Adobe Flash Player contains a use-after-free vulnerability in the TextField class that has been exploited in the wild. This vulnerability can lead to potential memory corruption issues. No specific affected versions or patch information is provided in the available data.
CVE-2016-4171 is an unspecified vulnerability in Adobe Flash Player that allows remote code execution. It has been exploited in the wild. No specific affected versions or patch information are provided in the available data.
Multiple NETGEAR Wireless Access Point devices are vulnerable to command injection via unauthenticated web pages that pass form input directly to the command-line interface. This vulnerability allows attackers to execute arbitrary code on affected devices. The issue has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided in the available data.
CVE-2016-11021 is a high-severity vulnerability in D-Link DCS-930L devices that allows remote attackers to execute arbitrary operating system commands via the setSystemCommand function. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
The NETGEAR WNR2000v5 router has a buffer overflow vulnerability that allows remote code execution. This vulnerability is known to be exploited in the wild. No specific affected versions or patch information is provided.
CVE-2016-0752 is a directory traversal vulnerability in the Action View component of Ruby on Rails. This flaw allows remote attackers to read arbitrary files on the affected system. The vulnerability has been exploited in the wild, indicating active use by attackers. No specific affected versions or patch information is provided in the available data.
CVE-2020-5135 is a buffer overflow vulnerability in SonicWall SonicOS that allows remote attackers to cause Denial of Service (DoS) and potentially execute arbitrary code by sending malicious requests to the firewall. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.
CVE-2019-1405 is a high-severity privilege escalation vulnerability in the Microsoft Windows Universal Plug and Play (UPnP) service. The flaw allows improper creation of COM objects, enabling attackers to escalate privileges on affected systems. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.
CVE-2019-1322 is a privilege escalation vulnerability in Microsoft Windows where improper handling of authentication requests allows an attacker to run processes with elevated privileges. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns.
CVE-2019-1315 is a privilege escalation vulnerability in Microsoft Windows involving improper handling of hard links by the Windows Error Reporting manager. Successful exploitation allows an attacker to overwrite targeted files, resulting in elevated privileges. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns.
CVE-2019-1253 is a high-severity privilege escalation vulnerability in Microsoft Windows affecting the AppX Deployment Server. The vulnerability arises from improper handling of junctions by the AppX Deployment Server, allowing attackers to escalate privileges. It has been exploited in the wild and is known to have been used in ransomware campaigns.
CVE-2019-1132 is a privilege escalation vulnerability in the Microsoft Windows Win32k component. It arises from improper handling of objects in memory, allowing an attacker to elevate privileges on the affected system. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.
CVE-2019-1129 is a privilege escalation vulnerability in the Microsoft Windows AppX Deployment Service (AppXSVC) caused by improper handling of hard links. Successful exploitation allows an attacker to run processes with elevated privileges. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns.
CVE-2019-0841 is a privilege escalation vulnerability in the Microsoft Windows AppX Deployment Service (AppXSVC) caused by improper handling of hard links. Successful exploitation allows an attacker to run processes with elevated privileges. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns.
CVE-2019-0543 is a privilege escalation vulnerability in Microsoft Windows where improper handling of authentication requests allows an attacker to run processes with elevated privileges. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected Windows versions are provided in the available data.
CVE-2018-8120 is a high-severity privilege escalation vulnerability in the Windows Win32k component. It arises from improper handling of objects in memory, allowing attackers to escalate privileges. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns.
CVE-2017-0101 is a privilege escalation vulnerability in Microsoft Windows Transaction Manager caused by improper handling of objects in memory. This flaw allows attackers to elevate privileges on affected systems. It has been exploited in the wild and is known to be used in ransomware campaigns.
CVE-2019-1069 is a high-severity privilege escalation vulnerability in Microsoft Task Scheduler. It arises from improper validation of certain file operations by the Task Scheduler Service. This flaw allows an attacker with limited privileges to escalate their privileges on the affected system. The vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns.
CVE-2016-3309 is a privilege escalation vulnerability in the Microsoft Windows kernel caused by improper handling of objects in memory. Successful exploitation allows an attacker to execute arbitrary code in kernel mode. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected Windows versions or patch information is provided in the available data.
CVE-2015-2546 is a memory corruption vulnerability in the Microsoft Windows kernel-mode driver Win32k. It allows local users to gain elevated privileges by executing a crafted application. The vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns.