CVE-2015-6175 is a privilege escalation vulnerability in the Microsoft Windows kernel that allows local users to gain elevated privileges by running a specially crafted application. This vulnerability has been exploited in the wild. No specific affected Windows versions or patch information is provided in the available data.
CVE-2015-8651 is an integer overflow vulnerability in Adobe Flash Player that allows attackers to execute arbitrary code. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2016-0034 is a vulnerability in Microsoft Silverlight where improper handling of negative offsets during decoding can lead to remote code execution or denial-of-service conditions. It has been exploited in the wild and is associated with known ransomware campaigns. The vulnerability is rated as high severity due to its potential impact on affected systems.
CVE-2013-2423 is an unspecified vulnerability in the hotspot component of Oracle Java Runtime Environment (JRE) that allows remote attackers to affect the integrity of the system. It has been exploited in the wild, indicating active use by attackers. No specific affected versions or patch information is provided in the available data.
CVE-2019-3010 is a privilege escalation vulnerability in the XScreenSaver component of Oracle Solaris. It allows an attacker to gain elevated privileges on affected systems. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
CVE-2016-0984 is a use-after-free vulnerability in Adobe Flash Player and Adobe AIR that allows attackers to execute arbitrary code. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2016-1010 is an integer overflow vulnerability in Adobe Flash Player and AIR that allows attackers to execute arbitrary code. This vulnerability has been exploited in the wild. It affects Adobe Flash Player and AIR products, but specific affected versions are not provided. The severity is high due to the potential for code execution.
CVE-2013-3896 is an information disclosure vulnerability in Microsoft Silverlight caused by improper pointer validation when accessing Silverlight elements. This flaw allows remote attackers to obtain sensitive information by delivering a crafted Silverlight application. The vulnerability has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided in the available data.
CVE-2016-3393 is a remote code execution vulnerability in the Microsoft Windows Graphics Device Interface (GDI) component. It arises from improper handling of objects in memory by the Windows GDI. Successful exploitation allows an attacker to take control of the affected system. This vulnerability has been exploited in the wild. No specific affected Windows versions or patch information is provided in the available data.
CVE-2013-3993 is a vulnerability in IBM InfoSphere BigInsights where certain APIs accept invalid input, potentially allowing attackers unauthorized access to read, write, modify, or delete data. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided.
CVE-2013-7331 is an information disclosure vulnerability in Microsoft Internet Explorer that allows querying of resources loaded into memory. This flaw can enable attackers to detect the presence of anti-malware applications on a victim's system. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2016-7256 is a remote code execution vulnerability in the Microsoft Windows font library caused by improper handling of specially crafted embedded fonts. Successful exploitation allows an attacker to take control of the affected system. This vulnerability has been exploited in the wild.
CVE-2017-0005 is a privilege escalation vulnerability in the Microsoft Windows Graphics Device Interface (GDI) that allows local users to gain elevated privileges by running a specially crafted application. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.
CVE-2017-0022 is a high-severity information disclosure vulnerability in Microsoft XML Core Services (MSXML). It arises from improper handling of objects in memory, which allows attackers to test for the presence of files on disk via a crafted website. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2017-0147 is a high-severity information disclosure vulnerability in the Microsoft Windows SMBv1 server. It allows remote attackers to obtain sensitive information from process memory by sending crafted packets. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns.
Microsoft Internet Explorer has a memory corruption vulnerability (CVE-2017-0149) that allows remote attackers to execute arbitrary code or cause a denial-of-service (DoS) by tricking users into visiting a crafted website. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.
CVE-2017-0210 is a privilege escalation vulnerability in Microsoft Internet Explorer caused by improper enforcement of cross-domain policies. This flaw could allow an attacker to access information across domains that should be restricted. The vulnerability has been exploited in the wild, indicating active threat use. No specific affected versions or patch information is provided in the available data.
CVE-2017-18362 is a critical SQL injection vulnerability in the ConnectWise ManagedITSync integration for Kaseya VSA. It allows unauthenticated remote attackers to execute commands that provide full direct access to the Kaseya VSA database. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns.
CVE-2017-8291 is a high-severity vulnerability in Artifex Ghostscript that allows bypassing the -dSAFER security option and enables remote command execution. This occurs due to a type confusion issue involving .rsdparams and the "/OutputFile" parameter. The vulnerability has been exploited in the wild.
CVE-2017-8543 is a high-severity remote code execution vulnerability in Microsoft Windows Search. It allows an attacker to take control of the affected system due to improper handling of objects in memory by Windows Search. This vulnerability has been exploited in the wild.