CVE-2018-15982 is a use-after-free vulnerability in Adobe Flash Player's com.adobe.tvsdk.mediacore.metadata component. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns. It has a high severity rating with a CVSS score of 7.8, indicating significant potential impact on confidentiality, integrity, and availability.
CVE-2018-20250 is a high-severity vulnerability in WinRAR involving an absolute path traversal flaw that can lead to remote code execution. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns. The vulnerability allows an attacker to craft malicious archives that, when extracted, can overwrite arbitrary files on the victim's system, potentially leading to full system compromise.
CVE-2022-22620 is a use-after-free vulnerability in Apple iOS, iPadOS, and macOS WebKit that allows code execution when processing malicious web content. It affects HTML parsers using WebKit, including Apple Safari and other products relying on WebKit. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
CVE-2021-36934 is a local privilege escalation vulnerability in Microsoft Windows where users can read the SAM file if a Volume Shadow Copy (VSS) shadow copy of the system drive is accessible. This allows any user to escalate privileges to SYSTEM level.
CVE-2020-0796 is a remote code execution vulnerability in Microsoft SMBv3 protocol. It allows an attacker to execute code on affected servers or clients by exploiting how SMBv3 handles certain requests. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns.
CVE-2018-1000861 is a high-severity code execution vulnerability in the Stapler web framework used by Jenkins. It involves deserialization of untrusted data, which can lead to remote code execution. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the input data.
CVE-2017-9791 is a high severity vulnerability in Apache Struts 1 where improper input validation in the Struts 1 plugin can allow remote code execution. This occurs when a malicious field value is passed in a raw message to the ActionMessage component. The vulnerability has been exploited in the wild.
CVE-2017-8464 is a remote code execution vulnerability in the Windows Shell that allows local or remote attackers to execute arbitrary code via a specially crafted .LNK file. This vulnerability affects multiple versions of Microsoft Windows. It has been exploited in the wild, indicating active use by attackers. No specific affected versions or patch information is provided in the input data.
CVE-2017-10271 is a high severity remote code execution vulnerability in Oracle WebLogic Server. It has been exploited in the wild and is known to be used in ransomware campaigns. The vulnerability allows attackers to execute arbitrary code remotely on affected WebLogic Server instances.
CVE-2017-0263 is a privilege escalation vulnerability in the Microsoft Win32k component. It arises because the Windows kernel-mode driver improperly handles objects in memory. This flaw has been exploited in the wild, indicating active use by attackers. The vulnerability allows an attacker to gain elevated privileges on affected systems.
CVE-2017-0262 is a remote code execution vulnerability in Microsoft Office. It has been exploited in the wild, indicating active attacks leveraging this flaw. No specific affected versions or patch information is provided in the available data.
CVE-2017-0145 is a remote code execution vulnerability in the SMBv1 server component of multiple Microsoft Windows versions. It allows remote attackers to execute arbitrary code by sending specially crafted packets. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. It is considered a high severity threat due to its potential impact on affected systems.
CVE-2017-0144 is a remote code execution vulnerability in the SMBv1 server component of multiple Microsoft Windows versions. It allows remote attackers to execute arbitrary code by sending specially crafted packets. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns.
Apache ActiveMQ's Fileserver web application contains an improper input validation vulnerability that allows remote attackers to upload and execute arbitrary files via a sequence of HTTP PUT and MOVE requests. This vulnerability has been exploited in the wild and is considered high severity.
The D-Link DIR-645 Wired/Wireless Router contains a remote code execution vulnerability via the HNAP interface's GetDeviceSettings action. This flaw allows remote attackers to execute arbitrary commands on the affected device. The vulnerability is known to be exploited in the wild. No specific affected versions or patch information is provided.
CVE-2015-1635 is a high-severity vulnerability in the Microsoft HTTP protocol stack (HTTP.sys) that allows remote code execution. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2015-1130 is an authentication bypass vulnerability in the XPC implementation of the Admin Framework in Apple OS X versions prior to 10.10.3. This flaw allows local users to bypass authentication mechanisms and gain administrative privileges on affected systems. The vulnerability has been exploited in the wild. No explicit patch links are provided in the input data, but the vulnerability affects OS X versions before 10.10.3.
CVE-2014-4404 is a heap-based buffer overflow vulnerability in the IOHIDFamily component of Apple OS X. It affects iOS versions before 8 and Apple TV versions before 7. This vulnerability allows attackers to execute arbitrary code with elevated privileges. It has been exploited in the wild, indicating active use by threat actors. No specific affected OS X versions are provided in the data. The severity is assessed as high due to the potential for privileged code execution.
CVE-2022-21882 is a high-severity privilege escalation vulnerability in Microsoft Win32k. The vulnerability is unspecified in detail but is known to be exploited in the wild, including use in ransomware campaigns. No specific affected versions or patch information is provided.
A memory corruption vulnerability exists in Apple IOMobileFrameBuffer that allows a malicious application to execute arbitrary code with kernel privileges on iOS and macOS devices. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.