Threats & CVE Intelligence
Search the locally synchronized CISA known-exploited vulnerabilities catalog, or enter a CVE ID or keyword to search the broader NIST National Vulnerability Database. NVD searches are retrieved on demand and may be rate limited.
Last successful sync: 2026-11-07 18:42:25 UTC · Source catalog updated: 2026-11-06T19:44:45.1797Z · 1769 records in latest import.
CISA Known Exploited Vulnerabilities · 1769 matches
Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability
Adobe — Acrobat and Reader
Adobe Acrobat and Reader contain a stack-based buffer overflow vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
CVE-2010-2572 · KEV 2022-06-08Microsoft PowerPoint Buffer Overflow Vulnerability
Microsoft — PowerPoint
Microsoft PowerPoint contains a buffer overflow vulnerability that alllows for remote code execution.
CVE-2010-1297 · KEV 2022-06-08Adobe Flash Player Memory Corruption Vulnerability
Adobe — Flash Player
Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
CVE-2009-4324 · KEV 2022-06-08Adobe Acrobat and Reader Use-After-Free Vulnerability
Adobe — Acrobat and Reader
Use-after-free vulnerability in Adobe Acrobat and Reader allows remote attackers to execute code via a crafted PDF file.
CVE-2009-3953 · KEV 2022-06-08Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability
Adobe — Acrobat and Reader
Adobe Acrobat and Reader contains an array boundary issue in Universal 3D (U3D) support that could lead to remote code execution.
CVE-2009-1862 · KEV 2022-06-08Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability
Adobe — Acrobat and Reader, Flash Player
Adobe Acrobat and Reader and Adobe Flash Player allows remote attackers to execute code or cause denial-of-service (DoS).
CVE-2009-0563 · KEV 2022-06-08Microsoft Office Buffer Overflow Vulnerability
Microsoft — Office
Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via a Word document with a crafted tag containing an invalid length field.
CVE-2009-0557 · KEV 2022-06-08Microsoft Office Object Record Corruption Vulnerability
Microsoft — Office
Microsoft Office contains an object record corruption vulnerability that allows remote attackers to execute code via a crafted Excel file with a malformed record object.
CVE-2008-0655 · KEV 2022-06-08Adobe Acrobat and Reader Unspecified Vulnerability
Adobe — Acrobat and Reader
Adobe Acrobat and Reader contains an unespecified vulnerability described as a design flaw which could allow a specially crafted file to be printed silently an arbitrary number of times.
CVE-2007-5659 · KEV 2022-06-08Adobe Acrobat and Reader Buffer Overflow Vulnerability
Adobe — Acrobat and Reader
Adobe Acrobat and Reader contain a buffer overflow vulnerability that allows remote attackers to execute code via a PDF file with long arguments to unspecified JavaScript methods.
CVE-2006-2492 · KEV 2022-06-08Microsoft Word Malformed Object Pointer Vulnerability
Microsoft — Word
Microsoft Word and Microsoft Works Suites contain a malformed object pointer which allows attackers to execute code.
CVE-2022-26134 · KEV 2022-06-02Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability
Atlassian — Confluence Server/Data Center
Atlassian Confluence Server and Data Center contain a remote code execution vulnerability that allows for an unauthenticated attacker to perform remote code execution.
Ransomware use reportedCVE-2019-3010 · KEV 2022-05-25Oracle Solaris Privilege Escalation Vulnerability
Oracle — Solaris
Oracle Solaris component: XScreenSaver contains an unspecified vulnerability that allows for privilege escalation.
CVE-2016-7256 · KEV 2022-05-25Microsoft Windows Open Type Font Remote Code Execution Vulnerability
Microsoft — Windows
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploits this vulnerability could take control of the affected system.
CVE-2016-3393 · KEV 2022-05-25Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability
Microsoft — Windows
A remote code execution vulnerability exists due to the way the Windows GDI component handles objects in the memory. An attacker who successfully exploits this vulnerability could take control of the affected system.
CVE-2016-1010 · KEV 2022-05-25Adobe Flash Player and AIR Integer Overflow Vulnerability
Adobe — Flash Player and AIR
Integer overflow vulnerability in Adobe Flash Player and AIR allows attackers to execute code.
CVE-2016-0984 · KEV 2022-05-25Adobe Flash Player and AIR Use-After-Free Vulnerability
Adobe — Flash Player and AIR
Use-after-free vulnerability in Adobe Flash Player and Adobe AIR allows attackers to execute code.
CVE-2016-0034 · KEV 2022-05-25Microsoft Silverlight Runtime Remote Code Execution Vulnerability
Microsoft — Silverlight
Microsoft Silverlight mishandles negative offsets during decoding, which allows attackers to execute remote code or cause a denial-of-service (DoS).
Ransomware use reportedCVE-2015-8651 · KEV 2022-05-25Adobe Flash Player Integer Overflow Vulnerability
Adobe — Flash Player
Integer overflow in Adobe Flash Player allows attackers to execute code.
CVE-2015-6175 · KEV 2022-05-25Microsoft Windows Kernel Privilege Escalation Vulnerability
Microsoft — Windows
The kernel in Microsoft Windows contains a vulnerability that allows local users to gain privileges via a crafted application.
CVE-2015-4495 · KEV 2022-05-25Mozilla Firefox Security Feature Bypass Vulnerability
Mozilla — Firefox
Moxilla Firefox allows remote attackers to bypass the Same Origin Policy to read arbitrary files or gain privileges.
CVE-2015-2425 · KEV 2022-05-25Microsoft Internet Explorer Memory Corruption Vulnerability
Microsoft — Internet Explorer
Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
CVE-2015-2360 · KEV 2022-05-25Microsoft Win32k Privilege Escalation Vulnerability
Microsoft — Win32k
Win32k.sys in the kernel-mode drivers in Microsoft Windows allows local users to gain privileges or cause denial-of-service (DoS).
CVE-2015-1769 · KEV 2022-05-25Microsoft Windows Mount Manager Privilege Escalation Vulnerability
Microsoft — Windows
A privilege escalation vulnerability exists when the Windows Mount Manager component improperly processes symbolic links.
CVE-2015-1671 · KEV 2022-05-25Microsoft Windows Remote Code Execution Vulnerability
Microsoft — Windows
A remote code execution vulnerability exists when components of Windows, .NET Framework, Office, Lync, and Silverlight fail to properly handle TrueType fonts.
CVE-2015-0310 · KEV 2022-05-25Adobe Flash Player ASLR Bypass Vulnerability
Adobe — Flash Player
Adobe Flash Player does not properly restrict discovery of memory addresses, which allows attackers to bypass the address space layout randomization (ASLR) protection mechanism.
CVE-2015-0071 · KEV 2022-05-25Microsoft Internet Explorer ASLR Bypass Vulnerability
Microsoft — Internet Explorer
Microsoft Internet Explorer allows remote attackers to bypass the address space layout randomization (ASLR) protection mechanism via a crafted web site.
CVE-2015-0016 · KEV 2022-05-25Microsoft Windows TS WebProxy Directory Traversal Vulnerability
Microsoft — Windows
Directory traversal vulnerability in the TS WebProxy (TSWbPrxy) component in Microsoft Windows allows remote attackers to escalate privileges.
CVE-2014-8439 · KEV 2022-05-25Adobe Flash Player Dereferenced Pointer Vulnerability
Adobe — Flash Player
Adobe Flash Player has a vulnerability in the way it handles a dereferenced memory pointer which could lead to code execution.
CVE-2014-4148 · KEV 2022-05-25Microsoft Windows Remote Code Execution Vulnerability
Microsoft — Windows
A remote code execution vulnerability exists when the Windows kernel-mode driver improperly handles TrueType fonts.
Source: CISA KEV catalog and NIST NVD. “Known” ransomware use is a CISA catalog label, not a real-time incident alert. Always review vendor advisories for patches.