KEVIntel entry: A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A malicious app may be able to... | Affected: Apple / iOS and iPadOS, macOS | CVSS: 5.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, macOS Ventura 13.6. A local... | Affected: Apple / macOS, iOS and iPadOS | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security and... | Affected: Trend Micro, Inc. / Trend Micro Apex One, Trend Micro Worry-Free Business Security, Trend Micro Worry-Free Business Security Services | CVSS: 7.2 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: MinIO is vulnerable to privilege escalation on Linux/MacOS | Affected: minio / minio | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware V1.00(AAQT.4)b8. The vulnerability is located in... | Affected: Zyxel / EMG2926 | CVSS: 8.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code... | Affected: Samsung Mobile / Samsung Mobile Devices | CVSS: 5.0 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in... | Affected: Realtek / SDK | CVSS: 9.8 (CRITICAL) | EPSS: 0.99975 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitrary code because of insecure... | Affected: Facade / Ignition | CVSS: 9.8 (CRITICAL) | EPSS: 0.99943 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: [Google Project Zero] Adobe Acrobat DC OOBW 0-day actively exploited in the wild | Affected: Adobe / Acrobat Reader | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD)... | Affected: Cisco / Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense Software | CVSS: 5.0 (MEDIUM) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead to local... | Affected: Google / Android | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds... | Affected: Google / Chrome, libwebp | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2 | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Word Information Disclosure Vulnerability | Affected: Microsoft / Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2021, Microsoft Word 2016, Microsoft Word 2013 Service Pack 1 | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1, macOS Monterey 12.6.9,... | Affected: Apple / macOS, iOS and iPadOS | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A validation issue was addressed with improved logic. This issue is fixed in watchOS 9.6.2, iOS 16.6.1 and iPadOS 16.6.1. A maliciously crafted... | Affected: Apple / iOS and iPadOS, watchOS | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function | Affected: Apache Software Foundation / Apache RocketMQ | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Openfire administration console authentication bypass | Affected: igniterealtime / Openfire | CVSS: 8.6 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The issue... | Affected: RARLAB / WinRAR | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. This... | Affected: Veeam / Veeam Backup & Replication | CVSS: 7.5 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an attacker to bypass... | Affected: Ivanti / MobileIron Sentry | CVSS: 9.8 (CRITICAL) | EPSS: 0.99949 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution | Affected: Adobe / ColdFusion | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Veilid before 0.1.9 does not check the size of uncompressed data during decompression upon an envelope receipt, which allows remote attackers to... | Affected: Veilid / Veilid | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated... | Affected: Citrix / Citrix ShareFile Storage Zones Controller | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The cryptocurrency wallet entropy seeding mechanism used in Libbitcoin Explorer 3.0.0 through 3.6.0 is weak, aka the Milk Sad issue. The use of an... | Affected: Libbitcoin / Libbitcoin Explorer | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: .NET and Visual Studio Denial of Service Vulnerability | Affected: Microsoft / ASP.NET Core 2.1, .NET 6.0, .NET 7.0, Microsoft Visual Studio 2022 version 17.2, Microsoft Visual Studio 2022 version 17.4, Microsoft Visual Studio 2022 version 17.6 | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has a command injection vulnerability in the... | Affected: ZyXEL / P660HN-T1A v1 TCLinux Fw | CVSS: 9.8 (CRITICAL) | EPSS: 0.94508 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.7.7. This... | Affected: webtoffee / Stripe Payment Plugin for WooCommerce | CVSS: 9.8 (CRITICAL) | EPSS: 0.00379 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A path traversal vulnerability in Ivanti EPMM versions (11.10.x < 11.10.0.3,  11.9.x < 11.9.1.2 and 11.8.x < 11.8.1.2) allows an... | Affected: Ivanti / EPMM | CVSS: 7.2 (HIGH) | EPSS: 0.63316 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41 allows XSS in the Zimbra Classic Web Client. | Affected: Zimbra / Zimbra Collaboration | CVSS: 6.1 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: This issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and... | Affected: Apple / tvOS, iOS and iPadOS, macOS, watchOS | CVSS: 5.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of the application... | Affected: Ivanti / Endpoint Manager Mobile | CVSS: 9.8 (CRITICAL) | EPSS: 0.99999 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Adobe ColdFusion Improper Access Control Security feature bypass | Affected: Adobe / ColdFusion | CVSS: 7.5 (HIGH) | EPSS: 0.99754 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: ColdFusion Bypass - Vulnerability disclosure in ColdFusion | BYPASS CVE-2023-29298 | Affected: Adobe / ColdFusion | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Unauthenticated remote code execution | Affected: Citrix / NetScaler ADC, NetScaler Gateway | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False

Unauthenticated remote code execution


KEVIntel entry: An issue in WooCommerce Payments plugin for WordPress (versions 5.6.1 and lower) allows an unauthenticated attacker to send requests on behalf of... | Affected: WooCommerce / WooCommerce Payments | CVSS: 9.8 (CRITICAL) | EPSS: 0.93462 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Windows Search Remote Code Execution Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 7.5 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php. | Affected: SolarView / Compact | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, Safari 16.5.2, tvOS 16.6, macOS Ventura 13.5,... | Affected: Apple / Safari, tvOS, iOS and iPadOS, macOS, watchOS | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows MSHTML Platform Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 7.8 (HIGH) | EPSS: 0.09083 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Outlook Security Feature Bypass Vulnerability | Affected: Microsoft / Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2021, Microsoft Office 2019, Microsoft Outlook 2016, Microsoft Outlook 2013, Microsoft Outlook 2013 Service Pack 1 | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Error Reporting Service Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 7.8 (HIGH) | EPSS: 0.32309 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Remote code execution vulnerabilities exist in the Netwrix Auditor User Activity Video Recording component affecting both the Netwrix Auditor... | Affected: Netwrix / Auditor | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Windows SmartScreen Security Feature Bypass Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation) | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: . The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information disclosure or root privilege... | Affected: Arm / Mali GPU kernel driver | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access. | Affected: Samsung Mobile / Samsung Mobile Devices | CVSS: 6.1 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio... | Affected: Samsung Mobile / Samsung Mobile Devices | CVSS: 6.4 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in... | Affected: Samsung Mobile / Samsung Mobile Devices | CVSS: 7.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Save Configuration functionality in the... | Affected: D-Link / DWL-2600AP | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string... | Affected: Samsung Mobile / Samsung Mobile Devices | CVSS: 3.3 (LOW) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute... | Affected: D-Link / DIR-859 Wi-Fi router | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is... | Affected: Samsung Mobile / Samsung Mobile Devices | CVSS: 6.4 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP. | Affected: Samsung Mobile / Samsung Mobile Devices | CVSS: 6.1 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS... | Affected: Apple / macOS, iOS and iPadOS, Safari | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: VMware Tools Authentication Bypass Vulnerability | Affected: VMware / VMware Tools | CVSS: 3.9 (LOW) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0, NAS540 firmware... | Affected: Zyxel / NAS326 firmware, NAS540 firmware, NAS542 firmware | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.5.2, macOS Big Sur 11.7.8, iOS 15.7.7 and iPadOS... | Affected: Apple / macOS, iOS and iPadOS, watchOS | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPadOS 16.5.1, iOS 15.7.7 and iPadOS 15.7.7, macOS... | Affected: Apple / iOS and iPadOS, Safari, macOS | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMware Aria Operations for... | Affected: VMware / Aria Operations for Networks (Formerly vRealize Network Insight) | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An XSS issue was discovered in Roundcube Webmail before 1.2.13, 1.3.x before 1.3.16, and 1.4.x before 1.4.10. The attacker can send a plain text... | Affected: Roundcube / Webmail | CVSS: 6.1 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild... | Affected: Mozilla / Firefox, Firefox ESR, Thunderbird | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via shell metacharacters in a configuration setting... | Affected: Roundcube / Webmail | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search or search_params. | Affected: Roundcube / Roundcube Webmail | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and... | Affected: Microsoft / Windows | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, version 6.4.12 and below,... | Affected: Fortinet / FortiOS-6K7K, FortiProxy, FortiOS | CVSS: 9.2 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: GeoServer 2, in some configurations, allows remote attackers to execute arbitrary code via java.lang.Runtime.getRuntime().exec in wps:LiteralData... | Affected: GeoServer / GeoServer | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML... | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Patch 1, USG FLEX series... | Affected: Zyxel / ATP series firmware, USG FLEX series firmware, USG FLEX 50(W) firmware, USG20(W)-VPN firmware, VPN series firmware, ZyWALL/USG series firmware | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX series... | Affected: Zyxel / ATP series firmware, USG FLEX series firmware, USG FLEX 50(W) firmware, USG20(W)-VPN firmware, VPN series firmware, ZyWALL/USG series firmware | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022.1.5 (14.1.5), and 2023.0.1 (15.0.1), a SQL... | Affected: Progress / MOVEit Transfer | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: An issue was discovered in the tshirtecommerce (aka Custom Product Designer) component 2.1.4 for PrestaShop. An HTTP request can be forged with the... | Affected: PrestaShop / Custom Product Designer | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5.35, USG... | Affected: Zyxel / ZyWALL/USG series firmware, VPN series firmware, USG FLEX series firmware, ATP series firmware | CVSS: 9.8 (CRITICAL) | EPSS: 0.99284 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Remote Code injection in Barracuda Email Security Gateway | Affected: Barracuda / Barracuda Email Security Gateway | CVSS: 9.4 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6... | Affected: Apple / macOS, Safari, watchOS, iOS and iPadOS, tvOS | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6... | Affected: Apple / macOS, Safari, watchOS, iOS and iPadOS, tvOS | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The issue was addressed with improved bounds checks. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.8 and iPadOS... | Affected: Apple / macOS, Safari, watchOS, iOS and iPadOS, tvOS | CVSS: 8.6 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR. | Affected: Samsung Mobile / Samsung Mobile Devices | CVSS: 4.4 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP... | Affected: Cisco / IOS | CVSS: 5.9 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The server IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.x and 5.0.x through 5.2.x,... | Affected: Cisco / IOS, IOS XE, IOS XR, PIX | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: WordPress Essential Addons for Elementor Plugin 5.4.0-5.7.1 is vulnerable to Privilege Escalation | Affected: WPDeveloper / Essential Addons for Elementor | CVSS: 9.8 (CRITICAL) | EPSS: 0.93638 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect... | Affected: Oracle / Java SE | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36... | Affected: Linux / Linux Kernel | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a... | Affected: Ruckus Wireless / Admin | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the... | Affected: Linux / polkit | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO &... | Affected: Linux / kernel | CVSS: 5.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before... | Affected: Apache Software Foundation / Apache Tomcat | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain sensitive job and build name... | Affected: Jenkins / Jenkins | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Secure Boot Security Feature Bypass Vulnerability | Affected: Microsoft / Windows Server 2025 (Server Core installation), Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 6.7 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Win32k Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 7.8 (HIGH) | EPSS: 0.40919 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack | Affected: Apache Software Foundation / Apache Log4j | CVSS: 9.0 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability in the country form of the... | Affected: TP-Link / TP-Link Archer AX21 (AX1800) | CVSS: 8.8 (HIGH) | EPSS: 0.99999 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are... | Affected: Oracle Corporation / WebLogic Server | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially... | Affected: Google / Chrome | CVSS: 9.6 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication... | Affected: PaperCut / NG | CVSS: 9.8 (CRITICAL) | EPSS: 0.99999 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Minio Information Disclosure in Cluster Deployment | Affected: minio / minio | CVSS: 7.5 (HIGH) | EPSS: 0.83957 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely... | Affected: Cisco, IntelliShield / Cisco IOS XE Software, Universal Product | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. An application may be able to... | Affected: Apple / macOS | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML... | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: In WorkSource, there is a possible parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges... | Affected: Google / Android | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Novi Survey before 8.9.43676 allows remote attackers to execute arbitrary code on the server in the context of the service account. This does not... | Affected: Novi Survey / Novi Survey | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Common Log File System Driver Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 7.8 (HIGH) | EPSS: 0.48973 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.4.1, iOS 15.7.5 and iPadOS 15.7.5, iOS... | Affected: Apple / iOS and iPadOS, Safari, macOS | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.5, iOS 16.4.1 and iPadOS... | Affected: Apple / iOS and iPadOS, macOS | CVSS: 8.6 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An issue was discovered in Veritas Backup Exec before 21.2. It supports multiple authentication schemes: SHA authentication is one of these. This... | Affected: Veritas / Backup Exec | CVSS: 8.2 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Windows... | Affected: Microsoft / Windows, Windows Server, Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires successful authentication,... | Affected: Veritas / Backup Exec | CVSS: 8.1 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all... | Affected: Arm / Mali GPU Kernel Driver | CVSS: 3.3 (LOW) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires successful authentication,... | Affected: Veritas / Backup Exec | CVSS: 8.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A reflected cross-site scripting (XSS) vulnerability in the /public/launchNewWindow.jsp component of Zimbra Collaboration (aka ZCS) 9.0 allows... | Affected: Zimbra / Collaboration | CVSS: 6.1 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a... | Affected: Microsoft / Internet Explorer | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Cobalt Strike 4.7.1 fails to properly escape HTML tags when they are displayed on Swing components. By injecting crafted HTML code, it is possible... | Affected: HelpSystems / Cobalt Strike | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An XSS (Cross Site Scripting) vulnerability was found in HelpSystems Cobalt Strike through 4.7 that allowed a remote attacker to execute HTML on... | Affected: HelpSystems / Cobalt Strike | CVSS: 6.1 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.8.1 and iPadOS 14.8.1, iOS 15.1 and iPadOS... | Affected: Apple / iOS and iPadOS | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a... | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to... | Affected: Samba / samba | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishandled. This affects Bifrost... | Affected: Arm / Mali GPU kernel driver | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Use after free in SNDRV_CTL_IOCTL_ELEM in Linux Kernel | Affected: Linux / Linux Kernel | CVSS: 7.9 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects Midgard r26p0 through... | Affected: Arm / Mali GPU Kernel Driver | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An issue was discovered in the tshirtecommerce (aka Custom Product Designer) component 2.1.4 for PrestaShop. An HTTP request can be forged with a... | Affected: tshirtecommerce / Custom Product Designer for PrestaShop | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Adobe ColdFusion Improper Access Control Arbitrary code execution | Affected: Adobe / ColdFusion | CVSS: 8.6 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A improper limitation of a pathname to a restricted directory vulnerability ('path traversal') [CWE-22] in Fortinet FortiOS version 7.2.0 through... | Affected: Fortinet / FortiOS | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows SmartScreen Security Feature Bypass Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation) | CVSS: 4.4 (MEDIUM) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Outlook Elevation of Privilege Vulnerability | Affected: Microsoft / Microsoft Office LTSC 2021, Microsoft Outlook 2016, Microsoft 365 Apps for Enterprise, Microsoft Office 2019, Microsoft Outlook 2013 Service Pack 1 | CVSS: 9.8 (CRITICAL) | EPSS: 0.97408 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Deserialization of Untrusted Data in Plex Media Server on Windows allows a remote, authenticated attacker to execute arbitrary Python code. | Affected: Plex / Plex Media Server (Windows) | CVSS: 7.2 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: XStream is vulnerable to a Remote Command Execution attack | Affected: x-stream / xstream | CVSS: 8.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Zoho ManageEngine ADSelfService Plus before build 6122 allows a remote authenticated administrator to execute arbitrary operating OS commands as... | Affected: Zoho / ManageEngine ADSelfService Plus | CVSS: 6.8 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Apache Spark shell command injection vulnerability via Spark UI | Affected: Apache Software Foundation / Apache Spark | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: /vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection. | Affected: GLPI / GLPI | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: ZK Framework v9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 allows attackers to access sensitive information via a crafted POST request sent to the... | Affected: Potix Corporation / ZK Framework | CVSS: 7.5 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker with... | Affected: Mitel / MiVoice Connect | CVSS: 6.8 (MEDIUM) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: The Director database component of MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker to conduct a code-injection... | Affected: Mitel / MiVoice Connect | CVSS: 6.8 (MEDIUM) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: IBM Aspera Faspex code execution | Affected: IBM / Aspera Faspex | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False

IBM Aspera Faspex code execution


KEVIntel entry: Unauthenticated Command Injection | Affected: Cacti / cacti | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False

Unauthenticated Command Injection


KEVIntel entry: Windows Common Log File System Driver Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Publisher Security Feature Bypass Vulnerability | Affected: Microsoft / Microsoft 365 Apps for Enterprise | CVSS: 7.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Graphics Component Remote Code Execution Vulnerability | Affected: Microsoft / Microsoft Office for Android, Microsoft Office for Universal, Microsoft Office for iOS, Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A type confusion issue was addressed with improved checks. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.3.1 and iPadOS 16.3.1, macOS... | Affected: Apple / iOS and iPadOS, Safari, macOS | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Fortra GoAnywhere MFT License Response Servlet Command Injection | Affected: Fortra / Goanywhere MFT | CVSS: 7.2 (HIGH) | EPSS: 0.99999 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending "User-Agent: TNAS" to... | Affected: TerraMaster / NAS | CVSS: 7.5 (HIGH) | EPSS: 0.8405 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: (1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a... | Affected: Intel / Ethernet diagnostics driver for Windows | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: In SugarCRM before 12.0. Hotfix 91155, a crafted request can inject custom PHP code through the EmailTemplates because of missing input validation. | Affected: SugarCRM / SugarCRM | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload). Supported versions that are... | Affected: Oracle Corporation / Web Applications Desktop Integrator | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackers to... | Affected: Progress / Telerik UI for ASP.NET AJAX | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache Santuario... | Affected: Zoho / ManageEngine | CVSS: 9.8 (CRITICAL) | EPSS: 0.99753 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: login/index.php in CWP (aka Control Web Panel or CentOS Web Panel) 7 before 0.9.8.1147 allows remote attackers to execute arbitrary OS commands via... | Affected: CWP (Control Web Panel) / Control Web Panel | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Exchange Server Elevation of Privilege Vulnerability | Affected: Microsoft / Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 12, Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 11, Microsoft Exchange Server 2016 Cumulative Update 22 | CVSS: 8.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 8.1, Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: TIBCO JasperReports Library Directory Traversal Vulnerability | Affected: TIBCO Software Inc. / TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, TIBCO Jaspersoft Reporting and Analytics for AWS | CVSS: 9.9 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: TIBCO JasperReports Server Information Disclosure Vulnerability | Affected: TIBCO Software Inc. / TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, TIBCO Jaspersoft Reporting and Analytics for AWS | CVSS: 7.7 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: WordPress YITH WooCommerce Gift Cards Premium Plugin <= 3.19.0 is vulnerable to Arbitrary File Upload | Affected: YITH / YITH WooCommerce Gift Cards | CVSS: 9.8 (CRITICAL) | EPSS: 0.17432 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2... | Affected: Apple / tvOS | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Veeam Backup & Replication 10.x and 11.x has Incorrect Access Control (issue 1 of 2). | Affected: Veeam / Backup & Replication | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Improper limitation of path names in Veeam Backup & Replication 9.5U3, 9.5U4,10.x, and 11.x allows remote authenticated users access to... | Affected: Veeam / Backup & Replication | CVSS: 8.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Unauthenticated remote arbitrary code execution | Affected: Citrix / Citrix Gateway, Citrix ADC | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0... | Affected: Fortinet / FortiProxy, FortiOS | CVSS: 9.3 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Windows SmartScreen Security Feature Bypass Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 10 Version 1607, Windows Server 2016 | CVSS: 5.4 (MEDIUM) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML... | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: OpenSSO Agent). Supported versions that are affected are... | Affected: Oracle Corporation / Access Manager | CVSS: 9.8 (CRITICAL) | EPSS: 0.96284 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to... | Affected: Google / Chrome | CVSS: 9.6 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Mark of the Web Security Feature Bypass Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 11 version 22H2, Windows 10 Version 22H2 | CVSS: 5.4 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows CNG Key Isolation Service Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 8.1, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Print Spooler Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read or... | Affected: Samsung Mobile / Samsung Mobile Devices | CVSS: 4.4 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Mark of the Web Security Feature Bypass Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 11 version 22H2, Windows 10 Version 22H2 | CVSS: 5.4 (MEDIUM) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to kernel... | Affected: Samsung Mobile / Samsung Mobile Devices | CVSS: 6.1 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace. | Affected: Samsung Mobile / Samsung Mobile Devices | CVSS: 6.2 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Scripting Languages Remote Code Execution Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 R2 Service Pack 1, Windows Server 2012, Windows Server 2012 R2 | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Type confusion in V8 in Google Chrome prior to 107.0.5304.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML... | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS... | Affected: Apple / iOS and iPadOS | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before... | Affected: GIGABYTE / APP Center, AORUS GRAPHICS ENGINE, XTREME GAMING ENGINE, OC GURU II | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC... | Affected: GIGABYTE / APP Center, AORUS GRAPHICS ENGINE, XTREME GAMING ENGINE, OC GURU II | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability | Affected: Cisco / Cisco AnyConnect Secure Mobility Client | CVSS: 6.5 (MEDIUM) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC... | Affected: GIGABYTE / APP Center, AORUS GRAPHICS ENGINE, XTREME GAMING ENGINE, OC GURU II | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability | Affected: Cisco / Cisco AnyConnect Secure Mobility Client | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults | Affected: Apache Software Foundation / Apache Commons Text | CVSS: 9.8 (CRITICAL) | EPSS: 0.94161 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. An attacker can upload arbitrary files through amavis via a cpio loophole... | Affected: Zimbra / Collaboration | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities on... | Affected: Ubuntu / linux kernel | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The Mikrotik RouterOS web server allows memory corruption in releases before Stable 6.38.5 and Long-term 6.37.5, aka Chimay-Red. A remote and... | Affected: Mikrotik / RouterOS | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6,... | Affected: Fortinet / Fortinet FortiOS, FortiProxy, FortiSwitchManager | CVSS: 9.8 (CRITICAL) | EPSS: 0.99984 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Windows COM+ Event System Service Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 before version 7.17.10, from... | Affected: Atlassian / Bitbucket Server, Bitbucket Data Center | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Exchange Server Remote Code Execution Vulnerability | Affected: Microsoft / Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Exchange Server 2016 Cumulative Update 22, Microsoft Exchange Server 2019 Cumulative Update 11, Microsoft Exchange Server 2019 Cumulative Update 12, Microsoft Exchange Server 2016 Cumulative Update 23 | CVSS: 8.0 (HIGH) | EPSS: 0.99964 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Exchange Server Elevation of Privilege Vulnerability | Affected: Microsoft / Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Exchange Server 2016 Cumulative Update 22, Microsoft Exchange Server 2019 Cumulative Update 11, Microsoft Exchange Server 2019 Cumulative Update 12, Microsoft Exchange Server 2016 Cumulative Update 23 | CVSS: 8.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v19.0 MR1 and... | Affected: Sophos / Sophos Firewall | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to unauthenticated remote code execution. (This also... | Affected: Zoho / ManageEngine Password Manager Pro, PAM360, Access Manager Plus | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Improper validation of some components used by the rollback mechanism in Trend Micro Apex One and Trend Micro Apex One as a Service clients could... | Affected: Trend Micro / Trend Micro Apex One | CVSS: 7.2 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or remote... | Affected: Microsoft / Windows | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local... | Affected: Linux / Linux Kernel | CVSS: 8.4 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android... | Affected: Linux / Linux Kernel | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used in... | Affected: Qualcomm / Linux Kernel | CVSS: 8.4 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not validate certain addresses,... | Affected: Linux / Linux Kernel | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur... | Affected: Apple / iOS, macOS | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: UniSharp laravel-filemanager (aka Laravel Filemanager) before 2.6.4 allows download?working_dir=%2F.. directory traversal to read arbitrary files,... | Affected: UniSharp / laravel-filemanager | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Windows Common Log File System Driver Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: WPGateway <= 3.5 - Unauthenticated Privilege Escalation | Affected: Jack Hopman / WPGateway | CVSS: 9.8 (CRITICAL) | EPSS: 0.27791 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerability via HTTP POST to get set ccp. | Affected: D-Link / DIR-820L | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are... | Affected: Oracle Corporation / WebLogic Server | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Insufficient data validation in Mojo in Google Chrome prior to 105.0.5195.102 allowed a remote attacker who had compromised the renderer process to... | Affected: Google / Chrome | CVSS: 9.6 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local... | Affected: Google / Android | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 13.6 and... | Affected: Apple / iOS, macOS | CVSS: 5.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: DeadBolt Ransomware | Affected: QNAP Systems Inc. / Photo Station | CVSS: 10.0 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False

DeadBolt Ransomware


KEVIntel entry: OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH_1.08B04 and previous... | Affected: D-Link / DIR-880L, DIR-868L, DIR-865L, DIR-860L | CVSS: 9.8 (CRITICAL) | EPSS: 0.96626 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remote attackers with access to... | Affected: MikroTik / RouterOS | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to obtain the... | Affected: Fortinet / Fortinet FortiOS, fortiADC | CVSS: 4.3 (MEDIUM) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified... | Affected: D-Link / DIR-300 | CVSS: 5.7 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, and R8000... | Affected: NETGEAR / Routers | CVSS: 8.1 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: WordPress BackupBuddy Plugin 8.5.8.0-8.7.4.1 is vulnerable to Directory Traversal | Affected: iThemes / BackupBuddy | CVSS: 7.5 (HIGH) | EPSS: 0.92656 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related... | Affected: pear / Archive_Tar | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A deserialization issue was addressed through improved validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 12.5.5, iOS 14.8... | Affected: Apple / macOS, watchOS | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: apisix/batch-requests plugin allows overwriting the X-REAL-IP header | Affected: Apache Software Foundation / Apache APISIX | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a... | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Remote Code Execution Vulnerability in Packaging | Affected: Apache Software Foundation / Apache CouchDB | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Delta Electronics DOPSoft 2 Out-of-Bounds Write | Affected: Delta Electronics / DOPSoft 2 | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An issue was discovered in the ContentResource API in dotCMS 3.0 through 22.02. Attackers can craft a multipart form request to post a file whose... | Affected: dotCMS / dotCMS | CVSS: 9.8 (CRITICAL) | EPSS: 0.91501 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Snapshot authentication bypass in grafana | Affected: grafana / grafana | CVSS: 9.8 (CRITICAL) | EPSS: 0.99951 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as file:// to... | Affected: pear / Archive_Tar | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to... | Affected: VMware / Spring Cloud Function | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filtering | Affected: Palo Alto Networks / Cloud NGFW, PAN-OS, Prisma Access | CVSS: 8.6 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Runtime Remote Code Execution Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2 | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are... | Affected: SAP SE / SAP NetWeaver and ABAP Platform, SAP Web Dispatcher, SAP Content Server | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey... | Affected: Apple / iOS and iPadOS, macOS | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily... | Affected: Google / Chrome | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Active Directory Domain Services Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 8.1, Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote attackers to execute... | Affected: Palo Alto Networks / PAN-OS | CVSS: 9.8 (CRITICAL) | EPSS: 0.9834 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey... | Affected: Apple / Safari, iOS and iPadOS, macOS | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. By bypassing... | Affected: Zimbra / Collaboration Suite | CVSS: 9.8 (CRITICAL) | EPSS: 0.88256 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. An authenticated... | Affected: Zimbra / Collaboration | CVSS: 7.2 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated... | Affected: RARLAB / UnRAR | CVSS: 7.5 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instance.... | Affected: Zimbra / Zimbra Collaboration | CVSS: 7.5 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in the confluence-users group... | Affected: Atlassian / Questions For Confluence | CVSS: 9.8 (CRITICAL) | EPSS: 0.9817 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Kaswara Modern VC Addons <= 3.0.1 - Unauthenticated Arbitrary File Upload | Affected: SayenThemes / Kaswara Modern VC Addons | CVSS: 9.8 (CRITICAL) | EPSS: 0.91328 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows LSA Spoofing Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 8.1 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False

Windows LSA Spoofing Vulnerability


KEVIntel entry: The Service Appliance component in Mitel MiVoice Connect through 19.2 SP3 allows remote code execution because of incorrect data validation. The... | Affected: Mitel / MiVoice Connect | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8. An... | Affected: Apple / iOS, tvOS | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow... | Affected: freedesktop.org / polkit | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3,... | Affected: Apple / iOS, macOS, tvOS, watchOS | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Insufficient policy enforcement in PopupBlocker in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass navigation restrictions... | Affected: Google / Chrome | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS... | Affected: Apple / iOS, macOS, tvOS, watchOS | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12,... | Affected: Apple / iOS, macOS, tvOS, watchOS | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.2 and iPadOS 15.2. An application may be able to... | Affected: Apple / iOS and iPadOS | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 7.8 (HIGH) | EPSS: 0.99374 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands via... | Affected: SAP / NetWeaver J2EE Engine | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: SAP NetWeaver (Visual Composer 7.0 RT) versions - 7.30, 7.31, 7.40, 7.50, without restriction, an attacker authenticated as a non-administrative... | Affected: SAP SE / SAP NetWeaver (Visual Composer 7.0 RT) | CVSS: 9.9 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP... | Affected: SAP / NetWeaver AS JAVA | CVSS: 5.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Double Free... | Affected: Adobe / Adobe Acrobat and Reader 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier versions | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypass and... | Affected: NETGEAR / NETGEAR All versions prior to WNR2000v3 1.1.2.14, WNR2000v4 1.0.0.66, WNR2000v5 1.0.0.42 | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and... | Affected: Adobe / Flash Player, AIR, Reader, Acrobat | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider... | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and... | Affected: Adobe / Flash Player | CVSS: 8.1 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP... | Affected: QNAP / QNAP NAS devices running Photo Station | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote... | Affected: Adobe / Reader and Acrobat | CVSS: 7.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and... | Affected: Microsoft / Office | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long... | Affected: Adobe / Reader and Acrobat | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows... | Affected: Microsoft / Word | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an... | Affected: Microsoft / Office | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The Authenticode Signature Verification function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server... | Affected: Microsoft / Windows | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Execution of user supplied Javascript during array deserialization leading to an out of bounds write in V8 in Google Chrome prior to 71.0.3578.80... | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Out of bounds write in JavaScript in Google Chrome prior to 73.0.3683.86 allowed a remote attacker to potentially exploit heap corruption via a... | Affected: Google / Chrome | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint 95... | Affected: Microsoft / PowerPoint | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87,... | Affected: Adobe / ["Reader", "Acrobat", "Flash Player"] | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Stack-based buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML... | Affected: Microsoft / Office | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors. | Affected: Adobe / Reader and Acrobat | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute... | Affected: Adobe / Flash Player | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to... | Affected: Google / Google Chrome prior to 59.0.3071.86 for Linux, Windows and Mac, and 59.0.3071.92 for Android | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android... | Affected: Google / Google Chrome prior to 57.0.2987.98 for Linux, Windows and Mac, and 57.0.2987.108 for Android | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on... | Affected: Adobe / Flash Player | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and... | Affected: Adobe / Flash Player | CVSS: 6.1 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on... | Affected: Adobe / Reader and Acrobat | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. To fix the vulnerability, QNAP... | Affected: QNAP / QNAP NAS devices | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote... | Affected: Adobe / Reader and Acrobat | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbitrary code inside a sandbox... | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac included incorrect... | Affected: Google / Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix these vulnerabilities, QNAP... | Affected: QNAP / QNAP NAS devices running Photo Station | CVSS: 9.8 (CRITICAL) | EPSS: 0.88213 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Cisco Small Business RV016, RV042, RV042G, and RV082 Routers Arbitrary Command Execution Vulnerability | Affected: Cisco / Cisco Small Business RV Series Router Firmware | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Chrome prior to 65.0.3325.146... | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through... | Affected: Adobe / Reader and Acrobat | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackers to... | Affected: Microsoft / Internet Explorer | CVSS: 8.1 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code... | Affected: Microsoft / XML Core Services | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to... | Affected: Atlassian / Confluence Data Center, Confluence Server | CVSS: 9.8 (CRITICAL) | EPSS: 0.99999 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows... | Affected: Microsoft / Windows | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1,... | Affected: Microsoft / Windows | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before... | Affected: Adobe / Flash Player | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, which allows remote attackers... | Affected: Microsoft / Silverlight | CVSS: 5.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote... | Affected: Oracle / Java SE | CVSS: 3.7 (LOW) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows... | Affected: Oracle / Java SE | CVSS: 5.3 (MEDIUM) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) using the public... | Affected: Oracle / Java | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML object rendering, which allows... | Affected: Microsoft / Silverlight | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to... | Affected: Oracle / Fusion Middleware | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and... | Affected: Red Hat / JBoss Enterprise Application Platform | CVSS: 7.5 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of... | Affected: Microsoft / Internet Explorer | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and... | Affected: Oracle / Java SE | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3... | Affected: Red Hat / JBoss Enterprise Application Platform | CVSS: 5.3 (MEDIUM) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). The supported version that is affected is 11. Easily... | Affected: Oracle Corporation / Solaris Operating System | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows... | Affected: Microsoft / Windows | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the... | Affected: Mozilla / Firefox | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet... | Affected: Microsoft / Internet Explorer | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly... | Affected: Adobe / Flash Player | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or... | Affected: Microsoft / Silverlight | CVSS: 8.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: The kernel in Microsoft Windows 10 Gold allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Elevation of... | Affected: Microsoft / Windows 10 | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,... | Affected: Microsoft / Windows | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux,... | Affected: Adobe / Flash Player | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Adobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows allow attackers to bypass a sandbox protection mechanism, and... | Affected: Adobe / Reader and Acrobat | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the existence of local pathnames,... | Affected: Microsoft / Windows | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Directory traversal vulnerability in the TS WebProxy (aka TSWbPrxy) component in Microsoft Windows Vista SP2, Windows 7 SP1, Windows Server 2008 R2... | Affected: Microsoft / Windows | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web... | Affected: Microsoft / Internet Explorer | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold... | Affected: Microsoft / Windows | CVSS: 6.6 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 SP2;... | Affected: Microsoft / Windows DirectWrite | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Internet Explorer 6 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of... | Affected: Microsoft / Internet Explorer | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False