An official Admiresty Corporation service
How to verify
Official Admiresty services use admiresty.co

Admiresty Corporation operates ThreatGrid and its full service ecosystem from admiresty.co. All official platforms run from this domain or a verified subdomain. If you’re unsure, visit admiresty.co directly to confirm.

Secure Admiresty services always use HTTPS

A padlock and https:// in your address bar confirm a safe, encrypted connection. Never enter credentials or share sensitive data on any page without a valid HTTPS connection to an Admiresty domain.

Security Bulletins

Active threat advisories and known exploited vulnerabilities.

Pulled daily from the CISA Known Exploited Vulnerabilities catalog. Every entry has confirmed active exploitation in the wild. Last synced Jul 29, 2026.

1,656 total bulletins 1,656 critical or high severity Source: CISA KEV + NVD
All 1,656 Critical 1,656 High 0 Medium 0 Low 0 1,656 entries
Critical CVE-2019-1388 Microsoft · Windows Added Apr 7, 2023

Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability

Microsoft Windows Certificate Dialog contains a privilege escalation vulnerability, allowing attackers to run processes in an elevated context.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2023-26083 Arm · Mali Graphics Processing Unit (GPU) Added Apr 7, 2023

Arm Mali GPU Kernel Driver Information Disclosure Vulnerability

Arm Mali GPU Kernel Driver contains an information disclosure vulnerability that allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2022-27926 Synacor · Zimbra Collaboration Suite (ZCS) Added Apr 3, 2023

Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability by allowing an endpoint URL to accept parameters without sanitizing.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2013-3163 Microsoft · Internet Explorer Added Mar 30, 2023

Microsoft Internet Explorer Memory Corruption Vulnerability

Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause a denial of service via a crafted website.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2017-7494 Samba · Samba Added Mar 30, 2023

Samba Remote Code Execution Vulnerability

Samba contains a remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share and then cause the server to load and execute it.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2022-42948 Fortra · Cobalt Strike Added Mar 30, 2023

Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability

Fortra Cobalt Strike User Interface contains an unspecified vulnerability rooted in Java Swing that may allow remote code execution.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2022-39197 Fortra · Cobalt Strike Added Mar 30, 2023

Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability

Fortra Cobalt Strike contains a cross-site scripting (XSS) vulnerability in Teamserver that would allow an attacker to set a malformed username in the Beacon configuration, allowing them to execute code remotely.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2021-30900 Apple · iOS, iPadOS, and macOS Added Mar 30, 2023

Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

Apple GPU drivers, included in iOS, iPadOS, and macOS, contain an out-of-bounds write vulnerability that may allow a malicious application to execute code with kernel privileges.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2022-38181 Arm · Mali Graphics Processing Unit (GPU) Added Mar 30, 2023

Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or disclose information.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2023-0266 Linux · Kernel Added Mar 30, 2023

Linux Kernel Use-After-Free Vulnerability

Linux kernel contains a use-after-free vulnerability that allows for privilege escalation to gain ring0 access from the system user.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2022-3038 Google · Chromium Network Service Added Mar 30, 2023

Google Chromium Network Service Use-After-Free Vulnerability

Google Chromium Network Service contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2022-22706 Arm · Mali Graphics Processing Unit (GPU) Added Mar 30, 2023

Arm Mali GPU Kernel Driver Unspecified Vulnerability

Arm Mali GPU Kernel Driver contains an unspecified vulnerability that allows a non-privileged user to achieve write access to read-only memory pages.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2023-26360 Adobe · ColdFusion Added Mar 15, 2023

Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for remote code execution.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2023-23397 Microsoft · Office Added Mar 14, 2023

Microsoft Office Outlook Privilege Escalation Vulnerability

Microsoft Office Outlook contains a privilege escalation vulnerability that allows for a NTLM Relay attack against another service to authenticate as the user.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2023-24880 Microsoft · Windows Added Mar 14, 2023

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2022-41328 Fortinet · FortiOS Added Mar 14, 2023

Fortinet FortiOS Path Traversal Vulnerability

Fortinet FortiOS contains a path traversal vulnerability that may allow a local privileged attacker to read and write files via crafted CLI commands.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2021-39144 XStream · XStream Added Mar 10, 2023

XStream Remote Code Execution Vulnerability

XStream contains a remote code execution vulnerability that allows an attacker to manipulate the processed input stream and replace or inject objects that result in the execution of a local command on the server. This vulnerability can affect multiple products, including but not limited to VMware Cloud Foundation.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2020-5741 Plex · Media Server Added Mar 10, 2023

Plex Media Server Remote Code Execution Vulnerability

Plex Media Server contains a remote code execution vulnerability that allows an attacker with access to the server administrator's Plex account to upload a malicious file via the Camera Upload feature and have the media server execute it.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2022-28810 Zoho · ManageEngine Added Mar 7, 2023

Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability

Zoho ManageEngine ADSelfService Plus contains an unspecified vulnerability allowing for remote code execution when performing a password change or reset.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2022-33891 Apache · Spark Added Mar 7, 2023

Apache Spark Command Injection Vulnerability

Apache Spark contains a command injection vulnerability via Spark User Interface (UI) when Access Control Lists (ACLs) are enabled.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2022-35914 Teclib · GLPI Added Mar 7, 2023

Teclib GLPI Remote Code Execution Vulnerability

Teclib GLPI contains a remote code execution vulnerability in the third-party library, htmlawed.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2022-36537 ZK Framework · AuUploader Added Feb 27, 2023

ZK Framework AuUploader Unspecified Vulnerability

ZK Framework AuUploader servlets contain an unspecified vulnerability that could allow an attacker to retrieve the content of a file located in the web context. The ZK Framework is an open-source Java framework. This vulnerability can impact multiple products, including but not limited to ConnectWise R1Soft Server Backup Manager.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2022-47986 IBM · Aspera Faspex Added Feb 21, 2023

IBM Aspera Faspex Code Execution Vulnerability

IBM Aspera Faspex could allow a remote attacker to execute code on the system, caused by a YAML deserialization flaw.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2022-41223 Mitel · MiVoice Connect Added Feb 21, 2023

Mitel MiVoice Connect Code Injection Vulnerability

The Director component in Mitel MiVoice Connect allows an authenticated attacker with internal network access to execute code within the context of the application.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2022-40765 Mitel · MiVoice Connect Added Feb 21, 2023

Mitel MiVoice Connect Command Injection Vulnerability

The Mitel Edge Gateway component of MiVoice Connect allows an authenticated attacker with internal network access to execute commands within the context of the system.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Need help prioritizing these vulnerabilities?

ThreatGrid can assess your environment and map active CVEs to your monitored assets.