The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1…
Published Jan 21, 2010 EPSS 28.7%
Known exploited vulnerabilities
Vulnerabilities CISA has confirmed are being exploited in the wild. These carry remediation deadlines for US federal agencies, and are a reasonable priority order for everyone else.
1533 in the catalogue · showing 1201–1250
Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003…
Published Nov 11, 2009 EPSS 84.0%
The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate changes to…
Published Jun 10, 2009 EPSS 4.9%
Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a PDF file that calls the…
Published Nov 4, 2008 EPSS 99.8%
The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communication method for IOCTLs and does not…
Published Aug 5, 2008 EPSS 6.9%
The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message…
Published Aug 6, 2004 EPSS 7.2%
smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to…
Published Jun 25, 2002 EPSS 4.9%
A problem in Microsoft Office lets attackers take over computers when users open a specially crafted document file
Published Jul 11, 2017 EPSS 89.9% Act now
A flaw in browser memory handling lets attackers take over a computer if someone visits a harmful website. CVE-2017-0222 is rated high (CVSS 8.8), is listed in…
Published May 12, 2017 EPSS 29.6% Act now
A problem in handling certain document files lets attackers run their own programs on a computer simply by tricking someone into opening a specially made file
Published Oct 22, 2014 EPSS 77.5% Act now
A flaw in older Windows web browsers lets attackers take over computers when people visit harmful websites, potentially leading to ransomware infections
Published Apr 9, 2019 EPSS 81.7% Act now
Old versions of a popular file compression tool can be tricked into placing attacker files anywhere on a computer, and criminals have already used this to…
Published Feb 5, 2019 EPSS 96.0% Act now
A widely used piece of software on computers can be tricked into letting attackers take full control of the machine simply by visiting a malicious website or…
Published Jan 18, 2019 EPSS 89.6% Act now
A problem in how Windows runs certain scripts lets attackers take over computers when users open a bad file or visit a harmful website
Published May 9, 2018 EPSS 88.2% Act now
A flaw in a common testing tool lets outsiders run any commands they want on a server if a particular folder is left open to the internet, giving them full…
Published Jun 27, 2017 EPSS 100.0% Act now
Older versions of Microsoft Word can let attackers take over a computer simply by tricking someone into opening a specially made document file
Published Mar 25, 2014 EPSS 77.7% Act now
Old Microsoft programs can be tricked into running attacker code when a user simply opens a specially made picture file inside a document
Published Nov 6, 2013 EPSS 84.9% Act now
Unpatched Apple devices could be compromised simply by opening a malicious web page or link, so they should be updated immediately
Published Mar 18, 2022 EPSS 16.3% Act now
A person or program with basic access to an affected Windows computer could read protected password files and take full control of the machine
Published Jul 22, 2021 EPSS 67.3% Act now
A flaw in how Windows handles file-sharing network traffic lets attackers take over computers remotely without any login, and criminals have already used it to…
Published Mar 12, 2020 EPSS 99.8% Act now
A long-known flaw in a widely used server product lets attackers take over systems over the network without any login, and criminals are still using it to…
Published Oct 19, 2017 EPSS 100.0% Act now
A flaw in certain Apache Struts setups lets attackers remotely take control of servers by sending specially crafted messages, risking major data loss and…
Published Jul 10, 2017 EPSS 98.9% Act now
A flaw in how Windows displays icons for shortcut files lets attackers run harmful programs on a computer just by making someone look at a folder containing a…
Published Jun 15, 2017 EPSS 90.0% Act now
A flaw in older Windows versions lets a program already running on the computer secretly gain complete control of the machine
Published May 12, 2017 EPSS 10.0% Act now
A problem in older Microsoft Office programs lets attackers run their own code on a computer simply by getting someone to open a specially made document
Published May 12, 2017 EPSS 81.0% Act now
A problem in how older Windows computers share files over a network lets attackers take control of those computers from anywhere without needing passwords or…
Published Mar 17, 2017 EPSS 89.8% Act now
A flaw in how older Windows systems handle certain network file-sharing requests lets attackers take over computers from anywhere on the network, often used to…
Published Mar 17, 2017 EPSS 99.2% Act now
The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by…
Published Jun 1, 2016 EPSS 98.5%
HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute…
Published Apr 14, 2015 EPSS 100.0%
Older Mac computers had a flaw that let someone already logged in locally take full control of the machine as an administrator
Published Apr 10, 2015 EPSS 9.9% Act now
The D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute arbitrary commands via a…
Published Feb 23, 2015 EPSS 97.1%
A problem in how older Apple phones, computers, and TVs process certain hardware input lets attackers take over the device by running a malicious app
Published Sep 18, 2014 EPSS 48.9% Act now
An attacker who already gets a small foothold on a Windows computer can use this flaw to take full control of it
Published Jan 11, 2022 EPSS 59.2% Act now
Attackers can use this flaw to take near-complete control of affected devices if they can get malicious code to run on them
Published Mar 18, 2022 EPSS 11.6% Act now
Attackers can break into vulnerable remote-access appliances over the internet without a password and use them as a doorway into the organization
Published Dec 8, 2021 EPSS 99.9% Act now
The HTTP interface of the Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. An attacker can use…
Published Mar 23, 2020 EPSS 84.3%
A flaw in a Windows file-transfer service lets attackers who already have a foothold on a computer gain complete control of that machine, which ransomware…
Published Mar 12, 2020 EPSS 42.5% Act now
Attackers can remotely take full control of certain servers without any password, putting business data and operations at serious risk until the hardware is…
Published May 2, 2017 EPSS 92.2% Act now
A flaw in the Bash command interpreter allowed attackers to run any commands they wanted on servers by sending specially crafted requests, potentially…
Published Sep 25, 2014 EPSS 99.9% Act now
A flaw in a common command-line tool lets attackers run any commands they want on vulnerable computers simply by sending specially crafted data through normal…
Published Sep 24, 2014 EPSS 100.0% Act now
Old versions of Internet Explorer contain a flaw that lets attackers take over a computer simply by getting the user to visit a malicious website
Published Apr 27, 2014 EPSS 82.7% Act now
An attacker could abuse weak login input checks on affected file-transfer servers to tamper with authentication attempts, so exposed systems should be updated…
Published Jan 10, 2022 EPSS 3.5% Act now
A problem in older Windows systems lets someone who already has limited access take complete control of the computer, which attackers have used to install…
Published Oct 10, 2018 EPSS 70.0% Act now
A problem in certain web software lets attackers run their own programs on servers just by sending specially made web requests, which can let them steal data…
Published Jan 8, 2012 EPSS 75.6% Act now
ActionForm in Apache Software Foundation (ASF) Struts before 1.2.9 with BeanUtils 1.7 allows remote attackers to cause a denial of service via a…
Published Mar 30, 2006 EPSS 54.6%
A vulnerable cloud network controller could let an outside attacker take control of the system and disrupt or access connected cloud networks
Published Sep 13, 2021 EPSS 93.0% Act now
Attackers can abuse vulnerable Exchange email servers to access or redirect mailbox information, potentially exposing sensitive business communications
Published Jul 14, 2021 EPSS 98.2% Act now
A flaw in VMware management software can let attackers trick the system into revealing administrator credentials, which may help them break into critical…
Published Mar 31, 2021 EPSS 78.0% Act now
Attackers can send specially crafted web requests to vulnerable F5 BIG-IP systems and potentially knock important applications offline
Published Mar 31, 2021 EPSS 62.4% Act now
A logged-in user could abuse a flaw in Nagios XI to run commands on the monitoring server, potentially taking over a system that watches many other systems
Published Feb 15, 2021 EPSS 73.6% Act now