Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2017-8543 | not reported | — | Listed | Microsoft Windows allows an attacker to take control of the affected system when Windows Search fails to handle objects in memory. | — |
| CVE-2017-8291 | not reported | — | Listed | Artifex Ghostscript allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile. | — |
| CVE-2017-0210 | not reported | — | Listed | A privilege escalation vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an att... | — |
| CVE-2017-0149 | not reported | — | Listed | Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause a denial-of-ser... | — |
| CVE-2017-0005 | not reported | — | Listed | The Graphics Device Interface (GDI) in Microsoft Windows allows local users to gain privileges via a crafted application. | — |
| CVE-2017-0022 | not reported | — | Listed | Microsoft XML Core Services (MSXML) improperly handles objects in memory, allowing attackers to test for files on disk via a crafted web sit... | — |
| CVE-2017-0147 | not reported | — | Listed | The SMBv1 server in Microsoft Windows allows remote attackers to obtain sensitive information from process memory via a crafted packet. | — |
| CVE-2018-19943 | not reported | — | Listed | A cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to inject malicious code. | — |
| CVE-2018-8611 | not reported | — | Listed | A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory. | — |
| CVE-2010-0840 | not reported | — | Listed | Unspecified vulnerability in the Java Runtime Environment (JRE) in Java SE component allows remote attackers to affect confidentiality, inte... | — |
| CVE-2013-0074 | not reported | — | Listed | Microsoft Silverlight does not properly validate pointers during HTML object rendering, which allows remote attackers to execute code via a... | — |
| CVE-2013-0422 | not reported | — | Listed | A vulnerability in the way Java restricts the permissions of Java applets could allow an attacker to execute commands on a vulnerable system... | — |
| CVE-2013-2423 | not reported | — | Listed | Unspecified vulnerability in hotspot for Java Runtime Environment (JRE) allows remote attackers to affect integrity. | — |
| CVE-2013-3896 | not reported | — | Listed | Microsoft Silverlight does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sen... | — |
| CVE-2013-3993 | not reported | — | Listed | Certain APIs within BigInsights can take invalid input that might allow attackers unauthorized access to read, write, modify, or delete data... | — |
| CVE-2013-7331 | not reported | — | Listed | An information disclosure vulnerability exists in Internet Explorer which allows resources loaded into memory to be queried. This vulnerabil... | — |
| CVE-2014-3153 | not reported | — | Listed | The futex_requeue function in kernel/futex.c in Linux kernel does not ensure that calls have two different futex addresses, which allows loc... | — |
| CVE-2014-4077 | not reported | — | Listed | Microsoft Input Method Editor (IME) Japanese is a keyboard with Japanese characters that can be enabled on Windows systems as it is included... | — |
| CVE-2014-2817 | not reported | — | Listed | Microsoft Internet Explorer cotains an unspecified vulnerability that allows remote attackers to gain privileges via a crafted web site. | — |
| CVE-2014-0546 | not reported | — | Listed | Adobe Reader and Acrobat on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a priv... | — |