Keep updated with KEVIntel progress and pro features

Known Exploited Vulnerabilities Intel

This table displays known exploited vulnerabilities (KEVs) that have been cataloged from over 50 public sources, including CISA, and (once we get some hits) our own private sensors. Each entry links to a CVE identifier, where the CVE details are enriched with EPSS scores, online mentions, scanner inclusion, exploitation, and other metadata. The goal is to be an early warning system, even before being published by CISA. More data and features coming soon!

CVE ID	Title	Vendor	Product	Added	Source
CVE-2012-5054	Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute...	n/a	n/a	2022-06-08 00:00:00 UTC	CISA
CVE-2013-1331	Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an...	n/a	n/a	2022-06-08 00:00:00 UTC	CISA
CVE-2016-1646	The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider...	n/a	n/a	2022-06-08 00:00:00 UTC	CISA
CVE-2016-5198	V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac included incorrect...	n/a	Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac	2022-06-08 00:00:00 UTC	CISA
CVE-2017-5030	Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android...	n/a	Google Chrome prior to 57.0.2987.98 for Linux, Windows and Mac, and 57.0.2987.108 for Android	2022-06-08 00:00:00 UTC	CISA
CVE-2017-5070	Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to...	n/a	Google Chrome prior to 59.0.3071.86 for Linux, Windows and Mac, and 59.0.3071.92 for Android	2022-06-08 00:00:00 UTC	CISA
CVE-2017-6862	NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypass and...	n/a	NETGEAR All versions prior to WNR2000v3 1.1.2.14, WNR2000v4 1.0.0.66, WNR2000v5 1.0.0.42	2022-06-08 00:00:00 UTC	CISA
CVE-2018-17463	Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbitrary code inside a sandbox...	Google	Chrome	2022-06-08 00:00:00 UTC	CISA
CVE-2018-17480	Execution of user supplied Javascript during array deserialization leading to an out of bounds write in V8 in Google Chrome prior to 71.0.3578.80...	Google	Chrome	2022-06-08 00:00:00 UTC	CISA
CVE-2018-4990	Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Double Free...	n/a	Adobe Acrobat and Reader 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier versions	2022-06-08 00:00:00 UTC	CISA
CVE-2018-6065	Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Chrome prior to 65.0.3325.146...	Google	Chrome	2022-06-08 00:00:00 UTC	CISA
CVE-2019-15271	Cisco Small Business RV016, RV042, RV042G, and RV082 Routers Arbitrary Command Execution Vulnerability	Cisco	Cisco Small Business RV Series Router Firmware	2022-06-08 00:00:00 UTC	CISA
CVE-2019-5825	Out of bounds write in JavaScript in Google Chrome prior to 73.0.3683.86 allowed a remote attacker to potentially exploit heap corruption via a...	Google	Chrome	2022-06-08 00:00:00 UTC	CISA
CVE-2019-7192	This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix these vulnerabilities, QNAP...	n/a	QNAP NAS devices running Photo Station	2022-06-08 00:00:00 UTC	CISA
CVE-2022-26134	In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to...	Atlassian	Confluence Data Center, Confluence Server	2022-06-02 00:00:00 UTC	CISA
CVE-2016-7256	atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows...	n/a	n/a	2022-05-25 00:00:00 UTC	CISA
CVE-2016-3393	Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows...	n/a	n/a	2022-05-25 00:00:00 UTC	CISA
CVE-2016-1010	Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on...	n/a	n/a	2022-05-25 00:00:00 UTC	CISA
CVE-2019-3010	Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). The supported version that is affected is 11. Easily...	Oracle Corporation	Solaris Operating System	2022-05-25 00:00:00 UTC	CISA
CVE-2010-0738	The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3...	n/a	n/a	2022-05-25 00:00:00 UTC	CISA
CVE-2014-8439	Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before...	n/a	n/a	2022-05-25 00:00:00 UTC	CISA
CVE-2010-0840	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and...	n/a	n/a	2022-05-25 00:00:00 UTC	CISA
CVE-2010-1428	The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and...	n/a	n/a	2022-05-25 00:00:00 UTC	CISA
CVE-2012-1710	Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to...	n/a	n/a	2022-05-25 00:00:00 UTC	CISA
CVE-2013-0074	Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML object rendering, which allows...	n/a	n/a	2022-05-25 00:00:00 UTC	CISA

Displaying vulnerabilities 651 - 675 of 1402 in total