Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2018-8589 | not reported | — | Listed | A privilege escalation vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this... | — |
| CVE-2018-5002 | not reported | — | Listed | Adobe Flash Player have a stack-based buffer overflow vulnerability that could lead to remote code execution. | — |
| CVE-2019-1130 | not reported | — | Listed | A privilege escalation vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links. | — |
| CVE-2019-1385 | not reported | — | Listed | A privilege escalation vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting... | — |
| CVE-2019-18426 | not reported | — | Listed | A vulnerability in WhatsApp Desktop when paired with WhatsApp for iPhone allows cross-site scripting and local file reading. | — |
| CVE-2019-11708 | not reported | — | Listed | Mozilla Firefox and Thunderbird contain a sandbox escape vulnerability that could result in remote code execution. | — |
| CVE-2019-11707 | not reported | — | Listed | Mozilla Firefox and Thunderbird contain a type confusion vulnerability that can occur when manipulating JavaScript objects due to issues in... | — |
| CVE-2019-13720 | not reported | — | Listed | Google Chrome WebAudio contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a cr... | — |
| CVE-2019-0880 | not reported | — | Listed | A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited the vu... | — |
| CVE-2019-0703 | not reported | — | Listed | An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, which could lead to informat... | — |
| CVE-2019-5786 | not reported | — | Listed | Google Chrome Blink contains a heap use-after-free vulnerability that allows an attacker to potentially perform out of bounds memory access... | — |
| CVE-2019-0676 | not reported | — | Listed | An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory. An attacker who successfully exp... | — |
| CVE-2019-7287 | not reported | — | Listed | Apple iOS contains a memory corruption vulnerability which could allow an attacker to perform remote code execution. | — |
| CVE-2019-7286 | not reported | — | Listed | Apple iOS, macOS, watchOS, and tvOS contain a memory corruption vulnerability that could allow for privilege escalation. | — |
| CVE-2020-0638 | not reported | — | Listed | Microsoft Update Notification Manager contains an unspecified vulnerability that allows for privilege escalation. | — |
| CVE-2020-1027 | not reported | — | Listed | An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully ex... | — |
| CVE-2021-30883 | not reported | — | Listed | Apple iOS, macOS, watchOS, and tvOS contain a memory corruption vulnerability that could allow for remote code execution. | — |
| CVE-2021-0920 | not reported | — | Listed | Android kernel contains a race condition, which allows for a use-after-free vulnerability. Exploitation can allow for privilege escalation. | — |
| CVE-2021-1048 | not reported | — | Listed | Android kernel contains a use-after-free vulnerability that allows for privilege escalation. | — |
| CVE-2022-20821 | not reported | — | Listed | Cisco IOS XR software health check opens TCP port 6379 by default on activation. An attacker can connect to the Redis instance on the open p... | — |