CVE-2017-0213 is a privilege escalation vulnerability in Microsoft Windows COM Aggregate Marshaler. It allows an attacker to escalate privileges by running a specially crafted application. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns.
CVE-2017-0059 is an information disclosure vulnerability in Microsoft Internet Explorer that allows remote attackers to obtain sensitive information from process memory by tricking users into visiting a crafted website. This vulnerability has been exploited in the wild and is considered high severity.
CVE-2017-0037 is a type confusion vulnerability in the mshtml.dll component of Microsoft Edge and Internet Explorer. This flaw allows remote code execution, enabling attackers to potentially execute arbitrary code on affected systems. The vulnerability has been exploited in the wild, indicating active use by threat actors. No specific affected versions or patch information is provided in the available data.
CVE-2016-7201 is a memory corruption vulnerability in the Chakra JavaScript engine used by Microsoft Edge. It allows remote attackers to execute arbitrary code or cause a denial of service by visiting a crafted website. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2016-7200 is a memory corruption vulnerability in the Chakra JavaScript engine used by Microsoft Edge. It allows remote attackers to execute arbitrary code or cause a denial of service by visiting a crafted website. This vulnerability has been exploited in the wild.
CVE-2016-0189 is a memory corruption vulnerability in the Microsoft JScript and VBScript engines used by Internet Explorer and other Microsoft products. This flaw allows attackers to execute remote code or cause a denial of service by crafting malicious web content. The vulnerability has been exploited in the wild and is associated with known ransomware campaigns. No specific affected versions or patch information is provided in the input data.
CVE-2016-0151 is a security feature bypass vulnerability in the Microsoft Windows Client-Server Run-time Subsystem (CSRSS). It involves improper management of process tokens, allowing local users to escalate privileges by running crafted applications. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.
CVE-2016-0040 is a privilege escalation vulnerability in the Microsoft Windows kernel that allows local users to gain elevated privileges by running a specially crafted application. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2015-2426 is a remote code execution vulnerability in Microsoft Windows caused by improper handling of specially crafted OpenType fonts by the Windows Adobe Type Manager Library. This flaw allows attackers to execute arbitrary code remotely. It has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided in the input data.
CVE-2015-2419 is a memory corruption vulnerability in the JScript engine of Microsoft Internet Explorer. It allows remote attackers to execute arbitrary code or cause a denial of service by crafting malicious web content. This vulnerability has been exploited in the wild.
CVE-2015-1770 is a vulnerability in Microsoft Office that allows remote attackers to execute arbitrary code by crafting a malicious Office document. This vulnerability involves the use of uninitialized memory, which can be exploited to gain control of the affected system. It has been observed in the wild, indicating active exploitation. No specific affected versions or patch information is provided in the available data.
CVE-2013-3660 is a privilege escalation vulnerability in the Microsoft Win32k kernel-mode driver. It arises from improper initialization of a pointer in the EPATHOBJ::pprFlattenRec function, allowing local users to elevate their privileges. This vulnerability has been exploited in the wild.
CVE-2013-2729 is an integer overflow vulnerability in Adobe Reader and Acrobat that allows remote attackers to execute arbitrary code. This vulnerability has been exploited in the wild. It affects Adobe Reader and Acrobat products, though specific affected versions are not detailed in the provided data.
CVE-2013-2551 is a use-after-free vulnerability in Microsoft Internet Explorer that allows remote attackers to execute arbitrary code by triggering access to a deleted object via a crafted website. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns.
CVE-2013-1690 is a vulnerability in Mozilla Firefox and Thunderbird where improper handling of onreadystatechange events combined with page reloading can lead to denial-of-service (DoS) or potentially allow execution of malicious code. This flaw has been exploited in the wild. No specific affected versions or patch information are provided in the input data.
CVE-2012-5076 is a vulnerability in Oracle Java SE where the default security configuration did not restrict access to certain internal packages. This flaw allows an untrusted Java application or applet to bypass Java sandbox restrictions, potentially leading to unauthorized actions. The vulnerability has been exploited in the wild and is considered high severity.
CVE-2012-2539 is a high-severity vulnerability in Microsoft Word that allows remote code execution or denial-of-service via specially crafted RTF data. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
Adobe Flash Player has a memory corruption vulnerability (CVE-2012-2034) that can be exploited remotely to execute code or cause a denial-of-service condition. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
CVE-2012-0518 is an unspecified vulnerability in the Oracle Application Server Single Sign-On component within Oracle Fusion Middleware. It allows remote attackers to impact the integrity of the system through unknown attack vectors. The vulnerability has been exploited in the wild, indicating active threat usage. No specific affected versions or detailed technical information are provided. No patch or remediation details are available from the input data.
CVE-2011-2005 is a vulnerability in the Microsoft Ancillary Function Driver (afd.sys) where improper validation of user-mode input passed to kernel mode allows local users to gain elevated privileges. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.