Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2020-0638 | not reported | — | Listed | Microsoft Update Notification Manager contains an unspecified vulnerability that allows for privilege escalation. | — |
| CVE-2020-1027 | not reported | — | Listed | An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully ex... | — |
| CVE-2021-30883 | not reported | — | Listed | Apple iOS, macOS, watchOS, and tvOS contain a memory corruption vulnerability that could allow for remote code execution. | — |
| CVE-2021-0920 | not reported | — | Listed | Android kernel contains a race condition, which allows for a use-after-free vulnerability. Exploitation can allow for privilege escalation. | — |
| CVE-2021-1048 | not reported | — | Listed | Android kernel contains a use-after-free vulnerability that allows for privilege escalation. | — |
| CVE-2022-20821 | not reported | — | Listed | Cisco IOS XR software health check opens TCP port 6379 by default on activation. An attacker can connect to the Redis instance on the open p... | — |
| CVE-2016-3298 | not reported | — | Listed | An information disclosure vulnerability exists when the Microsoft Internet Messaging API improperly handles objects in memory. An attacker w... | — |
| CVE-2016-6367 | not reported | — | Listed | A vulnerability in the command-line interface (CLI) parser of Cisco ASA software could allow an authenticated, local attacker to create a de... | — |
| CVE-2016-6366 | not reported | — | Listed | A buffer overflow vulnerability in the Simple Network Management Protocol (SNMP) code of Cisco ASA software could allow an attacker to cause... | — |
| CVE-2016-4657 | not reported | — | Listed | Apple iOS WebKit contains a memory corruption vulnerability that allows attackers to execute remote code or cause a denial-of-service (DoS)... | — |
| CVE-2016-4656 | not reported | — | Listed | A memory corruption vulnerability in Apple iOS kernel allows attackers to execute code in a privileged context or cause a denial-of-service... | — |
| CVE-2016-4655 | not reported | — | Listed | The Apple iOS kernel allows attackers to obtain sensitive information from memory via a crafted application. | — |
| CVE-2016-3351 | not reported | — | Listed | An information disclosure vulnerability exists in the way that certain functions in Internet Explorer and Edge handle objects in memory. The... | — |
| CVE-2016-0162 | not reported | — | Listed | An information disclosure vulnerability exists when Internet Explorer does not properly handle JavaScript. The vulnerability could allow an... | — |
| CVE-2017-18362 | not reported | — | Listed | ConnectWise ManagedITSync integration for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the K... | — |
| CVE-2017-8543 | not reported | — | Listed | Microsoft Windows allows an attacker to take control of the affected system when Windows Search fails to handle objects in memory. | — |
| CVE-2017-8291 | not reported | — | Listed | Artifex Ghostscript allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile. | — |
| CVE-2017-0210 | not reported | — | Listed | A privilege escalation vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an att... | — |
| CVE-2017-0149 | not reported | — | Listed | Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause a denial-of-ser... | — |
| CVE-2017-0005 | not reported | — | Listed | The Graphics Device Interface (GDI) in Microsoft Windows allows local users to gain privileges via a crafted application. | — |