Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2013-0640 | not reported | — | Listed | An memory corruption vulnerability exists in the acroform.dll in Adobe Reader that allows an attacker to perform remote code execution. | — |
| CVE-2013-0641 | not reported | — | Listed | A buffer overflow vulnerability exists in Adobe Reader which allows an attacker to perform remote code execution. | — |
| CVE-2013-1347 | not reported | — | Listed | This vulnerability may corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user wit... | — |
| CVE-2013-1675 | not reported | — | Listed | Mozilla Firefox does not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale func... | — |
| CVE-2013-3346 | not reported | — | Listed | Adobe Reader and Acrobat contain a memory corruption vulnerability which can allow attackers to execute arbitrary code or cause a denial of... | — |
| CVE-2013-3897 | not reported | — | Listed | A use-after-free vulnerability exists within CDisplayPointer in Microsoft Internet Explorer that allows an attacker to remotely execute arbi... | — |
| CVE-2013-5065 | not reported | — | Listed | Microsoft Windows NDProxy.sys in the kernel contains an improper input validation vulnerability which can allow a local attacker to escalate... | — |
| CVE-2014-0496 | not reported | — | Listed | Adobe Reader and Acrobat contain a use-after-free vulnerability which can allow for code execution. | — |
| CVE-2014-4114 | not reported | — | Listed | A vulnerability exists in Windows Object Linking & Embedding (OLE) that could allow remote code execution if a user opens a file that contai... | — |
| CVE-2015-1642 | not reported | — | Listed | Microsoft Office contains a memory corruption vulnerability that allows remote attackers to execute arbitrary code via a crafted document. | — |
| CVE-2015-1701 | not reported | — | Listed | An unspecified vulnerability exists in the Win32k.sys kernel-mode driver in Microsoft Windows Server that allows a local attacker to execute... | — |
| CVE-2015-2387 | not reported | — | Listed | ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server allows local users to gain privileges via a crafted application. | — |
| CVE-2015-2424 | not reported | — | Listed | Microsoft PowerPoint allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office... | — |
| CVE-2015-2545 | not reported | — | Listed | Microsoft Office allows remote attackers to execute arbitrary code via a crafted EPS image. | — |
| CVE-2015-2590 | not reported | — | Listed | An unspecified vulnerability exists within Oracle Java Runtime Environment that allows an attacker to perform remote code execution. | — |
| CVE-2015-3043 | not reported | — | Listed | A memory corruption vulnerability exists in Adobe Flash Player that allows an attacker to perform remote code execution. | — |
| CVE-2015-4902 | not reported | — | Listed | Unspecified vulnerability in Oracle Java SE allows remote attackers to affect integrity via Unknown vectors related to deployment. | — |
| CVE-2015-5119 | not reported | — | Listed | A use-after-free vulnerability exists within the ActionScript 3 ByteArray class in Adobe Flash Player that allows an attacker to perform rem... | — |
| CVE-2015-7645 | not reported | — | Listed | Adobe Flash Player allows remote attackers to execute arbitrary code via a crafted SWF file. | — |
| CVE-2016-0099 | not reported | — | Listed | A privilege escalation vulnerability exists in Microsoft Windows if the Windows Secondary Logon Service fails to properly manage request han... | — |