CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 981–990 of 1746 records

CVE Vendor Product Added Due Status
CVE-2009-4324 — Adobe Acrobat and Reader Use-After-Free Vulnerability
Use-after-free vulnerability in Adobe Acrobat and Reader allows remote attackers to execute code via a crafted PDF file.
 Adobe Acrobat and Reader Jun 8, 2022 Jun 22, 2022
CVE-2010-1297 — Adobe Flash Player Memory Corruption Vulnerability
Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
 Adobe Flash Player Jun 8, 2022 Jun 22, 2022
CVE-2010-2572 — Microsoft PowerPoint Buffer Overflow Vulnerability
Microsoft PowerPoint contains a buffer overflow vulnerability that alllows for remote code execution.
 Microsoft PowerPoint Jun 8, 2022 Jun 22, 2022
CVE-2010-2883 — Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability
Adobe Acrobat and Reader contain a stack-based buffer overflow vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
 Adobe Acrobat and Reader Jun 8, 2022 Jun 22, 2022
CVE-2011-0609 — Adobe Flash Player Unspecified Vulnerability
Adobe Flash Player contains an unspecified vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
 Adobe Flash Player Jun 8, 2022 Jun 22, 2022
CVE-2011-2462 — Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability
The Universal 3D (U3D) component in Adobe Reader and Acrobat contains a memory corruption vulnerability which could allow remote attackers to execute code or cause denial-of-service (DoS).
 Adobe Reader and Acrobat Jun 8, 2022 Jun 22, 2022
CVE-2012-0151 — Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability
The Authenticode Signature Verification function in Microsoft Windows (WinVerifyTrust) does not properly validate the digest of a signed portable executable (PE) file, which allows user-assisted remote attackers to execute code.
 Microsoft Windows Jun 8, 2022 Jun 22, 2022
CVE-2012-0754 — Adobe Flash Player Memory Corruption Vulnerability
Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
 Adobe Flash Player Jun 8, 2022 Jun 22, 2022
CVE-2012-0767 — Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability
Adobe Flash Player contains a XSS vulnerability that allows remote attackers to inject web script or HTML.
 Adobe Flash Player Jun 8, 2022 Jun 22, 2022
CVE-2012-1889 — Microsoft XML Core Services Memory Corruption Vulnerability
Microsoft XML Core Services contains a memory corruption vulnerability which could allow for remote code execution.
 Microsoft XML Core Services Jun 8, 2022 Jun 22, 2022