CVE-2008-4250 | Microsoft Windows Server Service RPC Vulnerability (MS08-067 / Conficker) | 10.0 CRITICAL | MS08-067 | 11 | brambul, conficker, ircbot, kolab +7 more |
CVE-2015-5119 | Adobe Flash Player ByteArray Use-After-Free (Hacking Team Leak) | 10.0 CRITICAL | APSB15-16 | 7 | blackmoon, goznym, kovter, nymaim +3 more |
CVE-2020-1472 | Microsoft Active Directory Netlogon Elevation of Privilege (Zerologon) | 10.0 CRITICAL | MS-NRPC Security Advisory | 6 | black, qbot, ryuk, trickbot +2 more |
CVE-2004-0115 | Microsoft Windows PCT / SSL Handshake Buffer Overflow | 10.0 CRITICAL | MS04-011 | 5 | berbew, ircbot, lamer, netsky +1 more |
CVE-2003-0352 | Microsoft Windows RPC DCOM Interface Buffer Overflow (Blaster Worm) | 10.0 CRITICAL | MS03-026 | 3 | ircbot, sdbot, blaster |
CVE-2004-0280 | Microsoft Windows LSASS Buffer Overflow (Sasser Worm) | 10.0 CRITICAL | MS04-011 | 2 | berbew, sasser |
CVE-2006-3439 | Microsoft Windows Server Service NetprPathCanonicalize Buffer Overflow | 10.0 CRITICAL | MS06-040 | 2 | allaple, kolab |
CVE-2015-0311 | Adobe Flash Player ByteArray Uncompress Use-After-Free (Angler EK) | 10.0 CRITICAL | APSB15-03 | 1 | teslacrypt |
CVE-2015-5122 | Adobe Flash Player DisplayObject opaqueBackground Use-After-Free | 10.0 CRITICAL | APSB15-18 | 1 | cerber |
CVE-2017-0144 | Microsoft Windows SMBv1 Remote Code Execution (EternalBlue / MS17-010) | 9.8 CRITICAL | MS17-010 | 8 | bsymem, crysis, killdisk, maener +4 more |
CVE-2019-19781 | Citrix ADC & Gateway Directory Traversal Remote Code Execution (Shitrix) | 9.8 CRITICAL | CTX267027 | 3 | trickbot, winnti, revil |
CVE-2017-0145 | Microsoft Windows SMBv1 Remote Code Execution (EternalRomance / MS17-010) | 9.8 CRITICAL | MS17-010 | 2 | petya, wannacry |
CVE-2014-8361 | Realtek SDK Miniigd SOAP Service Command Injection (Mirai Botnet) | 9.8 CRITICAL | Realtek Advisory | 1 | mirai |
CVE-2017-10271 | Oracle WebLogic Server WLS-WSAT Remote Code Execution Vulnerability | 9.8 CRITICAL | Oracle Critical Patch Update | 1 | crysis |
CVE-2020-10189 | Zoho ManageEngine Desktop Central Untrusted Deserialization RCE | 9.8 CRITICAL | Zoho Security Advisory | 1 | winnti |
CVE-2023-34362 | Progress Software MOVEit Transfer SQL Injection Remote Code Execution Vulnerability (Cl0p Ransomware) | 9.8 CRITICAL | Progress Software MOVEit Transfer Security Bulletin | 1 | clop |
CVE-2023-4966 | Citrix NetScaler ADC & Gateway Sensitive Information Disclosure (Citrix Bleed) | 9.4 CRITICAL | CTX579459 | 0 | |
CVE-2012-0158 | Microsoft Office MSCOMCTL.OCX ActiveX TreeView / ListView Buffer Overflow | 9.3 CRITICAL | MS12-027 | 75 | agentb, ardamax, ausiv, banload +71 more |
CVE-2010-2568 | Microsoft Windows Shell Shortcut LNK / PIF Code Execution (Stuxnet) | 9.3 CRITICAL | MS10-046 | 58 | agentb, ausiv, beebone, carberp +54 more |
CVE-2015-1641 | Microsoft Office Discretionary Memory Corruption Vulnerability (MS15-033) | 9.3 CRITICAL | MS15-033 | 17 | appster, dfay, downloadhelper, driverpack +13 more |
CVE-2014-1761 | Microsoft Word RTF Parsing Memory Corruption (MS14-017) | 9.3 CRITICAL | MS14-017 | 11 | bladabindi, carbanak, chthonic, nymaim +7 more |
CVE-2008-2244 | Microsoft Windows Print Spooler Service Remote Code Execution | 9.3 CRITICAL | MS08-068 | 5 | ghost, hupigon, rustock, sinowal +1 more |
CVE-2010-0805 | Microsoft Internet Explorer Peer Factory Use-After-Free Vulnerability | 9.3 CRITICAL | MS10-018 | 5 | bifrost, carberp, expiro, lethic +1 more |
CVE-2014-4114 | Microsoft Windows OLE Package Packager Remote Code Execution (Sandworm) | 9.3 CRITICAL | MS14-060 | 5 | babar, blackenergy, chthonic, killdisk +1 more |
CVE-2006-0003 | Microsoft Windows Media Player DirectShow BMP Rendering RCE | 9.3 CRITICAL | MS06-005 | 4 | ghost, hupigon, rustock, sinowal |
CVE-2010-3333 | Microsoft Office RTF pFragments Stack Buffer Overflow | 9.3 CRITICAL | MS10-087 | 3 | cosmicduke, darkkomet, poison |
CVE-2013-3906 | Microsoft Office & Windows GDI+ TIFF Parsing Remote Code Execution | 9.3 CRITICAL | MS13-098 | 3 | carbanak, cryptolocker, zeusvm |
CVE-2014-0515 | Adobe Flash Player Pixel Bender Shader Buffer Overflow | 9.3 CRITICAL | APSB14-14 | 3 | babar, blackmoon, tinba |
CVE-2010-0188 | Adobe Acrobat & Reader TIFF Integer Overflow Remote Code Execution | 9.3 CRITICAL | APSB10-07 | 2 | cutwail, darkhotel |
CVE-2013-0074 | Microsoft Silverlight Double-Dereference Remote Code Execution | 9.3 CRITICAL | MS13-022 | 2 | bladabindi, simda |
CVE-2013-3893 | Microsoft Internet Explorer SetCapture Use-After-Free Vulnerability | 9.3 CRITICAL | MS13-080 | 2 | zbot, zusy |
CVE-2014-0322 | Microsoft Internet Explorer CMarkup Use-After-Free (Operation SnowMan) | 9.3 CRITICAL | MS14-012 | 2 | darkhotel, zusy |
CVE-2006-3730 | Microsoft Internet Explorer WebVRML / WebControls ActiveX Buffer Overflow | 9.3 CRITICAL | MS06-057 | 1 | hupigon |
CVE-2006-4704 | Microsoft PowerPoint Embedded Font Rendering Buffer Overflow | 9.3 CRITICAL | MS06-058 | 1 | storm |
CVE-2007-0038 | Microsoft Windows GDI Animated Cursor (.ani) Stack Buffer Overflow | 9.3 CRITICAL | MS07-017 | 1 | storm |
CVE-2011-3402 | Microsoft Windows Win32k TrueType Font Parsing LPE / RCE (Duqu) | 9.3 CRITICAL | MS11-087 | 1 | carberp |
CVE-2012-1889 | Microsoft XML Core Services Uninitialized Memory Access Vulnerability | 9.3 CRITICAL | MS12-043 | 1 | simda |
CVE-2013-2551 | Microsoft Internet Explorer VML Integer Overflow (Use-After-Free) | 9.3 CRITICAL | MS13-037 | 1 | ramnit |
CVE-2013-3346 | Adobe Reader ToolButton Use-After-Free Memory Corruption | 9.3 CRITICAL | APSB13-15 | 1 | turla |
CVE-2014-6332 | Microsoft Windows OLE Automation Array Remote Code Execution (Unicorn Bug) | 9.3 CRITICAL | MS14-064 | 1 | gh0st |
CVE-2015-0071 | Microsoft Windows Kernel TrueType Font Handler Remote Code Execution | 9.3 CRITICAL | MS15-010 | 1 | simda |
CVE-2010-0806 | Microsoft Internet Explorer Peer Factory Use-After-Free Vulnerability | 9.3 CRITICAL | MS10-018 | 1 | spyeye |
CVE-2021-40444 | Microsoft MSHTML Engine Remote Code Execution Vulnerability | 8.8 HIGH | ADV210010 | 7 | danabot, formbook, icedid, pikabot +3 more |
CVE-2021-34527 | Microsoft Windows Print Spooler Remote Code Execution Vulnerability (PrintNightmare) | 8.8 HIGH | KB5004945 | 6 | black, lockbit, conti, revil +2 more |
CVE-2020-0688 | Microsoft Exchange Server Static Validation Key Remote Code Execution | 8.8 HIGH | Microsoft Patch Tuesday | 2 | emotet, plugx |
CVE-2017-17215 | Huawei HG532 Router UPnP Remote Code Execution (Mirai Satori / Okiru) | 8.8 HIGH | Huawei Security Advisory | 1 | mirai |
CVE-2023-36025 | Microsoft Windows SmartScreen Security Feature Bypass | 8.8 HIGH | Microsoft Patch Tuesday | 1 | darkgate |
CVE-2022-42948 | Fortra Cobalt Strike Team Server Remote Code Execution via XSS in Beacon Console | 8.8 HIGH | Fortra Cobalt Strike Security Advisory 4.7.2 | 1 | cobaltstrike |
CVE-2023-41991 | Apple iOS & macOS Security Framework Certificate Validation Bypass (Predator Spyware) | 8.8 HIGH | Apple Security Advisory HT213926 | 1 | predator |
CVE-2023-41993 | Apple WebKit Arbitrary Code Execution Vulnerability (Predator Spyware) | 8.8 HIGH | Apple Security Advisory HT213928 | 1 | predator |
CVE-2021-30860 | Apple CoreGraphics / ImageIO FORCEDENTRY Zero-Click PDF Parsing RCE (Pegasus Spyware) | 8.8 HIGH | Apple Security Advisory HT212807 | 1 | pegasus |
CVE-2022-2294 | Google Chrome WebRTC Heap Buffer Overflow Zero-Day RCE (Candiru Mercenary Spyware) | 8.8 HIGH | Google Chrome Stable Channel Update (2022-07-04) | 1 | candiru |
CVE-2010-1885 | Microsoft Windows Help and Support Center HCP Protocol Handler RCE | 8.5 HIGH | MS10-042 | 2 | kelihos, spyeye |
CVE-2024-21412 | Microsoft Windows SmartScreen Defense Evasion Vulnerability | 8.1 HIGH | Microsoft Patch Tuesday | 2 | darkgate, lumma |
CVE-2017-0199 | Microsoft Office / WordPad Remote Code Execution via Malicious OLE Moniker | 7.8 HIGH | MS17-012 | 36 | appster, ardamax, bandook, darkhotel +32 more |
CVE-2017-11882 | Microsoft Office Equation Editor Stack Buffer Overflow (EQNEDT32.EXE) | 7.8 HIGH | Microsoft Patch Tuesday | 35 | agenttesla, azorult, bandook, banload +31 more |
CVE-2018-0802 | Microsoft Office Equation Editor Memory Corruption Vulnerability | 7.8 HIGH | Microsoft Patch Tuesday | 6 | agenttesla, azorult, lokibot, netwiredrc +2 more |
CVE-2022-30190 | Microsoft Windows Support Diagnostic Tool Remote Code Execution (Follina) | 7.8 HIGH | ADV220001 | 6 | icedid, pikabot, qbot, vidar +2 more |
CVE-2023-38831 | WinRAR File Extension Spoofing Remote Code Execution Vulnerability | 7.8 HIGH | RARLAB Security Notice | 6 | lockbit, qbot, redline, lumma +2 more |
CVE-2008-1447 | Kaminsky DNS Cache Poisoning Multiple Transaction ID Flaw | 7.8 HIGH | MS08-037 | 1 | dnschanger |
CVE-2017-8570 | Microsoft Office Composite Moniker Remote Code Execution | 7.8 HIGH | MS17-014 | 1 | agenttesla |
CVE-2018-8453 | Microsoft Windows Win32k Elevation of Privilege Vulnerability (FruityArmor) | 7.8 HIGH | Microsoft Patch Tuesday | 1 | turla |
CVE-2019-2187 | Android Framework IPC Notification Listener Privilege Escalation Vulnerability | 7.8 HIGH | Android Security Bulletin — October 2019 | 1 | joker |
CVE-2020-0096 | Android StrandHogg 2.0 Task Affinity & Activity Hijacking Vulnerability | 7.8 HIGH | Android Security Bulletin — May 2020 | 1 | joker |
CVE-2023-41992 | Apple iOS & macOS Kernel Local Privilege Escalation Vulnerability (Predator Spyware) | 7.8 HIGH | Apple Security Advisory HT213927 | 1 | predator |
CVE-2021-31979 | Microsoft Windows Kernel Graphics / GDI Elevation of Privilege Zero-Day (Candiru / DevilsTongue) | 7.8 HIGH | Microsoft MSRC CVE-2021-31979 | 1 | candiru |
CVE-2021-33771 | Microsoft Windows GDI Privilege Escalation Kernel Zero-Day (Candiru / DevilsTongue) | 7.8 HIGH | Microsoft MSRC CVE-2021-33771 | 1 | candiru |
CVE-2016-0189 | Microsoft Internet Explorer & Edge Scripting Engine Memory Corruption | 7.6 HIGH | MS16-051 | 4 | cerber, locky, necurs, ursnif |
CVE-2001-0154 | Microsoft Outlook Express & Internet Mail OLE Embedded Object Execution | 7.5 HIGH | MS01-020 | 1 | netsky |
CVE-2018-8174 | Microsoft Windows VBScript Engine Double-Free Remote Code Execution | 7.5 HIGH | Microsoft Patch Tuesday | 1 | gandcrab |
CVE-2020-0674 | Microsoft Windows Scripting Engine Memory Corruption Vulnerability | 7.5 HIGH | ADV200001 | 1 | socelars |
CVE-2022-39197 | Cobalt Strike Team Server Cross-Site Scripting / RCE via Beacon Metadata | 7.5 HIGH | Fortra Cobalt Strike Advisory | 0 | |
CVE-2023-27532 | Veeam Backup & Replication Unauthorized Credential Disclosure & RCE | 7.5 HIGH | KB4424 | 0 | |
CVE-2018-0886 | Microsoft CredSSP Remote Code Execution Vulnerability | 7.4 HIGH | Microsoft Patch Tuesday | 1 | gandcrab |
CVE-2013-3881 | Microsoft Windows Kernel GDI Font Parsing Local Privilege Escalation | 7.2 HIGH | MS13-081 | 1 | equationdrug |
CVE-2023-0669 | Fortra GoAnywhere MFT Deserialization Remote Code Execution | 7.2 HIGH | Fortra Security Advisory | 1 | clop |