Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2013-5065 | not reported | — | Listed | Microsoft Windows NDProxy.sys in the kernel contains an improper input validation vulnerability which can allow a local attacker to escalate... | — |
| CVE-2014-0496 | not reported | — | Listed | Adobe Reader and Acrobat contain a use-after-free vulnerability which can allow for code execution. | — |
| CVE-2014-4114 | not reported | — | Listed | A vulnerability exists in Windows Object Linking & Embedding (OLE) that could allow remote code execution if a user opens a file that contai... | — |
| CVE-2015-1642 | not reported | — | Listed | Microsoft Office contains a memory corruption vulnerability that allows remote attackers to execute arbitrary code via a crafted document. | — |
| CVE-2015-1701 | not reported | — | Listed | An unspecified vulnerability exists in the Win32k.sys kernel-mode driver in Microsoft Windows Server that allows a local attacker to execute... | — |
| CVE-2015-2387 | not reported | — | Listed | ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server allows local users to gain privileges via a crafted application. | — |
| CVE-2015-2424 | not reported | — | Listed | Microsoft PowerPoint allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office... | — |
| CVE-2015-2545 | not reported | — | Listed | Microsoft Office allows remote attackers to execute arbitrary code via a crafted EPS image. | — |
| CVE-2015-2590 | not reported | — | Listed | An unspecified vulnerability exists within Oracle Java Runtime Environment that allows an attacker to perform remote code execution. | — |
| CVE-2015-3043 | not reported | — | Listed | A memory corruption vulnerability exists in Adobe Flash Player that allows an attacker to perform remote code execution. | — |
| CVE-2015-4902 | not reported | — | Listed | Unspecified vulnerability in Oracle Java SE allows remote attackers to affect integrity via Unknown vectors related to deployment. | — |
| CVE-2015-5119 | not reported | — | Listed | A use-after-free vulnerability exists within the ActionScript 3 ByteArray class in Adobe Flash Player that allows an attacker to perform rem... | — |
| CVE-2015-7645 | not reported | — | Listed | Adobe Flash Player allows remote attackers to execute arbitrary code via a crafted SWF file. | — |
| CVE-2016-0099 | not reported | — | Listed | A privilege escalation vulnerability exists in Microsoft Windows if the Windows Secondary Logon Service fails to properly manage request han... | — |
| CVE-2016-5195 | not reported | — | Listed | Race condition in mm/gup.c in the Linux kernel allows local users to escalate privileges. | — |
| CVE-2016-7193 | not reported | — | Listed | Microsoft Office contains a memory corruption vulnerability which can allow for remote code execution. | — |
| CVE-2016-7262 | not reported | — | Listed | A security feature bypass vulnerability exists when Microsoft Office improperly handles input. An attacker who successfully exploited the vu... | — |
| CVE-2016-7855 | not reported | — | Listed | Use-after-free vulnerability in Adobe Flash Player Windows and OS and Linux allows remote attackers to execute arbitrary code. | — |
| CVE-2016-8562 | not reported | — | Listed | An improper privilege management vulnerability exists within the Siemens SIMATIC Communication Processor (CP) that allows a privileged attac... | — |
| CVE-2017-0001 | not reported | — | Listed | The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows... | — |