Security Radar

CVE-2019-0543 Severity under analysis Ransomware added on 03/15/2022

Microsoft Windows Privilege Escalation Vulnerability

Microsoft · Windows · CWE-287

A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

CVE-2018-8120 Severity under analysis Ransomware added on 03/15/2022

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32k · CWE-404

A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.

CVE-2017-0101 Severity under analysis Ransomware added on 03/15/2022

Microsoft Windows Transaction Manager Privilege Escalation Vulnerability

Microsoft · Windows · CWE-119

A privilege escalation vulnerability exists when the Windows Transaction Manager improperly handles objects in memory.

CVE-2016-3309 Severity under analysis Ransomware added on 03/15/2022

Microsoft Windows Kernel Privilege Escalation Vulnerability

Microsoft · Windows · CWE-264

A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.

CVE-2015-2546 Severity under analysis Ransomware added on 03/15/2022

Microsoft Win32k Memory Corruption Vulnerability

Microsoft · Win32k · CWE-119

The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application.

CVE-2009-3960 Severity under analysis Ransomware added on 03/07/2022

Adobe BlazeDS Information Disclosure Vulnerability

Adobe · BlazeDS

Adobe BlazeDS, which is utilized in LifeCycle and Coldfusion, contains a vulnerability that allows for information disclosure.

CVE-2021-41379 Severity under analysis Ransomware added on 03/03/2022

Microsoft Windows Installer Privilege Escalation Vulnerability

Microsoft · Windows · CWE-1386

Microsoft Windows Installer contains an unspecified vulnerability that allows for privilege escalation.

CVE-2018-8581 Severity under analysis Ransomware added on 03/03/2022

Microsoft Exchange Server Privilege Escalation Vulnerability

Microsoft · Exchange Server

A privilege escalation vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could attempt to impersonate any other user of the Exchange server.

CVE-2016-4117 Severity under analysis Ransomware added on 03/03/2022

Adobe Flash Player Arbitrary Code Execution Vulnerability

Adobe · Flash Player

An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution.

CVE-2016-1019 Severity under analysis Ransomware added on 03/03/2022

Adobe Flash Player Arbitrary Code Execution Vulnerability

Adobe · Flash Player

Adobe Flash Player allows remote attackers to cause a denial of service or possibly execute arbitrary code.

CVE-2016-0099 Severity under analysis Ransomware added on 03/03/2022

Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability

Microsoft · Windows · CWE-264

A privilege escalation vulnerability exists in Microsoft Windows if the Windows Secondary Logon Service fails to properly manage request handles in memory. An attacker who successfully exploited this vulnerability could run arbitrary code as an administrator.

CVE-2015-7645 Severity under analysis Ransomware added on 03/03/2022

Adobe Flash Player Arbitrary Code Execution Vulnerability

Adobe · Flash Player

Adobe Flash Player allows remote attackers to execute arbitrary code via a crafted SWF file.

CVE-2015-1701 Severity under analysis Ransomware added on 03/03/2022

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32k · CWE-264

An unspecified vulnerability exists in the Win32k.sys kernel-mode driver in Microsoft Windows Server that allows a local attacker to execute arbitrary code with elevated privileges.

CVE-2012-4681 Severity under analysis Ransomware added on 03/03/2022

Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

Oracle · Java SE

The Java Runtime Environment (JRE) component in Oracle Java SE allow for remote code execution.

CVE-2012-1723 Severity under analysis Ransomware added on 03/03/2022

Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

Oracle · Java SE

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to Hotspot.

CVE-2012-0507 Severity under analysis Ransomware added on 03/03/2022

Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

Oracle · Java SE

An incorrect type vulnerability exists in the Concurrency component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code.

CVE-2010-0188 Severity under analysis Ransomware added on 03/03/2022

Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability

Adobe · Reader and Acrobat · CWE-94

Unspecified vulnerability in Adobe Reader and Acrobat allows attackers to cause a denial of service or possibly execute arbitrary code.

CVE-2008-2992 Severity under analysis Ransomware added on 03/03/2022

Adobe Reader and Acrobat Input Validation Vulnerability

Adobe · Acrobat and Reader · CWE-119

Adobe Acrobat and Reader contain an input validation issue in a JavaScript method that could potentially lead to remote code execution.

CVE-2022-24682 Severity under analysis Ransomware added on 02/25/2022

Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability

Synacor · Zimbra Collaborate Suite (ZCS) · CWE-79, CWE-116

Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) vulnerability in the Calendar feature that allows an attacker to execute arbitrary code.

CVE-2019-0752 Severity under analysis Ransomware added on 02/15/2022

Microsoft Internet Explorer Type Confusion Vulnerability

Microsoft · Internet Explorer · CWE-843

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer

CVE-2018-8174 Severity under analysis Ransomware added on 02/15/2022

Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability

Microsoft · Windows · CWE-787

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution"

CVE-2018-20250 Severity under analysis Ransomware added on 02/15/2022

WinRAR Absolute Path Traversal Vulnerability

RARLAB · WinRAR · CWE-36

WinRAR Absolute Path Traversal vulnerability leads to Remote Code Execution

CVE-2018-15982 Severity under analysis Ransomware added on 02/15/2022

Adobe Flash Player Use-After-Free Vulnerability

Adobe · Flash Player · CWE-416

Adobe Flash Player com.adobe.tvsdk.mediacore.metadata Use After Free Vulnerability

CVE-2020-0796 Severity under analysis Ransomware added on 02/10/2022

Microsoft SMBv3 Remote Code Execution Vulnerability

Microsoft · SMBv3 · CWE-119

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server or client.