Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2023-24880 | not reported | — | Listed | Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web (MOTW)... | — |
| CVE-2023-23397 | not reported | — | Listed | Microsoft Office Outlook contains a privilege escalation vulnerability that allows for a NTLM Relay attack against another service to authen... | — |
| CVE-2023-26360 | not reported | — | Listed | Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for remote code execution. | — |
| CVE-2022-22706 | not reported | — | Listed | Arm Mali GPU Kernel Driver contains an unspecified vulnerability that allows a non-privileged user to achieve write access to read-only memo... | — |
| CVE-2022-3038 | not reported | — | Listed | Google Chromium Network Service contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption... | — |
| CVE-2023-0266 | not reported | — | Listed | Linux kernel contains a use-after-free vulnerability that allows for privilege escalation to gain ring0 access from the system user. | — |
| CVE-2022-38181 | not reported | — | Listed | Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or disclo... | — |
| CVE-2021-30900 | not reported | — | Listed | Apple GPU drivers, included in iOS, iPadOS, and macOS, contain an out-of-bounds write vulnerability that may allow a malicious application t... | — |
| CVE-2022-39197 | not reported | — | Listed | Fortra Cobalt Strike contains a cross-site scripting (XSS) vulnerability in Teamserver that would allow an attacker to set a malformed usern... | — |
| CVE-2022-42948 | not reported | — | Listed | Fortra Cobalt Strike User Interface contains an unspecified vulnerability rooted in Java Swing that may allow remote code execution. | — |
| CVE-2017-7494 | not reported | — | Listed | Samba contains a remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share and then ca... | — |
| CVE-2013-3163 | not reported | — | Listed | Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause a denial of ser... | — |
| CVE-2022-27926 | not reported | — | Listed | Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability by allowing an endpoint URL to accept parameters with... | — |
| CVE-2023-26083 | not reported | — | Listed | Arm Mali GPU Kernel Driver contains an information disclosure vulnerability that allows a non-privileged user to make valid GPU processing o... | — |
| CVE-2019-1388 | not reported | — | Listed | Microsoft Windows Certificate Dialog contains a privilege escalation vulnerability, allowing attackers to run processes in an elevated conte... | — |
| CVE-2021-27878 | not reported | — | Listed | Veritas Backup Exec (BE) Agent contains a command execution vulnerability that could allow an attacker to use a data management protocol com... | — |
| CVE-2021-27877 | not reported | — | Listed | Veritas Backup Exec (BE) Agent contains an improper authentication vulnerability that could allow an attacker unauthorized access to the BE... | — |
| CVE-2021-27876 | not reported | — | Listed | Veritas Backup Exec (BE) Agent contains a file access vulnerability that could allow an attacker to specially craft input parameters on a da... | — |
| CVE-2023-28206 | not reported | — | Listed | Apple iOS, iPadOS, and macOS IOSurfaceAccelerator contain an out-of-bounds write vulnerability that allows an app to execute code with kerne... | — |
| CVE-2023-28205 | not reported | — | Listed | Apple iOS, iPadOS, macOS, and Safari WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously... | — |