CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 31–40 of 82 records

CVE Vendor Product Added Due Status
CVE-2011-0609 — Adobe Flash Player Unspecified Vulnerability
Adobe Flash Player contains an unspecified vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
 Adobe Flash Player Jun 8, 2022 Jun 22, 2022
CVE-2011-2462 — Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability
The Universal 3D (U3D) component in Adobe Reader and Acrobat contains a memory corruption vulnerability which could allow remote attackers to execute code or cause denial-of-service (DoS).
 Adobe Reader and Acrobat Jun 8, 2022 Jun 22, 2022
CVE-2012-0754 — Adobe Flash Player Memory Corruption Vulnerability
Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
 Adobe Flash Player Jun 8, 2022 Jun 22, 2022
CVE-2012-0767 — Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability
Adobe Flash Player contains a XSS vulnerability that allows remote attackers to inject web script or HTML.
 Adobe Flash Player Jun 8, 2022 Jun 22, 2022
CVE-2012-5054 — Adobe Flash Player Integer Overflow Vulnerability
Adobe Flash Player contains an integer overflow vulnerability that allows remote attackers to execute code via malformed arguments.
 Adobe Flash Player Jun 8, 2022 Jun 22, 2022
CVE-2018-4990 — Adobe Acrobat and Reader Double Free Vulnerability
Adobe Acrobat and Reader have a double free vulnerability that could lead to remote code execution.
 Adobe Acrobat and Reader Jun 8, 2022 Jun 22, 2022
CVE-2014-0546 — Adobe Reader and Acrobat Sandbox Bypass Vulnerability
Adobe Reader and Acrobat on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context.
 Adobe Reader and Acrobat May 25, 2022 Jun 15, 2022
CVE-2014-8439 — Adobe Flash Player Dereferenced Pointer Vulnerability
Adobe Flash Player has a vulnerability in the way it handles a dereferenced memory pointer which could lead to code execution.
 Adobe Flash Player May 25, 2022 Jun 15, 2022
CVE-2015-0310 — Adobe Flash Player ASLR Bypass Vulnerability
Adobe Flash Player does not properly restrict discovery of memory addresses, which allows attackers to bypass the address space layout randomization (ASLR) protection mechanism.
 Adobe Flash Player May 25, 2022 Jun 15, 2022
CVE-2015-8651 — Adobe Flash Player Integer Overflow Vulnerability
Integer overflow in Adobe Flash Player allows attackers to execute code.
 Adobe Flash Player May 25, 2022 Jun 15, 2022