Threats Tagged 'exploited-in-the-wild'

1,164 threats

Threats Tagged 'exploited-in-the-wild'
Severity	CVSS	Signals	Threat	Source	Published
High	8.8	KEVEPSS 22%	CVE-2017-0210Internet Explorer · Microsoft Internet Explorer Privilege Escalation Vulnerability High8.8KEVEPSS 22%2022-05-24CISA KEVCVE-2017-0210 CVE-2017-0210 is a privilege escalation vulnerability in Microsoft Internet Explorer caused by improper enforcement of cross-domain policies. This flaw could allow an attacker to access information across domains that should be restricted. The vulnerability has been exploited in the wild, indicating active threat use. No specific affected versions or patch information is provided in the available data. KEVEPSS 22%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-05-24
High	7.8	KEVEPSS 96%	CVE-2017-8291Ghostscript · Artifex Ghostscript Type Confusion Vulnerability High7.8KEVEPSS 96%2022-05-24CISA KEVCVE-2017-8291 CVE-2017-8291 is a high-severity vulnerability in Artifex Ghostscript that allows bypassing the -dSAFER security option and enables remote command execution. This occurs due to a type confusion issue involving .rsdparams and the "/OutputFile" parameter. The vulnerability has been exploited in the wild. KEVEPSS 96%Vulnerability Artifex #exploited-in-the-wild	CISA KEV	2022-05-24
Critical	9.8	KEVEPSS 74%	CVE-2017-8543Windows · Microsoft Windows Search Remote Code Execution Vulnerability Critical9.8KEVEPSS 74%2022-05-24CISA KEVCVE-2017-8543 CVE-2017-8543 is a high-severity remote code execution vulnerability in Microsoft Windows Search. It allows an attacker to take control of the affected system due to improper handling of objects in memory by Windows Search. This vulnerability has been exploited in the wild. KEVEPSS 74%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-05-24
Medium	4.3	KEVEPSS 22%	CVE-2016-0162Internet Explorer · Microsoft Internet Explorer Information Disclosure Vulnerability Medium4.3KEVEPSS 22%2022-05-24CISA KEVCVE-2016-0162 CVE-2016-0162 is an information disclosure vulnerability in Microsoft Internet Explorer related to improper handling of JavaScript. This flaw allows attackers to detect specific files on a user's computer, potentially exposing sensitive information. The vulnerability has been exploited in the wild. No explicit patch or remediation details are provided in the available data. KEVEPSS 22%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-05-24
Medium	6.5	KEVEPSS 26%	CVE-2016-3351Internet Explorer and Edge · Microsoft Internet Explorer and Edge Information Disclosure Vulnerability Medium6.5KEVEPSS 26%2022-05-24CISA KEVCVE-2016-3351 CVE-2016-3351 is an information disclosure vulnerability in Microsoft Internet Explorer and Edge browsers. It arises from the way certain functions handle objects in memory, potentially allowing attackers to detect specific files on a user's computer. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns. KEVEPSS 26%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-05-24
Medium	5.5	KEVEPSS 33%	CVE-2016-4655iOS · Apple iOS Information Disclosure Vulnerability Medium5.5KEVEPSS 33%2022-05-24CISA KEVCVE-2016-4655 CVE-2016-4655 is an information disclosure vulnerability in the Apple iOS kernel that allows attackers to obtain sensitive information from memory by using a crafted application. This vulnerability has been exploited in the wild. No specific affected iOS versions or patch information is provided. KEVEPSS 33%Vulnerability Apple #exploited-in-the-wild	CISA KEV	2022-05-24
High	7.8	KEVEPSS 23%	CVE-2016-4656iOS · Apple iOS Memory Corruption Vulnerability High7.8KEVEPSS 23%2022-05-24CISA KEVCVE-2016-4656 CVE-2016-4656 is a memory corruption vulnerability in the Apple iOS kernel that allows attackers to execute code with elevated privileges or cause a denial-of-service (DoS) by using a specially crafted application. This vulnerability has been exploited in the wild. No specific affected iOS versions or patch information is provided in the available data. KEVEPSS 23%Vulnerability Apple #exploited-in-the-wild	CISA KEV	2022-05-24
High	8.8	KEVEPSS 66%	CVE-2016-4657iOS · Apple iOS Webkit Memory Corruption Vulnerability High8.8KEVEPSS 66%2022-05-24CISA KEVCVE-2016-4657 A memory corruption vulnerability in Apple iOS WebKit allows remote attackers to execute code or cause denial-of-service via crafted web content. This affects HTML parsers using WebKit, including Apple Safari and other products relying on WebKit. Exploits have been observed in the wild. No specific affected versions or patch information is provided. KEVEPSS 66%Vulnerability Apple #exploited-in-the-wild	CISA KEV	2022-05-24
High	8.8	KEVEPSS 87%	CVE-2016-6366Adaptive Security Appliance (ASA) · Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability High8.8KEVEPSS 87%2022-05-24CISA KEVCVE-2016-6366 CVE-2016-6366 is a high-severity buffer overflow vulnerability in the SNMP code of Cisco Adaptive Security Appliance (ASA) software. Exploitation of this flaw could allow an attacker to cause the affected device to reload or execute arbitrary code remotely. This vulnerability has been observed exploited in the wild. No specific affected versions or patch information is provided in the input data. KEVEPSS 87%Vulnerability Cisco #exploited-in-the-wild	CISA KEV	2022-05-24
High	7.8	KEVEPSS 22%	CVE-2016-6367Adaptive Security Appliance (ASA) · Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability High7.8KEVEPSS 22%2022-05-24CISA KEVCVE-2016-6367 CVE-2016-6367 is a high-severity vulnerability in the command-line interface (CLI) parser of Cisco Adaptive Security Appliance (ASA) software. It allows an authenticated local attacker to cause a denial-of-service (DoS) condition or potentially execute arbitrary code. The vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data. KEVEPSS 22%Vulnerability Cisco #exploited-in-the-wild	CISA KEV	2022-05-24
Medium	6.5	KEVEPSS 33%	CVE-2016-3298Internet Explorer · Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability Medium6.5KEVEPSS 33%2022-05-24CISA KEVCVE-2016-3298 CVE-2016-3298 is an information disclosure vulnerability in Microsoft Internet Explorer's Messaging API. It occurs due to improper handling of objects in memory, allowing an attacker to test for the presence of files on disk. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided. KEVEPSS 33%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-05-24
Critical	9.8	KEVEPSS 86%	CVE-2017-18362Virtual System/Server Administrator (VSA) · Kaseya VSA SQL Injection Vulnerability Critical9.8KEVEPSS 86%2022-05-24CISA KEVCVE-2017-18362 ConnectWise ManagedITSync integration for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database. KEVEPSS 86%Vulnerability Kaseya #exploited-in-the-wild	CISA KEV	2022-05-24
Medium	6.5	KEVEPSS 11%	CVE-2022-20821IOS XR · Cisco IOS XR Open Port Vulnerability Medium6.5KEVEPSS 11%2022-05-23CISA KEVCVE-2022-20821 Cisco IOS XR software activates a health check feature that opens TCP port 6379 by default. This port exposes a Redis instance running within the NOSi container, which an attacker can connect to and potentially access. The vulnerability is known as CVE-2022-20821 and has been exploited in the wild. No specific affected versions or patch information are provided. KEVEPSS 11%Vulnerability Cisco #exploited-in-the-wild	CISA KEV	2022-05-23
High	7.8	KEVEPSS 1.1%	CVE-2021-1048Kernel · Android Kernel Use-After-Free Vulnerability High7.8KEVEPSS 1.1%2022-05-23CISA KEVCVE-2021-1048 CVE-2021-1048 is a use-after-free vulnerability in the Android kernel that enables privilege escalation. It has been exploited in the wild, indicating active attacks leveraging this flaw. The vulnerability affects the Android kernel but specific affected versions are not stated. No patch or remediation details are provided in the available data. KEVEPSS 1.1%Vulnerability Android #exploited-in-the-wild	CISA KEV	2022-05-23
Medium	6.4	KEVEPSS 0.9%	CVE-2021-0920Kernel · Android Kernel Race Condition Vulnerability Medium6.4KEVEPSS 0.9%2022-05-23CISA KEVCVE-2021-0920 CVE-2021-0920 is a race condition vulnerability in the Android kernel that results in a use-after-free condition. This flaw can be exploited to escalate privileges on affected devices. The vulnerability has been observed in the wild, indicating active exploitation. No specific affected versions or patch information is provided in the available data. KEVEPSS 0.9%Vulnerability Android #exploited-in-the-wild	CISA KEV	2022-05-23
High	7.8	KEVEPSS 14%	CVE-2021-30883Multiple Products · Apple Multiple Products Memory Corruption Vulnerability High7.8KEVEPSS 14%2022-05-23CISA KEVCVE-2021-30883 A memory corruption vulnerability exists in multiple Apple products including iOS, macOS, watchOS, and tvOS. This flaw could enable remote code execution, allowing an attacker to execute arbitrary code on affected devices. The vulnerability has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided in the available data. KEVEPSS 14%Vulnerability Apple #exploited-in-the-wild	CISA KEV	2022-05-23
High	7.8	KEVEPSS 4.7%	CVE-2020-1027Windows · Microsoft Windows Kernel Privilege Escalation Vulnerability High7.8KEVEPSS 4.7%2022-05-23CISA KEVCVE-2020-1027 CVE-2020-1027 is a Windows Kernel elevation of privilege vulnerability that allows attackers to execute code with elevated permissions by exploiting how the kernel handles objects in memory. It has been exploited in the wild. No specific affected Windows versions are stated in the provided data. KEVEPSS 4.7%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-05-23
High	7.8	KEVEPSS 2.4%	CVE-2020-0638Update Notification Manager · Microsoft Update Notification Manager Privilege Escalation Vulnerability High7.8KEVEPSS 2.4%2022-05-23CISA KEVCVE-2020-0638 CVE-2020-0638 is a privilege escalation vulnerability in Microsoft Update Notification Manager. It allows attackers to gain elevated privileges on affected systems. The vulnerability has been exploited in the wild and is associated with known ransomware campaigns. No specific affected versions or patch information is provided in the available data. KEVEPSS 2.4%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-05-23
High	7.8	KEVEPSS 4.6%	CVE-2019-7287iOS · Apple iOS Memory Corruption Vulnerability High7.8KEVEPSS 4.6%2022-05-23CISA KEVCVE-2019-7287 CVE-2019-7287 is a memory corruption vulnerability in Apple iOS that could allow remote code execution by an attacker. It has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 4.6%Vulnerability Apple #exploited-in-the-wild	CISA KEV	2022-05-23
Medium	6.5	KEVEPSS 8.1%	CVE-2019-0676Internet Explorer · Microsoft Internet Explorer Information Disclosure Vulnerability Medium6.5KEVEPSS 8.1%2022-05-23CISA KEVCVE-2019-0676 CVE-2019-0676 is an information disclosure vulnerability in Microsoft Internet Explorer where improper handling of objects in memory allows an attacker to test for the presence of files on disk. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 8.1%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-05-23

Showing 481–500 of 1,164 results