Skip to content
OpenAdvisories

Source

CISA Known Exploited Vulnerabilities

Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

All Critical High Medium Low Public exploit

1,779 results · Feed

  • High 7.8
    CVE-2007-5659 Exploited Public exploit EPSS 87%

    Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary cod…

    KEV Jun 8, 2022
  • Critical 9.8
    CVE-2022-26134 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an u…

    Atlassian Confluence Data Center Confluence Server Web / CMS
    KEV Jun 2, 2022
  • High 7.8
    CVE-2015-0310 Exploited EPSS 15%

    Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.43…

    flashplugin-nonfree Ubuntu
    KEV May 25, 2022
  • Medium 6.5
    CVE-2015-0071 Exploited EPSS 34%

    Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted …

    KEV May 25, 2022
  • High 7.8
    CVE-2015-0016 Exploited Public exploit EPSS 76%

    Directory traversal vulnerability in the TS WebProxy (aka TSWbPrxy) component in Microsoft Windows Vista SP2, Windows 7…

    KEV May 25, 2022
  • High 7.8
    CVE-2015-1671 Exploited EPSS 49%

    The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Off…

    KEV May 25, 2022
  • Medium 6.6
    CVE-2015-1769 Exploited Public exploit

    Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1…

    KEV May 25, 2022
  • High 8.8
    CVE-2015-4495 Exploited Public exploit EPSS 69%

    The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remot…

    firefox pdf.js Debian Ubuntu
    KEV May 25, 2022
  • High 7.8
    CVE-2015-6175 Exploited

    The kernel in Microsoft Windows 10 Gold allows local users to gain privileges via a crafted application, aka "Windows K…

    KEV May 25, 2022
  • High 8.8
    CVE-2015-2360 Exploited EPSS 15%

    win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Serve…

    KEV May 25, 2022
  • High 8.8
    CVE-2015-2425 Exploited EPSS 45%

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…

    KEV May 25, 2022
  • High 8.8
    CVE-2015-8651 Exploited EPSS 68%

    Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and be…

    flashplugin-nonfree Ubuntu
    KEV May 25, 2022
  • High 7.8
    CVE-2013-0074 Exploited · Ransomware Public exploit EPSS 79%

    Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML ob…

    KEV May 25, 2022
  • Critical 9.8
    CVE-2013-0422 Exploited · Ransomware Public exploit EPSS 97%

    Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) usin…

    KEV May 25, 2022
  • Low 3.7
    CVE-2013-0431 Exploited · Ransomware Public exploit EPSS 90%

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and Op…

    KEV May 25, 2022
  • Medium 6.5
    CVE-2013-7331 Exploited Public exploit EPSS 50%

    The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the exis…

    KEV May 25, 2022
  • Medium 6.5
    CVE-2013-3993 Exploited · Ransomware

    IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restr…

    KEV May 25, 2022
  • Medium 5.5
    CVE-2013-3896 Exploited Public exploit EPSS 67%

    Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, w…

    KEV May 25, 2022
  • Low 3.7
    CVE-2013-2423 Exploited Public exploit EPSS 85%

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, an…

    KEV May 25, 2022
  • Critical 9.8
    CVE-2012-1710 Exploited · Ransomware

    Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allo…

    KEV May 25, 2022
  • High 8.8
    CVE-2014-0546 Exploited EPSS 22%

    Adobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows allow attackers to bypass a sandbox pro…

    KEV May 25, 2022
  • High 8.8
    CVE-2014-4148 Exploited EPSS 60%

    win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 …

    KEV May 25, 2022
  • High 7.8
    CVE-2014-4077 Exploited EPSS 55%

    Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Office 200…

    KEV May 25, 2022
  • High 8.8
    CVE-2014-4123 Exploited EPSS 47%

    Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Intern…

    KEV May 25, 2022
  • High 7.8
    CVE-2014-3153 Exploited Public exploit EPSS 37%

    The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two dif…

    linux linux Debian Ubuntu
    KEV May 25, 2022
  • High 8.8
    CVE-2014-2817 Exploited EPSS 26%

    Microsoft Internet Explorer 6 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Intern…

    KEV May 25, 2022
  • High 8.8
    CVE-2014-8439 Exploited EPSS 20%

    Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on…

    flashplugin-nonfree Ubuntu
    KEV May 25, 2022
  • High 8.8
    CVE-2016-0984 Exploited Public exploit EPSS 55%

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and…

    flashplugin-nonfree Ubuntu
    KEV May 25, 2022
  • High 8.8
    CVE-2016-0034 Exploited · Ransomware EPSS 69%

    Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers t…

    KEV May 25, 2022
  • High 8.8
    CVE-2016-7256 Exploited EPSS 65%

    atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…

    KEV May 25, 2022
  • High 8.8
    CVE-2016-1010 Exploited EPSS 19%

    Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X an…

    flashplugin-nonfree Ubuntu
    KEV May 25, 2022
  • High 7.8
    CVE-2016-3393 Exploited EPSS 68%

    Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows…

    KEV May 25, 2022
  • Low 3.7
    CVE-2010-0738 Exploited · Ransomware Public exploit Scanner template EPSS 74%

    The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.…

    KEV May 25, 2022
  • Critical 9.8
    CVE-2010-0840 Exploited Public exploit EPSS 96%

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18…

    KEV May 25, 2022
  • Medium 5.9
    CVE-2010-1428 Exploited · Ransomware Public exploit Scanner template EPSS 53%

    The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) …

    KEV May 25, 2022
  • High 8.8
    CVE-2019-3010 Exploited Public exploit EPSS 14%

    Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). The supported version that is …

    Oracle Solaris Operating System
    KEV May 25, 2022
  • High 7.8
    CVE-2018-8611 Exploited Public exploit

    An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka …

    Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows
    KEV May 24, 2022
  • Medium 6.1
    CVE-2018-19953 Exploited · Ransomware EPSS 31%

    If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has a…

    QNAP Systems QTS
    KEV May 24, 2022
  • High 8.0
    CVE-2018-19943 Exploited · Ransomware EPSS 23%

    If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has a…

    QNAP Systems QTS
    KEV May 24, 2022
  • Critical 9.8
    CVE-2018-19949 Exploited · Ransomware EPSS 30%

    If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. QNAP has alr…

    QNAP Systems QTS
    KEV May 24, 2022