Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2022-21999 | not reported | — | Listed | Microsoft Windows Print Spooler contains an unspecified vulnerability which can allow for privilege escalation. | — |
| CVE-2022-26143 | not reported | — | Listed | A vulnerability has been identified in MiCollab and MiVoice Business Express that may allow a malicious actor to gain unauthorized access to... | — |
| CVE-2022-26318 | not reported | — | Listed | On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code. | — |
| CVE-2010-4398 | not reported | — | Listed | Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows allows local users to gain privileges,... | — |
| CVE-2011-2005 | not reported | — | Listed | afd.sys in the Ancillary Function Driver in Microsoft Windows does not properly validate user-mode input passed to kernel mode, which allows... | — |
| CVE-2012-0518 | not reported | — | Listed | Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware allows remote attackers to a... | — |
| CVE-2012-2034 | not reported | — | Listed | Adobe Flash Player contains a memory corruption vulnerability that allows for remote code execution or denial-of-service (DoS). | — |
| CVE-2012-2539 | not reported | — | Listed | Microsoft Word allows attackers to execute remote code or cause a denial-of-service (DoS) via crafted RTF data. | — |
| CVE-2012-5076 | not reported | — | Listed | The default Java security properties configuration did not restrict access to the com.sun.org.glassfish.external and com.sun.org.glassfish.g... | — |
| CVE-2013-1690 | not reported | — | Listed | Mozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote att... | — |
| CVE-2013-2465 | not reported | — | Listed | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect confidentialit... | — |
| CVE-2013-2551 | not reported | — | Listed | Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute remote code via a crafted web site that trigg... | — |
| CVE-2013-2729 | not reported | — | Listed | Integer overflow vulnerability in Adobe Reader and Acrobat allows attackers to execute remote code. | — |
| CVE-2013-3660 | not reported | — | Listed | The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft does not properly initialize a pointer for the ne... | — |
| CVE-2015-1770 | not reported | — | Listed | Microsoft Office allows remote attackers to execute arbitrary code via a crafted Office document. | — |
| CVE-2015-2419 | not reported | — | Listed | JScript in Microsoft Internet Explorer allows remote attackers to execute remote code or cause a denial of service (memory corruption) via a... | — |
| CVE-2015-2426 | not reported | — | Listed | A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially c... | — |
| CVE-2016-0040 | not reported | — | Listed | The kernel in Microsoft Windows allows local users to gain privileges via a crafted application. | — |
| CVE-2016-0151 | not reported | — | Listed | The Client-Server Run-time Subsystem (CSRSS) in Microsoft mismanages process tokens, which allows local users to gain privileges via a craft... | — |
| CVE-2016-0189 | not reported | — | Listed | The Microsoft JScript nd VBScript engines, as used in Internet Explorer and other products, allow attackers to execute remote code or cause... | — |