CVE-2019-11708 — Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability
Mozilla Firefox and Thunderbird contain a sandbox escape vulnerability that could result in remote code execution.
Firefox and Thunderbird · May 23, 2022
CISA Known Exploited Vulnerabilities Directory
Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.
| CVE | Vendor | Product | Added | Due | Status |
|---|---|---|---|---|---|
|
CVE-2019-11708 — Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability
Mozilla Firefox and Thunderbird contain a sandbox escape vulnerability that could result in remote code execution.
|
Mozilla | Firefox and Thunderbird | May 23, 2022 | Jun 13, 2022 | |
|
CVE-2019-13720 — Google Chrome WebAudio Use-After-Free Vulnerability
Google Chrome WebAudio contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.
|
Chrome WebAudio | May 23, 2022 | Jun 13, 2022 | ||
|
CVE-2019-1385 — Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability
A privilege escalation vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.
|
Microsoft | Windows | May 23, 2022 | Jun 13, 2022 | Ransomware |
|
CVE-2019-18426 — WhatsApp Cross-Site Scripting Vulnerability
A vulnerability in WhatsApp Desktop when paired with WhatsApp for iPhone allows cross-site scripting and local file reading.
|
Meta Platforms | May 23, 2022 | Jun 13, 2022 | ||
|
CVE-2019-5786 — Google Chrome Blink Use-After-Free Vulnerability
Google Chrome Blink contains a heap use-after-free vulnerability that allows an attacker to potentially perform out of bounds memory access via a crafted HTML page.
|
Chrome Blink | May 23, 2022 | Jun 13, 2022 | ||
|
CVE-2019-7286 — Apple Multiple Products Memory Corruption Vulnerability
Apple iOS, macOS, watchOS, and tvOS contain a memory corruption vulnerability that could allow for privilege escalation.
|
Apple | Multiple Products | May 23, 2022 | Jun 13, 2022 | |
|
CVE-2019-7287 — Apple iOS Memory Corruption Vulnerability
Apple iOS contains a memory corruption vulnerability which could allow an attacker to perform remote code execution.
|
Apple | iOS | May 23, 2022 | Jun 13, 2022 | |
|
CVE-2019-8720 — WebKitGTK Memory Corruption Vulnerability
WebKitGTK contains a memory corruption vulnerability which can allow an attacker to perform remote code execution.
|
WebKitGTK | WebKitGTK | May 23, 2022 | Jun 13, 2022 | |
|
CVE-2020-0638 — Microsoft Update Notification Manager Privilege Escalation Vulnerability
Microsoft Update Notification Manager contains an unspecified vulnerability that allows for privilege escalation.
|
Microsoft | Update Notification Manager | May 23, 2022 | Jun 13, 2022 | Ransomware |
|
CVE-2020-1027 — Microsoft Windows Kernel Privilege Escalation Vulnerability
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.
|
Microsoft | Windows | May 23, 2022 | Jun 13, 2022 |
CVE-2019-13720 — Google Chrome WebAudio Use-After-Free Vulnerability
Google Chrome WebAudio contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Chrome WebAudio · May 23, 2022
Ransomware
Microsoft
CVE-2019-1385 — Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability
A privilege escalation vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.
Windows · May 23, 2022
CVE-2019-18426 — WhatsApp Cross-Site Scripting Vulnerability
A vulnerability in WhatsApp Desktop when paired with WhatsApp for iPhone allows cross-site scripting and local file reading.
WhatsApp · May 23, 2022
CVE-2019-5786 — Google Chrome Blink Use-After-Free Vulnerability
Google Chrome Blink contains a heap use-after-free vulnerability that allows an attacker to potentially perform out of bounds memory access via a crafted HTML page.
Chrome Blink · May 23, 2022
CVE-2019-7286 — Apple Multiple Products Memory Corruption Vulnerability
Apple iOS, macOS, watchOS, and tvOS contain a memory corruption vulnerability that could allow for privilege escalation.
Multiple Products · May 23, 2022
CVE-2019-7287 — Apple iOS Memory Corruption Vulnerability
Apple iOS contains a memory corruption vulnerability which could allow an attacker to perform remote code execution.
iOS · May 23, 2022
CVE-2019-8720 — WebKitGTK Memory Corruption Vulnerability
WebKitGTK contains a memory corruption vulnerability which can allow an attacker to perform remote code execution.
WebKitGTK · May 23, 2022
Ransomware
Microsoft
CVE-2020-0638 — Microsoft Update Notification Manager Privilege Escalation Vulnerability
Microsoft Update Notification Manager contains an unspecified vulnerability that allows for privilege escalation.
Update Notification Manager · May 23, 2022
CVE-2020-1027 — Microsoft Windows Kernel Privilege Escalation Vulnerability
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.
Windows · May 23, 2022