Skip to content
OpenAdvisories

Source

CISA Known Exploited Vulnerabilities

Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

All Critical High Medium Low Public exploit

928 results · Clear filters · Feed

  • High 7.8
    CVE-2015-0313 Exploited Public exploit EPSS 95%

    Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows…

    flashplugin-nonfree Ubuntu
    KEV Apr 13, 2022
  • High 7.8
    CVE-2015-3113 Exploited Public exploit EPSS 100%

    Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows a…

    flashplugin-nonfree Ubuntu
    KEV Apr 13, 2022
  • High 8.8
    CVE-2015-2502 Exploited EPSS 51%

    Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…

    KEV Apr 13, 2022
  • High 7.8
    CVE-2015-5122 Exploited Public exploit EPSS 87%

    Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Playe…

    flashplugin-nonfree Ubuntu
    KEV Apr 13, 2022
  • High 7.8
    CVE-2015-5123 Exploited EPSS 19%

    Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 1…

    flashplugin-nonfree Ubuntu
    KEV Apr 13, 2022
  • High 8.1
    CVE-2018-7602 Exploited · Ransomware Public exploit Scanner template EPSS 99%

    Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004

    A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is relat…

    Drupal Core drupal/core drupal/drupal Ubuntu Alpine Packagist
    KEV Apr 13, 2022
  • High 7.8
    CVE-2022-24521 Exploited · Ransomware Public exploit

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Apr 13, 2022
  • High 7.8
    CVE-2014-9163 Exploited EPSS 45%

    Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and …

    flashplugin-nonfree Ubuntu
    KEV Apr 13, 2022
  • High 8.8
    CVE-2022-23176 Exploited EPSS 11%

    WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a…

    KEV Apr 11, 2022
  • High 7.8
    CVE-2021-39793 Exploited

    In kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due to a logic error in the…

    Android
    KEV Apr 11, 2022
  • High 7.5
    CVE-2021-42278 Exploited · Ransomware Public exploit EPSS 73%

    Active Directory Domain Services Elevation of Privilege Vulnerability

    Active Directory Domain Services Elevation of Privilege Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows
    KEV Apr 11, 2022
  • High 7.5
    CVE-2021-42287 Exploited · Ransomware Public exploit EPSS 77%

    Active Directory Domain Services Elevation of Privilege Vulnerability

    Active Directory Domain Services Elevation of Privilege Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows
    KEV Apr 11, 2022
  • High 8.1
    CVE-2017-0148 Exploited · Ransomware Public exploit EPSS 99%

    The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Window…

    Microsoft Windows SMB Windows
    KEV Apr 6, 2022
  • High 7.8
    CVE-2021-3156 Exploited Public exploit EPSS 100%

    Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privileg…

    sudo sudo sudo Debian Ubuntu Alpine
    KEV Apr 6, 2022
  • High 7.8
    CVE-2022-22675 Exploited EPSS 12%

    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, watchOS 8.6…

    Apple macOS iOS and iPadOS watchOS macOS iOS
    KEV Apr 4, 2022
  • High 7.8
    CVE-2021-34484 Exploited EPSS 22%

    Windows User Profile Service Elevation of Privilege Vulnerability

    Windows User Profile Service Elevation of Privilege Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Mar 31, 2022
  • High 8.8
    CVE-2021-21551 Exploited Public exploit EPSS 80%

    Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privil…

    Dell dbutil
    KEV Mar 31, 2022
  • High 8.8
    CVE-2015-1770 Exploited EPSS 35%

    Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted Office docume…

    KEV Mar 28, 2022
  • High 8.8
    CVE-2015-2419 Exploited Public exploit EPSS 53%

    JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial …

    KEV Mar 28, 2022
  • High 8.8
    CVE-2015-2426 Exploited Public exploit EPSS 87%

    Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server …

    KEV Mar 28, 2022
  • High 7.8
    CVE-2011-2005 Exploited Public exploit EPSS 32%

    afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly vali…

    KEV Mar 28, 2022
  • High 7.8
    CVE-2018-8406 Exploited · Ransomware

    An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles obj…

    Microsoft Windows Server 2016 Windows 10 Windows 10 Servers Windows
    KEV Mar 28, 2022
  • High 7.8
    CVE-2018-8440 Exploited · Ransomware Public exploit EPSS 19%

    An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (…

    Microsoft Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows
    KEV Mar 28, 2022
  • High 7.8
    CVE-2018-8405 Exploited · Ransomware

    An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles obj…

    Microsoft Windows Server 2016 Windows Server 2012 R2 Windows 8.1 Windows
    KEV Mar 28, 2022
  • High 8.8
    CVE-2013-1690 Exploited Public exploit EPSS 69%

    Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before…

    KEV Mar 28, 2022
  • High 7.8
    CVE-2013-3660 Exploited Public exploit EPSS 39%

    The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Wind…

    KEV Mar 28, 2022
  • High 8.8
    CVE-2013-2551 Exploited · Ransomware Public exploit EPSS 74%

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary c…

    KEV Mar 28, 2022
  • High 8.8
    CVE-2013-2729 Exploited Public exploit EPSS 67%

    Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attac…

    KEV Mar 28, 2022
  • High 7.8
    CVE-2012-2539 Exploited EPSS 53%

    Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office…

    KEV Mar 28, 2022
  • High 7.5
    CVE-2012-2034 Exploited

    Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x…

    KEV Mar 28, 2022
  • High 8.8
    CVE-2022-1096 Exploited Public exploit EPSS 25%

    Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corru…

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
    KEV Mar 28, 2022
  • High 7.8
    CVE-2016-0040 Exploited Public exploit EPSS 24%

    The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to …

    KEV Mar 28, 2022
  • High 7.5
    CVE-2016-0189 Exploited · Ransomware Public exploit EPSS 94%

    The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other…

    KEV Mar 28, 2022
  • High 7.8
    CVE-2016-0151 Exploited · Ransomware Public exploit EPSS 63%

    The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,…

    KEV Mar 28, 2022
  • High 8.8
    CVE-2016-7200 Exploited Public exploit EPSS 83%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerabili…

    Microsoft.ChakraCore NuGet
    KEV Mar 28, 2022
  • High 8.8
    CVE-2016-7201 Exploited Public exploit EPSS 80%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerabili…

    Microsoft.ChakraCore NuGet
    KEV Mar 28, 2022
  • High 7.8
    CVE-2010-4398 Exploited Public exploit

    Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, W…

    KEV Mar 28, 2022
  • High 8.1
    CVE-2017-0037 Exploited Public exploit EPSS 80%

    Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuild…

    Microsoft Internet Browser
    KEV Mar 28, 2022
  • High 7.3
    CVE-2017-0213 Exploited · Ransomware Public exploit EPSS 84%

    Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Se…

    Microsoft Windows COM Windows
    KEV Mar 28, 2022
  • High 7.8
    CVE-2021-34486 Exploited Public exploit

    Windows Event Tracing Elevation of Privilege Vulnerability

    Windows Event Tracing Elevation of Privilege Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Mar 28, 2022