CISA KEV Catalog

An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'W

In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could

In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient

VMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1) and Horizon Client for

A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly

A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5.1 and iPadOS 13.

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka '

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the softwar

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet

A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploit

A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an atta

Windows Kernel Local Elevation of Privilege Vulnerability

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, wat

A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1, watchOS

Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page.

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet

Unraid 6.8.0 allows authentication bypass.

The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1) allows Directory Traver

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet

A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Th

A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to uploa

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions

A vulnerability in the Pulse Connect Secure < 9.1R9 admin web interface could allow an authenticated attacker to perform

TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the same key is used for dif

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle o

Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.198 allowed a remote attacker to potentially expl

Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap

Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and e

Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corrupti

Internet Explorer Memory Corruption Vulnerability

Internet Explorer Remote Code Execution Vulnerability

Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap cor

Use after free in Blink in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap co

Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to po

Type confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute arbitrary code inside a

The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are m

The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unprivi

A buffer overflow vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to

A command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker

Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corru

Use after free in WebGL in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to potentially exploit heap co

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file

An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free

Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corru

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, m

Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and e

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.5.4. Processing ma

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.5.4. Processing mali

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.1, iOS 12.5.3, iO

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 14.5.1 and iPadOS 14.5.1, t