Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.
| CVE | Vendor | Product | Added | Due | Status |
|---|---|---|---|---|---|
|
CVE-2012-0507 — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
An incorrect type vulnerability exists in the Concurrency component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code.
|
Oracle | Java SE | Mar 3, 2022 | Mar 24, 2022 | Ransomware |
|
CVE-2012-1535 — Adobe Flash Player Arbitrary Code Execution Vulnerability
Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute arbitrary code or cause a denial of service via crafted SWF content.
|
Adobe | Flash Player | Mar 3, 2022 | Mar 24, 2022 | |
|
CVE-2012-1723 — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to Hotspot.
|
Oracle | Java SE | Mar 3, 2022 | Mar 24, 2022 | Ransomware |
|
CVE-2012-1856 — Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability
The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office allows remote attackers to execute arbitrary code via a crafted (1) document or (2) web page that triggers system-state corruption.
|
Microsoft | Office | Mar 3, 2022 | Mar 24, 2022 | |
|
CVE-2012-4681 — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
The Java Runtime Environment (JRE) component in Oracle Java SE allow for remote code execution.
|
Oracle | Java SE | Mar 3, 2022 | Mar 24, 2022 | Ransomware |
|
CVE-2013-0632 — Adobe ColdFusion Authentication Bypass Vulnerability
An authentication bypass vulnerability exists in Adobe ColdFusion which could result in an unauthorized user gaining administrative access.
|
Adobe | ColdFusion | Mar 3, 2022 | Mar 24, 2022 | |
|
CVE-2013-0640 — Adobe Reader and Acrobat Memory Corruption Vulnerability
An memory corruption vulnerability exists in the acroform.dll in Adobe Reader that allows an attacker to perform remote code execution.
|
Adobe | Reader and Acrobat | Mar 3, 2022 | Mar 24, 2022 | |
|
CVE-2013-0641 — Adobe Reader Buffer Overflow Vulnerability
A buffer overflow vulnerability exists in Adobe Reader which allows an attacker to perform remote code execution.
|
Adobe | Reader | Mar 3, 2022 | Mar 24, 2022 | |
|
CVE-2013-1347 — Microsoft Internet Explorer Remote Code Execution Vulnerability
This vulnerability may corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user within Internet Explorer.
|
Microsoft | Internet Explorer | Mar 3, 2022 | Mar 24, 2022 | |
|
CVE-2013-1675 — Mozilla Firefox Information Disclosure Vulnerability
Mozilla Firefox does not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.
|
Mozilla | Firefox | Mar 3, 2022 | Mar 24, 2022 |
An incorrect type vulnerability exists in the Concurrency component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code.
Java SE · Mar 3, 2022
Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute arbitrary code or cause a denial of service via crafted SWF content.
Flash Player · Mar 3, 2022
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to Hotspot.
Java SE · Mar 3, 2022
The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office allows remote attackers to execute arbitrary code via a crafted (1) document or (2) web page that triggers system-state corruption.
Office · Mar 3, 2022
The Java Runtime Environment (JRE) component in Oracle Java SE allow for remote code execution.
Java SE · Mar 3, 2022
An authentication bypass vulnerability exists in Adobe ColdFusion which could result in an unauthorized user gaining administrative access.
ColdFusion · Mar 3, 2022
An memory corruption vulnerability exists in the acroform.dll in Adobe Reader that allows an attacker to perform remote code execution.
Reader and Acrobat · Mar 3, 2022
A buffer overflow vulnerability exists in Adobe Reader which allows an attacker to perform remote code execution.
Reader · Mar 3, 2022
This vulnerability may corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user within Internet Explorer.
Internet Explorer · Mar 3, 2022
Mozilla Firefox does not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.
Firefox · Mar 3, 2022