4 (DHCPv4) packets could allow an unauthenticated, remote… | ||
CVE-2018-0172 | Cisco iOS +2 | High 8.6 | — | 0 | — | 0.078 (94.7th percentile) | A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload… | ||
CVE-2018-0167 | Cisco iOS +3 | High 8.8 | — | 0 | — | 0.034 (88.8th percentile) | Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated… | ||
CVE-2018-0161 | Cisco iOS +1 | Medium 6.3 | — | 0 | — | 0.041 (90.9th percentile) | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco Catalyst Switches could allow an authenticated, remote attacker to… | ||
CVE-2018-0159 | Cisco iOS +2 | High 7.5 | — | 0 | — | 0.069 (94.1th percentile) | A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause… | ||
CVE-2018-0158 | Cisco iOS +2 | High 8.6 | — | 0 | — | 0.072 (94.4th percentile) | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak or a reloa… | ||
CVE-2018-0156 | Cisco iOS +2 | High 7.5 | — | 0 | — | 0.094 (95.4th percentile) | A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a… | ||
CVE-2018-0155 | Cisco iOS +2 | High 8.6 | — | 0 | — | 0.077 (94.7th percentile) | A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches could allow an unauthenticated… | ||
CVE-2018-0154 | Cisco iOS +1 | High 7.5 | — | 0 | — | 0.071 (94.3th percentile) | A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of service… | ||
CVE-2018-0151 | Cisco iOS Xe +1 | Critical 9.8 | — | 0 | — | 0.142 (96.6th percentile) | A vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition… | ||
CVE-2017-8540 | Microsoft Endpoint Protection +9 | High 7.8 | — | 0 | — | 0.719 (99.4th percentile) | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and… | ||
CVE-2017-6744 | Cisco iOS +1 | High 8.8 | — | 0 | — | 0.073 (94.4th percentile) | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code… | ||
CVE-2017-6743 | Cisco iOS +2 | High 8.8 | — | 0 | — | 0.109 (95.9th percentile) | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code… | ||
CVE-2017-6740 | Cisco iOS +2 | High 8.8 | — | 0 | — | 0.111 (96.0th percentile) | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code… | ||
CVE-2017-6739 | Cisco iOS +2 | High 8.8 | — | 0 | — | 0.109 (95.9th percentile) | A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. | ||
CVE-2017-6738 | Cisco Cisco iOS Xe Software +2 | High 8.8 | — | 0 | — | 0.109 (95.9th percentile) | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code… | ||
CVE-2017-6737 | Cisco iOS +1 | High 8.8 | — | 0 | — | 0.450 (98.8th percentile) | A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. | ||
CVE-2017-6736 | Cisco iOS +2 | High 8.8 | — | 3 | — | 0.704 (99.4th percentile) | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code… | ||
CVE-2017-6663 | Cisco iOS +2 | Medium 6.5 | — | 0 | — | 0.021 (82.0th percentile) | A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause autonomic nodes of an affected system to… | ||
CVE-2017-6627 | Cisco iOS +2 | High 7.5 | — | 0 | — | 0.062 (93.5th percentile) | A vulnerability in the UDP processing code of Cisco IOS 15.1, 15.2, and 15.4 and IOS XE 3.14 through 3.18 could allow an unauthenticated, remote attacker to cause the input queue of an affected syste… | ||
CVE-2017-12319 | Cisco iOS +2 | Medium 5.9 | — | 0 | — | 0.052 (92.6th percentile) | A vulnerability in the Border Gateway Protocol (BGP) over an Ethernet Virtual Private Network (EVPN) for Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to r… | ||
CVE-2017-12240 | Cisco iOS +1 | Critical 9.8 | — | 0 | — | 0.138 (96.5th percentile) | The DHCP relay subsystem of Cisco IOS 12.2 through 15.6 and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code and gain full… | ||
CVE-2017-12238 | Cisco iOS +1 | Medium 6.5 | — | 0 | — | 0.020 (81.1th percentile) | A vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS 15.0 through 15.4 for Cisco Catalyst 6800 Series Switches could allow an unauthenticated, adjacent attacker to cause a C680… | ||
CVE-2017-12237 | Cisco iOS +2 | High 7.5 | — | 0 | — | 0.071 (94.3th percentile) | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS 15.0 through 15.6 and Cisco IOS XE 3.5 through 16.5 could allow an unauthenticated, remote attacker to cause high CP… | ||
CVE-2017-12235 | Cisco iOS +1 | High 7.5 | — | 0 | — | 0.071 (94.3th percentile) | A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol (PN-DCP) for Cisco IOS 12.2 through 15.6 could allow an unauthenticated, remote attacker to cause an affecte… | ||
CVE-2017-12234 | Cisco iOS +1 | High 7.5 | — | 0 | — | 0.071 (94.3th percentile) | Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to cause an affected devi… | ||
CVE-2017-12233 | Cisco iOS +1 | High 7.5 | — | 0 | — | 0.071 (94.3th percentile) | Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to cause an affected devi… | ||
CVE-2017-12232 | Cisco iOS +1 | Medium 6.5 | — | 0 | — | 0.022 (82.3th percentile) | A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS 15.0 through 15.6 could allow an unauthenticated, adjacent att… | ||
CVE-2017-12231 | Cisco iOS +1 | High 7.5 | — | 0 | — | 0.071 (94.3th percentile) | A vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to cause a denial of service (D… | ||
CVE-2017-11826 | Microsoft Office Compatibility Pack +7 | High 7.8 | — | 1 | — | 0.822 (99.7th percentile) | Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation… | ||
CVE-2017-11292 | Adobe Flash Player +5 | High 8.8 | — | 0 | — | 0.112 (96.0th percentile) | Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an untrusted value to be used in the calculation of an array index. | ||
CVE-2017-0261 | Microsoft Office +1 | High 7.8 | — | 2 | — | 0.781 (99.6th percentile) | Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Office Remote Code Execution… | ||
CVE-2017-0001 | Microsoft Windows 10 1507 +10 | High 7.8 | — | 0 | — | 0.031 (87.9th percentile) | The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gol… | ||
CVE-2016-8562 | — | High 7.5 | — | 0 | — | 0.036 (89.6th percentile) | A vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS NET CP 1543-1 (All versions < V2.0.28). | ||
CVE-2016-7855 | Adobe Flash Player +4 | High 8.8 | — | 1 | — | 0.252 (97.9th percentile) | Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as… | ||
CVE-2016-7262 | Microsoft Excel +3 | High 7.8 | — | 0 | — | 0.588 (99.1th percentile) | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow user-assisted remote attackers to execute arbitrary comm… | ||
CVE-2016-7193 | Microsoft Office +4 | High 7.8 | — | 0 | — | 0.576 (99.1th percentile) | Microsoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on Sha… | ||
CVE-2016-5195 | Canonical Ubuntu Linux +18 | High 7.0 | — | 79 | — | 0.835 (99.7th percentile) | Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-… | ||
CVE-2016-4117 | Adobe Flash Player +9 | Critical 9.8 | Known | 2 | Yes | 0.943 (99.9th percentile) | Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016. | ||
CVE-2016-1019 | Adobe Air Desktop Runtime +5 | Critical 9.8 | Known | 0 | — | 0.223 (97.7th percentile) | Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild… | ||
CVE-2016-0099 | Microsoft Windows 10 1507 +7 | High 7.8 | Known | 1 | Yes | 0.370 (98.5th percentile) | The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 15… | ||
CVE-2015-7645 | Adobe Flash Player +10 | High 7.8 | Known | 0 | — | 0.653 (99.3th percentile) | Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to execute arbitrary code via a crafted SWF f… | ||
CVE-2015-5119 | Adobe Flash Player +11 | Critical 9.8 | — | 3 | Yes | 0.986 (99.9th percentile) | Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows and OS X and 11.x t… | ||
CVE-2015-4902 | — | Medium 5.3 | — | 0 | — | 0.136 (96.5th percentile) | Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment. | ||
CVE-2015-3043 | Adobe Flash Player +11 | Critical 9.8 | — | 1 | Yes | 0.739 (99.5th percentile) | Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of servi… | ||
CVE-2015-2590 | Canonical Ubuntu Linux +21 | Critical 9.8 | — | 0 | — | 0.255 (98.0th percentile) | Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors… | ||
CVE-2015-2545 | Microsoft Office +1 | High 7.8 | — | 0 | — | 0.859 (99.7th percentile) | Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted EPS image, aka "Microsoft Office Malformed EPS File Vulnerability." | ||
CVE-2015-2424 | Microsoft Excel Viewer +6 | High 8.8 | — | 0 | — | 0.401 (98.6th percentile) | Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, and PowerPoint 2013 RT SP1 allow remote attackers to execute arbitrary code or ca… | ||
CVE-2015-2387 | Microsoft Windows 7 +9 | High 7.8 | — | 0 | — | 0.349 (98.4th percentile) | ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012… | ||
CVE-2015-1701 | Microsoft Windows 2003 Server +4 | High 7.8 | Known | 3 | Yes | 0.559 (99.1th percentile) | Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in… | ||
CVE-2015-1642 | Microsoft Office +1 | High 7.8 | — | 0 | — | 0.531 (99.0th percentile) | Microsoft Office 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." | ||
CVE-2014-4114 | Microsoft Windows 7 +8 | High 7.8 | — | 0 | Yes | 0.816 (99.6th percentile) | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to execute… | ||
CVE-2014-0496 | Adobe Acrobat +1 | High 8.8 | — | 0 | — | 0.400 (98.6th percentile) | Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors. | ||
CVE-2013-5065 | Microsoft Windows 2003 Server +2 | High 7.8 | — | 1 | Yes | 0.347 (98.4th percentile) | NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in November 2013. | ||
CVE-2013-3897 | Microsoft Internet Explorer +1 | High 8.8 | — | 0 | Yes | 0.773 (99.6th percentile) | Use-after-free vulnerability in the CDisplayPointer class in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (mem… | ||
CVE-2013-3346 | Adobe Acrobat +2 | Critical 9.8 | — | 0 | Yes | 0.789 (99.6th percentile) | Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vecto… | ||
CVE-2013-1675 | Canonical Ubuntu Linux +18 | Medium 6.5 | — | 0 | — | 0.067 (94.0th percentile) | Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mP… | ||
CVE-2013-1347 | Microsoft Internet Explorer +1 | High 8.8 | — | 0 | Yes | 0.777 (99.6th percentile) | Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly allocated or (2) is… | ||
CVE-2013-0641 | Adobe Acrobat +9 | High 7.8 | — | 0 | — | 0.323 (98.3th percentile) | Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in… | ||
CVE-2013-0640 | Adobe Acrobat +9 | High 7.8 | — | 0 | — | 0.869 (99.7th percentile) | Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted… | ||
CVE-2013-0632 | Adobe Coldfusion +1 | Critical 9.8 | — | 0 | Yes | 0.931 (99.8th percentile) | administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and possibly execute arbitrary code by logging in to the RDS component using the defau… | ||
CVE-2012-4681 | — | Critical 9.8 | Known | 2 | Yes | 0.985 (99.9th percentile) | Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses S… | ||
CVE-2012-1856 | Microsoft Commerce Server +7 | High 8.8 | — | 0 | — | 0.720 (99.4th percentile) | The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3, Office 2010 SP1, SQL Server 2000 SP4, SQL Se… | ||
CVE-2012-1723 | — | Critical 9.8 | Known | 1 | Yes | 0.936 (99.8th percentile) | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows r… | ||
CVE-2012-1535 | Adobe Flash Player +6 | High 7.8 | — | 0 | Yes | 0.704 (99.4th percentile) | Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or cause a denial of ser… | ||
CVE-2012-0507 | Debian Debian Linux +7 | Critical 9.8 | Known | 0 | Yes | 0.982 (99.9th percentile) | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to a… | ||
CVE-2011-3544 | Canonical Ubuntu Linux +6 | Critical 9.8 | — | 0 | Yes | 0.967 (99.9th percentile) | Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java… | ||
CVE-2011-1889 | Microsoft Forefront Threat Management Gateway +1 | Critical 9.8 | — | 0 | — | 0.490 (98.9th percentile) | The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remote attackers to execute arbitrary code via vectors involving unspecified request… | ||
CVE-2011-0611 | Adobe Acrobat +7 | High 8.8 | — | 0 | Yes | 0.994 (99.9th percentile) | Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe R… | ||
CVE-2010-3333 | Microsoft Office +2 | High 7.8 | — | 2 | Yes | 0.894 (99.8th percentile) | Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac al… | ||
CVE-2010-0232 | Microsoft Windows 2000 +3 | High 7.8 | — | 1 | Yes | 0.287 (98.2th percentile) | The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, and Windows Server 2008 Gold a… | ||
CVE-2010-0188 | Adobe Acrobat +2 | High 7.8 | Known | 0 | Yes | 0.881 (99.8th percentile) | Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via un… | ||
CVE-2009-3129 | Microsoft Excel +4 | High 7.8 | — | 0 | Yes | 0.840 (99.7th percentile) | Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Viewer SP1 and SP2; a… | ||
CVE-2009-1123 | Microsoft Windows 2000 +5 | High 7.8 | — | 0 | — | 0.049 (92.1th percentile) | The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate changes to unspecified kernel objects, which allows… | ||
CVE-2008-3431 | — | High 8.8 | — | 0 | — | 0.069 (94.1th percentile) | The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communication method for IOCTLs and does not properly validate a buffer associated with t… | ||
CVE-2008-2992 | Adobe Acrobat +3 | High 7.8 | Known | 1 | Yes | 0.998 (100.0th percentile) | Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a PDF file that calls the util.printf JavaScript function with a crafte… | ||
CVE-2004-0210 | Microsoft Interix +3 | High 7.8 | — | 0 | — | 0.072 (94.4th percentile) | The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer over… | ||
CVE-2002-0367 | Microsoft Windows 2000 +2 | High 7.8 | — | 0 | — | 0.049 (92.2th percentile) | smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges… | ||
CVE-2022-24682 | — | Medium 6.1 | Known | 0 | — | 0.309 (98.3th percentile) | An issue was discovered in the Calendar feature in Zimbra Collaboration Suite 8.8.x before 8.8.15 patch 30 (update 1), as exploited in the wild starting in December 2021. | ||
CVE-2017-8570 | Microsoft Office +1 | High 7.8 | — | 7 | — | 0.899 (99.8th percentile) | Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability". | ||
CVE-2017-0222 | Microsoft Internet Explorer +1 | High 8.8 | — | 0 | — | 0.296 (98.2th percentile) | A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017… |