CISA KEV Catalog

A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, tvOS 16.5, mac

The issue was addressed with improved bounds checks. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4,

An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS

Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) conn

The server IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.x

Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass

The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the

The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver a

The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain sensitive j

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows rem

Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile

Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated

Win32k Elevation of Privilege Vulnerability

It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configu

TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability i

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Bui

Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the rend

Minio is a Multi-Cloud Object Storage framework. In a cluster deployment starting with RELEASE.2019-12-17T23-16-33Z and

A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the aff

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. An ap

Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corr

Novi Survey before 8.9.43676 allows remote attackers to execute arbitrary code on the server in the context of the servi

In WorkSource, there is a possible parcel mismatch. This could lead to local escalation of privilege with no additional

Windows Common Log File System Driver Elevation of Privilege Vulnerability

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.4.1, iOS 15.7.5 a

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.5,

An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user

An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires suc

An issue was discovered in Veritas Backup Exec before 21.2. It supports multiple authentication schemes: SHA authenticat

An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires suc

Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost

A reflected cross-site scripting (XSS) vulnerability in the /public/launchNewWindow.jsp component of Zimbra Collaboratio

Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service

Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allo

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.8.1 and iPadOS 1

Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially explo

The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishan

Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects

An XSS (Cross Site Scripting) vulnerability was found in HelpSystems Cobalt Strike through 4.7 that allowed a remote att

Cobalt Strike 4.7.1 fails to properly escape HTML tags when they are displayed on Swing components. By injecting crafted

A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 i

Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by an Improper Acces

Microsoft Outlook Elevation of Privilege Vulnerability

A improper limitation of a pathname to a restricted directory vulnerability ('path traversal') [CWE-22] in Fortinet Fort

Windows SmartScreen Security Feature Bypass Vulnerability

Deserialization of Untrusted Data in Plex Media Server on Windows allows a remote, authenticated attacker to execute arb

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allo

/vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection.