KEVIntel entry: Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Office 2007 SP3, when IMJPDCT.EXE (aka... | Affected: Microsoft / Windows | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses,... | Affected: Linux / Linux Kernel | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restrictions, or access untrusted... | Affected: IBM / InfoSphere BigInsights | CVSS: 6.5 (MEDIUM) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before... | Affected: Adobe / Flash Player | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on... | Affected: Adobe / Flash Player | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has already fixed the issue in... | Affected: QNAP Systems Inc. / QTS | CVSS: 6.1 (MEDIUM) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. QNAP has already fixed the issue in the... | Affected: QNAP Systems Inc. / QTS | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted... | Affected: Apple / iOS | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory... | Affected: Apple / iOS | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app. | Affected: Apple / iOS | CVSS: 5.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka... | Affected: Microsoft / Internet Explorer, Edge | CVSS: 6.5 (MEDIUM) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Internet Explorer 9 through 11 allows remote attackers to determine the existence of files via crafted JavaScript code, aka "Internet... | Affected: Microsoft / Internet Explorer | CVSS: 4.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has already fixed these issues in... | Affected: QNAP Systems Inc. / QTS | CVSS: 8.0 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to... | Affected: ConnectWise / ManagedITSync integration for Kaseya VSA | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an... | Affected: Microsoft Corporation / Internet Explorer | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile... | Affected: Artifex / Ghostscript | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Internet Explorer 9 through 11 and the Internet Messaging API in Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1... | Affected: Microsoft / Internet Explorer | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a... | Affected: Microsoft Corporation / Internet Explorer | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2;... | Affected: Microsoft Corporation / Windows SMB | CVSS: 7.5 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges... | Affected: Cisco / Adaptive Security Appliance (ASA) Software | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of... | Affected: Microsoft / Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8,... | Affected: Microsoft Corporation / Microsoft Windows | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 and R2... | Affected: Microsoft Corporation / XML Core Services | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server... | Affected: Microsoft Corporation / Windows GDI | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv,... | Affected: Cisco / Adaptive Security Appliance (ASA) Software | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4. An application may be able to execute... | Affected: Apple / iOS | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in... | Affected: Microsoft / Windows, Windows Server, Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation... | Affected: Microsoft / Windows Server, Windows, Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege... | Affected: Microsoft / Windows Server 2008, Windows 7, Windows Server 2008 R2 | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Cisco IOS XR Software Health Check Open Port Vulnerability | Affected: Cisco / Cisco IOS XR Software | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege... | Affected: Google / Android | CVSS: 6.4 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of... | Affected: Microsoft / Windows, Windows Server, Windows 10 Version 1909 for 32-bit Systems, Windows 10 Version 1909 for x64-based Systems, Windows 10 Version 1909 for ARM64-based Systems, Windows Server, version 1909 (Server Core installation), Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker who successfully exploited... | Affected: Microsoft / Internet Explorer 11, Internet Explorer 10 | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information... | Affected: Microsoft / Windows, Windows Server | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a crafted... | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-site... | Affected: Facebook / WhatsApp Desktop | CVSS: 8.2 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access... | Affected: Google / Chrome | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege... | Affected: Microsoft / Windows Server, Windows, Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed... | Affected: Mozilla / Firefox ESR, Firefox, Thunderbird | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker... | Affected: Microsoft / Windows, Windows 10 Version 1903 for ARM64-based Systems, Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows Server, Windows Server, version 1903 (Server Core installation), Windows 10 Version 1909 for 32-bit Systems, Windows 10 Version 1909 for x64-based Systems, Windows Server, version 1909 (Server Core installation), Windows 10 Version 1909 for ARM64-based Systems | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: In ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of... | Affected: Google / Android | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental... | Affected: Apple / iOS, macOS | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash.... | Affected: Mozilla / Firefox ESR, Firefox, Thunderbird | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code... | Affected: Apple / webkitgtk | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploitation could lead to... | Affected: Adobe / Adobe Flash Player 29.0.0.171 and earlier versions | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.0.2 and iPadOS 15.0.2, macOS Monterey 12.0.1,... | Affected: Apple / iOS and iPadOS, macOS | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Patch 1, USG FLEX 200 firmware... | Affected: Zyxel / USG FLEX 100(W) firmware, USG FLEX 200 firmware, USG FLEX 500 firmware, USG FLEX 700 firmware, ATP series firmware, VPN series firmware, USG FLEX 50(W) firmware, USG 20(W)-VPN firmware | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator... | Affected: VMware / Spring Cloud Gateway | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to... | Affected: F5 / BIG-IP | CVSS: 9.8 (CRITICAL) | EPSS: 0.99956 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina,... | Affected: Apple / iOS and iPadOS, macOS | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1,... | Affected: Microsoft / Windows | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via vectors involving... | Affected: Microsoft / Internet Explorer | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes... | Affected: Apple / iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for Windows | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote... | Affected: OpenSSL / OpenSSL | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /fileupload endpoint with a... | Affected: WSO2 / WSO2 API Manager, WSO2 Identity Server, WSO2 Identity Server Analytics, WSO2 Enterprise Integrator, WSO2 Open Banking AM, WSO2 Open Banking KM | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and... | Affected: Linux / kernel | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Win32k Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2 | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Win32k Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2 | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.53 and earlier in... | Affected: Jenkins project / Jenkins Script Security Plugin | CVSS: 9.9 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows User Profile Service Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 7.0 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Print Spooler Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Cross-site scripting (XSS) vulnerability in the ZmMailMsgView.getAttachmentLinkHtml function in Zimbra Collaboration Suite (ZCS) before 8.7 Patch 1... | Affected: Zimbra / Collaboration Suite | CVSS: 6.1 (MEDIUM) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target... | Affected: Facebook / WhatsApp for Android, WhatsApp Business for Android, WhatsApp for iOS, WhatsApp Business for iOS, WhatsApp for Windows Phone, WhatsApp for Tizen | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a... | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: On certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi (aka Show AP info) because the ifname variable is not... | Affected: Ubiquiti / AirOS | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to cause a denial of service... | Affected: Trihedral / VTScada | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The login_mgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection. | Affected: D-Link / DNS-320 | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute... | Affected: Alcatel / OmniPCX Enterprise Communication Server | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: InduSoft Web Studio Path Traversal | Affected: InduSoft / Web Studio | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False

InduSoft Web Studio Path Traversal


KEVIntel entry: A SQL Injection (CWE-89) vulnerability exists in U.motion Builder software version 1.3.4 which could cause unwanted code execution when an improper... | Affected: U.motion / U.motion Builder software version 1.3.4 | CVSS: 9.8 (CRITICAL) | EPSS: 0.72486 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W... | Affected: Crestron / Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq AV IT WIPS710, SHARP PN-L703WA, Optoma WPS-Pro, Blackbox HD WPS, InFocus LiteShow3, and InFocus LiteShow4. | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in... | Affected: VMware / VMware Workspace ONE Access, Identity Manager and vRealize Automation | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious... | Affected: VMware / VMware Workspace ONE Access and Identity Manager | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through... | Affected: Adobe / Flash Player | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on... | Affected: Adobe / Flash Player | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425... | Affected: Adobe / Flash Player | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004 | Affected: Drupal / core | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Windows Common Log File System Driver Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before... | Affected: Adobe / Flash Player | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on... | Affected: Adobe / Flash Player | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Kaseya VSA RMM before R9.3 9.3.0.35, R9.4 before 9.4.0.36, and R9.5 before 9.5.0.5 allows unprivileged remote attackers to execute PowerShell... | Affected: Kaseya / VSA RMM | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before... | Affected: Adobe / Flash Player | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a... | Affected: Microsoft / Internet Explorer | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which allows... | Affected: Progress / Telerik UI for ASP.NET AJAX | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Active Directory Domain Services Elevation of Privilege Vulnerability | Affected: Microsoft / Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server version 2004, Windows Server version 20H2, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 7.5 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Command Injection Vulnerability in QTS and QuTS hero | Affected: QNAP Systems Inc. / QTS, QuTS hero | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management... | Affected: WatchGuard / Firebox and XTM appliances | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Double Free in net/packet/af_packet.c leading to priviledge escalation | Affected: Linux Kernel / Kernel | CVSS: 6.6 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Deserialization of Untrusted Data vulnerability in CheckboxWeb.dll of Checkbox Survey allows an unauthenticated remote attacker to execute... | Affected: Checkbox / Survey | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: In kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due to a logic error in the code. This could lead to... | Affected: Google / Android | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via... | Affected: Sudo Project / Sudo | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2;... | Affected: Microsoft Corporation / Windows SMB | CVSS: 8.1 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: HTTP Protocol Stack Remote Code Execution Vulnerability | Affected: Microsoft / Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2 | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, watchOS 8.6, macOS Big Sur 11.6.6,... | Affected: Apple / iOS and iPadOS, macOS, watchOS | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L... | Affected: D-link / DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, DIR-836L routers | CVSS: 9.8 (CRITICAL) | EPSS: 0.97836 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific... | Affected: VMware / Spring Framework | CVSS: 9.8 (CRITICAL) | EPSS: 0.99677 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is... | Affected: Apple / macOS | CVSS: 5.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An issue was discovered on Dasan GPON home routers. It is possible to bypass authentication simply by appending "?images" to any URL of the device... | Affected: Dasan / GPON home routers | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or... | Affected: Dell / dbutil | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An issue was discovered on Dasan GPON home routers. Command Injection can occur via the dest_host parameter in a diag_action=ping request to a... | Affected: Dasan / GPON home routers | CVSS: 9.8 (CRITICAL) | EPSS: 0.9995 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which... | Affected: Trend Micro / Trend Micro Apex Central | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v18.5... | Affected: Sophos / Sophos Firewall | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows User Profile Service Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Improper Authorization Vulnerability in HBS 3 (Hybrid Backup Sync) | Affected: QNAP Systems Inc. / HBS 3, HBS 2, HBS 1.3 | CVSS: 10.0 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: CleanTalk AntiSpam <= 5.173 Reflected XSS | Affected: CleanTalk / CleanTalk AntiSpam | CVSS: 6.1 (MEDIUM) | EPSS: 0.01195 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office... | Affected: Microsoft / Office 2013 | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which... | Affected: Debian / redis | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products,... | Affected: SonicWall / SonicWall SRA/SMA100 | CVSS: 9.8 (CRITICAL) | EPSS: 0.30084 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to... | Affected: Oracle / Java SE | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly... | Affected: Mozilla / Firefox, Firefox ESR, Thunderbird, Thunderbird ESR | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed... | Affected: Microsoft / Windows | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers... | Affected: Oracle / Fusion Middleware | CVSS: 4.7 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on... | Affected: Adobe / Flash Player | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authorization Arbitrary File Read... | Affected: Atlassian / Confluence Server, Confluence Data Center | CVSS: 5.3 (MEDIUM) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2,... | Affected: Microsoft / Windows | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow... | Affected: Microsoft / Word | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and... | Affected: Oracle / Java SE | CVSS: 9.8 (CRITICAL) | EPSS: 0.98704 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site... | Affected: Microsoft / Internet Explorer | CVSS: 8.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary... | Affected: Adobe / Reader and Acrobat | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows... | Affected: Microsoft / Windows | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of... | Affected: SonicWall / SMA100 | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory... | Affected: Microsoft / Edge | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2,... | Affected: Microsoft Corporation / Windows COM | CVSS: 7.3 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory... | Affected: Microsoft / Internet Explorer | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows... | Affected: Microsoft / Windows | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a... | Affected: Microsoft / Windows | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and... | Affected: Microsoft / Windows | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the... | Affected: Microsoft Corporation / Internet Browser | CVSS: 8.1 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka... | Affected: Microsoft Corporation / Internet Explorer | CVSS: 4.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX... | Affected: Microsoft / Windows Server 2016, Windows 10, Windows 10 Servers | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC... | Affected: Microsoft / Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Windows Event Tracing Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2 | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX... | Affected: Microsoft / Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability | Affected: Microsoft / Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office 2016, Microsoft Office 2013 Service Pack 1 | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote... | Affected: Microsoft / Internet Explorer | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: setSystemCommand on D-Link DCS-930L devices before 2.12 allows a remote attacker to execute code via an OS command in the SystemCommand parameter. | Affected: D-Link / DCS-930L | CVSS: 7.2 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This... | Affected: NETGEAR / WNR2000v5 router | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x... | Affected: Ruby on Rails / Action View | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Apache Kylin 2.3.0, and releases up to 2.6.5 and 3.0.1 has some restful apis which will concatenate os command with the user input string, a user... | Affected: Apache / Kylin | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: PAN-OS: Authentication Bypass in SAML Authentication | Affected: Palo Alto Networks / PAN-OS | CVSS: 10.0 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: improper access control vulnerability in Helpdesk | Affected: QNAP Systems Inc. / Helpdesk | CVSS: 7.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM before v9.705 MR5, v9.607 MR7, and v9.511 MR11 | Affected: Sophos / SG UTM | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Directory Traversal with spring-cloud-config-server | Affected: Spring by VMware / Spring Cloud Config | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Improper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an unauthenticated attacker to remotely compromise... | Affected: Citrix / Citrix ShareFile storage zones controller | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Windows Print Spooler Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) allows remote attackers... | Affected: Cisco / Prime Data Center Network Manager | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute arbitrary commands... | Affected: OpenBSD / OpenSMTPD | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786. This vulnerability impacts Fireware OS... | Affected: WatchGuard / Firebox and XTM appliances | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting... | Affected: Microsoft / Internet Explorer 9, Internet Explorer 11, Internet Explorer 10 | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow SQL Injection. | Affected: Citrix / SD-WAN | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute... | Affected: Adobe / Reader and Acrobat | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers... | Affected: Cisco / IOS XR | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Directory traversal vulnerability in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive information or cause a denial of... | Affected: Arcserve / UDP | CVSS: 9.1 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with... | Affected: TP-LINK / Archer C5, Archer C7, Archer C8, Archer C9, TL-WDR3500, TL-WDR3600, TL-WDR4300, TL-WR740N, TL-WR741ND, TL-WR841N, TL-WR841ND | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism... | Affected: Elastic / Elasticsearch | CVSS: 9.8 (CRITICAL) | EPSS: 0.99906 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp. | Affected: D-Link / multiple devices | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node... | Affected: HP / OpenView Network Node Manager | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read... | Affected: Adobe / ColdFusion | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query... | Affected: PHP / PHP | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2)... | Affected: Apache / Struts | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c allows remote attackers to... | Affected: Rejetto / HTTP File Server | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7... | Affected: Microsoft / Windows | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows... | Affected: Microsoft / Windows | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, Identity Driven Manager (IDM) 4.0, and Application Lifecycle Management allow remote... | Affected: HP / ProCurve Manager | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate... | Affected: Exim / Exim | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails before... | Affected: Ruby on Rails / Ruby on Rails | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Underflow in PHP-FPM can lead to RCE | Affected: PHP / PHP | CVSS: 8.7 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False

Underflow in PHP-FPM can lead to RCE


KEVIntel entry: Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allows remote attackers to inject... | Affected: phpMyAdmin / phpMyAdmin | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: ZyXEL NAS products running firmware version 5.21 and earlier are vulnerable to pre-authentication command injection in weblogin.cgi | Affected: ZyXEL / NAS326, NAS520, NAS540, NAS542, NSA210, NSA220, NSA220+, NSA221, NSA310, NSA320, NSA320S, NSA325, NSA325v2 | CVSS: 9.8 (CRITICAL) | EPSS: 0.99988 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE message with an invalid... | Affected: Cisco / IOS XR | CVSS: 5.9 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL... | Affected: Elastic / Elasticsearch | CVSS: 8.1 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an... | Affected: Exim / Exim | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows Shell Remote Code Execution... | Affected: Microsoft / Windows 10 Servers, Windows 10 | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+... | Affected: Microsoft / Windows, Windows Server, Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 and earlier in pom.xml,... | Affected: Jenkins project / Jenkins Pipeline: Groovy Plugin | CVSS: 9.9 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure deserialization attack where it is possible to achieve... | Affected: Sitecore / Sitecore XP | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: The TP-240 (aka tp240dvr) component in Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business Express through 8.1 allows remote attackers to obtain... | Affected: Mitel / MiCollab, MiVoice Business Express | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField... | Affected: Adobe / Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an... | Affected: Cisco / Cisco IOS and IOS XE Software | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via... | Affected: NETGEAR / DGN2200 | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in the web interface of the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2 Wireless-AC VPN Routers could allow an... | Affected: Cisco / Cisco RV132W and RV134W | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by anonymous users and can be... | Affected: Quest / KACE System Management Appliance | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability... | Affected: Spring by Pivotal / Spring Framework | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Multiple cross-site scripting (XSS) vulnerabilities in D-Link DSL-2760U Gateway (Rev. E1) allow remote authenticated users to inject arbitrary web... | Affected: D-Link / DSL-2760U Gateway | CVSS: 5.4 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) prior to release 5.8 patch 9 could allow an... | Affected: Cisco / Cisco Secure Access Control System | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute arbitrary shell commands as root via a CGISESSID cookie.... | Affected: Citrix / NetScaler SD-WAN | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2;... | Affected: Microsoft Corporation / Windows SMB | CVSS: 8.8 (HIGH) | EPSS: 0.89862 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default... | Affected: Apache Software Foundation / Apache Tomcat | CVSS: 8.1 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via... | Affected: Apache Software Foundation / Apache Tomcat | CVSS: 8.1 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component. This component... | Affected: VMware / NSX SD-WAN by VeloCloud | CVSS: 8.1 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An issue was discovered in Kentico 12.0.x before 12.0.15, 11.0.x before 11.0.48, 10.0.x before 10.0.52, and 9.x versions. Due to a failure to... | Affected: Kentico / Kentico CMS | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 5 of 6). | Affected: Citrix / SD-WAN | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The issue occurs when the... | Affected: D-Link / DIR-655C, DIR-866L, DIR-652, DHP-1565, DIR-855L, DAP-1533, DIR-862L, DIR-615, DIR-835, DIR-825 | CVSS: 9.8 (CRITICAL) | EPSS: 0.99996 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). Supported... | Affected: Oracle Corporation / BI Publisher (formerly XML Publisher) | CVSS: 7.2 (HIGH) | EPSS: 0.92183 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Drupal core - Highly critical - Remote Code Execution | Affected: Drupal / Drupal Core | CVSS: 8.1 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnerability. | Affected: Webmin / Webmin | CVSS: 9.8 (CRITICAL) | EPSS: 0.99766 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Out of Cycle Security Advisory: Junos OS: Security vulnerability in J-Web and web based (HTTP/HTTPS) services | Affected: Juniper Networks / Junos OS | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: D-Link DIR-610 devices allow Remote Command Execution via the cmd parameter to command.php. NOTE: This vulnerability only affects products that are... | Affected: D-Link / DIR-610 | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: LG N1A1 NAS 3718.510 is affected by: Remote Command Execution. The impact is: execute arbitrary code (remote). The attack vector is: HTTP POST with... | Affected: LG / N1A1 NAS | CVSS: 9.8 (CRITICAL) | EPSS: 0.89354 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as... | Affected: Adobe / Flash Player | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: (1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and... | Affected: Netgear / WN604, WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, WNDAP660 | CVSS: 9.8 (CRITICAL) | EPSS: 0.98325 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server... | Affected: Microsoft / Windows | CVSS: 8.2 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by... | Affected: SonicWall / SonicOS | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka... | Affected: Microsoft / Windows, Windows Server, Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of... | Affected: Microsoft / Windows, Windows Server, Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting... | Affected: Microsoft / Windows, Windows Server, Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability,... | Affected: Microsoft / Windows, Windows Server, Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k... | Affected: Microsoft / Windows, Windows Server | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation... | Affected: Microsoft / Windows, Windows Server, Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Windows Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1703, Windows 10 Version 1803, Windows Server, version 1803  (Server Core Installation), Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1709 for 32-bit Systems, Windows 10 Version 1709, Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation), Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k... | Affected: Microsoft / Windows Server 2008, Windows 7, Windows Server 2008 R2 | CVSS: 7.0 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold... | Affected: Microsoft / Windows | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Task Scheduler Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1703, Windows 10 Version 1803, Windows Server, version 1803  (Server Core Installation), Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1709 for 32-bit Systems, Windows 10 Version 1709, Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation), Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows... | Affected: Microsoft Corporation / Windows | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation... | Affected: Microsoft / Windows, Windows Server | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "Microsoft Windows Elevation of... | Affected: Microsoft / Windows | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in jquery-plugin-query-object 2.2.3 allows a malicious... | Affected: jQuery / jquery-plugin-query-object | CVSS: 8.8 (HIGH) | EPSS: 0.02845 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell... | Affected: NETGEAR / DGN2200 | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: There was a server-side template injection vulnerability in Jira Server and Data Center, in the ContactAdministrators and the SendBulkMail actions.... | Affected: Atlassian / Jira Server and Data Center | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in a vCenter Server... | Affected: VMware / VMware vCenter Server, VMware Cloud Foundation | CVSS: 5.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of attacks in the wild abusing... | Affected: Mozilla / Firefox, Firefox ESR, Firefox for Android, Thunderbird, Focus | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Adobe ColdFusion 9.0, 9.0.1, and 9.0.2, when a password is not configured, allows remote attackers to bypass authentication and possibly execute... | Affected: Adobe / ColdFusion | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via unspecified vectors, as exploited in the wild in... | Affected: Adobe / ColdFusion | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10, when a password is not configured, allows attackers to access restricted directories via unspecified... | Affected: Adobe / ColdFusion | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perform an arbitrary code... | Affected: Pulse Secure / Pulse Connect Secure | CVSS: 7.2 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before... | Affected: NETGEAR / Routers | CVSS: 8.8 (HIGH) | EPSS: 0.99781 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in... | Affected: Mozilla / Firefox, Firefox ESR, Firefox for Android, Thunderbird, Focus | CVSS: 9.6 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Services 2.5.1, 2.6.1, and 3.0,... | Affected: Adobe / BlazeDS | CVSS: 6.5 (MEDIUM) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS 15.0 through 15.4 for Cisco Catalyst 6800 Series Switches could allow... | Affected: Cisco / Cisco IOS | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The DHCP relay subsystem of Cisco IOS 12.2 through 15.6 and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated,... | Affected: Cisco / Cisco IOS and IOS XE | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communication method for IOCTLs and... | Affected: Sun / xVM VirtualBox | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows... | Affected: Microsoft / Windows | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac... | Affected: Microsoft / Office | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140;... | Affected: Adobe / Flash Player, AIR, Reader, Acrobat | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS 15.0 through 15.6 and Cisco IOS XE 3.5 through 16.5 could allow... | Affected: Cisco / Cisco IOS and IOS XE | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol (PN-DCP) for Cisco IOS 12.2 through 15.6 could allow an... | Affected: Cisco / Cisco IOS | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an... | Affected: Cisco / Cisco IOS | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remote attackers to execute... | Affected: Microsoft / Forefront Threat Management Gateway 2010 | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute... | Affected: Adobe / Reader and Acrobat | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an... | Affected: Microsoft / Internet Explorer 8 | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Cisco Small Business RV Series Routers Vulnerabilities | Affected: Cisco / Cisco Small Business RV Series Router Firmware | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allows attackers to... | Affected: Adobe / Reader and Acrobat | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and... | Affected: Microsoft / Windows | CVSS: 7.8 (HIGH) | EPSS: 0.81628 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote... | Affected: Oracle / Java SE | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS NET CP 1543-1 (All versions < V2.0.28). Under... | Affected: Siemens / SIMATIC CP 1543-1, SIPLUS NET CP 1543-1 | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect... | Affected: Oracle / Java SE | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and possibly execute arbitrary... | Affected: Adobe / ColdFusion | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,... | Affected: Microsoft / Windows | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2... | Affected: Microsoft / Office | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote... | Affected: Adobe / Flash Player | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow... | Affected: Microsoft / Excel | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server... | Affected: Microsoft Corporation / Windows GDI | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by... | Affected: Microsoft / Windows NT, Windows 2000 | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate... | Affected: Microsoft / Windows | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel... | Affected: Microsoft / Office Excel | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a denial of service... | Affected: Adobe / Reader and Acrobat | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote... | Affected: Cisco / Cisco IOS and IOS XE | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an... | Affected: Cisco, IntelliShield / IOS, Universal Product | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012... | Affected: Microsoft / Windows | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, and PowerPoint 2013 RT SP1... | Affected: Microsoft / Office | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application,... | Affected: Microsoft / Windows | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely... | Affected: IntelliShield / Universal Product | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial... | Affected: Adobe / Reader and Acrobat | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and... | Affected: Cisco / Cisco IOS, IOS XE, and IOS XR | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco Catalyst... | Affected: Cisco / Cisco IOS | CVSS: 6.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software could allow an... | Affected: Cisco / Cisco IOS | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1,... | Affected: Microsoft Corporation / Malware Protection Engine | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an... | Affected: Cisco / IOS, Cisco IOS XE Software | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely... | Affected: Cisco / IOS | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent... | Affected: Cisco / Cisco IOS and IOS XE | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in the UDP processing code of Cisco IOS 15.1, 15.2, and 15.4 and IOS XE 3.14 through 3.18 could allow an unauthenticated, remote... | Affected: Cisco / Cisco IOS and Cisco IOS XE | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in the Border Gateway Protocol (BGP) over an Ethernet Virtual Private Network (EVPN) for Cisco IOS XE Software could allow an... | Affected: Cisco / Cisco IOS XE | CVSS: 5.9 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to... | Affected: Oracle / Java SE | CVSS: 5.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Use-after-free vulnerability in the CDisplayPointer class in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to... | Affected: Microsoft / Internet Explorer | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Cisco Small Business RV Series Routers Vulnerabilities | Affected: Cisco / Cisco Small Business RV Series Router Firmware | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and... | Affected: Adobe / Flash Player | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in... | Affected: Adobe / Flash Player | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute... | Affected: Oracle / Java SE | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows... | Affected: Microsoft / Windows | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a PDF file that... | Affected: Adobe / Acrobat and Reader | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and... | Affected: Oracle / Java SE | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary... | Affected: Adobe / Flash Player | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle... | Affected: Microsoft Corporation / Microsoft Office | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5... | Affected: Oracle / Java SE | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an... | Affected: Cisco / Cisco IOS | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS 12.4 through 15.6 could allow an... | Affected: Cisco / Cisco IOS | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling... | Affected: Linux / Linux Kernel | CVSS: 7.0 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word... | Affected: Microsoft Corporation / Microsoft Office | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges... | Affected: Microsoft / Windows | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Office 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office... | Affected: Microsoft / Office | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote... | Affected: Adobe / Flash Player | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Cisco Small Business RV Series Routers Vulnerabilities | Affected: Cisco / Cisco Small Business RV Series Router Firmware | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Installer Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 5.5 (MEDIUM) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an untrusted value to be used in... | Affected: Adobe / Adobe Flash Player version 27.0.0.159 and earlier | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted EPS image, aka... | Affected: Microsoft / Office | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers... | Affected: Adobe / Flash Player | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a... | Affected: Adobe / Reader and Acrobat | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read. | Affected: Treck / TCP/IP stack | CVSS: 5.4 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Exim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than CVE-2019-15846. There is a heap-based buffer overflow in... | Affected: Exim / Exim | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability | Affected: Cisco / Cisco Small Business RV Series Router Firmware | CVSS: 7.2 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability."... | Affected: Microsoft / Microsoft Exchange Server | CVSS: 7.4 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine... | Affected: Microsoft / ChakraCore | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections... | Affected: Apache / Apache Tomcat | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka... | Affected: Microsoft / Microsoft Excel, Microsoft Office, Office 365 ProPlus | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to... | Affected: Cisco / Cisco IOS | CVSS: 5.9 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR... | Affected: Cisco / Cisco IOS, IOS XE, and IOS XR | CVSS: 8.0 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated,... | Affected: Cisco / Cisco IOS and IOS XE | CVSS: 8.6 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 information in DHCP Version 4... | Affected: Cisco / Cisco IOS and IOS XE | CVSS: 8.6 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to... | Affected: Cisco / Cisco IOS and IOS XE | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Switches and Cisco Catalyst... | Affected: Cisco / Cisco IOS and IOS XE | CVSS: 8.6 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS 15.0... | Affected: Cisco / Cisco IOS | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility... | Affected: Microsoft / Word | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly... | Affected: Mozilla / Firefox, Firefox ESR, Thunderbird, Thunderbird ESR | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Linux allows remote attackers... | Affected: Adobe / Flash Player | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software... | Affected: Cisco / Cisco IOS and IOS XE | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and Cisco IOS XE Software could allow an... | Affected: Cisco / Cisco IOS and IOS XE | CVSS: 8.6 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and... | Affected: Microsoft / Windows | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption... | Affected: Microsoft Corporation / Internet Explorer | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An issue was discovered in the Calendar feature in Zimbra Collaboration Suite 8.8.x before 8.8.15 patch 30 (update 1), as exploited in the wild... | Affected: Zimbra / Collaboration Suite | CVSS: 6.1 (MEDIUM) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote Code... | Affected: Microsoft Corporation / Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, and Microsoft Office 2016. | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML | Affected: Zabbix / Frontend | CVSS: 9.1 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Possible view of the setup pages by unauthenticated users if config file already exists | Affected: Zabbix / Frontend | CVSS: 3.7 (LOW) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word... | Affected: Microsoft / Word | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False