Adobe Reader and Acrobat contain a memory corruption vulnerability (CVE-2013-3346) that can allow attackers to execute arbitrary code or cause a denial of service. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2013-1675 is an information disclosure vulnerability in Mozilla Firefox caused by improper initialization of data structures related to SVG zoom events. This flaw allows remote attackers to obtain sensitive information from process memory by tricking users into visiting a crafted website. The vulnerability has been exploited in the wild and is considered high severity.
CVE-2013-1347 is a remote code execution vulnerability in Microsoft Internet Explorer that allows an attacker to corrupt memory and execute arbitrary code with the privileges of the current user. It has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided in the input data.
CVE-2013-0641 is a buffer overflow vulnerability in Adobe Reader that enables remote code execution by an attacker. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data.
CVE-2013-0640 is a memory corruption vulnerability in the acroform.dll component of Adobe Reader and Acrobat. This flaw allows remote attackers to execute arbitrary code on affected systems. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2013-0632 is an authentication bypass vulnerability in Adobe ColdFusion that allows unauthorized users to gain administrative access. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
CVE-2012-4681 is a high-severity vulnerability in the Oracle Java SE Runtime Environment (JRE) that allows remote attackers to execute arbitrary code. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.
CVE-2012-1856 is a remote code execution vulnerability in the TabStrip ActiveX control within MSCOMCTL.OCX used by Microsoft Office. An attacker can exploit this flaw by crafting a malicious document or web page that triggers system-state corruption, allowing arbitrary code execution. This vulnerability has been exploited in the wild and is considered high severity.
CVE-2012-1723 is a high-severity vulnerability in the Oracle Java SE Runtime Environment (JRE) that allows remote attackers to execute arbitrary code. The vulnerability affects confidentiality, integrity, and availability through unspecified vectors related to the Hotspot component. It has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.
CVE-2012-1535 is a high-severity vulnerability in Adobe Flash Player that allows remote attackers to execute arbitrary code or cause a denial of service via crafted SWF content. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2012-0507 is a high-severity vulnerability in the Concurrency component of Oracle Java SE Runtime Environment that allows remote attackers to execute arbitrary code. It has been exploited in the wild and is known to be used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.
CVE-2011-3544 is an access control vulnerability in the Applet Rhino Script Engine component of Oracle's Java Runtime Environment (JRE) that allows remote attackers to execute arbitrary code. This vulnerability has been exploited in the wild. It affects Oracle Java SE JDK and JRE products. No specific affected versions or patch information is provided in the available data.
CVE-2011-1889 is a remote code execution vulnerability in the Microsoft Forefront Threat Management Gateway (TMG) Firewall Client Winsock provider. This flaw allows an attacker to execute code in the security context of the client application. It has been exploited in the wild, indicating active use by threat actors. No specific affected versions or patch information is provided in the available data.
Adobe Flash Player contains a remote code execution vulnerability that can be triggered by crafted Flash content. This flaw also allows attackers to cause a denial of service by crashing the application. The vulnerability has been exploited in the wild, indicating active attacks. No specific affected versions or patch information are provided in the input data.
CVE-2010-3333 is a stack-based buffer overflow vulnerability in Microsoft Office's parsing of RTF data that allows remote code execution. It affects Microsoft Office and earlier versions. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data.
CVE-2010-0232 is a privilege escalation vulnerability in the Microsoft Windows kernel that occurs when 16-bit application support is enabled on 32-bit x86 systems. The kernel fails to properly validate certain BIOS calls, allowing local users to gain elevated privileges. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the input data.
CVE-2010-0188 is an unspecified vulnerability in Adobe Reader and Acrobat that allows attackers to cause a denial of service or potentially execute arbitrary code. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.
A vulnerability in Microsoft Excel involving the FEATHEADER record allows remote attackers to execute arbitrary code by crafting a spreadsheet with an invalid cbHdrData size element that corrupts memory via a pointer offset. This vulnerability has been exploited in the wild.
CVE-2009-1123 is a vulnerability in the Microsoft Windows kernel where improper input validation allows local users to gain elevated privileges by using a crafted application. This flaw affects the kernel's handling of certain unspecified kernel objects. The vulnerability has been exploited in the wild, indicating active use by attackers. No specific affected Windows versions or patch information is provided in the available data.
CVE-2008-3431 is an input validation vulnerability in the VBoxDrv.sys driver of Oracle VirtualBox. This flaw allows local attackers to execute arbitrary code on the affected system. The vulnerability has been exploited in the wild, indicating active use by threat actors. No specific affected versions or patch information is provided in the available data.