Updated daily · official sources
Vulnerabilities (CVE) being actively exploited, according to the CISA KEV catalog, with CVSS severity and exploitation probability (EPSS).
CVE-2016-0167
Severity under analysis Ransomware added on 11/03/2021
Microsoft · Win32k · CWE-264
Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation via a crafted application
CVE-2014-1812
Severity under analysis Ransomware added on 11/03/2021
Microsoft · Windows · CWE-255
Microsoft Windows Active Directory contains a privilege escalation vulnerability due to the way it distributes passwords that are configured using Group Policy preferences. An authenticated attacker who successfully exploits the vulnerability could decrypt the passwords and use them to elevate privileges on the domain.
CVE-2012-0158
Severity under analysis Ransomware added on 11/03/2021
Microsoft · MSCOMCTL.OCX · CWE-94
Microsoft MSCOMCTL.OCX contains an unspecified vulnerability that allows for remote code execution, allowing an attacker to take complete control of an affected system under the context of the current user.
We assess versions, access and integrations of your ERP and infrastructure and prioritize the fixes.
Sources: CISA Known Exploited Vulnerabilities Catalog, NIST National Vulnerability Database and FIRST EPSS. Informational content; always follow the vendor advisory and fix.
This product uses the NVD API but is not endorsed or certified by the NVD.
Bit is an AI and can make mistakes. Do not share passwords or personal data. Conversations are not stored. Learn more