Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2017-8570 | not reported | — | Listed | A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory. | — |
| CVE-2022-24682 | not reported | — | Listed | Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) vulnerability in the Calendar feature that allows an attacker... | — |
| CVE-2002-0367 | not reported | — | Listed | smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local... | — |
| CVE-2004-0210 | not reported | — | Listed | A privilege elevation vulnerability exists in the POSIX subsystem. This vulnerability could allow a logged on user to take complete control... | — |
| CVE-2008-2992 | not reported | — | Listed | Adobe Acrobat and Reader contain an input validation issue in a JavaScript method that could potentially lead to remote code execution. | — |
| CVE-2008-3431 | not reported | — | Listed | An input validation vulnerability exists in the VBoxDrv.sys driver of Sun xVM VirtualBox which allows attackers to locally execute arbitrary... | — |
| CVE-2009-1123 | not reported | — | Listed | The kernel in Microsoft Windows does not properly validate changes to unspecified kernel objects, which allows local users to gain privilege... | — |
| CVE-2009-3129 | not reported | — | Listed | Microsoft Office Excel allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cb... | — |
| CVE-2010-0188 | not reported | — | Listed | Unspecified vulnerability in Adobe Reader and Acrobat allows attackers to cause a denial of service or possibly execute arbitrary code. | — |
| CVE-2010-0232 | not reported | — | Listed | The kernel in Microsoft Windows, when access to 16-bit applications is enabled on a 32-bit x86 platform, does not properly validate certain... | — |
| CVE-2010-3333 | not reported | — | Listed | A stack-based buffer overflow vulnerability exists in the parsing of RTF data in Microsoft Office and earlier allows an attacker to perform... | — |
| CVE-2011-0611 | not reported | — | Listed | Adobe Flash Player contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service (application... | — |
| CVE-2011-1889 | not reported | — | Listed | A remote code execution vulnerability exists in the Forefront Threat Management Gateway (TMG) Firewall Client Winsock provider that could al... | — |
| CVE-2011-3544 | not reported | — | Listed | An access control vulnerability exists in the Applet Rhino Script Engine component of Oracle's Java Runtime Environment allows an attacker t... | — |
| CVE-2012-0507 | not reported | — | Listed | An incorrect type vulnerability exists in the Concurrency component of Oracle's Java Runtime Environment allows an attacker to remotely exec... | — |
| CVE-2012-1535 | not reported | — | Listed | Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute arbitrary code or cause a denial of service via crafted S... | — |
| CVE-2012-1723 | not reported | — | Listed | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect confidentialit... | — |
| CVE-2012-1856 | not reported | — | Listed | The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office allows remote attackers to execute arbitrary code vi... | — |
| CVE-2012-4681 | not reported | — | Listed | The Java Runtime Environment (JRE) component in Oracle Java SE allow for remote code execution. | — |
| CVE-2013-0632 | not reported | — | Listed | An authentication bypass vulnerability exists in Adobe ColdFusion which could result in an unauthorized user gaining administrative access. | — |