Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2015-2425 | not reported | — | Listed | Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-servi... | — |
| CVE-2015-2360 | not reported | — | Listed | Win32k.sys in the kernel-mode drivers in Microsoft Windows allows local users to gain privileges or cause denial-of-service (DoS). | — |
| CVE-2015-0071 | not reported | — | Listed | Microsoft Internet Explorer allows remote attackers to bypass the address space layout randomization (ASLR) protection mechanism via a craft... | — |
| CVE-2015-0016 | not reported | — | Listed | Directory traversal vulnerability in the TS WebProxy (TSWbPrxy) component in Microsoft Windows allows remote attackers to escalate privilege... | — |
| CVE-2015-0310 | not reported | — | Listed | Adobe Flash Player does not properly restrict discovery of memory addresses, which allows attackers to bypass the address space layout rando... | — |
| CVE-2016-0034 | not reported | — | Listed | Microsoft Silverlight mishandles negative offsets during decoding, which allows attackers to execute remote code or cause a denial-of-servic... | — |
| CVE-2016-0984 | not reported | — | Listed | Use-after-free vulnerability in Adobe Flash Player and Adobe AIR allows attackers to execute code. | — |
| CVE-2016-1010 | not reported | — | Listed | Integer overflow vulnerability in Adobe Flash Player and AIR allows attackers to execute code. | — |
| CVE-2016-7256 | not reported | — | Listed | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker... | — |
| CVE-2016-3393 | not reported | — | Listed | A remote code execution vulnerability exists due to the way the Windows GDI component handles objects in the memory. An attacker who success... | — |
| CVE-2019-3010 | not reported | — | Listed | Oracle Solaris component: XScreenSaver contains an unspecified vulnerability that allows for privilege escalation. | — |
| CVE-2022-26134 | not reported | — | Listed | Atlassian Confluence Server and Data Center contain a remote code execution vulnerability that allows for an unauthenticated attacker to per... | — |
| CVE-2006-2492 | not reported | — | Listed | Microsoft Word and Microsoft Works Suites contain a malformed object pointer which allows attackers to execute code. | — |
| CVE-2007-5659 | not reported | — | Listed | Adobe Acrobat and Reader contain a buffer overflow vulnerability that allows remote attackers to execute code via a PDF file with long argum... | — |
| CVE-2008-0655 | not reported | — | Listed | Adobe Acrobat and Reader contains an unespecified vulnerability described as a design flaw which could allow a specially crafted file to be... | — |
| CVE-2009-0557 | not reported | — | Listed | Microsoft Office contains an object record corruption vulnerability that allows remote attackers to execute code via a crafted Excel file wi... | — |
| CVE-2009-0563 | not reported | — | Listed | Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via a Word document with a crafted ta... | — |
| CVE-2009-1862 | not reported | — | Listed | Adobe Acrobat and Reader and Adobe Flash Player allows remote attackers to execute code or cause denial-of-service (DoS). | — |
| CVE-2009-3953 | not reported | — | Listed | Adobe Acrobat and Reader contains an array boundary issue in Universal 3D (U3D) support that could lead to remote code execution. | — |
| CVE-2009-4324 | not reported | — | Listed | Use-after-free vulnerability in Adobe Acrobat and Reader allows remote attackers to execute code via a crafted PDF file. | — |