Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Vulnerabilities

Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.

Archives: September 2026 October 2026 CISA KEV / threat intelligence

CVESeverityCVSSKEVDescriptionModified (UTC)
CVE-2002-0367 not reported — Listed smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local... —
CVE-2004-0210 not reported — Listed A privilege elevation vulnerability exists in the POSIX subsystem. This vulnerability could allow a logged on user to take complete control... —
CVE-2008-2992 not reported — Listed Adobe Acrobat and Reader contain an input validation issue in a JavaScript method that could potentially lead to remote code execution. —
CVE-2008-3431 not reported — Listed An input validation vulnerability exists in the VBoxDrv.sys driver of Sun xVM VirtualBox which allows attackers to locally execute arbitrary... —
CVE-2009-1123 not reported — Listed The kernel in Microsoft Windows does not properly validate changes to unspecified kernel objects, which allows local users to gain privilege... —
CVE-2009-3129 not reported — Listed Microsoft Office Excel allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cb... —
CVE-2010-0188 not reported — Listed Unspecified vulnerability in Adobe Reader and Acrobat allows attackers to cause a denial of service or possibly execute arbitrary code. —
CVE-2010-0232 not reported — Listed The kernel in Microsoft Windows, when access to 16-bit applications is enabled on a 32-bit x86 platform, does not properly validate certain... —
CVE-2010-3333 not reported — Listed A stack-based buffer overflow vulnerability exists in the parsing of RTF data in Microsoft Office and earlier allows an attacker to perform... —
CVE-2011-0611 not reported — Listed Adobe Flash Player contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service (application... —
CVE-2011-1889 not reported — Listed A remote code execution vulnerability exists in the Forefront Threat Management Gateway (TMG) Firewall Client Winsock provider that could al... —
CVE-2011-3544 not reported — Listed An access control vulnerability exists in the Applet Rhino Script Engine component of Oracle's Java Runtime Environment allows an attacker t... —
CVE-2012-0507 not reported — Listed An incorrect type vulnerability exists in the Concurrency component of Oracle's Java Runtime Environment allows an attacker to remotely exec... —
CVE-2012-1535 not reported — Listed Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute arbitrary code or cause a denial of service via crafted S... —
CVE-2012-1723 not reported — Listed Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect confidentialit... —
CVE-2012-1856 not reported — Listed The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office allows remote attackers to execute arbitrary code vi... —
CVE-2012-4681 not reported — Listed The Java Runtime Environment (JRE) component in Oracle Java SE allow for remote code execution. —
CVE-2013-0632 not reported — Listed An authentication bypass vulnerability exists in Adobe ColdFusion which could result in an unauthorized user gaining administrative access. —
CVE-2013-0640 not reported — Listed An memory corruption vulnerability exists in the acroform.dll in Adobe Reader that allows an attacker to perform remote code execution. —
CVE-2013-0641 not reported — Listed A buffer overflow vulnerability exists in Adobe Reader which allows an attacker to perform remote code execution. —