Skip to content
OpenAdvisories

Source

CISA Known Exploited Vulnerabilities

Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

All Critical High Medium Low Public exploit

1,779 results · Feed

  • Medium 6.5
    CVE-2021-30533 Exploited EPSS 17%

    Insufficient policy enforcement in PopupBlocker in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to byp…

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
    KEV Jun 27, 2022
  • High 7.8
    CVE-2019-8605 Exploited Public exploit EPSS 18%

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.…

    Apple macOS watchOS tvOS macOS iOS
    KEV Jun 27, 2022
  • High 7.8
    CVE-2022-30190 Exploited · Ransomware Public exploit EPSS 99%

    Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

    A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. Th…

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Jun 14, 2022
  • Critical 9.8
    CVE-2016-2386 Exploited Public exploit EPSS 72%

    SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arb…

    KEV Jun 9, 2022
  • Medium 5.3
    CVE-2016-2388 Exploited Public exploit EPSS 52%

    The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user info…

    KEV Jun 9, 2022
  • Critical 9.9
    CVE-2021-38163 Exploited Public exploit EPSS 37%

    SAP NetWeaver (Visual Composer 7.0 RT) versions - 7.30, 7.31, 7.40, 7.50, without restriction, an attacker authenticate…

    SAP SAP NetWeaver (Visual Composer 7.0 RT)
    KEV Jun 9, 2022
  • High 7.8
    CVE-2011-0609 Exploited Public exploit EPSS 64%

    Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.…

    KEV Jun 8, 2022
  • High 8.8
    CVE-2011-2462 Exploited Public exploit EPSS 89%

    Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, …

    KEV Jun 8, 2022
  • High 8.8
    CVE-2018-4990 Exploited EPSS 36%

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlie…

    KEV Jun 8, 2022
  • High 8.8
    CVE-2018-17480 Exploited EPSS 36%

    Execution of user supplied Javascript during array deserialization leading to an out of bounds write in V8 in Google Ch…

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu
    KEV Jun 8, 2022
  • High 8.8
    CVE-2018-17463 Exploited Public exploit EPSS 85%

    Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbi…

    Google Chrome chromium-browser oxide-qt Browsers Ubuntu
    KEV Jun 8, 2022
  • High 8.8
    CVE-2018-6065 Exploited Public exploit EPSS 60%

    Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google C…

    Google Chrome chromium-browser oxide-qt Browsers Ubuntu
    KEV Jun 8, 2022
  • High 7.8
    CVE-2013-1331 Exploited EPSS 80%

    Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code …

    KEV Jun 8, 2022
  • Medium 6.1
    CVE-2012-0767 Exploited

    Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Window…

    KEV Jun 8, 2022
  • High 7.8
    CVE-2012-0754 Exploited Public exploit EPSS 91%

    Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1…

    KEV Jun 8, 2022
  • High 7.8
    CVE-2012-0151 Exploited EPSS 88%

    The Authenticode Signature Verification function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows …

    KEV Jun 8, 2022
  • High 8.8
    CVE-2012-1889 Exploited Public exploit EPSS 84%

    Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attacke…

    KEV Jun 8, 2022
  • High 8.1
    CVE-2012-4969 Exploited Public exploit EPSS 80%

    Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 a…

    KEV Jun 8, 2022
  • High 8.8
    CVE-2012-5054 Exploited EPSS 21%

    Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows rem…

    KEV Jun 8, 2022
  • High 8.8
    CVE-2008-0655 Exploited EPSS 38%

    Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors.

    KEV Jun 8, 2022
  • High 8.8
    CVE-2006-2492 Exploited EPSS 48%

    Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suite…

    KEV Jun 8, 2022
  • High 8.8
    CVE-2016-1646 Exploited EPSS 48%

    The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, d…

    chromium-browser oxide-qt libv8-3.14 Ubuntu
    KEV Jun 8, 2022
  • High 8.8
    CVE-2016-5198 Exploited EPSS 34%

    V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac…

    chromium-browser oxide-qt libv8-3.14 Linux Windows Android Browsers Ubuntu
    KEV Jun 8, 2022
  • High 7.8
    CVE-2010-1297 Exploited Public exploit EPSS 83%

    Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acro…

    KEV Jun 8, 2022
  • High 7.3
    CVE-2010-2883 Exploited Public exploit EPSS 81%

    Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows…

    KEV Jun 8, 2022
  • High 7.8
    CVE-2010-2572 Exploited EPSS 59%

    Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a c…

    KEV Jun 8, 2022
  • High 7.8
    CVE-2009-0563 Exploited EPSS 60%

    Stack-based buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac…

    KEV Jun 8, 2022
  • High 7.8
    CVE-2009-0557 Exploited EPSS 53%

    Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Mic…

    KEV Jun 8, 2022
  • High 7.8
    CVE-2009-1862 Exploited EPSS 21%

    Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 a…

    KEV Jun 8, 2022
  • High 7.8
    CVE-2009-4324 Exploited Public exploit EPSS 82%

    Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before…

    KEV Jun 8, 2022
  • High 8.8
    CVE-2009-3953 Exploited Public exploit EPSS 83%

    The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x befo…

    KEV Jun 8, 2022
  • Critical 9.8
    CVE-2017-6862 Exploited EPSS 46%

    NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 all…

    KEV Jun 8, 2022
  • High 8.8
    CVE-2017-5030 Exploited EPSS 41%

    Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0…

    chromium-browser oxide-qt libv8-3.14 Linux Windows Android Browsers Ubuntu
    KEV Jun 8, 2022
  • High 8.8
    CVE-2017-5070 Exploited EPSS 32%

    Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, …

    chromium-browser oxide-qt libv8-3.14 Linux Windows Android Browsers Ubuntu
    KEV Jun 8, 2022
  • Critical 9.8
    CVE-2019-7192 Exploited · Ransomware Public exploit Scanner template EPSS 88%

    This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix th…

    KEV Jun 8, 2022
  • Critical 9.8
    CVE-2019-7194 Exploited · Ransomware Public exploit Scanner template EPSS 83%

    This external control of file name or path vulnerability allows remote attackers to access or modify system files. To f…

    KEV Jun 8, 2022
  • Critical 9.8
    CVE-2019-7193 Exploited · Ransomware EPSS 14%

    This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. To fix the…

    KEV Jun 8, 2022
  • Critical 9.8
    CVE-2019-7195 Exploited · Ransomware Public exploit Scanner template EPSS 89%

    This external control of file name or path vulnerability allows remote attackers to access or modify system files. To f…

    KEV Jun 8, 2022
  • High 8.8
    CVE-2019-15271 Exploited

    Cisco Small Business RV016, RV042, RV042G, and RV082 Routers Arbitrary Command Execution Vulnerability

    A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an authenticated, remote attacker to execute arbitrary commands with root privileges. The attacker must have either a valid credential or an ac…

    Cisco Cisco Small Business RV Series Router Firmware Network devices
    KEV Jun 8, 2022
  • Medium 6.5
    CVE-2019-5825 Exploited Public exploit EPSS 56%

    Out of bounds write in JavaScript in Google Chrome prior to 73.0.3683.86 allowed a remote attacker to potentially explo…

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu
    KEV Jun 8, 2022