CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 1291–1300 of 1746 records

CVE Vendor Product Added Due Status
CVE-2013-3346 — Adobe Reader and Acrobat Memory Corruption Vulnerability
Adobe Reader and Acrobat contain a memory corruption vulnerability which can allow attackers to execute arbitrary code or cause a denial of service.
 Adobe Reader and Acrobat Mar 3, 2022 Mar 24, 2022
CVE-2013-3897 — Microsoft Internet Explorer Use-After-Free Vulnerability
A use-after-free vulnerability exists within CDisplayPointer in Microsoft Internet Explorer that allows an attacker to remotely execute arbitrary code.
 Microsoft Internet Explorer Mar 3, 2022 Mar 24, 2022
CVE-2013-5065 — Microsoft Windows Kernel Privilege Escalation Vulnerability
Microsoft Windows NDProxy.sys in the kernel contains an improper input validation vulnerability which can allow a local attacker to escalate privileges.
 Microsoft Windows Mar 3, 2022 Mar 24, 2022
CVE-2014-0496 — Adobe Reader and Acrobat Use-After-Free Vulnerability
Adobe Reader and Acrobat contain a use-after-free vulnerability which can allow for code execution.
 Adobe Reader and Acrobat Mar 3, 2022 Mar 24, 2022
CVE-2014-4114 — Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability
A vulnerability exists in Windows Object Linking & Embedding (OLE) that could allow remote code execution if a user opens a file that contains a specially crafted OLE object.
 Microsoft Windows Mar 3, 2022 Mar 24, 2022
CVE-2015-1642 — Microsoft Office Memory Corruption Vulnerability
Microsoft Office contains a memory corruption vulnerability that allows remote attackers to execute arbitrary code via a crafted document.
 Microsoft Office Mar 3, 2022 Mar 24, 2022
CVE-2015-1701 — Microsoft Win32k Privilege Escalation Vulnerability
An unspecified vulnerability exists in the Win32k.sys kernel-mode driver in Microsoft Windows Server that allows a local attacker to execute arbitrary code with elevated privileges.
 Microsoft Win32k Mar 3, 2022 Mar 24, 2022 Ransomware
CVE-2015-2387 — Microsoft ATM Font Driver Privilege Escalation Vulnerability
ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server allows local users to gain privileges via a crafted application.
 Microsoft ATM Font Driver Mar 3, 2022 Mar 24, 2022
CVE-2015-2424 — Microsoft PowerPoint Memory Corruption Vulnerability
Microsoft PowerPoint allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document.
 Microsoft PowerPoint Mar 3, 2022 Mar 24, 2022
CVE-2015-2545 — Microsoft Office Malformed EPS File Vulnerability
Microsoft Office allows remote attackers to execute arbitrary code via a crafted EPS image.
 Microsoft Office Mar 3, 2022 Mar 24, 2022