Skip to content
OpenAdvisories

Source

CISA Known Exploited Vulnerabilities

Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

All Critical High Medium Low Public exploit

564 results · Clear filters · Feed

  • High 7.2
    CVE-2022-27925 Exploited · Ransomware Public exploit Scanner template EPSS 99%

    Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts fil…

    KEV Aug 11, 2022
  • High 7.8
    CVE-2020-3837 Exploited Public exploit EPSS 15%

    A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.…

    Apple macOS watchOS tvOS macOS iOS
    KEV Jun 27, 2022
  • High 7.8
    CVE-2021-4034 Exploited · Ransomware Public exploit EPSS 95%

    A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid too…

    policykit-1 policykit-1 polkit polkit Debian Ubuntu Azure Linux Alpine
    KEV Jun 27, 2022
  • High 7.8
    CVE-2019-8605 Exploited Public exploit EPSS 18%

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.…

    Apple macOS watchOS tvOS macOS iOS
    KEV Jun 27, 2022
  • High 7.8
    CVE-2022-30190 Exploited · Ransomware Public exploit EPSS 99%

    Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

    A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. Th…

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Jun 14, 2022
  • High 7.8
    CVE-2011-0609 Exploited Public exploit EPSS 64%

    Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.…

    KEV Jun 8, 2022
  • High 8.8
    CVE-2011-2462 Exploited Public exploit EPSS 89%

    Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, …

    KEV Jun 8, 2022
  • High 8.8
    CVE-2018-17463 Exploited Public exploit EPSS 85%

    Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbi…

    Google Chrome chromium-browser oxide-qt Browsers Ubuntu
    KEV Jun 8, 2022
  • High 8.8
    CVE-2018-6065 Exploited Public exploit EPSS 60%

    Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google C…

    Google Chrome chromium-browser oxide-qt Browsers Ubuntu
    KEV Jun 8, 2022
  • High 7.8
    CVE-2012-0754 Exploited Public exploit EPSS 91%

    Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1…

    KEV Jun 8, 2022
  • High 8.8
    CVE-2012-1889 Exploited Public exploit EPSS 84%

    Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attacke…

    KEV Jun 8, 2022
  • High 8.1
    CVE-2012-4969 Exploited Public exploit EPSS 80%

    Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 a…

    KEV Jun 8, 2022
  • High 7.8
    CVE-2010-1297 Exploited Public exploit EPSS 83%

    Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acro…

    KEV Jun 8, 2022
  • High 7.3
    CVE-2010-2883 Exploited Public exploit EPSS 81%

    Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows…

    KEV Jun 8, 2022
  • High 7.8
    CVE-2009-4324 Exploited Public exploit EPSS 82%

    Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before…

    KEV Jun 8, 2022
  • High 8.8
    CVE-2009-3953 Exploited Public exploit EPSS 83%

    The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x befo…

    KEV Jun 8, 2022
  • High 7.8
    CVE-2007-5659 Exploited Public exploit EPSS 87%

    Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary cod…

    KEV Jun 8, 2022
  • High 7.8
    CVE-2015-0016 Exploited Public exploit EPSS 76%

    Directory traversal vulnerability in the TS WebProxy (aka TSWbPrxy) component in Microsoft Windows Vista SP2, Windows 7…

    KEV May 25, 2022
  • High 8.8
    CVE-2015-4495 Exploited Public exploit EPSS 69%

    The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remot…

    firefox pdf.js Debian Ubuntu
    KEV May 25, 2022
  • High 7.8
    CVE-2013-0074 Exploited · Ransomware Public exploit EPSS 79%

    Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML ob…

    KEV May 25, 2022
  • High 7.8
    CVE-2014-3153 Exploited Public exploit EPSS 37%

    The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two dif…

    linux linux Debian Ubuntu
    KEV May 25, 2022
  • High 8.8
    CVE-2016-0984 Exploited Public exploit EPSS 55%

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and…

    flashplugin-nonfree Ubuntu
    KEV May 25, 2022
  • High 8.8
    CVE-2019-3010 Exploited Public exploit EPSS 14%

    Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). The supported version that is …

    Oracle Solaris Operating System
    KEV May 25, 2022
  • High 7.8
    CVE-2018-8611 Exploited Public exploit

    An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka …

    Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows
    KEV May 24, 2022
  • High 8.8
    CVE-2016-4657 Exploited Public exploit EPSS 67%

    WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory…

    qtwebkit-source qtwebkit-opensource-src webkitgtk webkit2gtk Ubuntu
    KEV May 24, 2022
  • High 7.8
    CVE-2016-4656 Exploited Public exploit EPSS 24%

    The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a deni…

    KEV May 24, 2022
  • High 7.8
    CVE-2016-6367 Exploited Public exploit EPSS 23%

    Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows lo…

    KEV May 24, 2022
  • High 8.8
    CVE-2016-6366 Exploited Public exploit EPSS 88%

    Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Servic…

    KEV May 24, 2022
  • High 7.5
    CVE-2017-0147 Exploited · Ransomware Public exploit EPSS 100%

    The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Window…

    Microsoft Windows SMB Windows
    KEV May 24, 2022
  • High 7.8
    CVE-2017-0005 Exploited Public exploit EPSS 11%

    The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; …

    Microsoft Windows GDI+ Windows
    KEV May 24, 2022
  • High 7.8
    CVE-2017-8291 Exploited Public exploit EPSS 97%

    Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion…

    ghostscript ghostscript ghostscript Debian Ubuntu Alpine
    KEV May 24, 2022
  • High 8.2
    CVE-2019-18426 Exploited Public exploit EPSS 68%

    A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2…

    Facebook WhatsApp Desktop
    KEV May 23, 2022
  • High 7.8
    CVE-2019-7286 Exploited Public exploit EPSS 16%

    A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave…

    Apple macOS iOS macOS iOS
    KEV May 23, 2022
  • High 8.8
    CVE-2019-11707 Exploited Public exploit EPSS 38%

    A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allo…

    Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
    KEV May 23, 2022
  • High 8.8
    CVE-2019-13720 Exploited Public exploit EPSS 49%

    Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap…

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu
    KEV May 23, 2022
  • High 7.5
    CVE-2014-0160 Exploited Public exploit EPSS 100%

    The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension pack…

    openssl Debian
    KEV May 4, 2022
  • High 8.8
    CVE-2014-0322 Exploited Public exploit EPSS 85%

    Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code …

    KEV May 4, 2022
  • High 7.8
    CVE-2014-4113 Exploited Public exploit EPSS 87%

    win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 …

    KEV May 4, 2022
  • High 8.8
    CVE-2019-8506 Exploited Public exploit EPSS 16%

    A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS…

    Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine
    KEV May 4, 2022
  • High 7.8
    CVE-2022-0847 Exploited Public exploit EPSS 93%

    A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in co…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
    KEV Apr 25, 2022