Verdict
Confirmed exploited in the wild
CISA has evidence of active exploitation. This is not theoretical risk — someone has already used it against someone. 732 vulnerabilities in this band.
- CVE-2014-0546 Adobe Reader and Acrobat Sandbox Bypass Vulnerability Adobe · Reader and Acrobat
- CVE-2014-2817 Microsoft Internet Explorer Privilege Escalation Vulnerability Microsoft · Internet Explorer
- CVE-2014-3153 Linux Kernel Privilege Escalation Vulnerability Linux · Kernel
- CVE-2018-8611 Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2017-0022 Microsoft XML Core Services Information Disclosure Vulnerability Microsoft · XML Core Services
- CVE-2017-0005 Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2017-0149 Microsoft Internet Explorer Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2017-0210 Microsoft Internet Explorer Privilege Escalation Vulnerability Microsoft · Internet Explorer
- CVE-2016-0162 Microsoft Internet Explorer Information Disclosure Vulnerability Microsoft · Internet Explorer
- CVE-2016-4655 Apple iOS Information Disclosure Vulnerability Apple · iOS
- CVE-2016-4656 Apple iOS Memory Corruption Vulnerability Apple · iOS
- CVE-2016-6367 Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability Cisco · Adaptive Security Appliance (ASA)
- CVE-2016-3298 Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability Microsoft · Internet Explorer
- CVE-2022-20821 Cisco IOS XR Open Port Vulnerability Cisco · IOS XR
- CVE-2021-1048 Android Kernel Use-After-Free Vulnerability Android · Kernel
- CVE-2021-0920 Android Kernel Race Condition Vulnerability Android · Kernel
- CVE-2021-30883 Apple Multiple Products Memory Corruption Vulnerability Apple · Multiple Products
- CVE-2020-1027 Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2019-7286 Apple Multiple Products Memory Corruption Vulnerability Apple · Multiple Products
- CVE-2019-7287 Apple iOS Memory Corruption Vulnerability Apple · iOS
- CVE-2019-0676 Microsoft Internet Explorer Information Disclosure Vulnerability Microsoft · Internet Explorer
- CVE-2019-0703 Microsoft Windows SMB Information Disclosure Vulnerability Microsoft · Windows
- CVE-2019-0880 Microsoft Windows Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2019-13720 Google Chrome WebAudio Use-After-Free Vulnerability Google · Chrome WebAudio
- CVE-2019-11707 Mozilla Firefox and Thunderbird Type Confusion Vulnerability Mozilla · Firefox and Thunderbird
- CVE-2019-8720 WebKitGTK Memory Corruption Vulnerability WebKitGTK · WebKitGTK
- CVE-2018-5002 Adobe Flash Player Stack-based Buffer Overflow Vulnerability Adobe · Flash Player
- CVE-2018-8589 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2021-1789 Apple Multiple Products Type Confusion Vulnerability Apple · Multiple Products
- CVE-2019-8506 Apple Multiple Products Type Confusion Vulnerability Apple · Multiple Products
- CVE-2022-26904 Microsoft Windows User Profile Service Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2022-21919 Microsoft Windows User Profile Service Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2021-41357 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2021-40450 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2019-3568 WhatsApp VOIP Stack Buffer Overflow Vulnerability Meta Platforms · WhatsApp
- CVE-2022-22718 Microsoft Windows Print Spooler Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2022-22960 VMware Multiple Products Privilege Escalation Vulnerability VMware · Multiple Products
- CVE-2022-1364 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2016-4523 Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability Trihedral · VTScada (formerly VTS)
- CVE-2010-5330 Ubiquiti AirOS Command Injection Vulnerability Ubiquiti · AirOS
- CVE-2015-5123 Adobe Flash Player Use-After-Free Vulnerability Adobe · Flash Player
- CVE-2014-9163 Adobe Flash Player Stack-Based Buffer Overflow Vulnerability Adobe · Flash Player
- CVE-2022-23176 WatchGuard Firebox and XTM Privilege Escalation Vulnerability WatchGuard · Firebox and XTM
- CVE-2021-39793 Google Pixel Out-of-Bounds Write Vulnerability Google · Pixel
- CVE-2021-27852 Checkbox Survey Deserialization of Untrusted Data Vulnerability Checkbox · Checkbox Survey
- CVE-2021-22600 Linux Kernel Privilege Escalation Vulnerability Linux · Kernel
- CVE-2020-2509 QNAP Network-Attached Storage (NAS) Command Injection Vulnerability QNAP · QNAP Network-Attached Storage (NAS)
- CVE-2022-22675 Apple macOS Out-of-Bounds Write Vulnerability Apple · macOS
- CVE-2022-22674 Apple macOS Out-of-Bounds Read Vulnerability Apple · macOS
- CVE-2022-26871 Trend Micro Apex Central Arbitrary File Upload Vulnerability Trend Micro · Apex Central
- CVE-2021-34484 Microsoft Windows User Profile Service Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2022-1096 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2021-34486 Microsoft Windows Event Tracing Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2019-7483 SonicWall SMA100 Directory Traversal Vulnerability SonicWall · SMA100
- CVE-2016-0040 Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2015-1770 Microsoft Office Uninitialized Memory Use Vulnerability Microsoft · Office
- CVE-2012-2034 Adobe Flash Player Memory Corruption Vulnerability Adobe · Flash Player
- CVE-2012-0518 Oracle Fusion Middleware Unspecified Vulnerability Oracle · Fusion Middleware
- CVE-2011-2005 Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability Microsoft · Ancillary Function Driver (afd.sys)
- CVE-2010-4398 Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability Microsoft · Windows
- CVE-2020-9377 D-Link DIR-610 Devices Remote Command Execution D-Link · DIR-610 Devices
- CVE-2020-2506 QNAP Helpdesk Improper Access Control Vulnerability QNAP Systems · Helpdesk
- CVE-2020-1631 Juniper Junos OS Path Traversal Vulnerability Juniper · Junos OS
- CVE-2019-0903 Microsoft GDI Remote Code Execution Vulnerability Microsoft · Graphics Device Interface (GDI)
- CVE-2018-0147 Cisco Secure Access Control System Java Deserialization Vulnerability Cisco · Secure Access Control System (ACS)
- CVE-2016-7892 Adobe Flash Player Use-After-Free Vulnerability Adobe · Flash Player
- CVE-2016-4171 Adobe Flash Player Remote Code Execution Vulnerability Adobe · Flash Player
- CVE-2015-0666 Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability Cisco · Prime Data Center Network Manager (DCNM)
- CVE-2010-4345 Exim Privilege Escalation Vulnerability Exim · Exim
- CVE-2010-3035 Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability Cisco · IOS XR
- CVE-2009-2055 Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability Cisco · IOS XR
- CVE-2019-1132 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2022-26486 Mozilla Firefox Use-After-Free Vulnerability Mozilla · Firefox
- CVE-2022-26485 Mozilla Firefox Use-After-Free Vulnerability Mozilla · Firefox
- CVE-2020-8218 Pulse Connect Secure Code Injection Vulnerability Pulse Secure · Pulse Connect Secure
- CVE-2022-20708 Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers
- CVE-2022-20703 Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers
- CVE-2022-20701 Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers
- CVE-2022-20700 Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers
- CVE-2020-11899 Treck TCP/IP stack Out-of-Bounds Read Vulnerability Treck TCP/IP stack · IPv6
- CVE-2019-16928 Exim Out-of-bounds Write Vulnerability Exim · Exim Internet Mailer
- CVE-2019-1297 Microsoft Excel Remote Code Execution Vulnerability Microsoft · Excel
- CVE-2018-0180 Cisco IOS Software Denial-of-Service Vulnerability Cisco · IOS Software
- CVE-2018-0179 Cisco IOS Software Denial-of-Service Vulnerability Cisco · IOS Software
- CVE-2018-0175 Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability Cisco · IOS, XR, and XE Software
- CVE-2018-0174 Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability Cisco · IOS XE Software
- CVE-2018-0173 Cisco IOS and IOS XE Software Improper Input Validation Vulnerability Cisco · IOS and IOS XE Software
- CVE-2018-0172 Cisco IOS and IOS XE Software Improper Input Validation Vulnerability Cisco · IOS and IOS XE Software
- CVE-2018-0167 Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability Cisco · IOS, XR, and XE Software
- CVE-2018-0161 Cisco IOS Software Resource Management Errors Vulnerability Cisco · IOS Software
- CVE-2018-0159 Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability Cisco · IOS Software and Cisco IOS XE Software
- CVE-2018-0158 Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability Cisco · IOS Software and Cisco IOS XE Software
- CVE-2018-0156 Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability Cisco · IOS Software and Cisco IOS XE Software
- CVE-2018-0155 Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability Cisco · Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches
- CVE-2018-0154 Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability Cisco · IOS Software
- CVE-2018-0151 Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability Cisco · IOS and IOS XE Software
- CVE-2017-6744 Cisco IOS Software SNMP Remote Code Execution Vulnerability Cisco · IOS software
- CVE-2017-6743 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Cisco · IOS and IOS XE Software
- CVE-2017-6740 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Cisco · IOS and IOS XE Software
- CVE-2017-6739 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Cisco · IOS and IOS XE Software
- CVE-2017-6738 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Cisco · IOS and IOS XE Software
- CVE-2017-6737 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Cisco · IOS and IOS XE Software
- CVE-2017-6663 Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability Cisco · IOS and IOS XE Software
- CVE-2017-6627 Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability Cisco · IOS and IOS XE Software
- CVE-2017-12319 Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability Cisco · IOS XE Software
- CVE-2017-12240 Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability Cisco · IOS and IOS XE Software
- CVE-2017-12238 Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability Cisco · Catalyst 6800 Series Switches
- CVE-2017-12237 Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability Cisco · IOS and IOS XE Software
- CVE-2017-12235 Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability Cisco · IOS software
- CVE-2017-12234 Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability Cisco · IOS software
- CVE-2017-12233 Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability Cisco · IOS software
- CVE-2017-12232 Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability Cisco · IOS software
- CVE-2017-12231 Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability Cisco · IOS software
- CVE-2017-11292 Adobe Flash Player Type Confusion Vulnerability Adobe · Flash Player
- CVE-2017-0001 Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability Microsoft · Graphics Device Interface (GDI)
- CVE-2016-8562 Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability Siemens · SIMATIC CP
- CVE-2016-7855 Adobe Flash Player Use-After-Free Vulnerability Adobe · Flash Player
- CVE-2015-4902 Oracle Java SE Integrity Check Vulnerability Oracle · Java SE
- CVE-2015-2590 Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability Oracle · Java SE
- CVE-2015-2424 Microsoft PowerPoint Memory Corruption Vulnerability Microsoft · PowerPoint
Nothing on this page matches that filter.