Security Radar

CVE-2016-5195 Severity under analysis added on 03/03/2022

Linux Kernel Race Condition Vulnerability

Linux · Kernel · CWE-362

Race condition in mm/gup.c in the Linux kernel allows local users to escalate privileges.

CVE-2016-4117 Severity under analysis Ransomware added on 03/03/2022

Adobe Flash Player Arbitrary Code Execution Vulnerability

Adobe · Flash Player

An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution.

CVE-2016-1019 Severity under analysis Ransomware added on 03/03/2022

Adobe Flash Player Arbitrary Code Execution Vulnerability

Adobe · Flash Player

Adobe Flash Player allows remote attackers to cause a denial of service or possibly execute arbitrary code.

CVE-2016-0099 Severity under analysis Ransomware added on 03/03/2022

Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability

Microsoft · Windows · CWE-264

A privilege escalation vulnerability exists in Microsoft Windows if the Windows Secondary Logon Service fails to properly manage request handles in memory. An attacker who successfully exploited this vulnerability could run arbitrary code as an administrator.

CVE-2015-7645 Severity under analysis Ransomware added on 03/03/2022

Adobe Flash Player Arbitrary Code Execution Vulnerability

Adobe · Flash Player

Adobe Flash Player allows remote attackers to execute arbitrary code via a crafted SWF file.

CVE-2015-5119 Severity under analysis added on 03/03/2022

Adobe Flash Player Use-After-Free Vulnerability

Adobe · Flash Player · CWE-119

A use-after-free vulnerability exists within the ActionScript 3 ByteArray class in Adobe Flash Player that allows an attacker to perform remote code execution.

CVE-2015-4902 Severity under analysis added on 03/03/2022

Oracle Java SE Integrity Check Vulnerability

Oracle · Java SE

Unspecified vulnerability in Oracle Java SE allows remote attackers to affect integrity via Unknown vectors related to deployment.

CVE-2015-3043 Severity under analysis added on 03/03/2022

Adobe Flash Player Memory Corruption Vulnerability

Adobe · Flash Player · CWE-787

A memory corruption vulnerability exists in Adobe Flash Player that allows an attacker to perform remote code execution.

CVE-2015-2590 Severity under analysis added on 03/03/2022

Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability

Oracle · Java SE

An unspecified vulnerability exists within Oracle Java Runtime Environment that allows an attacker to perform remote code execution.

CVE-2015-2545 Severity under analysis added on 03/03/2022

Microsoft Office Malformed EPS File Vulnerability

Microsoft · Office · CWE-20

Microsoft Office allows remote attackers to execute arbitrary code via a crafted EPS image.

CVE-2015-2424 Severity under analysis added on 03/03/2022

Microsoft PowerPoint Memory Corruption Vulnerability

Microsoft · PowerPoint · CWE-119

Microsoft PowerPoint allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document.

CVE-2015-2387 Severity under analysis added on 03/03/2022

Microsoft ATM Font Driver Privilege Escalation Vulnerability

Microsoft · ATM Font Driver · CWE-264

ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server allows local users to gain privileges via a crafted application.

CVE-2015-1701 Severity under analysis Ransomware added on 03/03/2022

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32k · CWE-264

An unspecified vulnerability exists in the Win32k.sys kernel-mode driver in Microsoft Windows Server that allows a local attacker to execute arbitrary code with elevated privileges.

CVE-2015-1642 Severity under analysis added on 03/03/2022

Microsoft Office Memory Corruption Vulnerability

Microsoft · Office · CWE-119

Microsoft Office contains a memory corruption vulnerability that allows remote attackers to execute arbitrary code via a crafted document.

CVE-2014-4114 Severity under analysis added on 03/03/2022

Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability

Microsoft · Windows · CWE-20

A vulnerability exists in Windows Object Linking & Embedding (OLE) that could allow remote code execution if a user opens a file that contains a specially crafted OLE object.

CVE-2014-0496 Severity under analysis added on 03/03/2022

Adobe Reader and Acrobat Use-After-Free Vulnerability

Adobe · Reader and Acrobat · CWE-399

Adobe Reader and Acrobat contain a use-after-free vulnerability which can allow for code execution.

CVE-2013-5065 Severity under analysis added on 03/03/2022

Microsoft Windows Kernel Privilege Escalation Vulnerability

Microsoft · Windows · CWE-20

Microsoft Windows NDProxy.sys in the kernel contains an improper input validation vulnerability which can allow a local attacker to escalate privileges.

CVE-2013-3897 Severity under analysis added on 03/03/2022

Microsoft Internet Explorer Use-After-Free Vulnerability

Microsoft · Internet Explorer · CWE-399

A use-after-free vulnerability exists within CDisplayPointer in Microsoft Internet Explorer that allows an attacker to remotely execute arbitrary code.

CVE-2013-3346 Severity under analysis added on 03/03/2022

Adobe Reader and Acrobat Memory Corruption Vulnerability

Adobe · Reader and Acrobat · CWE-119

Adobe Reader and Acrobat contain a memory corruption vulnerability which can allow attackers to execute arbitrary code or cause a denial of service.

CVE-2013-1675 Severity under analysis added on 03/03/2022

Mozilla Firefox Information Disclosure Vulnerability

Mozilla · Firefox · CWE-119

Mozilla Firefox does not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.

CVE-2013-1347 Severity under analysis added on 03/03/2022

Microsoft Internet Explorer Remote Code Execution Vulnerability

Microsoft · Internet Explorer · CWE-94

This vulnerability may corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user within Internet Explorer.

CVE-2013-0641 Severity under analysis added on 03/03/2022

Adobe Reader Buffer Overflow Vulnerability

Adobe · Reader · CWE-120

A buffer overflow vulnerability exists in Adobe Reader which allows an attacker to perform remote code execution.

CVE-2013-0640 Severity under analysis added on 03/03/2022

Adobe Reader and Acrobat Memory Corruption Vulnerability

Adobe · Reader and Acrobat · CWE-787

An memory corruption vulnerability exists in the acroform.dll in Adobe Reader that allows an attacker to perform remote code execution.

CVE-2013-0632 Severity under analysis added on 03/03/2022

Adobe ColdFusion Authentication Bypass Vulnerability

Adobe · ColdFusion · CWE-200

An authentication bypass vulnerability exists in Adobe ColdFusion which could result in an unauthorized user gaining administrative access.