Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2014-4113 | not reported | — | Listed | Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. | — |
| CVE-2019-8506 | not reported | — | Listed | A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code exe... | — |
| CVE-2021-1789 | not reported | — | Listed | A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code exe... | — |
| CVE-2022-1388 | not reported | — | Listed | F5 BIG-IP contains a missing authentication in critical function vulnerability which can allow for remote code execution, creation or deleti... | — |
| CVE-2022-22947 | not reported | — | Listed | Spring Cloud Gateway applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsec... | — |
| CVE-2022-30525 | not reported | — | Listed | A command injection vulnerability in the CGI program of some Zyxel firewall versions could allow an attacker to modify specific files and th... | — |
| CVE-2018-8589 | not reported | — | Listed | A privilege escalation vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this... | — |
| CVE-2018-5002 | not reported | — | Listed | Adobe Flash Player have a stack-based buffer overflow vulnerability that could lead to remote code execution. | — |
| CVE-2019-1130 | not reported | — | Listed | A privilege escalation vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links. | — |
| CVE-2019-1385 | not reported | — | Listed | A privilege escalation vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting... | — |
| CVE-2019-18426 | not reported | — | Listed | A vulnerability in WhatsApp Desktop when paired with WhatsApp for iPhone allows cross-site scripting and local file reading. | — |
| CVE-2019-11708 | not reported | — | Listed | Mozilla Firefox and Thunderbird contain a sandbox escape vulnerability that could result in remote code execution. | — |
| CVE-2019-11707 | not reported | — | Listed | Mozilla Firefox and Thunderbird contain a type confusion vulnerability that can occur when manipulating JavaScript objects due to issues in... | — |
| CVE-2019-13720 | not reported | — | Listed | Google Chrome WebAudio contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a cr... | — |
| CVE-2019-0880 | not reported | — | Listed | A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited the vu... | — |
| CVE-2019-0703 | not reported | — | Listed | An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, which could lead to informat... | — |
| CVE-2019-5786 | not reported | — | Listed | Google Chrome Blink contains a heap use-after-free vulnerability that allows an attacker to potentially perform out of bounds memory access... | — |
| CVE-2019-0676 | not reported | — | Listed | An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory. An attacker who successfully exp... | — |
| CVE-2019-7287 | not reported | — | Listed | Apple iOS contains a memory corruption vulnerability which could allow an attacker to perform remote code execution. | — |
| CVE-2019-7286 | not reported | — | Listed | Apple iOS, macOS, watchOS, and tvOS contain a memory corruption vulnerability that could allow for privilege escalation. | — |