Known exploited vulnerabilities
Reported exploited by CISA or ENISA EUVD.
- microsoft windows, windows 7, windows 8.1 +8 more +10 more atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and... 8.8 High
- microsoft windows, windows 7, windows 8.1 +7 more +9 more Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008... 7.8 High
- adobe air, air sdk, flash player +5 more +7 more Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182... 8.8 High
- adobe air sdk, flash player, air desktop runtime +3 more +5 more Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20... 8.8 High
- microsoft silverlight Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which... 8.8 High
- adobe air, air sdk, flash player +14 more +16 more Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on... 8.8 High
- microsoft windows, windows 10 1507 +1 more The kernel in Microsoft Windows 10 Gold allows local users to gain privileges via a crafted... 7.8 High
- microsoft windows, windows 10, windows 7 +7 more +9 more Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1,... 7.2 High
- mozilla firefox, firefox os, canonical ubuntu linux +12 more +14 more The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS... 8.8 High
- microsoft internet explorer Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a... 8.8 High
- microsoft win32k, windows 7, windows 8 +7 more +9 more win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows... 7.2 High
- microsoft .net framework, live meeting, lync +2 more +4 more The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5,... 9.3 High
- microsoft internet explorer Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the ASLR protection... 6.5 Medium
- microsoft windows, windows 7, windows 8 +6 more +8 more Directory traversal vulnerability in the TS WebProxy (aka TSWbPrxy) component in Microsoft... 7.8 High
- adobe flash player Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X... 10.0 High
- adobe air, air sdk, flash player +1 more +3 more Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and... 10.0 High
- microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 more Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows... 7.8 High
- microsoft windows, windows 7, windows 8 +7 more +9 more win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2,... 8.8 High
- microsoft internet explorer Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted... 8.8 High
- microsoft internet explorer Microsoft Internet Explorer 6 through 11 allows remote attackers to gain privileges via a crafted... 8.8 High
- adobe acrobat, reader and acrobat, acrobat reader +2 more Adobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows allow attackers... 9.8 Critical
- ibm infosphere biginsights IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended... 3.5 Low
- microsoft internet explorer The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers... 4.3 Medium
- microsoft silverlight Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to... 5.5 Medium
- oracle java runtime environment (jre), jre, canonical ubuntu linux +1 more +3 more Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7... 4.3 Medium
- microsoft silverlight Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate... 7.8 High
- oracle java runtime environment (jre), jre, openjdk +2 more Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7... 5.0 Medium
- canonical ubuntu linux, opensuse, oracle java runtime environment (jre) +2 more +4 more Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute... 10.0 High
- oracle fusion middleware Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion... 9.8 Critical
- linux kernel, oracle linux, canonical ubuntu linux +6 more +8 more The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure... 7.8 High
- red hat jboss, redhat jboss enterprise application platform +1 more The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform ... 7.5 High
- red hat jboss, redhat jboss enterprise application platform +1 more The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka... 5.3 Medium
- oracle java runtime environment (jre), jre, canonical ubuntu linux +1 more +3 more Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java... 9.8 Critical
- qnap qts, network attached storage (nas) +1 more If exploited, this cross-site scripting vulnerability could allow remote attackers to inject... 6.1 Medium
- qnap qts, network attached storage (nas) +1 more If exploited, this command injection vulnerability could allow remote attackers to run arbitrary... 9.8 Critical
- qnap qts, network attached storage (nas) +1 more If exploited, this cross-site scripting vulnerability could allow remote attackers to inject... 8.0 High
- connectwise manageditsync, kaseya virtual system/server administrator (vsa) +1 more ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to... 9.8 Critical
- microsoft windows, windows 10, windows 10 servers +14 more +16 more An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle... 7.8 High
- microsoft windows, windows 7, windows 8.1 +8 more +10 more Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7... 9.8 Critical
- artifex ghostscript, debian linux, redhat enterprise linux desktop +5 more +7 more Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via ... 7.8 High
- microsoft internet explorer An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce... 8.8 High
- microsoft internet explorer Microsoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or... 8.8 High
- microsoft smbv1 server, windows 7, windows 8.1 +17 more +19 more The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7... 7.5 High
- microsoft windows 8.1, windows server 2008, windows server 2012 +1 more +3 more Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8... 6.5 Medium
- microsoft windows, windows 7, windows 8.1 +9 more +11 more The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and... 7.8 High
- microsoft internet explorer, windows 7, windows server 2008 +1 more +3 more Microsoft Internet Explorer 9 through 11 and the Internet Messaging API in Windows Vista SP2,... 6.5 Medium
- microsoft edge, internet explorer, internet explorer and edge +2 more Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain... 6.5 Medium
- apple ios, iphone os +1 more The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged... 7.8 High
- apple ios, iphone os +1 more The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory... 5.5 Medium
- apple ios, iphone os +1 more WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a... 8.8 High
- Show olderLoading…