Skip to content
OpenAdvisories

Source

CISA Known Exploited Vulnerabilities

Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

All Critical High Medium Low Public exploit

1,118 results · Clear filters · Feed

  • High 8.8
    CVE-2018-6065 Exploited Public exploit EPSS 60%

    Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google C…

    Google Chrome chromium-browser oxide-qt Browsers Ubuntu
    KEV Jun 8, 2022
  • High 7.8
    CVE-2012-0754 Exploited Public exploit EPSS 91%

    Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1…

    KEV Jun 8, 2022
  • High 8.8
    CVE-2012-1889 Exploited Public exploit EPSS 84%

    Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attacke…

    KEV Jun 8, 2022
  • High 8.1
    CVE-2012-4969 Exploited Public exploit EPSS 80%

    Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 a…

    KEV Jun 8, 2022
  • High 7.8
    CVE-2010-1297 Exploited Public exploit EPSS 83%

    Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acro…

    KEV Jun 8, 2022
  • High 7.3
    CVE-2010-2883 Exploited Public exploit EPSS 81%

    Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows…

    KEV Jun 8, 2022
  • High 7.8
    CVE-2009-4324 Exploited Public exploit EPSS 82%

    Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before…

    KEV Jun 8, 2022
  • High 8.8
    CVE-2009-3953 Exploited Public exploit EPSS 83%

    The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x befo…

    KEV Jun 8, 2022
  • Critical 9.8
    CVE-2019-7192 Exploited · Ransomware Public exploit Scanner template EPSS 88%

    This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix th…

    KEV Jun 8, 2022
  • Critical 9.8
    CVE-2019-7194 Exploited · Ransomware Public exploit Scanner template EPSS 83%

    This external control of file name or path vulnerability allows remote attackers to access or modify system files. To f…

    KEV Jun 8, 2022
  • Critical 9.8
    CVE-2019-7195 Exploited · Ransomware Public exploit Scanner template EPSS 89%

    This external control of file name or path vulnerability allows remote attackers to access or modify system files. To f…

    KEV Jun 8, 2022
  • Medium 6.5
    CVE-2019-5825 Exploited Public exploit EPSS 56%

    Out of bounds write in JavaScript in Google Chrome prior to 73.0.3683.86 allowed a remote attacker to potentially explo…

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu
    KEV Jun 8, 2022
  • High 7.8
    CVE-2007-5659 Exploited Public exploit EPSS 87%

    Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary cod…

    KEV Jun 8, 2022
  • Critical 9.8
    CVE-2022-26134 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an u…

    Atlassian Confluence Data Center Confluence Server Web / CMS
    KEV Jun 2, 2022
  • High 7.8
    CVE-2015-0016 Exploited Public exploit EPSS 76%

    Directory traversal vulnerability in the TS WebProxy (aka TSWbPrxy) component in Microsoft Windows Vista SP2, Windows 7…

    KEV May 25, 2022
  • Medium 6.6
    CVE-2015-1769 Exploited Public exploit

    Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1…

    KEV May 25, 2022
  • High 8.8
    CVE-2015-4495 Exploited Public exploit EPSS 69%

    The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remot…

    firefox pdf.js Debian Ubuntu
    KEV May 25, 2022
  • High 7.8
    CVE-2013-0074 Exploited · Ransomware Public exploit EPSS 79%

    Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML ob…

    KEV May 25, 2022
  • Critical 9.8
    CVE-2013-0422 Exploited · Ransomware Public exploit EPSS 97%

    Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) usin…

    KEV May 25, 2022
  • Low 3.7
    CVE-2013-0431 Exploited · Ransomware Public exploit EPSS 90%

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and Op…

    KEV May 25, 2022
  • Medium 6.5
    CVE-2013-7331 Exploited Public exploit EPSS 50%

    The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the exis…

    KEV May 25, 2022
  • Medium 5.5
    CVE-2013-3896 Exploited Public exploit EPSS 67%

    Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, w…

    KEV May 25, 2022
  • Low 3.7
    CVE-2013-2423 Exploited Public exploit EPSS 85%

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, an…

    KEV May 25, 2022
  • High 7.8
    CVE-2014-3153 Exploited Public exploit EPSS 37%

    The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two dif…

    linux linux Debian Ubuntu
    KEV May 25, 2022
  • High 8.8
    CVE-2016-0984 Exploited Public exploit EPSS 55%

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and…

    flashplugin-nonfree Ubuntu
    KEV May 25, 2022
  • Low 3.7
    CVE-2010-0738 Exploited · Ransomware Public exploit Scanner template EPSS 74%

    The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.…

    KEV May 25, 2022
  • Critical 9.8
    CVE-2010-0840 Exploited Public exploit EPSS 96%

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18…

    KEV May 25, 2022
  • Medium 5.9
    CVE-2010-1428 Exploited · Ransomware Public exploit Scanner template EPSS 53%

    The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) …

    KEV May 25, 2022
  • High 8.8
    CVE-2019-3010 Exploited Public exploit EPSS 14%

    Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). The supported version that is …

    Oracle Solaris Operating System
    KEV May 25, 2022
  • High 7.8
    CVE-2018-8611 Exploited Public exploit

    An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka …

    Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows
    KEV May 24, 2022
  • Medium 5.5
    CVE-2016-4655 Exploited Public exploit EPSS 33%

    The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app.

    KEV May 24, 2022
  • High 8.8
    CVE-2016-4657 Exploited Public exploit EPSS 67%

    WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory…

    qtwebkit-source qtwebkit-opensource-src webkitgtk webkit2gtk Ubuntu
    KEV May 24, 2022
  • High 7.8
    CVE-2016-4656 Exploited Public exploit EPSS 24%

    The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a deni…

    KEV May 24, 2022
  • High 7.8
    CVE-2016-6367 Exploited Public exploit EPSS 23%

    Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows lo…

    KEV May 24, 2022
  • High 8.8
    CVE-2016-6366 Exploited Public exploit EPSS 88%

    Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Servic…

    KEV May 24, 2022
  • High 7.5
    CVE-2017-0147 Exploited · Ransomware Public exploit EPSS 100%

    The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Window…

    Microsoft Windows SMB Windows
    KEV May 24, 2022
  • High 7.8
    CVE-2017-0005 Exploited Public exploit EPSS 11%

    The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; …

    Microsoft Windows GDI+ Windows
    KEV May 24, 2022
  • Critical 9.8
    CVE-2017-8543 Exploited Public exploit EPSS 74%

    Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 200…

    Microsoft Microsoft Windows Windows
    KEV May 24, 2022
  • High 7.8
    CVE-2017-8291 Exploited Public exploit EPSS 97%

    Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion…

    ghostscript ghostscript ghostscript Debian Ubuntu Alpine
    KEV May 24, 2022
  • High 8.2
    CVE-2019-18426 Exploited Public exploit EPSS 68%

    A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2…

    Facebook WhatsApp Desktop
    KEV May 23, 2022