Updated daily · official sources
Vulnerabilities (CVE) being actively exploited, according to the CISA KEV catalog, with CVSS severity and exploitation probability (EPSS).
CVE-2016-7855
Severity under analysis added on 03/03/2022
Adobe · Flash Player · CWE-416
Use-after-free vulnerability in Adobe Flash Player Windows and OS and Linux allows remote attackers to execute arbitrary code.
CVE-2016-7262
Severity under analysis added on 03/03/2022
Microsoft · Excel · CWE-20
A security feature bypass vulnerability exists when Microsoft Office improperly handles input. An attacker who successfully exploited the vulnerability could execute arbitrary commands.
CVE-2016-7193
Severity under analysis added on 03/03/2022
Microsoft · Office · CWE-119
Microsoft Office contains a memory corruption vulnerability which can allow for remote code execution.
CVE-2016-5195
Severity under analysis added on 03/03/2022
Linux · Kernel · CWE-362
Race condition in mm/gup.c in the Linux kernel allows local users to escalate privileges.
CVE-2016-4117
Severity under analysis Ransomware added on 03/03/2022
Adobe · Flash Player
An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution.
CVE-2016-1019
Severity under analysis Ransomware added on 03/03/2022
Adobe · Flash Player
Adobe Flash Player allows remote attackers to cause a denial of service or possibly execute arbitrary code.
CVE-2016-0099
Severity under analysis Ransomware added on 03/03/2022
Microsoft · Windows · CWE-264
A privilege escalation vulnerability exists in Microsoft Windows if the Windows Secondary Logon Service fails to properly manage request handles in memory. An attacker who successfully exploited this vulnerability could run arbitrary code as an administrator.
CVE-2015-7645
Severity under analysis Ransomware added on 03/03/2022
Adobe · Flash Player
Adobe Flash Player allows remote attackers to execute arbitrary code via a crafted SWF file.
CVE-2015-5119
Severity under analysis added on 03/03/2022
Adobe · Flash Player · CWE-119
A use-after-free vulnerability exists within the ActionScript 3 ByteArray class in Adobe Flash Player that allows an attacker to perform remote code execution.
CVE-2015-4902
Severity under analysis added on 03/03/2022
Oracle · Java SE
Unspecified vulnerability in Oracle Java SE allows remote attackers to affect integrity via Unknown vectors related to deployment.
CVE-2015-3043
Severity under analysis added on 03/03/2022
Adobe · Flash Player · CWE-787
A memory corruption vulnerability exists in Adobe Flash Player that allows an attacker to perform remote code execution.
CVE-2015-2590
Severity under analysis added on 03/03/2022
Oracle · Java SE
An unspecified vulnerability exists within Oracle Java Runtime Environment that allows an attacker to perform remote code execution.
CVE-2015-2545
Severity under analysis added on 03/03/2022
Microsoft · Office · CWE-20
Microsoft Office allows remote attackers to execute arbitrary code via a crafted EPS image.
CVE-2015-2424
Severity under analysis added on 03/03/2022
Microsoft · PowerPoint · CWE-119
Microsoft PowerPoint allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document.
CVE-2015-2387
Severity under analysis added on 03/03/2022
Microsoft · ATM Font Driver · CWE-264
ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server allows local users to gain privileges via a crafted application.
CVE-2015-1701
Severity under analysis Ransomware added on 03/03/2022
Microsoft · Win32k · CWE-264
An unspecified vulnerability exists in the Win32k.sys kernel-mode driver in Microsoft Windows Server that allows a local attacker to execute arbitrary code with elevated privileges.
CVE-2015-1642
Severity under analysis added on 03/03/2022
Microsoft · Office · CWE-119
Microsoft Office contains a memory corruption vulnerability that allows remote attackers to execute arbitrary code via a crafted document.
CVE-2014-4114
Severity under analysis added on 03/03/2022
Microsoft · Windows · CWE-20
A vulnerability exists in Windows Object Linking & Embedding (OLE) that could allow remote code execution if a user opens a file that contains a specially crafted OLE object.
CVE-2014-0496
Severity under analysis added on 03/03/2022
Adobe · Reader and Acrobat · CWE-399
Adobe Reader and Acrobat contain a use-after-free vulnerability which can allow for code execution.
CVE-2013-5065
Severity under analysis added on 03/03/2022
Microsoft · Windows · CWE-20
Microsoft Windows NDProxy.sys in the kernel contains an improper input validation vulnerability which can allow a local attacker to escalate privileges.
CVE-2013-3897
Severity under analysis added on 03/03/2022
Microsoft · Internet Explorer · CWE-399
A use-after-free vulnerability exists within CDisplayPointer in Microsoft Internet Explorer that allows an attacker to remotely execute arbitrary code.
CVE-2013-3346
Severity under analysis added on 03/03/2022
Adobe · Reader and Acrobat · CWE-119
Adobe Reader and Acrobat contain a memory corruption vulnerability which can allow attackers to execute arbitrary code or cause a denial of service.
CVE-2013-1347
Severity under analysis added on 03/03/2022
Microsoft · Internet Explorer · CWE-94
This vulnerability may corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user within Internet Explorer.
CVE-2013-0641
Severity under analysis added on 03/03/2022
Adobe · Reader · CWE-120
A buffer overflow vulnerability exists in Adobe Reader which allows an attacker to perform remote code execution.
We assess versions, access and integrations of your ERP and infrastructure and prioritize the fixes.
Sources: CISA Known Exploited Vulnerabilities Catalog, NIST National Vulnerability Database and FIRST EPSS. Informational content; always follow the vendor advisory and fix.
This product uses the NVD API but is not endorsed or certified by the NVD.
Bit is an AI and can make mistakes. Do not share passwords or personal data. Conversations are not stored. Learn more