CISA Known Exploited Vulnerabilities

928 results · Clear filters · Feed

• High 8.8
  CVE-2012-5054 Exploited EPSS 21%

  Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows rem…

  Sep 24, 2012

  KEV Jun 8, 2022
• High 8.8
  CVE-2008-0655 Exploited EPSS 38%

  Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors.

  Feb 7, 2008

  KEV Jun 8, 2022
• High 8.8
  CVE-2006-2492 Exploited EPSS 48%

  Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suite…

  May 20, 2006

  KEV Jun 8, 2022
• High 8.8
  CVE-2016-1646 Exploited EPSS 48%

  The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, d…

  chromium-browser oxide-qt libv8-3.14 Ubuntu
  Mar 29, 2016

  KEV Jun 8, 2022
• High 8.8
  CVE-2016-5198 Exploited EPSS 34%

  V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac…

  chromium-browser oxide-qt libv8-3.14 Linux Windows Android Browsers Ubuntu
  Jan 19, 2017

  KEV Jun 8, 2022
• High 7.8
  CVE-2010-1297 Exploited Public exploit EPSS 83%

  Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acro…

  Jun 8, 2010

  KEV Jun 8, 2022
• High 7.3
  CVE-2010-2883 Exploited Public exploit EPSS 81%

  Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows…

  Sep 9, 2010

  KEV Jun 8, 2022
• High 7.8
  CVE-2010-2572 Exploited EPSS 59%

  Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a c…

  Nov 10, 2010

  KEV Jun 8, 2022
• High 7.8
  CVE-2009-0563 Exploited EPSS 60%

  Stack-based buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac…

  Jun 10, 2009

  KEV Jun 8, 2022
• High 7.8
  CVE-2009-0557 Exploited EPSS 53%

  Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Mic…

  Jun 10, 2009

  KEV Jun 8, 2022
• High 7.8
  CVE-2009-1862 Exploited EPSS 21%

  Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 a…

  Jul 23, 2009

  KEV Jun 8, 2022
• High 7.8
  CVE-2009-4324 Exploited Public exploit EPSS 82%

  Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before…

  Dec 15, 2009

  KEV Jun 8, 2022
• High 8.8
  CVE-2009-3953 Exploited Public exploit EPSS 83%

  The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x befo…

  Jan 13, 2010

  KEV Jun 8, 2022
• High 8.8
  CVE-2017-5030 Exploited EPSS 41%

  Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0…

  chromium-browser oxide-qt libv8-3.14 Linux Windows Android Browsers Ubuntu
  Apr 24, 2017

  KEV Jun 8, 2022
• High 8.8
  CVE-2017-5070 Exploited EPSS 32%

  Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, …

  chromium-browser oxide-qt libv8-3.14 Linux Windows Android Browsers Ubuntu
  Oct 27, 2017

  KEV Jun 8, 2022
• High 8.8
  CVE-2019-15271 Exploited

  Cisco Small Business RV016, RV042, RV042G, and RV082 Routers Arbitrary Command Execution Vulnerability

  A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an authenticated, remote attacker to execute arbitrary commands with root privileges. The attacker must have either a valid credential or an ac…

  Cisco Cisco Small Business RV Series Router Firmware Network devices
  Nov 26, 2019

  KEV Jun 8, 2022
• High 7.8
  CVE-2007-5659 Exploited Public exploit EPSS 87%

  Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary cod…

  Feb 12, 2008

  KEV Jun 8, 2022
• High 7.8
  CVE-2015-0310 Exploited EPSS 15%

  Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.43…

  flashplugin-nonfree Ubuntu
  Jan 23, 2015

  KEV May 25, 2022
• High 7.8
  CVE-2015-0016 Exploited Public exploit EPSS 76%

  Directory traversal vulnerability in the TS WebProxy (aka TSWbPrxy) component in Microsoft Windows Vista SP2, Windows 7…

  Jan 13, 2015

  KEV May 25, 2022
• High 7.8
  CVE-2015-1671 Exploited EPSS 49%

  The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Off…

  May 13, 2015

  KEV May 25, 2022
• High 8.8
  CVE-2015-4495 Exploited Public exploit EPSS 69%

  The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remot…

  firefox pdf.js Debian Ubuntu
  Aug 8, 2015

  KEV May 25, 2022
• High 7.8
  CVE-2015-6175 Exploited

  The kernel in Microsoft Windows 10 Gold allows local users to gain privileges via a crafted application, aka "Windows K…

  Dec 9, 2015

  KEV May 25, 2022
• High 8.8
  CVE-2015-2360 Exploited EPSS 15%

  win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Serve…

  Jun 10, 2015

  KEV May 25, 2022
• High 8.8
  CVE-2015-2425 Exploited EPSS 45%

  Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…

  Jul 14, 2015

  KEV May 25, 2022
• High 8.8
  CVE-2015-8651 Exploited EPSS 68%

  Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and be…

  flashplugin-nonfree Ubuntu
  Dec 28, 2015

  KEV May 25, 2022
• High 7.8
  CVE-2013-0074 Exploited · Ransomware Public exploit EPSS 79%

  Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML ob…

  Mar 13, 2013

  KEV May 25, 2022
• High 8.8
  CVE-2014-0546 Exploited EPSS 22%

  Adobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows allow attackers to bypass a sandbox pro…

  Aug 12, 2014

  KEV May 25, 2022
• High 8.8
  CVE-2014-4148 Exploited EPSS 60%

  win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 …

  Oct 15, 2014

  KEV May 25, 2022
• High 7.8
  CVE-2014-4077 Exploited EPSS 55%

  Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Office 200…

  Nov 11, 2014

  KEV May 25, 2022
• High 8.8
  CVE-2014-4123 Exploited EPSS 47%

  Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Intern…

  Oct 15, 2014

  KEV May 25, 2022
• High 7.8
  CVE-2014-3153 Exploited Public exploit EPSS 37%

  The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two dif…

  linux linux Debian Ubuntu
  Jun 7, 2014

  KEV May 25, 2022
• High 8.8
  CVE-2014-2817 Exploited EPSS 26%

  Microsoft Internet Explorer 6 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Intern…

  Aug 12, 2014

  KEV May 25, 2022
• High 8.8
  CVE-2014-8439 Exploited EPSS 20%

  Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on…

  flashplugin-nonfree Ubuntu
  Nov 25, 2014

  KEV May 25, 2022
• High 8.8
  CVE-2016-0984 Exploited Public exploit EPSS 55%

  Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and…

  flashplugin-nonfree Ubuntu
  Feb 10, 2016

  KEV May 25, 2022
• High 8.8
  CVE-2016-0034 Exploited · Ransomware EPSS 69%

  Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers t…

  Jan 13, 2016

  KEV May 25, 2022
• High 8.8
  CVE-2016-7256 Exploited EPSS 65%

  atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…

  Nov 10, 2016

  KEV May 25, 2022
• High 8.8
  CVE-2016-1010 Exploited EPSS 19%

  Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X an…

  flashplugin-nonfree Ubuntu
  Mar 12, 2016

  KEV May 25, 2022
• High 7.8
  CVE-2016-3393 Exploited EPSS 68%

  Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows…

  Oct 14, 2016

  KEV May 25, 2022
• High 8.8
  CVE-2019-3010 Exploited Public exploit EPSS 14%

  Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). The supported version that is …

  Oracle Solaris Operating System
  Oct 16, 2019

  KEV May 25, 2022
• High 7.8
  CVE-2018-8611 Exploited Public exploit

  An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka …

  Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows
  Dec 12, 2018

  KEV May 24, 2022