Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2018-8174 | not reported | — | Listed | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Rem... | — |
| CVE-2019-0752 | not reported | — | Listed | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer | — |
| CVE-2022-0609 | not reported | — | Listed | Google Chromium Animation contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a... | — |
| CVE-2022-24086 | not reported | — | Listed | Adobe Commerce and Magento Open Source contain an improper input validation vulnerability which can allow for arbitrary code execution. | — |
| CVE-2022-23134 | not reported | — | Listed | Malicious actors can pass step checks and potentially change the configuration of Zabbix Frontend. | — |
| CVE-2022-23131 | not reported | — | Listed | Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML. | — |
| CVE-2014-6352 | not reported | — | Listed | Microsoft Windows allow remote attackers to execute arbitrary code via a crafted OLE object. | — |
| CVE-2017-0222 | not reported | — | Listed | A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. | — |
| CVE-2017-8570 | not reported | — | Listed | A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory. | — |
| CVE-2022-24682 | not reported | — | Listed | Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) vulnerability in the Calendar feature that allows an attacker... | — |
| CVE-2002-0367 | not reported | — | Listed | smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local... | — |
| CVE-2004-0210 | not reported | — | Listed | A privilege elevation vulnerability exists in the POSIX subsystem. This vulnerability could allow a logged on user to take complete control... | — |
| CVE-2008-2992 | not reported | — | Listed | Adobe Acrobat and Reader contain an input validation issue in a JavaScript method that could potentially lead to remote code execution. | — |
| CVE-2008-3431 | not reported | — | Listed | An input validation vulnerability exists in the VBoxDrv.sys driver of Sun xVM VirtualBox which allows attackers to locally execute arbitrary... | — |
| CVE-2009-1123 | not reported | — | Listed | The kernel in Microsoft Windows does not properly validate changes to unspecified kernel objects, which allows local users to gain privilege... | — |
| CVE-2009-3129 | not reported | — | Listed | Microsoft Office Excel allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cb... | — |
| CVE-2010-0188 | not reported | — | Listed | Unspecified vulnerability in Adobe Reader and Acrobat allows attackers to cause a denial of service or possibly execute arbitrary code. | — |
| CVE-2010-0232 | not reported | — | Listed | The kernel in Microsoft Windows, when access to 16-bit applications is enabled on a 32-bit x86 platform, does not properly validate certain... | — |
| CVE-2010-3333 | not reported | — | Listed | A stack-based buffer overflow vulnerability exists in the parsing of RTF data in Microsoft Office and earlier allows an attacker to perform... | — |
| CVE-2011-0611 | not reported | — | Listed | Adobe Flash Player contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service (application... | — |