CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 71–80 of 82 records

CVE Vendor Product Added Due Status
CVE-2015-7645 — Adobe Flash Player Arbitrary Code Execution Vulnerability
Adobe Flash Player allows remote attackers to execute arbitrary code via a crafted SWF file.
 Adobe Flash Player Mar 3, 2022 Mar 24, 2022 Ransomware
CVE-2016-1019 — Adobe Flash Player Arbitrary Code Execution Vulnerability
Adobe Flash Player allows remote attackers to cause a denial of service or possibly execute arbitrary code.
 Adobe Flash Player Mar 3, 2022 Mar 24, 2022 Ransomware
CVE-2016-4117 — Adobe Flash Player Arbitrary Code Execution Vulnerability
An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution.
 Adobe Flash Player Mar 3, 2022 Mar 24, 2022 Ransomware
CVE-2016-7855 — Adobe Flash Player Use-After-Free Vulnerability
Use-after-free vulnerability in Adobe Flash Player Windows and OS and Linux allows remote attackers to execute arbitrary code.
 Adobe Flash Player Mar 3, 2022 Mar 24, 2022
CVE-2017-11292 — Adobe Flash Player Type Confusion Vulnerability
Adobe Flash Player contains a type confusion vulnerability which can allow for remote code execution.
 Adobe Flash Player Mar 3, 2022 Mar 24, 2022
CVE-2018-15982 — Adobe Flash Player Use-After-Free Vulnerability
Adobe Flash Player com.adobe.tvsdk.mediacore.metadata Use After Free Vulnerability
 Adobe Flash Player Feb 15, 2022 Aug 15, 2022 Ransomware
CVE-2022-24086 — Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability
Adobe Commerce and Magento Open Source contain an improper input validation vulnerability which can allow for arbitrary code execution.
 Adobe Commerce and Magento Open Source Feb 15, 2022 Mar 1, 2022
CVE-2018-15961 — Adobe ColdFusion Unrestricted File Upload Vulnerability
Adobe ColdFusion contains an unrestricted file upload vulnerability that could allow for code execution.
 Adobe ColdFusion Nov 3, 2021 May 3, 2022
CVE-2018-4878 — Adobe Flash Player Use-After-Free Vulnerability
Adobe Flash Player contains a use-after-free vulnerability that could allow for code execution.
 Adobe Flash Player Nov 3, 2021 May 3, 2022 Ransomware
CVE-2018-4939 — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could allow for code execution.
 Adobe ColdFusion Nov 3, 2021 May 3, 2022