Skip to content
OpenAdvisories

Source

CISA Known Exploited Vulnerabilities

Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

All Critical High Medium Low Public exploit

928 results · Clear filters · Feed

  • High 7.8
    CVE-2019-1253 Exploited · Ransomware Public exploit EPSS 12%

    An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To …

    Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
    KEV Mar 15, 2022
  • High 7.8
    CVE-2019-1064 Exploited · Ransomware Public exploit

    Windows Elevation of Privilege Vulnerability

    An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could then install p…

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Mar 15, 2022
  • High 7.8
    CVE-2019-1069 Exploited · Ransomware Public exploit

    Task Scheduler Elevation of Privilege Vulnerability

    An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited the vulnerability could gain elevated privileges on a victim system. To exploit the vulnerability, a…

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Mar 15, 2022
  • High 7.8
    CVE-2019-1132 Exploited Public exploit

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

    Microsoft Windows Windows Server Windows
    KEV Mar 15, 2022
  • High 7.8
    CVE-2019-1129 Exploited · Ransomware

    An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard l…

    Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
    KEV Mar 15, 2022
  • High 7.8
    CVE-2019-1405 Exploited · Ransomware Public exploit EPSS 30%

    An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allow…

    Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
    KEV Mar 15, 2022
  • High 7.8
    CVE-2019-1322 Exploited · Ransomware Public exploit EPSS 19%

    An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft …

    Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
    KEV Mar 15, 2022
  • High 7.8
    CVE-2019-1315 Exploited · Ransomware Public exploit

    An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka …

    Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
    KEV Mar 15, 2022
  • High 7.2
    CVE-2020-8218 Exploited Public exploit EPSS 32%

    A code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perfor…

    KEV Mar 7, 2022
  • High 7.5
    CVE-2013-0629 Exploited Public exploit EPSS 66%

    Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10, when a password is not configured, allows attackers to access restricted di…

    KEV Mar 7, 2022
  • High 7.5
    CVE-2013-0631 Exploited EPSS 66%

    Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via unspecified vectors, as exp…

    KEV Mar 7, 2022
  • High 8.8
    CVE-2022-26485 Exploited Public exploit EPSS 14%

    Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of a…

    Mozilla Firefox Thunderbird Firefox ESR Android Browsers Debian Ubuntu Alpine
    KEV Mar 7, 2022
  • High 8.8
    CVE-2016-6277 Exploited Public exploit Scanner template EPSS 100%

    NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.…

    KEV Mar 7, 2022
  • High 7.8
    CVE-2015-7645 Exploited · Ransomware Public exploit EPSS 65%

    Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.53…

    flashplugin-nonfree Ubuntu
    KEV Mar 3, 2022
  • High 7.8
    CVE-2015-1701 Exploited · Ransomware Public exploit EPSS 56%

    Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local…

    KEV Mar 3, 2022
  • High 7.8
    CVE-2015-1642 Exploited EPSS 53%

    Microsoft Office 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted docum…

    KEV Mar 3, 2022
  • High 7.8
    CVE-2015-3043 Exploited Public exploit EPSS 74%

    Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.45…

    flashplugin-nonfree Ubuntu
    KEV Mar 3, 2022
  • High 7.8
    CVE-2015-2545 Exploited EPSS 86%

    Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allows remote attackers to execute arbitrary code via a …

    KEV Mar 3, 2022
  • High 8.8
    CVE-2015-2424 Exploited EPSS 40%

    Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, a…

    KEV Mar 3, 2022
  • High 7.8
    CVE-2015-2387 Exploited EPSS 35%

    ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server…

    KEV Mar 3, 2022
  • High 7.8
    CVE-2015-5119 Exploited Public exploit EPSS 99%

    Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13…

    flashplugin-nonfree Ubuntu
    KEV Mar 3, 2022
  • High 8.8
    CVE-2011-0611 Exploited Public exploit EPSS 99%

    Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; …

    KEV Mar 3, 2022
  • High 7.5
    CVE-2018-0156 Exploited

    A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthentic…

    iOS
    KEV Mar 3, 2022
  • High 8.6
    CVE-2018-0158 Exploited

    A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and Cisco IOS XE Software c…

    iOS
    KEV Mar 3, 2022
  • High 7.5
    CVE-2018-0154 Exploited

    A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Softwa…

    iOS
    KEV Mar 3, 2022
  • High 8.0
    CVE-2018-0175 Exploited

    Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE S…

    iOS
    KEV Mar 3, 2022
  • High 8.6
    CVE-2018-0172 Exploited

    A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could…

    iOS
    KEV Mar 3, 2022
  • High 8.6
    CVE-2018-0155 Exploited

    A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Sw…

    iOS
    KEV Mar 3, 2022
  • High 8.6
    CVE-2018-0174 Exploited

    A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could…

    iOS
    KEV Mar 3, 2022
  • High 7.5
    CVE-2018-0159 Exploited

    A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software an…

    iOS
    KEV Mar 3, 2022
  • High 8.6
    CVE-2018-0173 Exploited

    A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 infor…

    iOS
    KEV Mar 3, 2022
  • High 8.8
    CVE-2018-0167 Exploited

    Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, C…

    iOS
    KEV Mar 3, 2022
  • High 7.4
    CVE-2018-8581 Exploited · Ransomware Public exploit EPSS 28%

    An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation o…

    Microsoft Microsoft Exchange Server
    KEV Mar 3, 2022
  • High 7.5
    CVE-2018-8298 Exploited Public exploit EPSS 75%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8242, CVE-2018-8283, C…

    Microsoft ChakraCore Microsoft.ChakraCore NuGet
    KEV Mar 3, 2022
  • High 7.8
    CVE-2013-0640 Exploited Public exploit EPSS 87%

    Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execut…

    KEV Mar 3, 2022
  • High 7.8
    CVE-2013-0641 Exploited EPSS 32%

    Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote…

    KEV Mar 3, 2022
  • High 8.8
    CVE-2013-1347 Exploited Public exploit EPSS 78%

    Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbi…

    KEV Mar 3, 2022
  • High 8.8
    CVE-2013-3346 Exploited Public exploit EPSS 79%

    Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbit…

    KEV Mar 3, 2022
  • High 8.8
    CVE-2013-3897 Exploited Public exploit EPSS 77%

    Use-after-free vulnerability in the CDisplayPointer class in mshtml.dll in Microsoft Internet Explorer 6 through 11 all…

    KEV Mar 3, 2022
  • High 7.8
    CVE-2013-5065 Exploited Public exploit EPSS 35%

    NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges…

    KEV Mar 3, 2022