Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2018-8120 | not reported | — | Listed | A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. | — |
| CVE-2019-0543 | not reported | — | Listed | A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited... | — |
| CVE-2019-0841 | not reported | — | Listed | A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this... | — |
| CVE-2019-1064 | not reported | — | Listed | A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this... | — |
| CVE-2019-1069 | not reported | — | Listed | A privilege escalation vulnerability exists in the way the Task Scheduler Service validates certain file operations. | — |
| CVE-2019-1129 | not reported | — | Listed | A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this... | — |
| CVE-2019-1132 | not reported | — | Listed | A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. | — |
| CVE-2019-1253 | not reported | — | Listed | A privilege escalation vulnerability exists when the Windows AppX Deployment Server improperly handles junctions. | — |
| CVE-2019-1315 | not reported | — | Listed | A privilege escalation vulnerability exists when Windows Error Reporting manager improperly handles hard links. An attacker who successfully... | — |
| CVE-2019-1322 | not reported | — | Listed | A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited... | — |
| CVE-2019-1405 | not reported | — | Listed | A privilege escalation vulnerability exists when the Windows UPnP service improperly allows COM object creation. | — |
| CVE-2020-5135 | not reported | — | Listed | A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code... | — |
| CVE-2005-2773 | not reported | — | Listed | HP OpenView Network Node Manager could allow a remote attacker to execute arbitrary commands on the system. | — |
| CVE-2009-0927 | not reported | — | Listed | Stack-based buffer overflow in Adobe Reader and Adobe Acrobat allows remote attackers to execute arbitrary code. | — |
| CVE-2009-1151 | not reported | — | Listed | Setup script used to generate configuration can be fooled using a crafted POST request to include arbitrary PHP code in generated configurat... | — |
| CVE-2009-2055 | not reported | — | Listed | Cisco IOS XR,when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service (DoS). | — |
| CVE-2010-3035 | not reported | — | Listed | Cisco IOS XR, when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service (DoS). | — |
| CVE-2010-4344 | not reported | — | Listed | Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code... | — |
| CVE-2010-4345 | not reported | — | Listed | Exim allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file wit... | — |
| CVE-2012-1823 | not reported | — | Listed | sapi/cgi/cgi_main.c in PHP, when configured as a CGI script, does not properly handle query strings, which allows remote attackers to execut... | — |