A problem in Chrome's handling of certain web content could let an attacker take over a user's computer simply by getting them to visit a malicious webpage
Published Apr 24, 2017 EPSS 40.6% Act now
Known exploited vulnerabilities
Vulnerabilities CISA has confirmed are being exploited in the wild. These carry remediation deadlines for US federal agencies, and are a reasonable priority order for everyone else.
1533 in the catalogue · showing 851–900
A flaw in the browser engine allowed attackers to take full control of a computer simply by getting the user to visit a malicious web page
Published Jan 19, 2017 EPSS 34.2% Act now
The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider element data…
Published Mar 29, 2016 EPSS 48.1%
Attackers can send specially made image files inside common Office documents that let them take over a computer when the file is opened, and this problem still…
Published Jun 12, 2013 EPSS 79.8% Act now
Old Flash software on computers can be tricked by a specially made webpage into letting attackers take over the machine
Published Sep 24, 2012 EPSS 21.2% Act now
A flaw in older web browsers lets attackers take over a computer just by getting someone to visit a bad website
Published Sep 18, 2012 EPSS 80.3% Act now
Old Microsoft software used by many programs can be tricked by a bad website into letting attackers take control of a computer or crash it, risking data loss…
Published Jun 13, 2012 EPSS 83.5% Act now
A problem in older Windows versions lets attackers create files that appear to have valid digital signatures so users can be tricked into running harmful…
Published Apr 10, 2012 EPSS 87.7% Act now
An old multimedia plugin contained a flaw that let attackers take over or crash computers, so organizations should have removed or updated it years ago to…
Published Feb 16, 2012 EPSS 91.1% Act now
A flaw in an old web plugin allowed attackers to run harmful code on websites victims visited, potentially stealing information, and it was already being used…
Published Feb 16, 2012 EPSS 6.2% Act now
Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on…
Published Dec 7, 2011 EPSS 88.6%
Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR…
Published Mar 15, 2011 EPSS 63.5%
Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint 95 document, aka…
Published Nov 10, 2010 EPSS 58.6%
Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote attackers…
Published Sep 9, 2010 EPSS 81.4%
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before…
Published Jun 8, 2010 EPSS 82.5%
The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to…
Published Jan 13, 2010 EPSS 83.2%
Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and…
Published Dec 15, 2009 EPSS 81.9%
Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87, allows…
Published Jul 23, 2009 EPSS 21.2%
Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open…
Published Jun 10, 2009 EPSS 52.8%
Stack-based buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File Format…
Published Jun 10, 2009 EPSS 59.6%
Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arguments to…
Published Feb 12, 2008 EPSS 87.4%
Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors
Published Feb 7, 2008 EPSS 37.9%
Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-assisted…
Published May 20, 2006 EPSS 48.1%
A vulnerable Confluence server can be taken over remotely without a password, potentially exposing company information and enabling ransomware
Published Jun 3, 2022 EPSS 100.0% Act now
Someone who can already log into certain Oracle systems can use a flaw in the screen saver to take complete control of the machine
Published Oct 16, 2019 EPSS 13.4% Act now
A flaw in how older Windows versions handle certain font files lets attackers take control of computers just by getting users to visit a bad website
Published Nov 10, 2016 EPSS 64.6% Act now
Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012…
Published Oct 14, 2016 EPSS 68.5%
Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe…
Published Mar 12, 2016 EPSS 19.3%
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux…
Published Feb 10, 2016 EPSS 54.5%
Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or cause a…
Published Jan 13, 2016 EPSS 69.4%
Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR…
Published Dec 28, 2015 EPSS 67.7%
The kernel in Microsoft Windows 10 Gold allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Elevation of Privilege…
Published Dec 9, 2015 EPSS 5.3%
Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2…
Published Aug 15, 2015 EPSS 4.1%
A flaw in older Firefox browsers let attackers who tricked someone into opening a specially made document steal files from that person's computer
Published Aug 8, 2015 EPSS 68.6% Act now
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka…
Published Jul 14, 2015 EPSS 44.7%
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…
Published Jun 10, 2015 EPSS 14.8%
The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 SP2; Live Meeting…
Published May 13, 2015 EPSS 48.8%
Older web browsers can be tricked into revealing memory locations, making it easier for attackers to break into a user's computer when they visit a harmful…
Published Feb 11, 2015 EPSS 33.6% Act now
A flaw in old Flash software let attackers peek at hidden memory locations on computers, making it easier for them to break in and run harmful code
Published Jan 23, 2015 EPSS 15.1% Act now
A problem in older Windows versions lets attackers who already have limited access on a computer trick it into giving them more control by using a specially…
Published Jan 13, 2015 EPSS 75.8% Act now
A long-known flaw in old Adobe Flash software lets attackers take over computers or crash them when users view malicious web content, so organizations must…
Published Nov 25, 2014 EPSS 20.4% Act now
A flaw in old Microsoft software lets attackers who send a specially made document take over a computer more easily than they should be able to
Published Nov 11, 2014 EPSS 54.6% Act now
A flaw in how old Windows systems read special font files lets attackers take over computers when a victim opens a malicious document or webpage
Published Oct 15, 2014 EPSS 59.9% Act now
An old web browser flaw let attackers take over computers simply by tricking people into visiting a malicious website
Published Oct 15, 2014 EPSS 47.1% Act now
A problem in web software lets attackers take control of computers by getting users to visit a rigged website. CVE-2014-2817 is rated high (CVSS 8.8) and is…
Published Aug 12, 2014 EPSS 26.3% Act now
Older Adobe Acrobat and Reader programs on Windows contain a flaw that lets attackers run harmful programs with full computer control simply by opening a…
Published Aug 12, 2014 EPSS 22.3% Act now
A problem in IBM data analysis software lets users who are already logged in reach files and information they are not supposed to see, which can lead to data…
Published Jul 7, 2014 EPSS 4.8% Act now
A bug in the Linux kernel lets anyone who already has access to a computer take complete control of it, and many systems remain vulnerable years later
Published Jun 7, 2014 EPSS 37.2% Act now
A long-known flaw in older Windows systems and Internet Explorer can let attackers quietly learn which files and internal computers exist on a network, helping…
Published Feb 26, 2014 EPSS 50.2% Act now
A problem in an old Microsoft web plugin lets attackers steal private information from computers when users open specially made files or web pages
Published Oct 9, 2013 EPSS 68.0% Act now