Known exploited vulnerabilities
Under attack, per CISA.
- adobe flash player, opensuse evergreen, opensuse +7 more +9 more Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11... 7.8 High
- microsoft office Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allows remote attackers to execute... 7.8 High
- microsoft office Microsoft Office 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary... 7.8 High
- oracle java se, canonical ubuntu linux, debian linux +19 more +21 more Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and... 9.8 Critical
- microsoft windows 7, windows 8, windows 8.1 +7 more +9 more ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2, Windows... 7.8 High
- microsoft office, powerpoint, word +3 more +5 more Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013... 9.3 High
- adobe flash player, opensuse evergreen, opensuse +8 more +10 more Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in... 9.8 Critical
- microsoft win32k, windows 2003 server, windows 7 +2 more +4 more Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server... 7.8 High
- adobe flash player, novell suse linux enterprise desktop, suse linux enterprise workstation extension +8 more +10 more Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X... 9.8 Critical
- microsoft windows, windows 7, windows 8 +6 more +8 more Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8,... 9.3 High
- adobe acrobat, reader and acrobat +1 more Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0... 10.0 High
- microsoft windows, windows xp, windows 2003 server +2 more NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local... 7.8 High
- microsoft internet explorer Use-after-free vulnerability in the CDisplayPointer class in mshtml.dll in Microsoft Internet... 8.8 High
- adobe acrobat, reader and acrobat, acrobat reader +2 more Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow... 9.8 Critical
- mozilla firefox, thunderbird, thunderbird esr +15 more +17 more Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and... 6.5 Medium
- microsoft internet explorer Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote... 8.8 High
- adobe acrobat, reader, acrobat reader +7 more +9 more Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before... 7.8 High
- adobe acrobat, reader and acrobat, acrobat reader +7 more +9 more Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow... 7.8 High
- adobe coldfusion administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass... 9.8 Critical
- oracle java se, jre, jdk +4 more +6 more Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7... 9.8 Critical
- adobe flash player, opensuse, redhat enterprise linux desktop +3 more +5 more Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and... 7.8 High
- microsoft commerce server, host integration server, office +4 more +6 more The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3,... 8.8 High
- oracle java se, jre, jdk +6 more +8 more Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7... 10.0 High
- oracle java se, jre, debian linux +4 more +6 more Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7... 10.0 High
- oracle java se jdk and jre, jdk, jre +4 more +6 more Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE... 9.8 Critical
- microsoft forefront threat management gateway (tmg), forefront threat management gateway +1 more The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway ... 9.8 Critical
- adobe acrobat, air, flash player +5 more +7 more Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12... 8.8 High
- microsoft office, open xml file format converter +1 more Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office... 7.8 High
- adobe acrobat, reader and acrobat, acrobat reader +2 more Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1... 7.8 High
- microsoft windows, windows 2000, windows 7 +1 more +3 more The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP... 7.8 High
- microsoft excel, excel viewer, office +1 more +3 more Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac;... 7.8 High
- microsoft windows, windows 2000, windows server 2003 +3 more +5 more The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and... 7.8 High
- adobe acrobat, acrobat and reader, acrobat reader +1 more +3 more Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers... 7.8 High
- oracle virtualbox The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the... 8.8 High
- microsoft windows, windows 2000, windows nt +1 more +3 more The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute... 7.8 High
- microsoft windows, windows 2000, windows nt +2 more smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate... 7.8 High
- synacor zimbra collaboration suite, zimbra collaborate suite (zcs) +1 more An issue was discovered in the Calendar feature in Zimbra Collaboration Suite 8.8.x before 8.8.15... 6.1 Medium
- microsoft office, microsoft corporation office 2007 sp3, microsoft office 2010 sp2, microsoft office 2013 sp1, and microsoft office 2016. +1 more Microsoft Office allows a remote code execution vulnerability due to the way that it handles... 7.8 High
- microsoft internet explorer A remote code execution vulnerability exists when Internet Explorer improperly accesses objects... 8.8 High
- microsoft windows, windows 7, windows 8 +6 more +8 more Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8,... 7.8 High
- dependencytrack frontend, zabbix, debian linux +1 more +3 more Possible view of the setup pages by unauthenticated users if config file already exists 3.7 Low
- dependencytrack frontend, zabbix +1 more Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML 9.1 Critical
- google chrome, chromium animation +1 more Use after free in Animation 8.8 High
- adobe commerce, commerce and magento open source, magento +1 more +3 more Adobe Commerce checkout improper input validation leads to remote code execution 9.8 Critical
- microsoft internet explorer, internet explorer 10, internet explorer 11 +2 more A remote code execution vulnerability exists in the way that the scripting engine handles objects... 7.5 High
- check point software technologies ltd. winrar In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when... 7.8 High
- adobe flash player, flash player installer, redhat enterprise linux desktop +2 more +4 more Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free... 7.8 High
- microsoft windows, windows 10, windows 10 servers +12 more +14 more A remote code execution vulnerability exists in the way that the VBScript engine handles objects... 7.5 High
- phpunit, oracle communications diameter signaling router +1 more Code Injection in PHPUnit 9.8 Critical
- microsoft office, office compatibility pack, office web apps +4 more +6 more Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office... 9.3 High
- Show olderLoading…