Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2019-3568 | not reported | — | Listed | A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a... | — |
| CVE-2019-1003029 | not reported | — | Listed | Jenkins Script Security Plugin contains a protection mechanism failure, allowing an attacker to bypass the sandbox. | — |
| CVE-2021-40450 | not reported | — | Listed | Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. | — |
| CVE-2021-41357 | not reported | — | Listed | Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. | — |
| CVE-2022-0847 | not reported | — | Listed | Linux kernel contains an improper initialization vulnerability where an unprivileged local user could escalate their privileges on the syste... | — |
| CVE-2022-21919 | not reported | — | Listed | Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation. | — |
| CVE-2022-26904 | not reported | — | Listed | Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation. | — |
| CVE-2022-29464 | not reported | — | Listed | Multiple WSO2 products allow for unrestricted file upload, resulting in remote code execution. | — |
| CVE-2014-0160 | not reported | — | Listed | The TLS and DTLS implementations in OpenSSL do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sens... | — |
| CVE-2014-0322 | not reported | — | Listed | Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute code. | — |
| CVE-2014-4113 | not reported | — | Listed | Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. | — |
| CVE-2019-8506 | not reported | — | Listed | A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code exe... | — |
| CVE-2021-1789 | not reported | — | Listed | A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code exe... | — |
| CVE-2022-1388 | not reported | — | Listed | F5 BIG-IP contains a missing authentication in critical function vulnerability which can allow for remote code execution, creation or deleti... | — |
| CVE-2022-22947 | not reported | — | Listed | Spring Cloud Gateway applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsec... | — |
| CVE-2022-30525 | not reported | — | Listed | A command injection vulnerability in the CGI program of some Zyxel firewall versions could allow an attacker to modify specific files and th... | — |
| CVE-2018-8589 | not reported | — | Listed | A privilege escalation vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this... | — |
| CVE-2018-5002 | not reported | — | Listed | Adobe Flash Player have a stack-based buffer overflow vulnerability that could lead to remote code execution. | — |
| CVE-2019-1130 | not reported | — | Listed | A privilege escalation vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links. | — |
| CVE-2019-1385 | not reported | — | Listed | A privilege escalation vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting... | — |