Active threat advisories and known exploited vulnerabilities.

Critical CVE-2017-11292 Adobe · Flash Player Added Mar 3, 2022

Adobe Flash Player Type Confusion Vulnerability

Adobe Flash Player contains a type confusion vulnerability which can allow for remote code execution.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2017-0261 Microsoft · Office Added Mar 3, 2022

Microsoft Office Use-After-Free Vulnerability

Microsoft Office contains a use-after-free vulnerability which can allow for remote code execution.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2017-0001 Microsoft · Graphics Device Interface (GDI) Added Mar 3, 2022

Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability

The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2016-8562 Siemens · SIMATIC CP Added Mar 3, 2022

Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability

An improper privilege management vulnerability exists within the Siemens SIMATIC Communication Processor (CP) that allows a privileged attacker to remotely cause a denial of service.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2016-7855 Adobe · Flash Player Added Mar 3, 2022

Adobe Flash Player Use-After-Free Vulnerability

Use-after-free vulnerability in Adobe Flash Player Windows and OS and Linux allows remote attackers to execute arbitrary code.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2016-7262 Microsoft · Excel Added Mar 3, 2022

Microsoft Office Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists when Microsoft Office improperly handles input. An attacker who successfully exploited the vulnerability could execute arbitrary commands.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2016-7193 Microsoft · Office Added Mar 3, 2022

Microsoft Office Memory Corruption Vulnerability

Microsoft Office contains a memory corruption vulnerability which can allow for remote code execution.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2016-5195 Linux · Kernel Added Mar 3, 2022

Linux Kernel Race Condition Vulnerability

Race condition in mm/gup.c in the Linux kernel allows local users to escalate privileges.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2016-4117 Adobe · Flash Player Added Mar 3, 2022

Adobe Flash Player Arbitrary Code Execution Vulnerability

An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2016-1019 Adobe · Flash Player Added Mar 3, 2022

Adobe Flash Player Arbitrary Code Execution Vulnerability

Adobe Flash Player allows remote attackers to cause a denial of service or possibly execute arbitrary code.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2016-0099 Microsoft · Windows Added Mar 3, 2022

Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability

A privilege escalation vulnerability exists in Microsoft Windows if the Windows Secondary Logon Service fails to properly manage request handles in memory. An attacker who successfully exploited this vulnerability could run arbitrary code as an administrator.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2015-7645 Adobe · Flash Player Added Mar 3, 2022

Adobe Flash Player Arbitrary Code Execution Vulnerability

Adobe Flash Player allows remote attackers to execute arbitrary code via a crafted SWF file.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2015-5119 Adobe · Flash Player Added Mar 3, 2022

Adobe Flash Player Use-After-Free Vulnerability

A use-after-free vulnerability exists within the ActionScript 3 ByteArray class in Adobe Flash Player that allows an attacker to perform remote code execution.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2015-4902 Oracle · Java SE Added Mar 3, 2022

Oracle Java SE Integrity Check Vulnerability

Unspecified vulnerability in Oracle Java SE allows remote attackers to affect integrity via Unknown vectors related to deployment.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2015-3043 Adobe · Flash Player Added Mar 3, 2022

Adobe Flash Player Memory Corruption Vulnerability

A memory corruption vulnerability exists in Adobe Flash Player that allows an attacker to perform remote code execution.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2015-2590 Oracle · Java SE Added Mar 3, 2022

Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability

An unspecified vulnerability exists within Oracle Java Runtime Environment that allows an attacker to perform remote code execution.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2015-2545 Microsoft · Office Added Mar 3, 2022

Microsoft Office Malformed EPS File Vulnerability

Microsoft Office allows remote attackers to execute arbitrary code via a crafted EPS image.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2015-2424 Microsoft · PowerPoint Added Mar 3, 2022

Microsoft PowerPoint Memory Corruption Vulnerability

Microsoft PowerPoint allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2015-2387 Microsoft · ATM Font Driver Added Mar 3, 2022

Microsoft ATM Font Driver Privilege Escalation Vulnerability

ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server allows local users to gain privileges via a crafted application.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2015-1701 Microsoft · Win32k Added Mar 3, 2022

Microsoft Win32k Privilege Escalation Vulnerability

An unspecified vulnerability exists in the Win32k.sys kernel-mode driver in Microsoft Windows Server that allows a local attacker to execute arbitrary code with elevated privileges.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2015-1642 Microsoft · Office Added Mar 3, 2022

Microsoft Office Memory Corruption Vulnerability

Microsoft Office contains a memory corruption vulnerability that allows remote attackers to execute arbitrary code via a crafted document.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2014-4114 Microsoft · Windows Added Mar 3, 2022

Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability

A vulnerability exists in Windows Object Linking & Embedding (OLE) that could allow remote code execution if a user opens a file that contains a specially crafted OLE object.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2014-0496 Adobe · Reader and Acrobat Added Mar 3, 2022

Adobe Reader and Acrobat Use-After-Free Vulnerability

Adobe Reader and Acrobat contain a use-after-free vulnerability which can allow for code execution.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2013-5065 Microsoft · Windows Added Mar 3, 2022

Microsoft Windows Kernel Privilege Escalation Vulnerability

Microsoft Windows NDProxy.sys in the kernel contains an improper input validation vulnerability which can allow a local attacker to escalate privileges.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2013-3897 Microsoft · Internet Explorer Added Mar 3, 2022

Microsoft Internet Explorer Use-After-Free Vulnerability

A use-after-free vulnerability exists within CDisplayPointer in Microsoft Internet Explorer that allows an attacker to remotely execute arbitrary code.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed