Adobe Acrobat and Reader have an input validation vulnerability in a JavaScript method that can lead to remote code execution. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.
CVE-2004-0210 is a privilege escalation vulnerability in the Microsoft Windows POSIX subsystem that allows a logged-on user to gain complete control of the system. It has been exploited in the wild. No specific affected versions or patch information is provided.
A vulnerability in the smss.exe debugging subsystem of Microsoft Windows allows local users to escalate privileges to administrator or SYSTEM level by exploiting improper authentication of inter-process connections.
CVE-2014-4114 is a high-severity remote code execution vulnerability in Microsoft Windows Object Linking & Embedding (OLE). It allows an attacker to execute arbitrary code if a user opens a file containing a specially crafted OLE object. The vulnerability requires user interaction and local access vector. It has been exploited in the wild.
CVE-2015-2424 is a high-severity memory corruption vulnerability in Microsoft PowerPoint that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted Office document. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2015-2545 is a high-severity vulnerability in Microsoft Office that allows remote attackers to execute arbitrary code by using a specially crafted EPS image file. The vulnerability requires user interaction to trigger and has been exploited in the wild. It affects Microsoft Office products but no specific affected versions are detailed in the provided data.
CVE-2016-4117 is a high-severity vulnerability in Adobe Flash Player that allows remote code execution due to an access of resource using incompatible type. It requires user interaction to exploit and has been observed in the wild, including use in ransomware campaigns.
CVE-2022-24682 is a high-severity cross-site scripting (XSS) vulnerability in the Calendar feature of Synacor Zimbra Collaboration Suite (ZCS). This flaw allows attackers to execute arbitrary code by injecting malicious scripts. The vulnerability has been exploited in the wild and is known to be used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.
CVE-2017-8570 is a remote code execution vulnerability in Microsoft Office caused by improper handling of objects in memory. This flaw allows an attacker to execute arbitrary code remotely. The vulnerability has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information are provided in the input data.
CVE-2017-0222 is a high-severity remote code execution vulnerability in Microsoft Internet Explorer. It occurs due to improper access to objects in memory, allowing attackers to execute arbitrary code remotely. This vulnerability has been exploited in the wild.
CVE-2014-6352 is a high-severity vulnerability in Microsoft Windows that allows remote attackers to execute arbitrary code by leveraging a crafted OLE object. This code injection flaw has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information are provided in the available data.
CVE-2022-23131 is a high-severity vulnerability in the Zabbix Frontend that allows authentication bypass due to unsafe client-side session storage when SAML is configured. This flaw can lead to unauthorized access or takeover of the Zabbix instance. Exploitation of this vulnerability has been observed in the wild.
CVE-2022-23134 is a high-severity vulnerability in the Zabbix Frontend that allows malicious actors to bypass step checks and potentially modify the frontend configuration. This improper access control issue has been exploited in the wild. No specific affected versions or patch information is provided.
CVE-2022-24086 is an improper input validation vulnerability in Adobe Commerce and Magento Open Source that can lead to arbitrary code execution. This vulnerability has been exploited in the wild, indicating active attacks. The severity is high due to the potential for attackers to execute arbitrary code on affected systems.
CVE-2022-0609 is a use-after-free vulnerability in the Google Chromium Animation component that can be triggered by a crafted HTML page. This flaw affects multiple Chromium-based browsers such as Google Chrome, Microsoft Edge, and Opera. Exploitation can lead to heap corruption, potentially allowing remote attackers to execute arbitrary code or cause a denial of service. The vulnerability has been observed exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2019-0752 is a high-severity remote code execution vulnerability in Microsoft Internet Explorer. It arises from a type confusion issue in the scripting engine's handling of objects in memory. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns.
CVE-2018-8174 is a remote code execution vulnerability in the Microsoft Windows VBScript engine caused by an out-of-bounds write when handling objects in memory. This flaw allows attackers to execute arbitrary code remotely. It has been exploited in the wild and is associated with known ransomware campaigns.
CVE-2017-9841 is a command injection vulnerability in PHPUnit that allows remote attackers to execute arbitrary PHP code via HTTP POST data starting with a "<?php " substring. This occurs when a site exposes the /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php URI, enabling external access to this evaluation script. The vulnerability has been exploited in the wild.
A memory corruption vulnerability exists in Microsoft Word that can be exploited to achieve remote code execution. This vulnerability has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided in the available data.
CVE-2013-3906 is a memory corruption vulnerability in the Microsoft Graphics Component that can allow remote code execution. It has been exploited in the wild. No specific affected versions or patch information is provided in the available data.