KEVIntel entry: Microsoft Management Console Security Feature Bypass Vulnerability | Affected: Microsoft / Windows 10 Version 1507, Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | CVSS: 7.0 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation) | CVSS: 7.0 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote... | Affected: Ivanti / Endpoint Manager | CVSS: 9.8 (CRITICAL) | EPSS: 0.99762 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Advantive VeraCore before 2024.4.2.1 allows remote authenticated users to upload files to unintended folders (e.g., ones that are accessible during... | Affected: Advantive / VeraCore | CVSS: 9.9 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A SQL injection vulnerability in timeoutWarning.asp in Advantive VeraCore through 2025.1.0 allows remote attackers to execute arbitrary SQL... | Affected: Advantive / VeraCore | CVSS: 5.8 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote... | Affected: Ivanti / Endpoint Manager | CVSS: 9.8 (CRITICAL) | EPSS: 0.89738 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote... | Affected: Ivanti / Endpoint Manager | CVSS: 9.8 (CRITICAL) | EPSS: 0.88518 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: HID: core: zero-initialize the report buffer | Affected: Linux / Linux | CVSS: 5.5 (MEDIUM) | EPSS: 0.00809 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious... | Affected: VMware / ESXi, Workstation, VMware Cloud Foundation, Telco Cloud Platform, Telco Cloud Infrastructure | CVSS: 9.3 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious... | Affected: VMware / ESXi, VMware Workstation, VMware Fusion, VMware Cloud Foundation, VMware Telco Cloud Platform, VMware Telco Cloud Infrastructure | CVSS: 7.1 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary... | Affected: VMware / VMware ESXi, VMware Cloud Foundation, VMware Telco Cloud Platform, VMware Telco Cloud Infrastructure | CVSS: 8.2 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Hitachi Vantara Pentaho Business Analytics Server - Use of Non-Canonical URL Paths for Authorization Decisions | Affected: Hitachi Vantara / Pentaho Business Analytics Server | CVSS: 8.6 (HIGH) | EPSS: 0.92266 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Hitachi Vantara Pentaho Business Analytics Server - Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) | Affected: Hitachi Vantara / Pentaho Business Analytics Server | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k... | Affected: Microsoft / Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in the web-based management interface of Cisco Small Business Routers RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could... | Affected: Cisco / Cisco Small Business RV Series Router Firmware | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: WhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution Vulnerability | Affected: Progress Software Corporation / WhatsUp Gold | CVSS: 9.8 (CRITICAL) | EPSS: 0.99288 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Cross Site Scripting vulnerability in Zimbra ZCS v.8.8.15 allows a remote authenticated attacker to execute arbitrary code via a crafted script to... | Affected: Zimbra / Zimbra Collaboration Suite | CVSS: 9.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Partner.Microsoft.Com Elevation of Privilege Vulnerability | Affected: Microsoft / Microsoft Partner Center | CVSS: 8.7 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export).   The supported version that is affected is 9.3.6. Easily... | Affected: Oracle Corporation / Agile PLM Framework | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier have a Java deserialization... | Affected: Adobe / Adobe ColdFusion ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Power Pages Elevation of Privilege Vulnerability | Affected: Microsoft / Microsoft Power Pages | CVSS: 8.2 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Potential RCE with a compromised security key in craft/cms | Affected: craftcms / cms | CVSS: 8.1 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: PAN-OS: Authenticated File Read Vulnerability in the Management Web Interface | Affected: Palo Alto Networks / Cloud NGFW, PAN-OS, Prisma Access | CVSS: 7.1 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: PAN-OS: Authentication Bypass in the Management Web Interface | Affected: Palo Alto Networks / Cloud NGFW, PAN-OS, Prisma Access | CVSS: 8.8 (HIGH) | EPSS: 0.98338 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication. | Affected: SonicWall / SonicOS | CVSS: 9.8 (CRITICAL) | EPSS: 0.95132 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote... | Affected: SimpleHelp / SimpleHelp | CVSS: 7.5 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, through R6.4.0.HF1... | Affected: Mitel / 6800 Series, 6900 Series, 6900w Series SIP Phones, including the 6970 Conference Unit | CVSS: 7.2 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS... | Affected: Apple / iOS and iPadOS, iPadOS | CVSS: 6.1 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1507, Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: **UNSUPPORTED WHEN ASSIGNED**
A post-authentication command injection vulnerability in the CGI program of the legacy DSL CPE Zyxel VMG4325-B10A... | Affected: Zyxel / VMG4325-B10A firmware | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: **UNSUPPORTED WHEN ASSIGNED**
A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel... | Affected: Zyxel / VMG4325-B10A firmware | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Storage Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1507, Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | CVSS: 7.1 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Trimble Cityworks versions prior to 15.8.9 and Cityworks with office companion versions prior to 23.10 are vulnerable to a deserialization... | Affected: Trimble / Cityworks, Cityworks (with office companion) | CVSS: 8.6 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Outlook Remote Code Execution Vulnerability | Affected: Microsoft / Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2021, Microsoft Office 2016 | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks feature for clientless... | Affected: Sophos / XG Firewall | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what... | Affected: Apple / Audinate Dante Application Library for Windows | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: 7-Zip Mark-of-the-Web Bypass Vulnerability | Affected: 7-Zip / 7-Zip | CVSS: 7.0 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An SQL injection vulnerability in the WebAdmin of Cyberoam OS through 2020-12-04 allows unauthenticated attackers to execute arbitrary SQL... | Affected: Sophos / Cyberoam OS | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format | Affected: Linux / Linux | CVSS: 7.8 (HIGH) | EPSS: 0.03301 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users with read-write privileges (including... | Affected: Paessler / PRTG Network Monitor | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Apache OFBiz: Confused controller-view authorization logic (forced browsing) | Affected: Apache Software Foundation / Apache OFBiz | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administrator web console with... | Affected: Paessler AG / PRTG Network Monitor | CVSS: 7.2 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: .NET Framework Information Disclosure Vulnerability | Affected: Microsoft / Microsoft .NET Framework 4.8, Microsoft .NET Framework 3.5 AND 4.8, Microsoft .NET Framework 3.5 AND 4.7.2, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 3.5 AND 4.8.1, Microsoft .NET Framework 4.6.2, Microsoft .NET Framework 3.5 AND 4.6/4.6.2, Microsoft .NET Framework 2.0 Service Pack 2, Microsoft .NET Framework 3.0 Service Pack 2, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1 | CVSS: 7.5 (HIGH) | EPSS: 0.98832 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia... | Affected: Apple / iOS and iPadOS, iPadOS, macOS, tvOS, visionOS, watchOS | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and... | Affected: SonicWall / SMA1000 | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Potential XSS vulnerability in jQuery | Affected: jquery / jQuery | CVSS: 6.9 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False

Potential XSS vulnerability in jQuery


KEVIntel entry: An issue was discovered in Aviatrix Controller before 7.1.4191 and 7.2.x before 7.2.4996. Due to the improper neutralization of special elements... | Affected: Aviatrix / Controller | CVSS: 10.0 (CRITICAL) | EPSS: 0.98545 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | CVSS: 7.8 (HIGH) | EPSS: 0.0153 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | CVSS: 7.8 (HIGH) | EPSS: 0.09798 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 through 7.0.16 and... | Affected: Fortinet / FortiOS, FortiProxy | CVSS: 9.6 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | CVSS: 7.8 (HIGH) | EPSS: 0.01363 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA) | Affected: BeyondTrust / Remote Support(RS) & Privileged Remote Access(PRA) | CVSS: 6.6 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Qlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated remote code execution, aka QB-21683. Due to improper validation... | Affected: Qlik / Sense Enterprise for Windows | CVSS: 9.6 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons... | Affected: Ivanti / Connect Secure, Policy Secure, Neurons for ZTA gateways | CVSS: 9.0 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated... | Affected: Mitel / MiCollab | CVSS: 9.1 (CRITICAL) | EPSS: 0.98067 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Mitel MiCollab through 9.8 SP2 could allow an authenticated attacker with administrative privilege to conduct a local file read, due to... | Affected: Mitel / MiCollab | CVSS: 2.7 (LOW) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are... | Affected: Oracle Corporation / WebLogic Server | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet | Affected: Palo Alto Networks / Cloud NGFW, PAN-OS | CVSS: 8.7 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Acclaim USAHERDS through 7.4.0.1 uses hard-coded credentials. | Affected: Acclaim Systems / USAHERDS | CVSS: 8.1 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Command Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA) | Affected: BeyondTrust / Remote Support, Privileged Remote Access | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: upgrade_handle.php on NUUO NVRmini devices allows Remote Command Execution via shell metacharacters in the uploaddir parameter for a writeuploaddir... | Affected: NUUO / NVRmini | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: NUUO NVRmini2 through 3.11 allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users... | Affected: NUUO / NVRmini2 | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: On Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W devices through 1.0.227, an authenticated admin can use the "TestEmail" functionality... | Affected: Reolink / RLC-410W, C1 Pro, C2 Pro, RLC-422W, RLC-511W | CVSS: 7.2 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_20121102. At [1] or [2],... | Affected: reolink / RLC-410W | CVSS: 9.1 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: In Cleo Harmony before 5.8.0.24, VLTrader before 5.8.0.24, and LexiCom before 5.8.0.24, an unauthenticated user can import and execute arbitrary... | Affected: Cleo / ["Harmony", "VLTrader", "LexiCom"] | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: ColdFusion | Improper Access Control (CWE-284) | Affected: Adobe / ColdFusion | CVSS: 7.4 (HIGH) | EPSS: 0.98514 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: In Cleo Harmony before 5.8.0.21, VLTrader before 5.8.0.21, and LexiCom before 5.8.0.21, there is an unrestricted file upload and download that... | Affected: Cleo / ["Harmony", "VLTrader", "LexiCom"] | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Windows Common Log File System Driver Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1507, Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | CVSS: 7.8 (HIGH) | EPSS: 0.25414 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: getresetstatus in dns/views.py and ftp/views.py in CyberPanel (aka Cyber Panel) before 1c0c6cb allows remote attackers to bypass authentication and... | Affected: CyberPanel / CyberPanel | CVSS: 10.0 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: ProjectSend Unauthenticated Configuration Modification | Affected: ProjectSend / ProjectSend | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Proself Enterprise/Standard Edition Ver5.62 and earlier, Proself Gateway Edition Ver1.65 and earlier, and Proself Mail Sanitize Edition Ver1.08 and... | Affected: North Grid Corporation / Proself Enterprise/Standard Edition, Proself Gateway Edition, Proself Mail Sanitize Edition | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through V5.38, USG FLEX series... | Affected: Zyxel / ATP series firmware, USG FLEX series firmware, USG FLEX 50(W) series firmware, USG20(W)-VPN series firmware | CVSS: 7.5 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Array Networks Array AG Series and vxAG (9.4.0.481 and earlier) allow remote code execution. An attacker can browse the filesystem on the SSL VPN... | Affected: Array Networks / Array AG Series and vxAG | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS... | Affected: Apple / Safari, iOS and iPadOS, macOS, visionOS | CVSS: 6.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1,... | Affected: Apple / Safari, iOS and iPadOS, macOS, visionOS | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: Software Development Kit, Process Extension).   The... | Affected: Oracle Corporation / Oracle Agile PLM Framework | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Heap-overflow vulnerability | Affected: VMware / VMware vCenter Server, VMware Cloud Foundation | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False

Heap-overflow vulnerability


KEVIntel entry: Privilege escalation vulnerability | Affected: VMware / VMware vCenter Server, VMware Cloud Foundation | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False

Privilege escalation vulnerability


KEVIntel entry: PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015) | Affected: Palo Alto Networks / Cloud NGFW, PAN-OS, Prisma Access | CVSS: 9.3 (CRITICAL) | EPSS: 0.99698 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface | Affected: Palo Alto Networks / Cloud NGFW, PAN-OS, Prisma Access | CVSS: 6.9 (MEDIUM) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: LoadMaster Pre-Authenticated OS Command Injection | Affected: Progress Software / LoadMaster | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential Disclosure | Affected: Palo Alto Networks / Expedition | CVSS: 9.9 (CRITICAL) | EPSS: 0.98393 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Expedition: SQL Injection Leads to Firewall Admin Credential Disclosure | Affected: Palo Alto Networks / Expedition | CVSS: 9.2 (CRITICAL) | EPSS: 0.99588 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: NTLM Hash Disclosure Spoofing Vulnerability | Affected: Microsoft / Windows Server 2025, Windows Server 2025 (Server Core installation), Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Task Scheduler Elevation of Privilege Vulnerability | Affected: Microsoft / Windows Server 2025, Windows Server 2025 (Server Core installation), Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation) | CVSS: 8.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Cross-site scripting (XSS) vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to... | Affected: Cisco / Adaptive Security Appliance (ASA) Software | CVSS: 6.1 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to read particular files via a path traversal vulnerability in... | Affected: Atlassian / Jira Server, Jira Data Center | CVSS: 5.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: GeoJSON URL validation can expose server files and environment variables to unauthorized users | Affected: metabase / metabase | CVSS: 10.0 (CRITICAL) | EPSS: 0.96887 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via a crafted... | Affected: nostromo / nhttpd | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to prevent access to sensitive... | Affected: Google / Android | CVSS: 7.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Expedition: Missing Authentication Leads to Admin Account Takeover | Affected: Palo Alto Networks / Expedition | CVSS: 9.3 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: upgrademysqlstatus in databases/views.py in CyberPanel (aka Cyber Panel) before 5b08cd6 allows remote attackers to bypass authentication and... | Affected: CyberPanel / CyberPanel | CVSS: 10.0 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: PTZOptics NDI and SDI Cameras Command Injection via NTP Address Configuration | Affected: PTZOptics / PT30X-SDI, PT30X-NDI | CVSS: 7.2 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: PTZOptics NDI and SDI Cameras /cgi-bin/param.cgi Insufficient Authentication | Affected: PTZOptics / PT30X-SDI, PT30X-NDI | CVSS: 9.1 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via SVG animate attributes. | Affected: Roundcube / Roundcube Webmail | CVSS: 6.1 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in the Remote Access VPN (RAVPN) service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense... | Affected: Cisco / Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense Software | CVSS: 5.8 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7,... | Affected: Fortinet / FortiManager | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft SharePoint Remote Code Execution Vulnerability | Affected: Microsoft / Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition | CVSS: 7.2 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: ScienceLogic SL1 unspecified vulnerability | Affected: ScienceLogic / SL1 | CVSS: 9.3 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution (RCE). | Affected: Veeam / Backup and  Recovery | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: SolarWinds Web Help Desk Hardcoded Credential Vulnerability | Affected: SolarWinds / Web Help Desk | CVSS: 9.1 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of... | Affected: Mozilla / Firefox, Firefox ESR, Thunderbird | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Windows Kernel Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation) | CVSS: 7.0 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13,... | Affected: Fortinet / FortiSwitchManager, FortiOS, FortiPAM, FortiProxy | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run... | Affected: Ivanti / CSA (Cloud Services Appliance) | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin... | Affected: Ivanti / CSA (Cloud Services Appliance) | CVSS: 7.2 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows MSHTML Platform Spoofing Vulnerability | Affected: Microsoft / Windows 10 Version 1507, Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 21H2, Windows 11 version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation) | CVSS: 6.5 (MEDIUM) | EPSS: 0.44382 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Management Console Remote Code Execution Vulnerability | Affected: Microsoft / Windows 10 Version 1507, Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 21H2, Windows 11 version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation) | CVSS: 7.8 (HIGH) | EPSS: 0.60954 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Use After Free in DSP Service | Affected: Qualcomm, Inc. / Snapdragon | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False

Use After Free in DSP Service


KEVIntel entry: The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9, and 10.1 before 10.1.1... | Affected: Zimbra / Zimbra Collaboration | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same... | Affected: Ivanti / EPM | CVSS: 8.8 (HIGH) | EPSS: 0.99951 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: On DrayTek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1, cgi-bin/mainfunction.cgi/cvmcfgupload allows remote command execution via... | Affected: DrayTek / Vigor3900, Vigor2960, Vigor300B | CVSS: 9.8 (CRITICAL) | EPSS: 0.84599 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload with the... | Affected: D-Link / DIR820LA1_FW105B03 | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Due to unsafe deserialization used in SAP Commerce Cloud (virtualjdbc extension), versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, 1905, it is possible to... | Affected: SAP SE / SAP Commerce Cloud (virtualjdbc extension) | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker... | Affected: Ivanti / vTM | CVSS: 9.8 (CRITICAL) | EPSS: 0.99987 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted functionality. | Affected: Ivanti / CSA (Cloud Services Appliance) | CVSS: 9.4 (CRITICAL) | EPSS: 0.98411 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: ADF Faces).  Supported versions... | Affected: Oracle Corporation / Application Development Framework (ADF) | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are... | Affected: Oracle Corporation / WebLogic Server | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft... | Affected: Microsoft / Microsoft SQL Server, Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (GDR), Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU), Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR), Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (GDR), Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (CU) | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Apache HugeGraph-Server: Command execution in gremlin | Affected: Apache Software Foundation / Apache HugeGraph-Server | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before... | Affected: Adobe / Flash Player | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x... | Affected: Adobe / Flash Player | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before... | Affected: Adobe / Flash Player | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Unspecified vulnerability in the ExternalInterface ActionScript functionality in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171... | Affected: Adobe / Flash Player | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows MSHTML Platform Spoofing Vulnerability | Affected: Microsoft / Windows 11 Version 24H2, Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability | Affected: Progress Software Corporation / WhatsUp Gold | CVSS: 9.8 (CRITICAL) | EPSS: 0.94661 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: An OS command injection vulnerability in Ivanti Cloud Services Appliance versions 4.6 Patch 518 and before allows a remote authenticated attacker... | Affected: Ivanti / CSA (Cloud Services Appliance) | CVSS: 7.2 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Installer Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Mark of the Web Security Feature Bypass Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 5.4 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Publisher Security Feature Bypass Vulnerability | Affected: Microsoft / Microsoft Office 2019, Microsoft Office LTSC 2021, Microsoft Publisher 2016 | CVSS: 7.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized... | Affected: SonicWall / SonicOS | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Linux distributions that have not patched their long-term kernels with https://git.kernel.org/linus/a87938b2e246b81b4fb713edb371a9fa3c5c3c86... | Affected: Linux / Kernel | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before... | Affected: ImageMagick / ImageMagick | CVSS: 8.4 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: HAProxy 2.9.x before 2.9.10, 3.0.x before 3.0.4, and 3.1.x through 3.1-dev6 allows a remote denial of service for HTTP/2 zero-copy forwarding... | Affected: HAProxy / HAProxy | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the WebServlet endpoint. An... | Affected: Draytek / Draytek VigorConnect | CVSS: 7.5 (HIGH) | EPSS: 0.69248 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Arbitrary Code Execution in WPS Office | Affected: Kingsoft / WPS Office | CVSS: 9.3 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False

Arbitrary Code Execution in WPS Office


KEVIntel entry: A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the DownloadFileServlet... | Affected: Draytek / Draytek VigorConnect | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a... | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Apache OFBiz: Unauthenticated endpoint could allow execution of screen rendering code | Affected: Apache Software Foundation / Apache OFBiz | CVSS: 8.1 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page.... | Affected: Google / Chrome | CVSS: 9.6 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The Versa Director GUI provides an option to customize the look and feel of the user interface. This option is only available for a user logged... | Affected: Versa / Director | CVSS: 6.6 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: WordPress LiteSpeed Cache plugin <= 6.3.0.1 - Unauthenticated Privilege Escalation vulnerability | Affected: LiteSpeed Technologies / LiteSpeed Cache | CVSS: 9.8 (CRITICAL) | EPSS: 0.55269 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity... | Affected: Dahua / Some Dahua IP Camera, Video Intercom, NVR, XVR devices | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel... | Affected: Linux / kernel | CVSS: 8.4 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity... | Affected: Dahua / Some Dahua IP Camera, Video Intercom, PTZ Dome Camera, Thermal Camera devices | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Exchange Server Remote Code Execution Vulnerability | Affected: Microsoft / Microsoft Exchange Server 2019 Cumulative Update 9, Microsoft Exchange Server 2016 Cumulative Update 20, Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Exchange Server 2016 Cumulative Update 21, Microsoft Exchange Server 2019 Cumulative Update 10 | CVSS: 7.2 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by... | Affected: Jenkins Project / Jenkins | CVSS: 9.8 (CRITICAL) | EPSS: 0.99999 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability | Affected: SolarWinds / Web Help Desk | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Mark of the Web Security Feature Bypass Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Kernel Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 11 Version 24H2 | CVSS: 7.0 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Power Dependency Coordinator Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows 11 Version 24H2 | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 11 Version 24H2, Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Project Remote Code Execution Vulnerability | Affected: Microsoft / Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Project 2016, Microsoft Office LTSC 2021 | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Scripting Engine Memory Corruption Vulnerability | Affected: Microsoft / Windows 11 Version 24H2, Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Apache OFBiz: Path traversal leading to RCE | Affected: Apache Software Foundation / Apache OFBiz | CVSS: 9.1 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: net: fix __dst_negative_advice() race | Affected: Linux / Linux | CVSS: 7.8 (HIGH) | EPSS: 0.02701 | Used in malware: unknown | Not yet in CISA KEV: False

net: fix __dst_negative_advice() race


KEVIntel entry: A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Microsoft COM... | Affected: Microsoft / Windows | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: 简数采集器 (Keydatas) <= 2.5.2 - Unauthenticated Arbitrary File Upload | Affected: zhengdon / 简数采集器 | CVSS: 9.8 (CRITICAL) | EPSS: 0.35708 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full... | Affected: VMware / VMware ESXi, VMware Cloud Foundation | CVSS: 6.8 (MEDIUM) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Jelly Template Injection Vulnerability in ServiceNow UI Macros | Affected: ServiceNow / Now Platform | CVSS: 9.3 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Incomplete Input Validation in GlideExpression Script | Affected: ServiceNow / Now Platform | CVSS: 9.2 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Remote command execution due to use of default passwords. The following products are affected: Acronis Cyber Infrastructure (ACI) before build... | Affected: Acronis / Acronis Cyber Infrastructure | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: In the Twilio Authy API, accessed by Authy Android before 25.1.0 and Authy iOS before 26.1.0, an unauthenticated endpoint provided access to... | Affected: Twilio / Authy | CVSS: 5.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site... | Affected: Microsoft / Internet Explorer | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative... | Affected: VMware / VMware vCenter Server and VMware Cloud Foundation | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: SolarWinds Serv-U L Directory Transversal Vulnerability | Affected: SolarWinds / SolarWinds Serv-U | CVSS: 8.6 (HIGH) | EPSS: 0.99614 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: XXE can expose crypt key and other secrets granting full admin access | Affected: Adobe / Adobe Commerce | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver | Affected: geoserver / geoserver | CVSS: 9.8 (CRITICAL) | EPSS: 0.99813 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Rejetto HTTP File Server 2.3m Unauthenticated RCE | Affected: Rejetto / HTTP File Server | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows MSHTML Platform Spoofing Vulnerability | Affected: Microsoft / Windows 10 Version 22H2, Windows 11 Version 23H2, Windows 10 Version 1507, Windows 11 version 22H2, Windows 10 Version 1607, Windows Server 2016, Windows 10 Version 21H2, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows 10 Version 1809, Windows Server 2012 R2, Windows 11 version 22H3, Windows Server 2012 R2 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2019 (Server Core installation), Windows 11 version 21H2, Windows Server 2019 | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Hyper-V Elevation of Privilege Vulnerability | Affected: Microsoft / Windows Server 2022, Windows 11 version 21H2, Windows 11 version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Cisco NX-OS Software CLI Command Injection Vulnerability | Affected: Cisco / Cisco NX-OS Software | CVSS: 6.0 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table... | Affected: The Linux Kernel Organization / linux | CVSS: 5.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Improper Control of Generation of Code in jai-ext | Affected: geosolutions-it / jai-ext | CVSS: 10.0 (CRITICAL) | EPSS: 0.98684 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS via a malicious XML attachment because text/xml is... | Affected: Roundcube / Webmail | CVSS: 6.1 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Error Reporting Service Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: there is a possible way to bypass  due to a logic error in the code. This could lead to local escalation of privilege with no additional execution... | Affected: Google / Android | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Registration Authentication Bypass Vulnerability | Affected: Progress Software Corporation / Telerik Report Server | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Argument Injection in PHP-CGI | Affected: PHP Group / PHP | CVSS: 9.8 (CRITICAL) | EPSS: 0.99987 | Used in malware: yes | Not yet in CISA KEV: False

Argument Injection in PHP-CGI


KEVIntel entry: Mali GPU Kernel Driver allows improper GPU memory processing operations | Affected: Arm Ltd / Bifrost GPU Kernel Driver, Valhall GPU Kernel Driver | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are... | Affected: Oracle Corporation / WebLogic Server | CVSS: 7.4 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Information disclosure | Affected: checkpoint / Check Point Quantum Gateway, Spark Gateway and CloudGuard Network | CVSS: 8.6 (HIGH) | EPSS: 0.99978 | Used in malware: yes | Not yet in CISA KEV: False

Information disclosure


KEVIntel entry: Use-after-free in Linux kernel's netfilter: nf_tables component | Affected: Linux / Kernel | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Malicious Code in Justice AV Solutions (JAVS) Viewer | Affected: Justice AV Solutions / Viewer | CVSS: 8.7 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Type Confusion in V8 in Google Chrome prior to 125.0.6422.112 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted... | Affected: Google / Chrome | CVSS: 9.6 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Apache Flink directory traversal attack: reading remote files through the REST API | Affected: Apache Software Foundation / Apache Flink | CVSS: 7.5 (HIGH) | EPSS: 0.97856 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted... | Affected: Google / Chrome | CVSS: 9.6 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that this vulnerability is... | Affected: NextGen Healthcare / Mirth Connect | CVSS: 9.8 (CRITICAL) | EPSS: 0.82708 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: An informtion disclosure issue exists in D-LINK-DIR-605 B2 Firmware Version : 2.01MT. An attacker can obtain a user name and password by forging a... | Affected: D-Link / DIR-605 B2 Firmware | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out of bounds memory write via a crafted... | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR-600 router (rev. Bx) with firmware before 2.17b02 allow remote attackers... | Affected: D-Link / DIR-600 router | CVSS: 8.0 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows DWM Core Library Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Windows MSHTML Platform Security Feature Bypass Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation) | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to... | Affected: Google / Chrome | CVSS: 9.6 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Weak Password Recovery Mechanism for Forgotten Password in GitLab | Affected: GitLab / GitLab | CVSS: 10.0 (CRITICAL) | EPSS: 0.94955 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: SmartScreen Prompt Security Feature Bypass Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation) | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD)... | Affected: Cisco / Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense Software | CVSS: 8.6 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins and that has been available in Cisco Adaptive... | Affected: Cisco / Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense Software | CVSS: 6.0 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Unauthenticated arbitrary file read and remote code execution in CrushFTP | Affected: CrushFTP / CrushFTP | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Print Spooler Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 8.1, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect | Affected: Palo Alto Networks / PAN-OS, Cloud NGFW, Prisma Access | CVSS: 10.0 (CRITICAL) | EPSS: 0.99999 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection | Affected: D-Link / DNS-320L, DNS-325, DNS-327L, DNS-340L | CVSS: 7.3 (HIGH) | EPSS: 0.99997 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials | Affected: D-Link / DNS-320L, DNS-325, DNS-327L, DNS-340L | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution... | Affected: Google / Android | CVSS: 5.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: there is a possible way to bypass  due to a logic error in the code. This could lead to local escalation of privilege with no additional execution... | Affected: Google / Android | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft SharePoint Server Remote Code Execution Vulnerability | Affected: Microsoft / Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition | CVSS: 7.2 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Linear eMerge E3-Series devices allow Command Injections. | Affected: Linear / eMerge E3-Series | CVSS: 9.8 (CRITICAL) | EPSS: 0.97136 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.2,... | Affected: Fortinet / FortiClientEMS | CVSS: 9.3 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execute arbitrary code with... | Affected: Ivanti / Ivanti EPM | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible | Affected: JetBrains / TeamCity | CVSS: 9.8 (CRITICAL) | EPSS: 0.99938 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4,... | Affected: Apple / iOS and iPadOS, macOS, tvOS, visionOS, watchOS | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.4 and iPadOS 17.4,... | Affected: Apple / iOS and iPadOS, macOS, tvOS, visionOS, watchOS | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: In applyRemoteView of NotificationContentInflater.java, there is a possible way to hide foreground service notification due to misleading or... | Affected: Google / Android | CVSS: 5.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Sunhillo SureLine before 8.7.0.1.1 allows Unauthenticated OS Command Injection via shell metacharacters in ipAddr or dnsAddr /cgi/networkDiag.cgi. | Affected: Sunhillo / SureLine | CVSS: 9.8 (CRITICAL) | EPSS: 0.97599 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Kernel Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Streaming Service Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation) | CVSS: 8.4 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Authentication bypass using an alternate path or channel | Affected: ConnectWise / ScreenConnect | CVSS: 10.0 (CRITICAL) | EPSS: 0.99959 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Exchange Server Elevation of Privilege Vulnerability | Affected: Microsoft / Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 13, Microsoft Exchange Server 2019 Cumulative Update 14 | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Information Disclosure Vulnerability | Affected: Cisco / Cisco Adaptive Security Appliance (ASA) Software | CVSS: 7.5 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Windows SmartScreen Security Feature Bypass Vulnerability | Affected: Microsoft / Windows 11 Version 23H2, Windows 11 version 22H3, Windows 10 Version 1809, Windows Server 2019, Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016 | CVSS: 7.6 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Internet Shortcut Files Security Feature Bypass Vulnerability | Affected: Microsoft / Windows 11 version 21H2, Windows 10 Version 1809, Windows 10 Version 21H2, Windows Server 2022, Windows 11 version 22H2, Windows 10 Version 22H2, Windows Server 2019, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2019 (Server Core installation) | CVSS: 8.1 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with crafted links because of... | Affected: Roundcube / Roundcube Webmail | CVSS: 6.1 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A out-of-bounds write in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0... | Affected: Fortinet / FortiProxy, FortiOS | CVSS: 9.6 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: The Binance Trust Wallet app for iOS in commit 3cd6e8f647fbba8b5d8844fcd144365a086b629f, git tag 0.0.4 misuses the trezor-crypto library and... | Affected: Binance / Trust Wallet | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page.... | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2. An... | Affected: Apple / tvOS, macOS, iOS and iPadOS, watchOS | CVSS: 7.0 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) and... | Affected: Ivanti / ICS, IPS | CVSS: 8.2 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an... | Affected: Atlassian / Confluence Data Center, Confluence Server | CVSS: 9.8 (CRITICAL) | EPSS: 0.99984 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A type confusion issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 15.8.7 and iPadOS 15.8.7, iOS 16.7.5 and iPadOS... | Affected: Apple / Safari, iOS and iPadOS, macOS, tvOS, visionOS | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: VMware vCenter Server Out-of-Bounds Write Vulnerability | Affected: VMware / VMware vCenter Server, VMware Cloud Foundation (VMware vCenter Server) | CVSS: 9.8 (CRITICAL) | EPSS: 0.99212 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted functionality or resources of... | Affected: Ivanti / EPMM | CVSS: 9.8 (CRITICAL) | EPSS: 0.99999 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial of... | Affected: Cloud Software Group / NetScaler ADC | CVSS: 8.2 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a... | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to... | Affected: Cloud Software Group / NetScaler ADC, NetScaler Gateway | CVSS: 5.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote code execution might occur as a result of an unserialize call on a potentially... | Affected: Laravel / Laravel Framework | CVSS: 8.1 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access... | Affected: Ivanti / ICS, IPS | CVSS: 8.2 (HIGH) | EPSS: 0.99986 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Microsoft SharePoint Server Elevation of Privilege Vulnerability | Affected: Microsoft / Microsoft SharePoint Server 2019 | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x)  allows an... | Affected: Ivanti / ICS, IPS | CVSS: 9.1 (CRITICAL) | EPSS: 0.99999 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution | Affected: Adobe / ColdFusion | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Apache Superset: Session validation vulnerability when using provided default SECRET_KEY | Affected: Apache Software Foundation / Apache Superset | CVSS: 8.9 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Analysis CVE-2023-29300 Bypass: Adobe ColdFusion Pre-Auth RCE | Affected: Adobe / ColdFusion | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: D-Link DSL-2750B devices before 1.05 allow remote unauthenticated command injection via the login.cgi cli parameter, as exploited in the wild in... | Affected: D-Link / DSL-2750B | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The issue was addressed with improved handling of caches. This issue is fixed in tvOS 16.3, iOS 16.3 and iPadOS 16.3, macOS Monterey 12.6.8, macOS... | Affected: Apple / iOS and iPadOS, tvOS, macOS, watchOS | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: [20230201] - Core - Improper access check in webservice endpoints | Affected: Joomla! Project / Joomla! CMS | CVSS: 5.3 (MEDIUM) | EPSS: 0.99827 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Arbitrary Code Execution (ACE) Vulnerability | Affected: Douglas Wilson / Spreadsheet::ParseExcel | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a... | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Legacy VioStor NVR | Affected: QNAP Systems Inc. / VioStor NVR | CVSS: 8.0 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False

Legacy VioStor NVR


KEVIntel entry: An OS command injection vulnerability exists in AE1021PE firmware version 2.0.9 and earlier and AE1021 firmware version 2.0.9 and earlier. If this... | Affected: FXC Inc. / AE1021PE, AE1021 | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Unitronics VisiLogic uses a default administrative password | Affected: Unitronics / VisiLogic | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and... | Affected: Qlik / Qlik Sense Enterprise for Windows | CVSS: 8.2 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7... | Affected: Qlik / Qlik Sense Enterprise for Windows | CVSS: 9.6 (CRITICAL) | EPSS: 0.84967 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Use After Free in DSP Services | Affected: Qualcomm, Inc. / Snapdragon | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False

Use After Free in DSP Services


KEVIntel entry: Integer Overflow or Wraparound in Graphics Linux | Affected: Qualcomm, Inc. / Snapdragon | CVSS: 8.4 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Use of Out-of-range Pointer Offset in Graphics | Affected: Qualcomm, Inc. / Snapdragon | CVSS: 8.4 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto,... | Affected: Qualcomm, Inc. / Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music | CVSS: 8.4 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2,... | Affected: Apple / Safari, macOS, iOS and iPadOS | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2,... | Affected: Apple / Safari, macOS, iOS and iPadOS | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially... | Affected: Google / Chrome | CVSS: 9.6 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relies on a third-party... | Affected: ownCloud / owncloud/graphapi | CVSS: 10.0 (CRITICAL) | EPSS: 0.78428 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Glibc: buffer overflow in ld.so leading to privilege escalation | Affected: , Red Hat / , Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Extended Update Support, Red Hat Virtualization 4 for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7 | CVSS: 7.8 (HIGH) | EPSS: 0.78607 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Supported versions that are... | Affected: Oracle Corporation / WebLogic Server | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution of... | Affected: Sophos / Sophos Web Appliance | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Mark of the Web Security Feature Bypass Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 5.4 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows DWM Core Library Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows 11 version 22H3, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 23H2 | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows SmartScreen Security Feature Bypass Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary files | Affected: Juniper Networks / Junos OS | CVSS: 5.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files | Affected: Juniper Networks / Junos OS | CVSS: 5.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a file to the Tomcat webroot,... | Affected: SysAid Technologies / SysAid On-Premise | CVSS: 9.8 (CRITICAL) | EPSS: 0.98851 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables | Affected: Juniper Networks / Junos OS | CVSS: 5.3 (MEDIUM) | EPSS: 0.89628 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable | Affected: Juniper Networks / Junos OS | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Junos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files | Affected: Juniper Networks / Junos OS | CVSS: 5.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the... | Affected: VMware / Service Location Protocol (SLP) | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authorization vulnerability allows... | Affected: Atlassian / Confluence Data Center, Confluence Server | CVSS: 9.8 (CRITICAL) | EPSS: 0.99999 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack | Affected: Apache Software Foundation / Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module | CVSS: 10.0 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: BIG-IP Configuration utility unauthenticated remote code execution vulnerability | Affected: F5 / BIG-IP | CVSS: 9.8 (CRITICAL) | EPSS: 0.96515 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: BIG-IP Configuration utility authenticated SQL injection vulnerability | Affected: F5 / BIG-IP | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Stored XSS vulnerability in Roundcube | Affected: Roundcube / Roundcubemail | CVSS: 6.1 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False

Stored XSS vulnerability in Roundcube


KEVIntel entry: A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the privileges... | Affected: Cisco / Cisco IOS XE Software | CVSS: 7.2 (HIGH) | EPSS: 0.89634 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Unauthenticated sensitive information disclosure | Affected: Citrix / NetScaler ADC, NetScaler Gateway | CVSS: 9.4 (CRITICAL) | EPSS: 0.99999 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software. We are... | Affected: Cisco / Cisco IOS XE Software | CVSS: 10.0 (CRITICAL) | EPSS: 0.99571 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload | Affected: Unknown / Royal Elementor Addons and Templates | CVSS: 9.8 (CRITICAL) | EPSS: 0.93116 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: qBittorrent Web UI Default Credentials Lead to RCE | Affected: qBittorrent / qBittorrent client | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Microsoft WordPad Information Disclosure Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Adobe Acrobat Reader DC resetForm Use-After-Free Remote Code Execution Vulnerability | Affected: Adobe / Acrobat Reader | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Skype for Business Elevation of Privilege Vulnerability | Affected: Microsoft / Skype for Business Server 2015 CU13, Skype for Business Server 2019 CU7 | CVSS: 5.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Software could allow an... | Affected: Cisco / IOS, Cisco IOS XE Software | CVSS: 6.6 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as... | Affected: Google / Cloud Platform | CVSS: 7.5 (HIGH) | EPSS: 0.99999 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability | Affected: Progress Software Corporation / WS_FTP Server | CVSS: 10.0 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknown... | Affected: Atlassian / Confluence Data Center, Confluence Server | CVSS: 9.8 (CRITICAL) | EPSS: 0.99699 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: The issue was addressed with improved checks. This issue is fixed in iOS 16.7.1 and iPadOS 16.7.1. A local attacker may be able to elevate their... | Affected: Apple / iOS and iPadOS | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows CNG Key Isolation Service Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 7.0 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible | Affected: JetBrains / TeamCity | CVSS: 9.8 (CRITICAL) | EPSS: 0.99979 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations | Affected: Arm Ltd / Midgard GPU Kernel Driver, Bifrost GPU Kernel Driver, Valhall GPU Kernel Driver, Arm 5th Gen GPU Architecture Kernel  Driver | CVSS: 5.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially... | Affected: Google / Chrome, libvpx | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote,... | Affected: [UNKNOWN] / RichFaces | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution.... | Affected: Apple / macOS | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False