Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2022-22620 | not reported | — | Listed | Apple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted... | — |
| CVE-2013-3906 | not reported | — | Listed | Microsoft Graphics Component contains a memory corruption vulnerability which can allow for remote code execution. | — |
| CVE-2014-1761 | not reported | — | Listed | Microsoft Word contains a memory corruption vulnerability which when exploited could allow for remote code execution. | — |
| CVE-2017-9841 | not reported | — | Listed | PHPUnit allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a " | — |
| CVE-2018-20250 | not reported | — | Listed | WinRAR Absolute Path Traversal vulnerability leads to Remote Code Execution | — |
| CVE-2018-8174 | not reported | — | Listed | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Rem... | — |
| CVE-2019-0752 | not reported | — | Listed | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer | — |
| CVE-2022-0609 | not reported | — | Listed | Google Chromium Animation contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a... | — |
| CVE-2022-24086 | not reported | — | Listed | Adobe Commerce and Magento Open Source contain an improper input validation vulnerability which can allow for arbitrary code execution. | — |
| CVE-2022-23134 | not reported | — | Listed | Malicious actors can pass step checks and potentially change the configuration of Zabbix Frontend. | — |
| CVE-2022-23131 | not reported | — | Listed | Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML. | — |
| CVE-2014-6352 | not reported | — | Listed | Microsoft Windows allow remote attackers to execute arbitrary code via a crafted OLE object. | — |
| CVE-2017-0222 | not reported | — | Listed | A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. | — |
| CVE-2017-8570 | not reported | — | Listed | A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory. | — |
| CVE-2022-24682 | not reported | — | Listed | Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) vulnerability in the Calendar feature that allows an attacker... | — |
| CVE-2002-0367 | not reported | — | Listed | smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local... | — |
| CVE-2004-0210 | not reported | — | Listed | A privilege elevation vulnerability exists in the POSIX subsystem. This vulnerability could allow a logged on user to take complete control... | — |
| CVE-2008-2992 | not reported | — | Listed | Adobe Acrobat and Reader contain an input validation issue in a JavaScript method that could potentially lead to remote code execution. | — |
| CVE-2008-3431 | not reported | — | Listed | An input validation vulnerability exists in the VBoxDrv.sys driver of Sun xVM VirtualBox which allows attackers to locally execute arbitrary... | — |
| CVE-2009-1123 | not reported | — | Listed | The kernel in Microsoft Windows does not properly validate changes to unspecified kernel objects, which allows local users to gain privilege... | — |