CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 51–60 of 82 records

CVE Vendor Product Added Due Status
CVE-2013-2729 — Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability
Integer overflow vulnerability in Adobe Reader and Acrobat allows attackers to execute remote code.
 Adobe Reader and Acrobat Mar 28, 2022 Apr 18, 2022
CVE-2009-0927 — Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability
Stack-based buffer overflow in Adobe Reader and Adobe Acrobat allows remote attackers to execute arbitrary code.
 Adobe Reader and Acrobat Mar 25, 2022 Apr 15, 2022
CVE-2010-2861 — Adobe ColdFusion Directory Traversal Vulnerability
A directory traversal vulnerability exists in the administrator console in Adobe ColdFusion which allows remote attackers to read arbitrary files.
 Adobe ColdFusion Mar 25, 2022 Apr 15, 2022 Ransomware
CVE-2016-4171 — Adobe Flash Player Remote Code Execution Vulnerability
Unspecified vulnerability in Adobe Flash Player allows for remote code execution.
 Adobe Flash Player Mar 25, 2022 Apr 15, 2022
CVE-2016-7892 — Adobe Flash Player Use-After-Free Vulnerability
Adobe Flash Player has an exploitable use-after-free vulnerability in the TextField class.
 Adobe Flash Player Mar 25, 2022 Apr 15, 2022
CVE-2009-3960 — Adobe BlazeDS Information Disclosure Vulnerability
Adobe BlazeDS, which is utilized in LifeCycle and Coldfusion, contains a vulnerability that allows for information disclosure.
 Adobe BlazeDS Mar 7, 2022 Sep 7, 2022 Ransomware
CVE-2013-0625 — Adobe ColdFusion Authentication Bypass Vulnerability
Adobe Coldfusion contains an authentication bypass vulnerability, which could result in an unauthorized user gaining administrative access.
 Adobe ColdFusion Mar 7, 2022 Sep 7, 2022
CVE-2013-0629 — Adobe ColdFusion Directory Traversal Vulnerability
Adobe Coldfusion contains a directory traversal vulnerability, which could permit an unauthorized user access to restricted directories.
 Adobe ColdFusion Mar 7, 2022 Sep 7, 2022
CVE-2013-0631 — Adobe ColdFusion Information Disclosure Vulnerability
Adobe Coldfusion contains an unspecified vulnerability, which could result in information disclosure from a compromised server.
 Adobe ColdFusion Mar 7, 2022 Sep 7, 2022
CVE-2008-2992 — Adobe Reader and Acrobat Input Validation Vulnerability
Adobe Acrobat and Reader contain an input validation issue in a JavaScript method that could potentially lead to remote code execution.
 Adobe Acrobat and Reader Mar 3, 2022 Mar 24, 2022 Ransomware