Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2015-1642 KEV |
|
[KEV] Buffer Overflow in Microsoft office (CVE-2015-1642)
vulnerability in Microsoft office (CVE-2015-1642). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2014-4114 KEV |
|
[KEV] Vulnerability in Microsoft windows (CVE-2014-4114)
vulnerability in Microsoft windows (CVE-2014-4114). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2013-5065 KEV |
|
[KEV] Vulnerability in Microsoft windows (CVE-2013-5065)
vulnerability in Microsoft windows (CVE-2013-5065). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2013-3897 KEV |
|
[KEV] Vulnerability in Microsoft internet-explorer (CVE-2013-3897)
vulnerability in Microsoft internet-explorer (CVE-2013-3897). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2013-1347 KEV |
|
[KEV] Code Injection in Microsoft internet-explorer (CVE-2013-1347)
code injection in Microsoft internet-explorer (CVE-2013-1347). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2012-1856 KEV |
|
[KEV] Code Injection in Microsoft office (CVE-2012-1856)
code injection in Microsoft office (CVE-2012-1856). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2011-1889 KEV |
|
[KEV] Buffer Overflow in Microsoft forefront-threat-management-gateway-tmg (CVE-2011-1889)
vulnerability in Microsoft forefront-threat-management-gateway-tmg (CVE-2011-1889). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2010-3333 KEV |
|
[KEV] Buffer Overflow in Microsoft office (CVE-2010-3333)
vulnerability in Microsoft office (CVE-2010-3333). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2010-0232 KEV |
|
[KEV] Vulnerability in Microsoft windows (CVE-2010-0232)
vulnerability in Microsoft windows (CVE-2010-0232). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2009-3129 KEV |
|
[KEV] Code Injection in Microsoft excel (CVE-2009-3129)
code injection in Microsoft excel (CVE-2009-3129). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2009-1123 KEV |
|
[KEV] Vulnerability in Microsoft windows (CVE-2009-1123)
vulnerability in Microsoft windows (CVE-2009-1123). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2004-0210 KEV |
|
[KEV] Vulnerability in Microsoft windows (CVE-2004-0210)
vulnerability in Microsoft windows (CVE-2004-0210). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2002-0367 KEV |
|
[KEV] Vulnerability in Microsoft windows (CVE-2002-0367)
vulnerability in Microsoft windows (CVE-2002-0367). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2017-8570 KEV |
|
[KEV] Vulnerability in Microsoft office (CVE-2017-8570)
vulnerability in Microsoft office (CVE-2017-8570). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2017-0222 KEV |
|
[KEV] Buffer Overflow in Microsoft internet-explorer (CVE-2017-0222)
vulnerability in Microsoft internet-explorer (CVE-2017-0222). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2014-6352 KEV |
|
[KEV] Code Injection in Microsoft windows (CVE-2014-6352)
code injection in Microsoft windows (CVE-2014-6352). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2019-0752 KEV |
|
[KEV] Vulnerability in Microsoft internet-explorer (CVE-2019-0752)
vulnerability in Microsoft internet-explorer (CVE-2019-0752). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2018-8174 KEV |
|
[KEV] Out-of-Bounds Write in Microsoft windows (CVE-2018-8174)
out-of-bounds write in Microsoft windows (CVE-2018-8174). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2018-15982 KEV |
|
[KEV] Use-After-Free in Adobe flash-player (CVE-2018-15982)
vulnerability in Adobe flash-player (CVE-2018-15982). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2014-1761 KEV |
|
[KEV] Buffer Overflow in Microsoft word (CVE-2014-1761)
vulnerability in Microsoft word (CVE-2014-1761). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2013-3906 KEV |
|
[KEV] Code Injection in Microsoft graphics-component (CVE-2013-3906)
code injection in Microsoft graphics-component (CVE-2013-3906). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2021-36934 KEV |
|
[KEV] Vulnerability in Microsoft windows (CVE-2021-36934)
vulnerability in Microsoft windows (CVE-2021-36934). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2020-0796 KEV |
|
[KEV] Buffer Overflow in Microsoft smbv3 (CVE-2020-0796)
vulnerability in Microsoft smbv3 (CVE-2020-0796). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2017-8464 KEV |
|
[KEV] Vulnerability in Microsoft windows (CVE-2017-8464)
vulnerability in Microsoft windows (CVE-2017-8464). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2017-0263 KEV |
|
[KEV] Use-After-Free in Microsoft win32k (CVE-2017-0263)
vulnerability in Microsoft win32k (CVE-2017-0263). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2017-0262 KEV |
|
[KEV] Vulnerability in Microsoft office (CVE-2017-0262)
vulnerability in Microsoft office (CVE-2017-0262). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2017-0145 KEV |
|
[KEV] Vulnerability in Microsoft smbv1 (CVE-2017-0145)
vulnerability in Microsoft smbv1 (CVE-2017-0145). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2017-0144 KEV |
|
[KEV] Vulnerability in Microsoft smbv1 (CVE-2017-0144)
vulnerability in Microsoft smbv1 (CVE-2017-0144). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2015-1635 KEV |
|
[KEV] Code Injection in Microsoft httpsys (CVE-2015-1635)
code injection in Microsoft httpsys (CVE-2015-1635). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2022-22709 |
|
VP9 Video Extensions Remote Code Execution Vulnerability
VP9 Video Extensions Remote Code Execution Vulnerability
|
| CVE-2022-21882 KEV |
|
[KEV] Out-of-Bounds Write in Microsoft win32k (CVE-2022-21882)
out-of-bounds write in Microsoft win32k (CVE-2022-21882). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2020-0787 KEV |
|
[KEV] Vulnerability in Microsoft windows (CVE-2020-0787)
vulnerability in Microsoft windows (CVE-2020-0787). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2014-1776 KEV |
|
[KEV] Use-After-Free in Microsoft internet-explorer (CVE-2014-1776)
vulnerability in Microsoft internet-explorer (CVE-2014-1776). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2018-8453 KEV |
|
[KEV] Vulnerability in Microsoft win32k (CVE-2018-8453)
vulnerability in Microsoft win32k (CVE-2018-8453). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2021-33766 KEV |
|
[KEV] Authentication Bypass in Microsoft exchange-server (CVE-2021-33766)
authentication bypass in Microsoft exchange-server (CVE-2021-33766). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2022-21840 |
|
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
|
| CVE-2022-21841 |
|
Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
|
| CVE-2019-1458 KEV |
|
[KEV] Vulnerability in Microsoft win32k (CVE-2019-1458)
vulnerability in Microsoft win32k (CVE-2019-1458). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2013-3900 KEV |
|
[KEV] Vulnerability in Microsoft winverifytrust-function (CVE-2013-3900)
vulnerability in Microsoft winverifytrust-function (CVE-2013-3900). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2021-43255 |
|
Microsoft Office Trust Center Spoofing Vulnerability
Microsoft Office Trust Center Spoofing Vulnerability
|
| CVE-2021-43256 |
|
Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
|
| CVE-2021-43875 |
|
Microsoft Office Graphics Remote Code Execution Vulnerability
Microsoft Office Graphics Remote Code Execution Vulnerability
|
| CVE-2021-42293 |
|
Vulnerability in microsoft (CVE-2021-42293)
vulnerability in microsoft (CVE-2021-42293). Risk of unauthorized operations or information disclosure.
|
| CVE-2021-42295 |
|
Visual Basic for Applications Information Disclosure Vulnerability
Visual Basic for Applications Information Disclosure Vulnerability
|
| CVE-2021-43890 KEV |
|
[KEV] Vulnerability in Microsoft windows (CVE-2021-43890)
vulnerability in Microsoft windows (CVE-2021-43890). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2021-42297 |
|
Vulnerability in microsoft (CVE-2021-42297)
vulnerability in microsoft (CVE-2021-42297). Risk of unauthorized operations or information disclosure.
|
| CVE-2021-42306 |
|
Vulnerability in microsoft (CVE-2021-42306)
vulnerability in microsoft (CVE-2021-42306). Confidential information can be exposed externally.
|
| CVE-2021-42308 |
|
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
|
| CVE-2021-43211 |
|
Privilege Escalation in microsoft (CVE-2021-43211)
vulnerability in microsoft (CVE-2021-43211). Risk of unauthorized operations or information disclosure.
|
| CVE-2021-43220 |
|
Microsoft Edge for iOS Spoofing Vulnerability
Microsoft Edge for iOS Spoofing Vulnerability
|