Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2009-4324 | Use-after-free vulnerability in Adobe Acrobat and Reader allows remote attackers to execute code via a crafted PDF file. | Adobe / Acrobat and Reader | Jun 8, 2022 | — | View → |
| CVE-2010-1297 | Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS). | Adobe / Flash Player | Jun 8, 2022 | — | View → |
| CVE-2010-2572 | Microsoft PowerPoint contains a buffer overflow vulnerability that alllows for remote code execution. | Microsoft / PowerPoint | Jun 8, 2022 | — | View → |
| CVE-2010-2883 | Adobe Acrobat and Reader contain a stack-based buffer overflow vulnerability that allows remote attackers to execute code or cause… | Adobe / Acrobat and Reader | Jun 8, 2022 | — | View → |
| CVE-2011-0609 | Adobe Flash Player contains an unspecified vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS). | Adobe / Flash Player | Jun 8, 2022 | — | View → |
| CVE-2011-2462 | The Universal 3D (U3D) component in Adobe Reader and Acrobat contains a memory corruption vulnerability which could allow remote attackers… | Adobe / Reader and Acrobat | Jun 8, 2022 | — | View → |
| CVE-2012-0151 | The Authenticode Signature Verification function in Microsoft Windows (WinVerifyTrust) does not properly validate the digest of a signed… | Microsoft / Windows | Jun 8, 2022 | — | View → |
| CVE-2012-0754 | Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS). | Adobe / Flash Player | Jun 8, 2022 | — | View → |
| CVE-2012-0767 | Adobe Flash Player contains a XSS vulnerability that allows remote attackers to inject web script or HTML. | Adobe / Flash Player | Jun 8, 2022 | — | View → |
| CVE-2012-1889 | Microsoft XML Core Services contains a memory corruption vulnerability which could allow for remote code execution. | Microsoft / XML Core Services | Jun 8, 2022 | — | View → |
| CVE-2012-4969 | Microsoft Internet Explorer contains a use-after-free vulnerability that allows remote attackers to execute code via a crafted web site. | Microsoft / Internet Explorer | Jun 8, 2022 | — | View → |
| CVE-2012-5054 | Adobe Flash Player contains an integer overflow vulnerability that allows remote attackers to execute code via malformed arguments. | Adobe / Flash Player | Jun 8, 2022 | — | View → |
| CVE-2013-1331 | Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via crafted PNG data in an Office… | Microsoft / Office | Jun 8, 2022 | — | View → |
| CVE-2016-1646 | Google Chromium V8 Engine contains an out-of-bounds read vulnerability that allows a remote attacker to cause a denial of service or… | Google / Chromium V8 | Jun 8, 2022 | — | View → |
| CVE-2016-5198 | Google Chromium V8 Engine contains an out-of-bounds memory access vulnerability that allows a remote attacker to perform read/write… | Google / Chromium V8 | Jun 8, 2022 | — | View → |
| CVE-2017-5030 | Google Chromium V8 Engine contains a memory corruption vulnerability that allows a remote attacker to execute code via a crafted HTML… | Google / Chromium V8 | Jun 8, 2022 | — | View → |
| CVE-2017-5070 | Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to execute code inside a sandbox via a… | Google / Chromium V8 | Jun 8, 2022 | — | View → |
| CVE-2017-6862 | Multiple NETGEAR devices contain a buffer overflow vulnerability that allows for authentication bypass and remote code execution. | NETGEAR / Multiple Devices | Jun 8, 2022 | — | View → |
| CVE-2018-17463 | Google Chromium V8 Engine contains an unspecified vulnerability that allows a remote attacker to execute code inside a sandbox via a… | Google / Chromium V8 | Jun 8, 2022 | — | View → |
| CVE-2018-17480 | Google Chromium V8 Engine contains out-of-bounds write vulnerability that allows a remote attacker to execute code inside a sandbox via a… | Google / Chromium V8 | Jun 8, 2022 | — | View → |