Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.
| CVE | Vendor | Product | Added | Due | Status |
|---|---|---|---|---|---|
|
CVE-2015-1671 — Microsoft Windows Remote Code Execution Vulnerability
A remote code execution vulnerability exists when components of Windows, .NET Framework, Office, Lync, and Silverlight fail to properly handle TrueType fonts.
|
Microsoft | Windows | May 25, 2022 | Jun 15, 2022 | |
|
CVE-2015-1769 — Microsoft Windows Mount Manager Privilege Escalation Vulnerability
A privilege escalation vulnerability exists when the Windows Mount Manager component improperly processes symbolic links.
|
Microsoft | Windows | May 25, 2022 | Jun 15, 2022 | |
|
CVE-2015-2360 — Microsoft Win32k Privilege Escalation Vulnerability
Win32k.sys in the kernel-mode drivers in Microsoft Windows allows local users to gain privileges or cause denial-of-service (DoS).
|
Microsoft | Win32k | May 25, 2022 | Jun 15, 2022 | |
|
CVE-2015-2425 — Microsoft Internet Explorer Memory Corruption Vulnerability
Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
|
Microsoft | Internet Explorer | May 25, 2022 | Jun 15, 2022 | |
|
CVE-2015-4495 — Mozilla Firefox Security Feature Bypass Vulnerability
Moxilla Firefox allows remote attackers to bypass the Same Origin Policy to read arbitrary files or gain privileges.
|
Mozilla | Firefox | May 25, 2022 | Jun 15, 2022 | |
|
CVE-2015-6175 — Microsoft Windows Kernel Privilege Escalation Vulnerability
The kernel in Microsoft Windows contains a vulnerability that allows local users to gain privileges via a crafted application.
|
Microsoft | Windows | May 25, 2022 | Jun 15, 2022 | |
|
CVE-2015-8651 — Adobe Flash Player Integer Overflow Vulnerability
Integer overflow in Adobe Flash Player allows attackers to execute code.
|
Adobe | Flash Player | May 25, 2022 | Jun 15, 2022 | |
|
CVE-2016-0034 — Microsoft Silverlight Runtime Remote Code Execution Vulnerability
Microsoft Silverlight mishandles negative offsets during decoding, which allows attackers to execute remote code or cause a denial-of-service (DoS).
|
Microsoft | Silverlight | May 25, 2022 | Jun 15, 2022 | Ransomware |
|
CVE-2016-0984 — Adobe Flash Player and AIR Use-After-Free Vulnerability
Use-after-free vulnerability in Adobe Flash Player and Adobe AIR allows attackers to execute code.
|
Adobe | Flash Player and AIR | May 25, 2022 | Jun 15, 2022 | |
|
CVE-2016-1010 — Adobe Flash Player and AIR Integer Overflow Vulnerability
Integer overflow vulnerability in Adobe Flash Player and AIR allows attackers to execute code.
|
Adobe | Flash Player and AIR | May 25, 2022 | Jun 15, 2022 |
A remote code execution vulnerability exists when components of Windows, .NET Framework, Office, Lync, and Silverlight fail to properly handle TrueType fonts.
Windows · May 25, 2022
A privilege escalation vulnerability exists when the Windows Mount Manager component improperly processes symbolic links.
Windows · May 25, 2022
Win32k.sys in the kernel-mode drivers in Microsoft Windows allows local users to gain privileges or cause denial-of-service (DoS).
Win32k · May 25, 2022
Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
Internet Explorer · May 25, 2022
Moxilla Firefox allows remote attackers to bypass the Same Origin Policy to read arbitrary files or gain privileges.
Firefox · May 25, 2022
The kernel in Microsoft Windows contains a vulnerability that allows local users to gain privileges via a crafted application.
Windows · May 25, 2022
Integer overflow in Adobe Flash Player allows attackers to execute code.
Flash Player · May 25, 2022
Microsoft Silverlight mishandles negative offsets during decoding, which allows attackers to execute remote code or cause a denial-of-service (DoS).
Silverlight · May 25, 2022
Use-after-free vulnerability in Adobe Flash Player and Adobe AIR allows attackers to execute code.
Flash Player and AIR · May 25, 2022
Integer overflow vulnerability in Adobe Flash Player and AIR allows attackers to execute code.
Flash Player and AIR · May 25, 2022