Threats Tagged 'exploited-in-the-wild'

1,164 threats

Threats Tagged 'exploited-in-the-wild'
Severity	CVSS	Signals	Threat	Source	Published
High	8.8	KEVEPSS 83%	CVE-2012-1889XML Core Services · Microsoft XML Core Services Memory Corruption Vulnerability High8.8KEVEPSS 83%2022-06-08CISA KEVCVE-2012-1889 Microsoft XML Core Services contains a memory corruption vulnerability that could allow remote code execution. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 83%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-06-08
Medium	6.1	KEVEPSS 6.2%	CVE-2012-0767Flash Player · Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability Medium6.1KEVEPSS 6.2%2022-06-08CISA KEVCVE-2012-0767 Adobe Flash Player contains a cross-site scripting (XSS) vulnerability that allows remote attackers to inject web script or HTML. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided. KEVEPSS 6.2%Vulnerability Adobe #exploited-in-the-wild	CISA KEV	2022-06-08
High	7.8	KEVEPSS 91%	CVE-2012-0754Flash Player · Adobe Flash Player Memory Corruption Vulnerability High7.8KEVEPSS 91%2022-06-08CISA KEVCVE-2012-0754 Adobe Flash Player has a memory corruption vulnerability (CVE-2012-0754) that can be exploited remotely to execute arbitrary code or cause a denial-of-service condition. This vulnerability has been observed in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 91%Vulnerability Adobe #exploited-in-the-wild	CISA KEV	2022-06-08
High	7.8	KEVEPSS 87%	CVE-2012-0151Windows · Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability High7.8KEVEPSS 87%2022-06-08CISA KEVCVE-2012-0151 CVE-2012-0151 is a vulnerability in the Microsoft Windows Authenticode Signature Verification function (WinVerifyTrust) that improperly validates the digest of signed portable executable files. This flaw allows user-assisted remote attackers to execute arbitrary code on affected systems. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data. KEVEPSS 87%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-06-08
High	8.8	KEVEPSS 88%	CVE-2011-2462Reader and Acrobat · Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability High8.8KEVEPSS 88%2022-06-08CISA KEVCVE-2011-2462 CVE-2011-2462 is a memory corruption vulnerability in the Universal 3D (U3D) component of Adobe Reader and Acrobat. This flaw could allow remote attackers to execute arbitrary code or cause a denial-of-service (DoS) condition. It has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 88%Vulnerability Adobe #exploited-in-the-wild	CISA KEV	2022-06-08
High	7.8	KEVEPSS 63%	CVE-2011-0609Flash Player · Adobe Flash Player Unspecified Vulnerability High7.8KEVEPSS 63%2022-06-08CISA KEVCVE-2011-0609 Adobe Flash Player contains an unspecified vulnerability that enables remote attackers to execute arbitrary code or cause a denial-of-service (DoS) condition. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided. KEVEPSS 63%Vulnerability Adobe #exploited-in-the-wild	CISA KEV	2022-06-08
High	7.3	KEVEPSS 81%	CVE-2010-2883Acrobat and Reader · Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability High7.3KEVEPSS 81%2022-06-08CISA KEVCVE-2010-2883 Adobe Acrobat and Reader contain a stack-based buffer overflow vulnerability (CVE-2010-2883) that allows remote attackers to execute arbitrary code or cause denial-of-service (DoS). This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 81%Vulnerability Adobe #exploited-in-the-wild	CISA KEV	2022-06-08
High	7.8	KEVEPSS 58%	CVE-2010-2572PowerPoint · Microsoft PowerPoint Buffer Overflow Vulnerability High7.8KEVEPSS 58%2022-06-08CISA KEVCVE-2010-2572 Microsoft PowerPoint contains a buffer overflow vulnerability (CVE-2010-2572) that allows remote code execution. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 58%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-06-08
High	7.8	KEVEPSS 82%	CVE-2010-1297Flash Player · Adobe Flash Player Memory Corruption Vulnerability High7.8KEVEPSS 82%2022-06-08CISA KEVCVE-2010-1297 Adobe Flash Player contains a memory corruption vulnerability (CVE-2010-1297) that can be exploited by remote attackers to execute arbitrary code or cause a denial-of-service (DoS) condition. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 82%Vulnerability Adobe #exploited-in-the-wild	CISA KEV	2022-06-08
High	7.8	KEVEPSS 81%	CVE-2009-4324Acrobat and Reader · Adobe Acrobat and Reader Use-After-Free Vulnerability High7.8KEVEPSS 81%2022-06-08CISA KEVCVE-2009-4324 CVE-2009-4324 is a use-after-free vulnerability in Adobe Acrobat and Reader that allows remote attackers to execute arbitrary code by opening a specially crafted PDF file. This vulnerability has been exploited in the wild. It affects Adobe Acrobat and Reader products, though specific affected versions are not detailed in the provided data. KEVEPSS 81%Vulnerability Adobe #exploited-in-the-wild	CISA KEV	2022-06-08
High	8.8	KEVEPSS 83%	CVE-2009-3953Acrobat and Reader · Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability High8.8KEVEPSS 83%2022-06-08CISA KEVCVE-2009-3953 Adobe Acrobat and Reader contain a vulnerability in the Universal 3D (U3D) support due to an array boundary issue that can lead to remote code execution. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 83%Vulnerability Adobe #exploited-in-the-wild	CISA KEV	2022-06-08
High	7.8	KEVEPSS 21%	CVE-2009-1862Acrobat and Reader, Flash Player · Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability High7.8KEVEPSS 21%2022-06-08CISA KEVCVE-2009-1862 CVE-2009-1862 is a high-severity vulnerability affecting Adobe Acrobat and Reader, as well as Adobe Flash Player. It allows remote attackers to execute arbitrary code or cause a denial-of-service (DoS) condition. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 21%Vulnerability Adobe #exploited-in-the-wild	CISA KEV	2022-06-08
High	7.8	KEVEPSS 59%	CVE-2009-0563Office · Microsoft Office Buffer Overflow Vulnerability High7.8KEVEPSS 59%2022-06-08CISA KEVCVE-2009-0563 A buffer overflow vulnerability exists in Microsoft Office that can be triggered by a specially crafted Word document containing a tag with an invalid length field. This flaw allows remote attackers to execute arbitrary code on the affected system. The vulnerability has been exploited in the wild, indicating active use by attackers. No specific affected versions or patch information is provided in the available data. KEVEPSS 59%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-06-08
High	7.8	KEVEPSS 52%	CVE-2009-0557Office · Microsoft Office Object Record Corruption Vulnerability High7.8KEVEPSS 52%2022-06-08CISA KEVCVE-2009-0557 Microsoft Office contains a vulnerability in its handling of object records within Excel files. This flaw allows remote attackers to execute arbitrary code by crafting a malicious Excel file with a malformed record object. The vulnerability has been exploited in the wild, indicating active use by attackers. No specific affected versions or patch information is provided in the available data. KEVEPSS 52%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-06-08
High	8.8	KEVEPSS 37%	CVE-2008-0655Acrobat and Reader · Adobe Acrobat and Reader Unspecified Vulnerability High8.8KEVEPSS 37%2022-06-08CISA KEVCVE-2008-0655 Adobe Acrobat and Reader contain a design flaw vulnerability that allows a specially crafted file to be printed silently multiple times without user consent. This vulnerability has been exploited in the wild and is considered high severity due to its potential misuse. KEVEPSS 37%Vulnerability Adobe #exploited-in-the-wild	CISA KEV	2022-06-08
High	7.8	KEVEPSS 87%	CVE-2007-5659Acrobat and Reader · Adobe Acrobat and Reader Buffer Overflow Vulnerability High7.8KEVEPSS 87%2022-06-08CISA KEVCVE-2007-5659 Adobe Acrobat and Reader have a buffer overflow vulnerability that can be triggered by a specially crafted PDF file containing long arguments to certain JavaScript methods. This flaw allows remote attackers to execute arbitrary code on affected systems. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 87%Vulnerability Adobe #exploited-in-the-wild	CISA KEV	2022-06-08
High	8.8	KEVEPSS 48%	CVE-2006-2492Word · Microsoft Word Malformed Object Pointer Vulnerability High8.8KEVEPSS 48%2022-06-08CISA KEVCVE-2006-2492 CVE-2006-2492 is a vulnerability in Microsoft Word and Microsoft Works Suites involving a malformed object pointer that allows attackers to execute arbitrary code. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 48%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-06-08
Critical	9.8	KEVEPSS 99%	CVE-2022-26134Confluence Server/Data Center · Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability Critical9.8KEVEPSS 99%2022-06-02CISA KEVCVE-2022-26134 Atlassian Confluence Server and Data Center contain a remote code execution vulnerability that allows for an unauthenticated attacker to perform remote code execution. KEVEPSS 99%Vulnerability Atlassian #exploited-in-the-wild	CISA KEV	2022-06-02
High	8.8	KEVEPSS 13%	CVE-2019-3010Solaris · Oracle Solaris Privilege Escalation Vulnerability High8.8KEVEPSS 13%2022-05-25CISA KEVCVE-2019-3010 CVE-2019-3010 is a privilege escalation vulnerability in the XScreenSaver component of Oracle Solaris. It allows an attacker to gain elevated privileges on affected systems. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided. KEVEPSS 13%Vulnerability Oracle #exploited-in-the-wild	CISA KEV	2022-05-25
High	7.8	KEVEPSS 68%	CVE-2016-3393Windows · Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability High7.8KEVEPSS 68%2022-05-25CISA KEVCVE-2016-3393 CVE-2016-3393 is a remote code execution vulnerability in the Microsoft Windows Graphics Device Interface (GDI) component. It arises from improper handling of objects in memory by the Windows GDI. Successful exploitation allows an attacker to take control of the affected system. This vulnerability has been exploited in the wild. No specific affected Windows versions or patch information is provided in the available data. KEVEPSS 68%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-05-25

Showing 421–440 of 1,164 results