Skip to content
OpenAdvisories

Source

CISA Known Exploited Vulnerabilities

Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

All Critical High Medium Low Public exploit

928 results · Clear filters · Feed

  • High 7.8
    CVE-2004-0210 Exploited Public exploit

    The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain p…

    KEV Mar 3, 2022
  • High 8.8
    CVE-2012-1856 Exploited EPSS 72%

    The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Compo…

    KEV Mar 3, 2022
  • High 7.8
    CVE-2012-1535 Exploited Public exploit EPSS 70%

    Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on …

    KEV Mar 3, 2022
  • High 8.8
    CVE-2008-3431 Exploited Public exploit

    The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communica…

    KEV Mar 3, 2022
  • High 7.8
    CVE-2008-2992 Exploited · Ransomware Public exploit EPSS 100%

    Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary …

    KEV Mar 3, 2022
  • High 7.8
    CVE-2002-0367 Exploited Public exploit

    smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to oth…

    KEV Mar 3, 2022
  • High 8.8
    CVE-2014-0496 Exploited EPSS 40%

    Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac …

    KEV Mar 3, 2022
  • High 7.8
    CVE-2014-4114 Exploited Public exploit EPSS 82%

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server …

    KEV Mar 3, 2022
  • High 7.8
    CVE-2016-0099 Exploited · Ransomware Public exploit EPSS 37%

    The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows …

    KEV Mar 3, 2022
  • High 7.8
    CVE-2016-7262 Exploited EPSS 59%

    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3,…

    KEV Mar 3, 2022
  • High 8.8
    CVE-2016-7855 Exploited Public exploit EPSS 25%

    Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Lin…

    flashplugin-nonfree Ubuntu
    KEV Mar 3, 2022
  • High 7.8
    CVE-2016-7193 Exploited EPSS 58%

    Microsoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for …

    KEV Mar 3, 2022
  • High 7.8
    CVE-2016-1019 Exploited · Ransomware EPSS 22%

    Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or p…

    flashplugin-nonfree Ubuntu
    KEV Mar 3, 2022
  • High 7.8
    CVE-2016-4117 Exploited · Ransomware Public exploit EPSS 94%

    Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as…

    flashplugin-nonfree Ubuntu
    KEV Mar 3, 2022
  • High 7.5
    CVE-2016-8562 Exploited

    A vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS NET CP 1543-1 (All versions <…

    KEV Mar 3, 2022
  • High 7.0
    CVE-2016-5195 Exploited Public exploit EPSS 84%

    Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by le…

    linux-raspi2 linux linux linux-lts-xenial Debian Ubuntu
    KEV Mar 3, 2022
  • High 7.8
    CVE-2010-0188 Exploited · Ransomware Public exploit EPSS 88%

    Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a…

    KEV Mar 3, 2022
  • High 7.8
    CVE-2010-0232 Exploited Public exploit EPSS 29%

    The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows S…

    KEV Mar 3, 2022
  • High 7.8
    CVE-2010-3333 Exploited Public exploit EPSS 89%

    Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and …

    KEV Mar 3, 2022
  • High 7.8
    CVE-2009-1123 Exploited

    The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP…

    KEV Mar 3, 2022
  • High 7.8
    CVE-2009-3129 Exploited Public exploit EPSS 84%

    Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Con…

    KEV Mar 3, 2022
  • High 7.8
    CVE-2017-0001 Exploited

    The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; …

    Microsoft Windows GDI+ Windows
    KEV Mar 3, 2022
  • High 7.8
    CVE-2017-0261 Exploited Public exploit EPSS 78%

    Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the softwa…

    Microsoft Microsoft Office
    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-11292 Exploited EPSS 11%

    Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an unt…

    flashplugin-nonfree Ubuntu
    KEV Mar 3, 2022
  • High 7.8
    CVE-2017-11826 Exploited Public exploit EPSS 82%

    Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Ser…

    Microsoft Microsoft Office
    KEV Mar 3, 2022
  • High 7.5
    CVE-2017-12231 Exploited

    A vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS 12.4 through 15.6…

    iOS
    KEV Mar 3, 2022
  • High 7.5
    CVE-2017-12234 Exploited

    Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 throug…

    iOS
    KEV Mar 3, 2022
  • High 7.5
    CVE-2017-12233 Exploited

    Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 throug…

    iOS
    KEV Mar 3, 2022
  • High 7.5
    CVE-2017-12237 Exploited

    A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS 15.0 through 15.6 and Cisco IOS XE 3…

    iOS
    KEV Mar 3, 2022
  • High 7.5
    CVE-2017-12235 Exploited

    A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol (PN-DCP) for Cisco IOS 12.2 …

    iOS
    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-6740 Exploited EPSS 11%

    The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…

    Cisco IntelliShield IOS Universal Product iOS Network devices
    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-6743 Exploited EPSS 11%

    The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…

    Cisco IntelliShield IOS Universal Product iOS Network devices
    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-6744 Exploited

    The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…

    Cisco IntelliShield IOS Universal Product iOS Network devices
    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-6737 Exploited EPSS 45%

    A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the af…

    Cisco IOS iOS Network devices
    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-6738 Exploited EPSS 11%

    The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…

    Cisco Cisco IOS XE Software IOS iOS Network devices
    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-6736 Exploited Public exploit EPSS 70%

    The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…

    Cisco IntelliShield IOS Universal Product iOS Network devices
    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-6739 Exploited EPSS 11%

    A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the af…

    IntelliShield Universal Product
    KEV Mar 3, 2022
  • High 7.5
    CVE-2017-6627 Exploited

    A vulnerability in the UDP processing code of Cisco IOS 15.1, 15.2, and 15.4 and IOS XE 3.14 through 3.18 could allow a…

    iOS
    KEV Mar 3, 2022
  • High 7.8
    CVE-2017-8540 Exploited Public exploit EPSS 72%

    The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serv…

    Microsoft Malware Protection Engine
    KEV Mar 3, 2022
  • High 8.8
    CVE-2019-1297 Exploited EPSS 22%

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obj…

    Microsoft Microsoft Office Office 365 ProPlus Microsoft Excel
    KEV Mar 3, 2022