CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 21–30 of 82 records

CVE Vendor Product Added Due Status
CVE-2023-29298 — Adobe ColdFusion Improper Access Control Vulnerability
Adobe ColdFusion contains an improper access control vulnerability that allows for a security feature bypass.
 Adobe ColdFusion Jul 20, 2023 Aug 10, 2023
CVE-2023-38205 — Adobe ColdFusion Improper Access Control Vulnerability
Adobe ColdFusion contains an improper access control vulnerability that allows for a security feature bypass.
 Adobe ColdFusion Jul 20, 2023 Aug 10, 2023
CVE-2023-26360 — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for remote code execution.
 Adobe ColdFusion Mar 15, 2023 Apr 5, 2023
CVE-2007-5659 — Adobe Acrobat and Reader Buffer Overflow Vulnerability
Adobe Acrobat and Reader contain a buffer overflow vulnerability that allows remote attackers to execute code via a PDF file with long arguments to unspecified JavaScript methods.
 Adobe Acrobat and Reader Jun 8, 2022 Jun 22, 2022
CVE-2008-0655 — Adobe Acrobat and Reader Unspecified Vulnerability
Adobe Acrobat and Reader contains an unespecified vulnerability described as a design flaw which could allow a specially crafted file to be printed silently an arbitrary number of times.
 Adobe Acrobat and Reader Jun 8, 2022 Jun 22, 2022
CVE-2009-1862 — Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability
Adobe Acrobat and Reader and Adobe Flash Player allows remote attackers to execute code or cause denial-of-service (DoS).
 Adobe Acrobat and Reader, Flash Player Jun 8, 2022 Jun 22, 2022
CVE-2009-3953 — Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability
Adobe Acrobat and Reader contains an array boundary issue in Universal 3D (U3D) support that could lead to remote code execution.
 Adobe Acrobat and Reader Jun 8, 2022 Jun 22, 2022
CVE-2009-4324 — Adobe Acrobat and Reader Use-After-Free Vulnerability
Use-after-free vulnerability in Adobe Acrobat and Reader allows remote attackers to execute code via a crafted PDF file.
 Adobe Acrobat and Reader Jun 8, 2022 Jun 22, 2022
CVE-2010-1297 — Adobe Flash Player Memory Corruption Vulnerability
Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
 Adobe Flash Player Jun 8, 2022 Jun 22, 2022
CVE-2010-2883 — Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability
Adobe Acrobat and Reader contain a stack-based buffer overflow vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
 Adobe Acrobat and Reader Jun 8, 2022 Jun 22, 2022