CVE-2017-0261 is a use-after-free vulnerability in Microsoft Office that allows remote code execution. This vulnerability has been exploited in the wild, posing a high risk to affected systems. No specific affected versions or patch information is provided in the available data.
CVE-2017-0001 is a privilege escalation vulnerability in the Microsoft Graphics Device Interface (GDI) affecting multiple Windows versions including Vista SP2, Windows 7 SP1, Windows 8.1, Windows 10, and various Windows Server editions. This flaw allows local users to gain elevated privileges on affected systems. The vulnerability has been exploited in the wild, indicating active threat use. No explicit patch or remediation details are provided in the input data.
CVE-2016-8562 is an improper privilege management vulnerability in the Siemens SIMATIC Communication Processor (CP 1543-1) that allows a privileged attacker to remotely cause a denial of service condition. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
CVE-2016-7855 is a use-after-free vulnerability in Adobe Flash Player affecting Windows, macOS, and Linux platforms. This flaw allows remote attackers to execute arbitrary code on vulnerable systems. It has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided in the available data.
CVE-2016-7262 is a high-severity security feature bypass vulnerability in Microsoft Excel. It occurs due to improper handling of input, allowing an attacker to execute arbitrary commands if successfully exploited. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
Microsoft Office contains a memory corruption vulnerability (CVE-2016-7193) that can allow remote code execution. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2016-5195 is a race condition vulnerability in the Linux kernel's mm/gup.c component that allows local users to escalate privileges. This vulnerability has been exploited in the wild and is considered high severity. It affects the Linux kernel but specific affected versions are not provided in the input data.
CVE-2016-1019 is a high severity vulnerability in Adobe Flash Player that allows remote attackers to cause denial of service or potentially execute arbitrary code. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.
CVE-2016-0099 is a privilege escalation vulnerability in Microsoft Windows involving the Secondary Logon Service's improper management of request handles in memory. Successful exploitation allows an attacker to execute arbitrary code with administrator privileges. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns.
CVE-2015-7645 is a high severity vulnerability in Adobe Flash Player that allows remote attackers to execute arbitrary code via a crafted SWF file. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns.
CVE-2015-5119 is a use-after-free vulnerability in the ActionScript 3 ByteArray class of Adobe Flash Player that enables remote code execution by an attacker. This vulnerability has been exploited in the wild. It is classified as high severity due to its potential impact on system compromise.
CVE-2015-4902 is an unspecified vulnerability in Oracle Java SE that allows remote attackers to affect the integrity of the system through unknown deployment-related vectors. The vulnerability has been exploited in the wild, indicating active use by attackers. No specific affected versions or detailed technical information are provided.
CVE-2015-3043 is a memory corruption vulnerability in Adobe Flash Player that enables remote code execution by an attacker. It has been exploited in the wild, indicating active use by threat actors. The vulnerability is classified as high severity due to its potential impact. No specific affected versions or patch information are provided in the input data.
CVE-2015-2590 is a high-severity remote code execution vulnerability in Oracle Java SE and Java SE Embedded. It allows attackers to execute arbitrary code remotely via an unspecified flaw in the Java Runtime Environment. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2015-2387 is a privilege escalation vulnerability in the Adobe Type Manager Font Driver (ATMFD.DLL) on Microsoft Windows Server. It allows local users to gain elevated privileges by executing a crafted application. This vulnerability has been exploited in the wild, indicating active use by attackers. No specific affected versions or patch information is provided in the available data.
CVE-2015-1701 is a privilege escalation vulnerability in the Win32k.sys kernel-mode driver in Microsoft Windows Server. It allows a local attacker to execute arbitrary code with elevated privileges. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.
CVE-2015-1642 is a memory corruption vulnerability in Microsoft Office that allows remote attackers to execute arbitrary code via a crafted document. It has been exploited in the wild and is considered a high severity threat.
CVE-2014-0496 is a use-after-free vulnerability in Adobe Reader and Acrobat that can lead to code execution. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2013-5065 is a privilege escalation vulnerability in the Microsoft Windows kernel component NDProxy.sys. It arises from improper input validation, allowing a local attacker to escalate privileges on the affected system. This vulnerability has been exploited in the wild. No specific affected Windows versions or patch information are provided in the available data.
CVE-2013-3897 is a use-after-free vulnerability in the CDisplayPointer component of Microsoft Internet Explorer. This flaw allows remote attackers to execute arbitrary code on affected systems. The vulnerability has been exploited in the wild, indicating active attacks leveraging this issue. No specific affected versions or patch information is provided in the input data.