An official Admiresty Corporation service
How to verify
Official Admiresty services use admiresty.co

Admiresty Corporation operates ThreatGrid and its full service ecosystem from admiresty.co. All official platforms run from this domain or a verified subdomain. If you’re unsure, visit admiresty.co directly to confirm.

Secure Admiresty services always use HTTPS

A padlock and https:// in your address bar confirm a safe, encrypted connection. Never enter credentials or share sensitive data on any page without a valid HTTPS connection to an Admiresty domain.

Security Bulletins

Active threat advisories and known exploited vulnerabilities.

Pulled daily from the CISA Known Exploited Vulnerabilities catalog. Every entry has confirmed active exploitation in the wild. Last synced Sep 14, 2026.

1,710 total bulletins 1,710 critical or high severity Source: CISA KEV + NVD
All 1,710 Critical 1,710 High 0 Medium 0 Low 0 1,710 critical entries
Critical CVE-2016-6367 Cisco · Adaptive Security Appliance (ASA) Added May 24, 2022

Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability

A vulnerability in the command-line interface (CLI) parser of Cisco ASA software could allow an authenticated, local attacker to create a denial-of-service (DoS) condition or potentially execute code.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2016-3298 Microsoft · Internet Explorer Added May 24, 2022

Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Microsoft Internet Messaging API improperly handles objects in memory. An attacker who successfully exploited this vulnerability could allow the attacker to test for the presence of files on disk.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2022-20821 Cisco · IOS XR Added May 23, 2022

Cisco IOS XR Open Port Vulnerability

Cisco IOS XR software health check opens TCP port 6379 by default on activation. An attacker can connect to the Redis instance on the open port and allow access to the Redis instance that is running within the NOSi container.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2021-1048 Android · Kernel Added May 23, 2022

Android Kernel Use-After-Free Vulnerability

Android kernel contains a use-after-free vulnerability that allows for privilege escalation.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2021-0920 Android · Kernel Added May 23, 2022

Android Kernel Race Condition Vulnerability

Android kernel contains a race condition, which allows for a use-after-free vulnerability. Exploitation can allow for privilege escalation.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2021-30883 Apple · Multiple Products Added May 23, 2022

Apple Multiple Products Memory Corruption Vulnerability

Apple iOS, macOS, watchOS, and tvOS contain a memory corruption vulnerability that could allow for remote code execution.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2020-1027 Microsoft · Windows Added May 23, 2022

Microsoft Windows Kernel Privilege Escalation Vulnerability

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2020-0638 Microsoft · Update Notification Manager Added May 23, 2022

Microsoft Update Notification Manager Privilege Escalation Vulnerability

Microsoft Update Notification Manager contains an unspecified vulnerability that allows for privilege escalation.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2019-7286 Apple · Multiple Products Added May 23, 2022

Apple Multiple Products Memory Corruption Vulnerability

Apple iOS, macOS, watchOS, and tvOS contain a memory corruption vulnerability that could allow for privilege escalation.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2019-7287 Apple · iOS Added May 23, 2022

Apple iOS Memory Corruption Vulnerability

Apple iOS contains a memory corruption vulnerability which could allow an attacker to perform remote code execution.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2019-0676 Microsoft · Internet Explorer Added May 23, 2022

Microsoft Internet Explorer Information Disclosure Vulnerability

An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory. An attacker who successfully exploited this vulnerability could test for the presence of files on disk.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2019-5786 Google · Chrome Blink Added May 23, 2022

Google Chrome Blink Use-After-Free Vulnerability

Google Chrome Blink contains a heap use-after-free vulnerability that allows an attacker to potentially perform out of bounds memory access via a crafted HTML page.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2019-0703 Microsoft · Windows Added May 23, 2022

Microsoft Windows SMB Information Disclosure Vulnerability

An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, which could lead to information disclosure from the server.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2019-0880 Microsoft · Windows Added May 23, 2022

Microsoft Windows Privilege Escalation Vulnerability

A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited the vulnerability could elevate privileges on an affected system from low-integrity to medium-integrity.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2019-13720 Google · Chrome WebAudio Added May 23, 2022

Google Chrome WebAudio Use-After-Free Vulnerability

Google Chrome WebAudio contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2019-11707 Mozilla · Firefox and Thunderbird Added May 23, 2022

Mozilla Firefox and Thunderbird Type Confusion Vulnerability

Mozilla Firefox and Thunderbird contain a type confusion vulnerability that can occur when manipulating JavaScript objects due to issues in Array.pop, allowing for an exploitable crash.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2019-11708 Mozilla · Firefox and Thunderbird Added May 23, 2022

Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability

Mozilla Firefox and Thunderbird contain a sandbox escape vulnerability that could result in remote code execution.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2019-8720 WebKitGTK · WebKitGTK Added May 23, 2022

WebKitGTK Memory Corruption Vulnerability

WebKitGTK contains a memory corruption vulnerability which can allow an attacker to perform remote code execution.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2019-18426 Meta Platforms · WhatsApp Added May 23, 2022

WhatsApp Cross-Site Scripting Vulnerability

A vulnerability in WhatsApp Desktop when paired with WhatsApp for iPhone allows cross-site scripting and local file reading.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2019-1385 Microsoft · Windows Added May 23, 2022

Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability

A privilege escalation vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2019-1130 Microsoft · Windows Added May 23, 2022

Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability

A privilege escalation vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2018-5002 Adobe · Flash Player Added May 23, 2022

Adobe Flash Player Stack-based Buffer Overflow Vulnerability

Adobe Flash Player have a stack-based buffer overflow vulnerability that could lead to remote code execution.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2018-8589 Microsoft · Win32k Added May 23, 2022

Microsoft Win32k Privilege Escalation Vulnerability

A privilege escalation vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this vulnerability could run remote code in the security context of the local system.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2022-30525 Zyxel · Multiple Firewalls Added May 16, 2022

Zyxel Multiple Firewalls OS Command Injection Vulnerability

A command injection vulnerability in the CGI program of some Zyxel firewall versions could allow an attacker to modify specific files and then execute some OS commands on a vulnerable device.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2022-22947 VMware · Spring Cloud Gateway Added May 16, 2022

VMware Spring Cloud Gateway Code Injection Vulnerability

Spring Cloud Gateway applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Need help prioritizing these vulnerabilities?

ThreatGrid can assess your environment and map active CVEs to your monitored assets.