Keep updated with KEVIntel progress and pro features

Known Exploited Vulnerabilities Intel

This table displays known exploited vulnerabilities (KEVs) that have been cataloged from over 50 public sources, including CISA, and (once we get some hits) our own private sensors. Each entry links to a CVE identifier, where the CVE details are enriched with EPSS scores, online mentions, scanner inclusion, exploitation, and other metadata. The goal is to be an early warning system, even before being published by CISA. More data and features coming soon!

CVE ID	Title	Vendor	Product	Added	Source
CVE-2022-30190	Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability	Microsoft	Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)	2022-06-14 00:00:00 UTC	CISA
CVE-2016-2388	The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP...	n/a	n/a	2022-06-09 00:00:00 UTC	CISA
CVE-2016-2386	SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands via...	n/a	n/a	2022-06-09 00:00:00 UTC	CISA
CVE-2021-38163	SAP NetWeaver (Visual Composer 7.0 RT) versions - 7.30, 7.31, 7.40, 7.50, without restriction, an attacker authenticated as a non-administrative...	SAP SE	SAP NetWeaver (Visual Composer 7.0 RT)	2022-06-09 00:00:00 UTC	CISA
CVE-2019-7195	This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP...	n/a	QNAP NAS devices running Photo Station	2022-06-08 00:00:00 UTC	CISA
CVE-2019-7193	This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. To fix the vulnerability, QNAP...	n/a	QNAP NAS devices	2022-06-08 00:00:00 UTC	CISA
CVE-2019-7194	This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP...	n/a	QNAP NAS devices running Photo Station	2022-06-08 00:00:00 UTC	CISA
CVE-2007-5659	Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long...	n/a	n/a	2022-06-08 00:00:00 UTC	CISA
CVE-2009-1862	Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87,...	n/a	n/a	2022-06-08 00:00:00 UTC	CISA
CVE-2006-2492	Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows...	n/a	n/a	2022-06-08 00:00:00 UTC	CISA
CVE-2011-0609	Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on...	n/a	n/a	2022-06-08 00:00:00 UTC	CISA
CVE-2008-0655	Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors.	n/a	n/a	2022-06-08 00:00:00 UTC	CISA
CVE-2009-0557	Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and...	n/a	n/a	2022-06-08 00:00:00 UTC	CISA
CVE-2009-0563	Stack-based buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML...	n/a	n/a	2022-06-08 00:00:00 UTC	CISA
CVE-2011-2462	Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through...	n/a	n/a	2022-06-08 00:00:00 UTC	CISA
CVE-2009-3953	The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote...	n/a	n/a	2022-06-08 00:00:00 UTC	CISA
CVE-2009-4324	Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on...	n/a	n/a	2022-06-08 00:00:00 UTC	CISA
CVE-2010-1297	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and...	n/a	n/a	2022-06-08 00:00:00 UTC	CISA
CVE-2010-2572	Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint 95...	n/a	n/a	2022-06-08 00:00:00 UTC	CISA
CVE-2010-2883	Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote...	n/a	n/a	2022-06-08 00:00:00 UTC	CISA
CVE-2012-0151	The Authenticode Signature Verification function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server...	n/a	n/a	2022-06-08 00:00:00 UTC	CISA
CVE-2012-0754	Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and...	n/a	n/a	2022-06-08 00:00:00 UTC	CISA
CVE-2012-0767	Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and...	n/a	n/a	2022-06-08 00:00:00 UTC	CISA
CVE-2012-1889	Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code...	n/a	n/a	2022-06-08 00:00:00 UTC	CISA
CVE-2012-4969	Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackers to...	n/a	n/a	2022-06-08 00:00:00 UTC	CISA

Displaying vulnerabilities 626 - 650 of 1402 in total