A problem in Java software lets attackers quietly change protected settings they should not be allowed to touch
Published Apr 17, 2013 EPSS 85.2% Act now
Known exploited vulnerabilities
Vulnerabilities CISA has confirmed are being exploited in the wild. These carry remediation deadlines for US federal agencies, and are a reasonable priority order for everyone else.
1533 in the catalogue · showing 901–950
A flaw in an old web plugin can let attackers take over a computer if a user visits a malicious website, and criminals have already used it to spread ransomware
Published Mar 13, 2013 EPSS 78.9% Act now
An old flaw in Java software can let attackers get around security protections when someone opens a specially crafted file, potentially allowing harmful…
Published Jan 31, 2013 EPSS 90.1% Act now
A long-standing flaw in widely used software lets attackers take complete control of computers over the internet and has been used to spread ransomware
Published Jan 10, 2013 EPSS 97.0% Act now
A flaw in a document processing tool lets remote attackers take over systems, steal information, or install ransomware without needing any login credentials
Published May 3, 2012 EPSS 7.8% Act now
The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before…
Published Apr 28, 2010 EPSS 52.7%
The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before…
Published Apr 28, 2010 EPSS 73.8%
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows…
Published Apr 1, 2010 EPSS 96.3%
A flaw in certain QNAP network storage devices lets remote attackers run any commands they choose, which could allow them to steal or lock up company files
Published Oct 28, 2020 EPSS 30.2% Act now
A website flaw lets attackers slip harmful code into pages so that when someone visits, their browser runs the attacker's commands instead of the intended…
Published Oct 28, 2020 EPSS 22.7% Act now
A website flaw let attackers slip harmful code into pages so that anyone who viewed them could have their accounts or data taken over
Published Oct 28, 2020 EPSS 30.5% Act now
A flaw in an old integration tool lets outsiders reach inside a management server and take over every computer it controls, including installing ransomware
Published Feb 5, 2019 EPSS 86.8% Act now
A problem in the core part of Windows lets someone who already has access to a computer take complete control of it
Published Dec 12, 2018 EPSS 4.2% Act now
A problem in Windows search features can let attackers remotely take over computers on the network without any user action
Published Jun 15, 2017 EPSS 74.4% Act now
A document-handling tool could be tricked into running attacker commands simply by opening a specially crafted image file, giving criminals full control of the…
Published Apr 27, 2017 EPSS 97.0% Act now
An old flaw in Internet Explorer lets attackers pull information from one website and use it on another, which can expose private data or allow unauthorized…
Published Apr 12, 2017 EPSS 22.3% Act now
Old versions of Internet Explorer on outdated Windows computers can be tricked by a bad website into letting attackers take over the machine or crash it
Published Mar 17, 2017 EPSS 29.2% Act now
Attackers could read secret data straight out of a computer's memory over the network by sending tricky messages to old Windows file-sharing software, and this…
Published Mar 17, 2017 EPSS 99.7% Act now
A flaw in how older Windows versions handle graphics lets someone who can already run programs on the computer take complete control of it
Published Mar 17, 2017 EPSS 11.0% Act now
A flaw in how Windows handles certain web content lets attackers quietly check whether specific files exist on a computer simply by getting the user to visit a…
Published Mar 17, 2017 EPSS 18.1% Act now
Microsoft Internet Explorer 9 through 11 and the Internet Messaging API in Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow…
Published Oct 14, 2016 EPSS 33.3%
Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft…
Published Sep 14, 2016 EPSS 26.5%
WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site
Published Aug 25, 2016 EPSS 66.8%
The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a…
Published Aug 25, 2016 EPSS 23.6%
The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app
Published Aug 25, 2016 EPSS 33.4%
A flaw in older Cisco firewall software lets someone who already has limited access to the device take full control of it
Published Aug 18, 2016 EPSS 22.6% Act now
Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower…
Published Aug 18, 2016 EPSS 87.6%
Microsoft Internet Explorer 9 through 11 allows remote attackers to determine the existence of files via crafted JavaScript code, aka "Internet Explorer…
Published Apr 12, 2016 EPSS 21.9%
Some Cisco network devices may accidentally expose an internal database service, letting outsiders read or change limited device-container data unless the…
Published May 26, 2022 EPSS 11.5% Act now
In ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with…
Published Dec 15, 2021 EPSS 1.1%
In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System…
Published Dec 15, 2021 EPSS 0.9%
Unpatched Apple devices could let a malicious app take deep control of the device, putting sensitive data and business access at risk
Published Aug 24, 2021 EPSS 14.7% Act now
A bug in Windows lets someone who already has limited access to a computer take complete control of it. CVE-2020-1027 is rated high (CVSS 7.8), is listed in…
Published Apr 15, 2020 EPSS 4.7% Act now
Attackers can trick people into opening a bad link in a chat app and steal files from their computer. CVE-2019-18426 is rated high (CVSS 8.2), is listed in…
Published Jan 21, 2020 EPSS 67.9% Act now
A problem in how update notifications handle files could let someone who already got onto a computer take over more of it and has been used by criminals to…
Published Jan 14, 2020 EPSS 2.4% Act now
A problem in some older Apple phones and computers lets apps secretly get more power than they should, which could let attackers take over the device
Published Dec 18, 2019 EPSS 15.9% Act now
A flaw in older phone software lets a bad app take over the whole device with full system access. CVE-2019-7287 is rated high (CVSS 7.8), is listed in CISA KEV…
Published Dec 18, 2019 EPSS 4.6% Act now
A flaw in the way Chrome handles sound on web pages can let attackers take over a computer simply by getting someone to visit a malicious website
Published Nov 25, 2019 EPSS 49.4% Act now
A flaw in Windows allowed attackers who already had some access to a computer to gain full control by running a specially made program, and it has been used in…
Published Nov 12, 2019 EPSS 3.6% Act now
A Windows flaw lets someone who already has limited access to a computer take complete control of it, and criminals have used this to install ransomware
Published Jul 15, 2019 EPSS 1.7% Act now
A Windows component can let someone who already has basic access on a computer take complete control of it. CVE-2019-0880 is rated high (CVSS 7.8) and is…
Published Jul 15, 2019 EPSS 2.3% Act now
A bug in older web browsers can let attackers take control of a computer simply by getting someone to visit a bad webpage, so updating browsers everywhere…
Published Jun 27, 2019 EPSS 61.1% Act now
A problem in file-sharing services on Windows and related virtual environments could let attackers with some access see private information they should not
Published Apr 9, 2019 EPSS 9.4% Act now
An old web browser flaw lets attackers quietly check which files exist on a person's computer, helping them plan further attacks
Published Mar 5, 2019 EPSS 8.1% Act now
A flaw in older Windows systems lets someone who already has some access on the computer gain full control without needing extra permissions
Published Nov 14, 2018 EPSS 3.0% Act now
A problem in Adobe Flash Player lets attackers take over a user's computer simply by getting the victim to view a specially made file or web page
Published Jul 9, 2018 EPSS 24.4% Act now
Attackers can take control of vulnerable Zyxel firewall and VPN devices from the internet unless they are updated or tightly restricted
Published May 12, 2022 EPSS 99.9% Act now
Attackers can break into vulnerable F5 traffic-management devices without a password and take control of systems that handle important application traffic
Published May 5, 2022 EPSS 100.0% Act now
A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security…
Published Apr 2, 2021 EPSS 14.0%
A flaw in how certain web browsers handle specially crafted websites could let attackers take over a device just by getting the user to visit a malicious page
Published Dec 18, 2019 EPSS 16.2% Act now