Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2014-4123 | not reported | — | Listed | Microsoft Internet Explorer contains an unspecified vulnerability that allows remote attackers to gain privileges via a crafted web site. | — |
| CVE-2014-8439 | not reported | — | Listed | Adobe Flash Player has a vulnerability in the way it handles a dereferenced memory pointer which could lead to code execution. | — |
| CVE-2014-4148 | not reported | — | Listed | A remote code execution vulnerability exists when the Windows kernel-mode driver improperly handles TrueType fonts. | — |
| CVE-2015-1671 | not reported | — | Listed | A remote code execution vulnerability exists when components of Windows, .NET Framework, Office, Lync, and Silverlight fail to properly hand... | — |
| CVE-2015-6175 | not reported | — | Listed | The kernel in Microsoft Windows contains a vulnerability that allows local users to gain privileges via a crafted application. | — |
| CVE-2015-8651 | not reported | — | Listed | Integer overflow in Adobe Flash Player allows attackers to execute code. | — |
| CVE-2015-4495 | not reported | — | Listed | Moxilla Firefox allows remote attackers to bypass the Same Origin Policy to read arbitrary files or gain privileges. | — |
| CVE-2015-1769 | not reported | — | Listed | A privilege escalation vulnerability exists when the Windows Mount Manager component improperly processes symbolic links. | — |
| CVE-2015-2425 | not reported | — | Listed | Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-servi... | — |
| CVE-2015-2360 | not reported | — | Listed | Win32k.sys in the kernel-mode drivers in Microsoft Windows allows local users to gain privileges or cause denial-of-service (DoS). | — |
| CVE-2015-0071 | not reported | — | Listed | Microsoft Internet Explorer allows remote attackers to bypass the address space layout randomization (ASLR) protection mechanism via a craft... | — |
| CVE-2015-0016 | not reported | — | Listed | Directory traversal vulnerability in the TS WebProxy (TSWbPrxy) component in Microsoft Windows allows remote attackers to escalate privilege... | — |
| CVE-2015-0310 | not reported | — | Listed | Adobe Flash Player does not properly restrict discovery of memory addresses, which allows attackers to bypass the address space layout rando... | — |
| CVE-2016-0034 | not reported | — | Listed | Microsoft Silverlight mishandles negative offsets during decoding, which allows attackers to execute remote code or cause a denial-of-servic... | — |
| CVE-2016-0984 | not reported | — | Listed | Use-after-free vulnerability in Adobe Flash Player and Adobe AIR allows attackers to execute code. | — |
| CVE-2016-1010 | not reported | — | Listed | Integer overflow vulnerability in Adobe Flash Player and AIR allows attackers to execute code. | — |
| CVE-2016-7256 | not reported | — | Listed | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker... | — |
| CVE-2016-3393 | not reported | — | Listed | A remote code execution vulnerability exists due to the way the Windows GDI component handles objects in the memory. An attacker who success... | — |
| CVE-2019-3010 | not reported | — | Listed | Oracle Solaris component: XScreenSaver contains an unspecified vulnerability that allows for privilege escalation. | — |
| CVE-2022-26134 | not reported | — | Listed | Atlassian Confluence Server and Data Center contain a remote code execution vulnerability that allows for an unauthenticated attacker to per... | — |