Updated daily · official sources

Security Radar

Vulnerabilities (CVE) being actively exploited, according to the CISA KEV catalog, with CVSS severity and exploitation probability (EPSS).

34exploited in the last 30 days
13critical (CVSS ≥ 9)
0used in ransomware
1768in the KEV catalog
1768 result(s)
CVE-2016-5198 Severity under analysis added on 06/08/2022

Google Chromium V8 Out-of-Bounds Memory Vulnerability

Google · Chromium V8 · CWE-125, CWE-787

Google Chromium V8 Engine contains an out-of-bounds memory access vulnerability that allows a remote attacker to perform read/write operations, leading to code execution, via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

CISA deadline: 06/22/2022 NVD ↗
CVE-2016-1646 Severity under analysis added on 06/08/2022

Google Chromium V8 Out-of-Bounds Read Vulnerability

Google · Chromium V8 · CWE-119

Google Chromium V8 Engine contains an out-of-bounds read vulnerability that allows a remote attacker to cause a denial of service or possibly have another unspecified impact via crafted JavaScript code. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

CISA deadline: 06/22/2022 NVD ↗
CVE-2013-1331 Severity under analysis added on 06/08/2022

Microsoft Office Buffer Overflow Vulnerability

Microsoft · Office · CWE-119

Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via crafted PNG data in an Office document.

CISA deadline: 06/22/2022 NVD ↗
CVE-2012-5054 Severity under analysis added on 06/08/2022

Adobe Flash Player Integer Overflow Vulnerability

Adobe · Flash Player · CWE-189

Adobe Flash Player contains an integer overflow vulnerability that allows remote attackers to execute code via malformed arguments.

CISA deadline: 06/22/2022 NVD ↗
CVE-2012-4969 Severity under analysis added on 06/08/2022

Microsoft Internet Explorer Use-After-Free Vulnerability

Microsoft · Internet Explorer

Microsoft Internet Explorer contains a use-after-free vulnerability that allows remote attackers to execute code via a crafted web site.

CISA deadline: 06/22/2022 NVD ↗
CVE-2012-1889 Severity under analysis added on 06/08/2022

Microsoft XML Core Services Memory Corruption Vulnerability

Microsoft · XML Core Services · CWE-119

Microsoft XML Core Services contains a memory corruption vulnerability which could allow for remote code execution.

CISA deadline: 06/22/2022 NVD ↗
CVE-2012-0767 Severity under analysis added on 06/08/2022

Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability

Adobe · Flash Player · CWE-79

Adobe Flash Player contains a XSS vulnerability that allows remote attackers to inject web script or HTML.

CISA deadline: 06/22/2022 NVD ↗
CVE-2012-0754 Severity under analysis added on 06/08/2022

Adobe Flash Player Memory Corruption Vulnerability

Adobe · Flash Player · CWE-787

Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).

CISA deadline: 06/22/2022 NVD ↗
CVE-2012-0151 Severity under analysis added on 06/08/2022

Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability

Microsoft · Windows · CWE-20

The Authenticode Signature Verification function in Microsoft Windows (WinVerifyTrust) does not properly validate the digest of a signed portable executable (PE) file, which allows user-assisted remote attackers to execute code.

CISA deadline: 06/22/2022 NVD ↗
CVE-2011-2462 Severity under analysis added on 06/08/2022

Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability

Adobe · Reader and Acrobat · CWE-787

The Universal 3D (U3D) component in Adobe Reader and Acrobat contains a memory corruption vulnerability which could allow remote attackers to execute code or cause denial-of-service (DoS).

CISA deadline: 06/22/2022 NVD ↗
CVE-2011-0609 Severity under analysis added on 06/08/2022

Adobe Flash Player Unspecified Vulnerability

Adobe · Flash Player

Adobe Flash Player contains an unspecified vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).

CISA deadline: 06/22/2022 NVD ↗
CVE-2010-2883 Severity under analysis added on 06/08/2022

Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability

Adobe · Acrobat and Reader · CWE-119

Adobe Acrobat and Reader contain a stack-based buffer overflow vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).

CISA deadline: 06/22/2022 NVD ↗
CVE-2010-2572 Severity under analysis added on 06/08/2022

Microsoft PowerPoint Buffer Overflow Vulnerability

Microsoft · PowerPoint · CWE-119

Microsoft PowerPoint contains a buffer overflow vulnerability that alllows for remote code execution.

CISA deadline: 06/22/2022 NVD ↗
CVE-2010-1297 Severity under analysis added on 06/08/2022

Adobe Flash Player Memory Corruption Vulnerability

Adobe · Flash Player · CWE-787

Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).

CISA deadline: 06/22/2022 NVD ↗
CVE-2009-4324 Severity under analysis added on 06/08/2022

Adobe Acrobat and Reader Use-After-Free Vulnerability

Adobe · Acrobat and Reader · CWE-399

Use-after-free vulnerability in Adobe Acrobat and Reader allows remote attackers to execute code via a crafted PDF file.

CISA deadline: 06/22/2022 NVD ↗
CVE-2009-3953 Severity under analysis added on 06/08/2022

Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability

Adobe · Acrobat and Reader · CWE-119

Adobe Acrobat and Reader contains an array boundary issue in Universal 3D (U3D) support that could lead to remote code execution.

CISA deadline: 06/22/2022 NVD ↗
CVE-2009-1862 Severity under analysis added on 06/08/2022

Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability

Adobe · Acrobat and Reader, Flash Player · CWE-94

Adobe Acrobat and Reader and Adobe Flash Player allows remote attackers to execute code or cause denial-of-service (DoS).

CISA deadline: 06/22/2022 NVD ↗
CVE-2009-0563 Severity under analysis added on 06/08/2022

Microsoft Office Buffer Overflow Vulnerability

Microsoft · Office · CWE-119

Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via a Word document with a crafted tag containing an invalid length field.

CISA deadline: 06/22/2022 NVD ↗
CVE-2009-0557 Severity under analysis added on 06/08/2022

Microsoft Office Object Record Corruption Vulnerability

Microsoft · Office · CWE-94

Microsoft Office contains an object record corruption vulnerability that allows remote attackers to execute code via a crafted Excel file with a malformed record object.

CISA deadline: 06/22/2022 NVD ↗
CVE-2008-0655 Severity under analysis added on 06/08/2022

Adobe Acrobat and Reader Unspecified Vulnerability

Adobe · Acrobat and Reader

Adobe Acrobat and Reader contains an unespecified vulnerability described as a design flaw which could allow a specially crafted file to be printed silently an arbitrary number of times.

CISA deadline: 06/22/2022 NVD ↗
CVE-2007-5659 Severity under analysis added on 06/08/2022

Adobe Acrobat and Reader Buffer Overflow Vulnerability

Adobe · Acrobat and Reader · CWE-119

Adobe Acrobat and Reader contain a buffer overflow vulnerability that allows remote attackers to execute code via a PDF file with long arguments to unspecified JavaScript methods.

CISA deadline: 06/22/2022 NVD ↗
CVE-2006-2492 Severity under analysis added on 06/08/2022

Microsoft Word Malformed Object Pointer Vulnerability

Microsoft · Word · CWE-120

Microsoft Word and Microsoft Works Suites contain a malformed object pointer which allows attackers to execute code.

CISA deadline: 06/22/2022 NVD ↗
CVE-2022-26134 Severity under analysis Ransomware added on 06/02/2022

Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability

Atlassian · Confluence Server/Data Center · CWE-917

Atlassian Confluence Server and Data Center contain a remote code execution vulnerability that allows for an unauthenticated attacker to perform remote code execution.

CISA deadline: 06/06/2022 NVD ↗
CVE-2019-3010 Severity under analysis added on 05/25/2022

Oracle Solaris Privilege Escalation Vulnerability

Oracle · Solaris

Oracle Solaris component: XScreenSaver contains an unspecified vulnerability that allows for privilege escalation.

CISA deadline: 06/15/2022 NVD ↗

Want to know if your environment is exposed?

We assess versions, access and integrations of your ERP and infrastructure and prioritize the fixes.

Sources: CISA Known Exploited Vulnerabilities Catalog, NIST National Vulnerability Database and FIRST EPSS. Informational content; always follow the vendor advisory and fix.

This product uses the NVD API but is not endorsed or certified by the NVD.