Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2013-3660 | not reported | — | Listed | The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft does not properly initialize a pointer for the ne... | — |
| CVE-2015-1770 | not reported | — | Listed | Microsoft Office allows remote attackers to execute arbitrary code via a crafted Office document. | — |
| CVE-2015-2419 | not reported | — | Listed | JScript in Microsoft Internet Explorer allows remote attackers to execute remote code or cause a denial of service (memory corruption) via a... | — |
| CVE-2015-2426 | not reported | — | Listed | A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially c... | — |
| CVE-2016-0040 | not reported | — | Listed | The kernel in Microsoft Windows allows local users to gain privileges via a crafted application. | — |
| CVE-2016-0151 | not reported | — | Listed | The Client-Server Run-time Subsystem (CSRSS) in Microsoft mismanages process tokens, which allows local users to gain privileges via a craft... | — |
| CVE-2016-0189 | not reported | — | Listed | The Microsoft JScript nd VBScript engines, as used in Internet Explorer and other products, allow attackers to execute remote code or cause... | — |
| CVE-2016-7200 | not reported | — | Listed | The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute remote code or cause a denial of service (memory... | — |
| CVE-2016-7201 | not reported | — | Listed | The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute remote code or cause a denial of service (memory... | — |
| CVE-2017-0037 | not reported | — | Listed | Microsoft Edge and Internet Explorer have a type confusion vulnerability in mshtml.dll, which allows remote code execution. | — |
| CVE-2017-0059 | not reported | — | Listed | Microsoft Internet Explorer allow remote attackers to obtain sensitive information from process memory via a crafted web site. | — |
| CVE-2017-0213 | not reported | — | Listed | Microsoft Windows COM Aggregate Marshaler allows for privilege escalation when an attacker runs a specially crafted application. | — |
| CVE-2018-8405 | not reported | — | Listed | An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory. | — |
| CVE-2018-8406 | not reported | — | Listed | An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory. | — |
| CVE-2018-8440 | not reported | — | Listed | An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC). | — |
| CVE-2019-7483 | not reported | — | Listed | In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the prese... | — |
| CVE-2021-20028 | not reported | — | Listed | SonicWall Secure Remote Access (SRA) products contain an improper neutralization of a SQL Command leading to SQL injection. | — |
| CVE-2021-26085 | not reported | — | Listed | Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a pre-authorization arbitrary file... | — |
| CVE-2021-34486 | not reported | — | Listed | Microsoft Windows Event Tracing contains an unspecified vulnerability which can allow for privilege escalation. | — |
| CVE-2021-38646 | not reported | — | Listed | Microsoft Office Access Connectivity Engine contains an unspecified vulnerability which can allow for remote code execution. | — |