[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f_8D6WZEt9LRa61pCDqmjJVk_Qqv-rrrWh_YSs1enD2Q":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":3570,"kevVulnerabilities":3624,"topProductsByCves":6401,"seoMetadata":6412,"meta":6421},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":3569},19733,"microsoft",1048,21814,442,13615,"2026-04-03","m",[16,23,30,36,43,49,55,61,66,72,78,85,91,97,103,108,114,121,127,133,139,145,151,158,165,170,175,182,187,192,198,204,209,214,219,225,230,235,241,248,253,258,263,268,273,279,284,289,293,296,301,305,309,314,319,324,328,333,338,343,348,353,358,362,367,372,375,379,384,388,392,395,400,405,410,414,419,422,425,429,433,438,443,447,452,458,462,466,470,475,479,484,488,492,496,500,504,508,511,516,520,524,527,530,534,539,543,547,551,555,558,562,566,571,575,579,582,586,589,593,596,600,604,608,612,617,621,625,629,632,636,640,644,647,652,656,660,664,667,671,675,678,681,685,689,693,697,700,704,708,712,715,719,723,727,731,734,737,741,744,748,752,755,759,763,767,770,774,778,782,786,790,793,797,801,805,809,812,815,819,822,826,829,833,836,839,843,847,851,855,859,863,867,871,875,879,882,886,890,893,896,900,903,906,910,913,917,921,925,929,933,937,941,944,947,950,954,958,962,965,968,971,974,977,981,984,988,991,994,997,1000,1004,1008,1011,1014,1017,1020,1023,1027,1031,1035,1038,1041,1044,1048,1051,1055,1058,1062,1066,1069,1073,1077,1080,1084,1087,1090,1093,1096,1099,1102,1105,1109,1112,1115,1119,1123,1127,1131,1135,1140,1144,1148,1151,1155,1159,1162,1165,1169,1173,1177,1180,1184,1188,1192,1196,1200,1203,1206,1209,1212,1215,1219,1223,1227,1230,1234,1238,1241,1244,1247,1250,1254,1258,1261,1264,1268,1272,1275,1278,1281,1284,1287,1290,1293,1296,1299,1302,1305,1308,1311,1314,1317,1320,1324,1327,1331,1335,1338,1341,1345,1349,1352,1356,1359,1362,1365,1368,1371,1374,1377,1380,1384,1388,1392,1396,1399,1402,1406,1409,1412,1416,1420,1424,1427,1430,1434,1438,1442,1446,1449,1452,1455,1458,1462,1466,1469,1472,1475,1479,1483,1487,1491,1495,1498,1501,1504,1508,1512,1515,1518,1522,1526,1529,1532,1535,1539,1543,1546,1549,1552,1556,1559,1563,1566,1569,1572,1575,1579,1582,1585,1588,1591,1595,1599,1602,1605,1608,1611,1615,1618,1622,1625,1628,1632,1635,1639,1644,1648,1651,1655,1658,1662,1665,1669,1672,1675,1679,1683,1687,1691,1695,1698,1702,1705,1708,1712,1716,1720,1723,1726,1729,1732,1735,1738,1741,1744,1747,1750,1753,1756,1759,1762,1766,1770,1773,1776,1780,1783,1786,1789,1793,1797,1801,1804,1807,1811,1814,1817,1821,1825,1828,1831,1835,1838,1841,1845,1848,1851,1854,1857,1860,1864,1867,1871,1874,1877,1880,1883,1886,1889,1892,1895,1898,1901,1904,1908,1912,1915,1918,1921,1924,1927,1931,1935,1938,1941,1945,1949,1952,1956,1960,1963,1967,1971,1974,1977,1980,1983,1986,1989,1992,1996,2000,2004,2007,2010,2014,2017,2021,2025,2029,2032,2036,2040,2044,2048,2052,2055,2058,2061,2064,2068,2071,2075,2078,2081,2085,2089,2093,2096,2100,2103,2106,2110,2113,2116,2119,2122,2126,2129,2133,2136,2139,2142,2146,2150,2153,2156,2160,2164,2168,2171,2175,2178,2182,2185,2188,2192,2196,2200,2204,2207,2210,2213,2216,2219,2222,2225,2229,2233,2237,2240,2244,2247,2250,2253,2257,2261,2265,2269,2273,2276,2279,2283,2286,2289,2292,2296,2299,2303,2306,2309,2312,2316,2319,2322,2325,2328,2331,2335,2338,2342,2346,2349,2352,2355,2358,2362,2365,2369,2373,2377,2380,2383,2387,2391,2394,2398,2401,2404,2407,2410,2414,2418,2421,2424,2428,2431,2434,2438,2442,2445,2448,2451,2454,2457,2460,2464,2468,2472,2475,2478,2482,2486,2489,2492,2496,2499,2503,2506,2509,2512,2516,2519,2522,2526,2529,2533,2536,2539,2542,2545,2548,2551,2554,2557,2560,2563,2566,2570,2573,2576,2579,2582,2585,2588,2591,2594,2597,2600,2603,2607,2610,2614,2617,2620,2624,2628,2632,2635,2638,2641,2645,2648,2651,2654,2658,2661,2664,2667,2671,2674,2677,2680,2683,2687,2690,2693,2696,2699,2702,2705,2708,2711,2715,2718,2722,2726,2729,2732,2735,2738,2742,2745,2748,2752,2755,2758,2761,2765,2768,2771,2774,2777,2781,2784,2788,2791,2794,2797,2800,2803,2806,2809,2814,2817,2820,2823,2827,2830,2834,2837,2840,2843,2847,2850,2854,2857,2860,2864,2867,2870,2873,2876,2879,2882,2885,2888,2891,2894,2897,2901,2904,2908,2911,2915,2918,2922,2926,2930,2933,2937,2941,2945,2948,2952,2956,2959,2963,2966,2970,2973,2977,2981,2984,2988,2992,2996,2999,3002,3006,3009,3013,3017,3020,3023,3026,3029,3033,3037,3041,3044,3048,3052,3055,3058,3061,3064,3067,3070,3074,3077,3081,3084,3087,3091,3094,3098,3101,3105,3109,3112,3115,3118,3121,3125,3129,3132,3135,3138,3141,3144,3148,3152,3155,3158,3161,3165,3169,3172,3176,3180,3183,3186,3190,3193,3196,3199,3203,3207,3210,3213,3216,3219,3222,3225,3228,3231,3234,3237,3240,3243,3246,3249,3252,3255,3258,3261,3264,3267,3270,3273,3276,3279,3282,3285,3288,3291,3294,3297,3300,3303,3306,3309,3312,3315,3318,3321,3324,3327,3330,3333,3336,3340,3343,3346,3349,3352,3355,3358,3361,3364,3367,3370,3373,3376,3379,3382,3385,3388,3391,3394,3397,3400,3403,3406,3409,3412,3415,3419,3422,3425,3428,3431,3434,3437,3440,3443,3446,3449,3452,3455,3458,3461,3464,3467,3470,3473,3476,3479,3482,3485,3488,3491,3494,3497,3500,3503,3506,3509,3512,3515,3518,3521,3524,3527,3530,3533,3536,3539,3542,3545,3548,3551,3554,3557,3560,3563,3566],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":21,"last_cve_update":22},110112,"windows",11,8294,78,"2025-10-28",{"id":24,"product_name":25,"version_count":26,"cve_count":27,"kev_count":28,"last_cve_update":29},110222,"windows_server_2016",58,4711,175,"2025-10-14",{"id":31,"product_name":32,"version_count":33,"cve_count":34,"kev_count":35,"last_cve_update":29},110223,"windows_server_2019",56,4111,160,{"id":37,"product_name":38,"version_count":39,"cve_count":40,"kev_count":41,"last_cve_update":42},110113,"windows_10",15,4066,20,"2023-10-10",{"id":44,"product_name":45,"version_count":46,"cve_count":47,"kev_count":48,"last_cve_update":29},110220,"windows_server_2008",2,3906,195,{"id":50,"product_name":51,"version_count":52,"cve_count":53,"kev_count":54,"last_cve_update":29},110221,"windows_server_2012",7,3842,198,{"id":56,"product_name":57,"version_count":46,"cve_count":58,"kev_count":59,"last_cve_update":60},110143,"windows_7",3087,149,"2023-06-14",{"id":62,"product_name":63,"version_count":46,"cve_count":64,"kev_count":59,"last_cve_update":65},110146,"windows_8.1",2876,"2023-05-31",{"id":67,"product_name":68,"version_count":69,"cve_count":70,"kev_count":71,"last_cve_update":65},110207,"windows_rt_8.1",1,2336,131,{"id":73,"product_name":74,"version_count":75,"cve_count":76,"kev_count":77,"last_cve_update":29},110224,"windows_server_2022",89,2137,94,{"id":79,"product_name":80,"version_count":81,"cve_count":82,"kev_count":83,"last_cve_update":84},109612,"internet_explorer",83,1742,41,"2021-08-31",{"id":86,"product_name":87,"version_count":88,"cve_count":89,"kev_count":90,"last_cve_update":29},110132,"windows_11_22h2",69,1473,73,{"id":92,"product_name":93,"version_count":94,"cve_count":95,"kev_count":96,"last_cve_update":29},110120,"windows_10_1809",148,1465,151,{"id":98,"product_name":99,"version_count":100,"cve_count":101,"kev_count":102,"last_cve_update":29},110126,"windows_10_21h2",86,1430,87,{"id":104,"product_name":105,"version_count":33,"cve_count":106,"kev_count":107,"last_cve_update":29},110127,"windows_10_22h2",1425,72,{"id":109,"product_name":110,"version_count":111,"cve_count":112,"kev_count":41,"last_cve_update":113},110239,"windows_xp",5,1352,"2020-04-29",{"id":115,"product_name":116,"version_count":117,"cve_count":118,"kev_count":119,"last_cve_update":120},110238,"windows_vista",3,1348,64,"2020-02-20",{"id":122,"product_name":123,"version_count":124,"cve_count":125,"kev_count":126,"last_cve_update":29},110116,"windows_10_1607",188,1294,164,{"id":128,"product_name":129,"version_count":130,"cve_count":131,"kev_count":132,"last_cve_update":29},110114,"windows_10_1507",144,1131,165,{"id":134,"product_name":135,"version_count":136,"cve_count":137,"kev_count":138,"last_cve_update":29},110225,"windows_server_2022_23h2",30,1060,49,{"id":140,"product_name":141,"version_count":90,"cve_count":142,"kev_count":143,"last_cve_update":144},110131,"windows_11_21h2",1031,66,"2024-12-18",{"id":146,"product_name":147,"version_count":148,"cve_count":149,"kev_count":150,"last_cve_update":29},110133,"windows_11_23h2",45,991,51,{"id":152,"product_name":153,"version_count":154,"cve_count":155,"kev_count":156,"last_cve_update":157},109711,"office",35,936,36,"2025-12-09",{"id":159,"product_name":160,"version_count":161,"cve_count":162,"kev_count":163,"last_cve_update":164},109514,"edge",95,756,12,"2026-03-27",{"id":166,"product_name":167,"version_count":52,"cve_count":168,"kev_count":169,"last_cve_update":120},110218,"windows_server_2003",653,29,{"id":171,"product_name":172,"version_count":173,"cve_count":174,"kev_count":154,"last_cve_update":29},110134,"windows_11_24h2",28,642,{"id":176,"product_name":177,"version_count":178,"cve_count":179,"kev_count":180,"last_cve_update":181},110136,"windows_2000",6,635,4,"2014-04-23",{"id":183,"product_name":184,"version_count":46,"cve_count":185,"kev_count":46,"last_cve_update":186},110130,"windows_11",600,"2025-08-26",{"id":188,"product_name":189,"version_count":169,"cve_count":190,"kev_count":191,"last_cve_update":29},110226,"windows_server_2025",549,27,{"id":193,"product_name":194,"version_count":195,"cve_count":196,"kev_count":117,"last_cve_update":197},110141,"windows_2003_server",32,546,"2015-07-14",{"id":199,"product_name":200,"version_count":201,"cve_count":202,"kev_count":203,"last_cve_update":157},109886,"sharepoint_server",23,448,13,{"id":205,"product_name":206,"version_count":207,"cve_count":208,"kev_count":111,"last_cve_update":157},109526,"excel",19,365,{"id":210,"product_name":211,"version_count":69,"cve_count":212,"kev_count":213,"last_cve_update":157},109234,"365_apps",349,8,{"id":215,"product_name":216,"version_count":69,"cve_count":217,"kev_count":195,"last_cve_update":218},110144,"windows_8",324,"2020-06-30",{"id":220,"product_name":221,"version_count":222,"cve_count":223,"kev_count":46,"last_cve_update":224},110212,"windows_server",10,305,"2022-05-10",{"id":226,"product_name":227,"version_count":90,"cve_count":228,"kev_count":33,"last_cve_update":229},110124,"windows_10_20h2",293,"2025-05-13",{"id":231,"product_name":232,"version_count":213,"cve_count":233,"kev_count":46,"last_cve_update":234},110199,"windows_nt",286,"2020-04-16",{"id":236,"product_name":237,"version_count":238,"cve_count":239,"kev_count":46,"last_cve_update":240},109425,"chakracore",62,255,"2023-07-18",{"id":242,"product_name":243,"version_count":244,"cve_count":245,"kev_count":246,"last_cve_update":247},110206,"windows_rt",0,247,24,"2016-08-09",{"id":249,"product_name":250,"version_count":180,"cve_count":251,"kev_count":111,"last_cve_update":252},109880,"sharepoint_enterprise_server",246,"2025-09-09",{"id":254,"product_name":255,"version_count":222,"cve_count":256,"kev_count":257,"last_cve_update":29},109538,"exchange_server",232,18,{"id":259,"product_name":260,"version_count":261,"cve_count":262,"kev_count":222,"last_cve_update":157},110248,"word",54,229,{"id":264,"product_name":265,"version_count":46,"cve_count":266,"kev_count":69,"last_cve_update":267},109883,"sharepoint_foundation",226,"2023-04-11",{"id":269,"product_name":270,"version_count":69,"cve_count":271,"kev_count":203,"last_cve_update":272},109721,"office_compatibility_pack",210,"2019-03-05",{"id":274,"product_name":275,"version_count":276,"cve_count":277,"kev_count":213,"last_cve_update":278},109515,"edge_chromium",383,203,"2025-10-31",{"id":280,"product_name":281,"version_count":77,"cve_count":282,"kev_count":244,"last_cve_update":283},109598,"ie",202,"2012-03-09",{"id":285,"product_name":286,"version_count":287,"cve_count":288,"kev_count":111,"last_cve_update":29},109695,".net_framework",22,180,{"id":290,"product_name":291,"version_count":46,"cve_count":292,"kev_count":178,"last_cve_update":157},109732,"office_long_term_servicing_channel",173,{"id":294,"product_name":295,"version_count":222,"cve_count":96,"kev_count":69,"last_cve_update":157},109736,"office_online_server",{"id":297,"product_name":298,"version_count":299,"cve_count":300,"kev_count":244,"last_cve_update":252},109913,"sql_server_2019",50,129,{"id":302,"product_name":303,"version_count":46,"cve_count":304,"kev_count":178,"last_cve_update":272},109533,"excel_viewer",125,{"id":306,"product_name":307,"version_count":223,"cve_count":308,"kev_count":69,"last_cve_update":29},110080,"visual_studio_2019",115,{"id":310,"product_name":311,"version_count":312,"cve_count":308,"kev_count":111,"last_cve_update":313},109770,"outlook",37,"2025-02-11",{"id":315,"product_name":316,"version_count":163,"cve_count":317,"kev_count":244,"last_cve_update":318},109613,"internet_information_server",111,"2013-05-22",{"id":320,"product_name":321,"version_count":203,"cve_count":322,"kev_count":46,"last_cve_update":323},109906,"sql_server",110,"2024-01-09",{"id":325,"product_name":326,"version_count":111,"cve_count":327,"kev_count":117,"last_cve_update":29},110135,"windows_11_25h2",108,{"id":329,"product_name":330,"version_count":46,"cve_count":331,"kev_count":117,"last_cve_update":332},109747,"office_web_apps",106,"2023-02-14",{"id":334,"product_name":335,"version_count":336,"cve_count":337,"kev_count":46,"last_cve_update":29},110081,"visual_studio_2022",220,105,{"id":339,"product_name":340,"version_count":69,"cve_count":341,"kev_count":244,"last_cve_update":342},110148,"windows_98",101,"2020-11-24",{"id":344,"product_name":345,"version_count":346,"cve_count":347,"kev_count":244,"last_cve_update":252},109916,"sql_server_2022",34,100,{"id":349,"product_name":350,"version_count":163,"cve_count":351,"kev_count":69,"last_cve_update":352},109614,"internet_information_services",93,"2017-03-27",{"id":354,"product_name":355,"version_count":356,"cve_count":357,"kev_count":69,"last_cve_update":29},110079,"visual_studio_2017",128,90,{"id":359,"product_name":360,"version_count":154,"cve_count":75,"kev_count":244,"last_cve_update":361},109485,"dynamics_365","2025-09-04",{"id":363,"product_name":364,"version_count":365,"cve_count":75,"kev_count":366,"last_cve_update":229},110125,"windows_10_21h1",76,44,{"id":368,"product_name":369,"version_count":370,"cve_count":371,"kev_count":244,"last_cve_update":252},109911,"sql_server_2017",57,88,{"id":373,"product_name":374,"version_count":69,"cve_count":371,"kev_count":111,"last_cve_update":272},110256,"word_viewer",{"id":376,"product_name":377,"version_count":378,"cve_count":100,"kev_count":244,"last_cve_update":252},109910,"sql_server_2016",81,{"id":380,"product_name":381,"version_count":244,"cve_count":382,"kev_count":46,"last_cve_update":383},109718,"office_365_proplus",84,"2020-04-15",{"id":385,"product_name":386,"version_count":244,"cve_count":378,"kev_count":180,"last_cve_update":387},109766,"open_xml_file_format_converter","2011-09-15",{"id":389,"product_name":390,"version_count":304,"cve_count":391,"kev_count":46,"last_cve_update":29},109691,".net",75,{"id":393,"product_name":394,"version_count":244,"cve_count":90,"kev_count":244,"last_cve_update":342},110185,"windows_me",{"id":396,"product_name":397,"version_count":244,"cve_count":398,"kev_count":244,"last_cve_update":399},110150,"windows_98se",71,"2007-07-24",{"id":401,"product_name":402,"version_count":403,"cve_count":404,"kev_count":180,"last_cve_update":29},109809,"powerpoint",16,67,{"id":406,"product_name":407,"version_count":408,"cve_count":119,"kev_count":33,"last_cve_update":409},110119,"windows_10_1803",70,"2024-08-07",{"id":411,"product_name":412,"version_count":46,"cve_count":238,"kev_count":46,"last_cve_update":413},109748,"office_web_apps_server","2023-03-14",{"id":415,"product_name":416,"version_count":207,"cve_count":417,"kev_count":244,"last_cve_update":418},110260,"works",59,"2012-10-09",{"id":420,"product_name":421,"version_count":90,"cve_count":26,"kev_count":299,"last_cve_update":409},110118,"windows_10_1709",{"id":423,"product_name":424,"version_count":26,"cve_count":26,"kev_count":299,"last_cve_update":409},110122,"windows_10_1909",{"id":426,"product_name":427,"version_count":117,"cve_count":370,"kev_count":244,"last_cve_update":428},110147,"windows_95","2009-02-06",{"id":430,"product_name":431,"version_count":163,"cve_count":33,"kev_count":244,"last_cve_update":432},110076,"visual_studio","2024-10-08",{"id":434,"product_name":435,"version_count":436,"cve_count":261,"kev_count":46,"last_cve_update":437},110052,"visio",9,"2024-09-19",{"id":439,"product_name":440,"version_count":287,"cve_count":441,"kev_count":244,"last_cve_update":442},110191,"windows_media_player",53,"2017-11-15",{"id":444,"product_name":445,"version_count":39,"cve_count":446,"kev_count":154,"last_cve_update":65},110227,"windows_server_20h2",52,{"id":448,"product_name":449,"version_count":450,"cve_count":299,"kev_count":244,"last_cve_update":451},110082,"visual_studio_code",633,"2025-09-12",{"id":453,"product_name":454,"version_count":455,"cve_count":456,"kev_count":457,"last_cve_update":409},110117,"windows_10_1703",65,47,39,{"id":459,"product_name":460,"version_count":287,"cve_count":148,"kev_count":244,"last_cve_update":461},109775,"outlook_express","2010-08-27",{"id":463,"product_name":464,"version_count":46,"cve_count":366,"kev_count":244,"last_cve_update":465},109386,"azure_site_recovery_vmware_to_azure","2022-08-09",{"id":467,"product_name":468,"version_count":69,"cve_count":366,"kev_count":111,"last_cve_update":469},109751,"office_word_viewer","2019-01-08",{"id":471,"product_name":472,"version_count":52,"cve_count":473,"kev_count":46,"last_cve_update":474},109844,"publisher",43,"2024-09-10",{"id":476,"product_name":477,"version_count":46,"cve_count":473,"kev_count":46,"last_cve_update":478},109635,"lync","2020-07-14",{"id":480,"product_name":481,"version_count":482,"cve_count":483,"kev_count":346,"last_cve_update":409},110115,"windows_10_1511",38,40,{"id":485,"product_name":486,"version_count":163,"cve_count":457,"kev_count":244,"last_cve_update":487},109324,"azure_devops_server","2024-07-09",{"id":489,"product_name":490,"version_count":473,"cve_count":482,"kev_count":491,"last_cve_update":229},110123,"windows_10_2004",31,{"id":493,"product_name":494,"version_count":46,"cve_count":312,"kev_count":244,"last_cve_update":495},109385,"azure_site_recovery","2024-02-13",{"id":497,"product_name":498,"version_count":83,"cve_count":312,"kev_count":499,"last_cve_update":409},110121,"windows_10_1903",33,{"id":501,"product_name":502,"version_count":244,"cve_count":346,"kev_count":173,"last_cve_update":503},110214,"windows_server_1803","2020-06-09",{"id":505,"product_name":506,"version_count":507,"cve_count":346,"kev_count":46,"last_cve_update":29},109266,"asp.net_core",221,{"id":509,"product_name":510,"version_count":117,"cve_count":499,"kev_count":244,"last_cve_update":495},109897,"skype_for_business",{"id":512,"product_name":513,"version_count":514,"cve_count":499,"kev_count":69,"last_cve_update":515},109692,".net_core",126,"2022-10-11",{"id":517,"product_name":518,"version_count":191,"cve_count":195,"kev_count":180,"last_cve_update":519},109892,"silverlight","2017-06-15",{"id":521,"product_name":522,"version_count":222,"cve_count":195,"kev_count":244,"last_cve_update":523},109577,"hevc_video_extensions","2023-08-08",{"id":525,"product_name":526,"version_count":41,"cve_count":136,"kev_count":244,"last_cve_update":487},109754,"ole_db_driver_for_sql_server",{"id":528,"product_name":529,"version_count":213,"cve_count":136,"kev_count":69,"last_cve_update":503},109825,"project",{"id":531,"product_name":532,"version_count":46,"cve_count":136,"kev_count":46,"last_cve_update":533},110161,"windows_defender","2023-11-14",{"id":535,"product_name":536,"version_count":537,"cve_count":136,"kev_count":244,"last_cve_update":538},110198,"windows-nt",14,"2008-09-11",{"id":540,"product_name":541,"version_count":111,"cve_count":169,"kev_count":244,"last_cve_update":542},110089,"visual_studio_.net","2021-04-08",{"id":544,"product_name":545,"version_count":546,"cve_count":169,"kev_count":244,"last_cve_update":465},109388,"azure_sphere",26,{"id":548,"product_name":549,"version_count":69,"cve_count":169,"kev_count":69,"last_cve_update":550},109725,"office_excel_viewer","2010-06-08",{"id":552,"product_name":553,"version_count":69,"cve_count":191,"kev_count":244,"last_cve_update":554},109255,"all_windows","2008-05-12",{"id":556,"product_name":557,"version_count":163,"cve_count":546,"kev_count":69,"last_cve_update":157},109240,"access",{"id":559,"product_name":560,"version_count":213,"cve_count":546,"kev_count":546,"last_cve_update":561},110219,"windows_server_2004","2021-11-10",{"id":563,"product_name":564,"version_count":46,"cve_count":546,"kev_count":244,"last_cve_update":565},109452,"data_engine","2008-07-08",{"id":567,"product_name":568,"version_count":69,"cve_count":569,"kev_count":69,"last_cve_update":570},109630,"live_meeting",25,"2017-09-13",{"id":572,"product_name":573,"version_count":446,"cve_count":569,"kev_count":69,"last_cve_update":574},109643,"malware_protection_engine","2023-07-11",{"id":576,"product_name":577,"version_count":244,"cve_count":569,"kev_count":569,"last_cve_update":578},110215,"windows_server_1903","2020-08-17",{"id":580,"product_name":581,"version_count":46,"cve_count":569,"kev_count":244,"last_cve_update":570},109528,"excel_for_mac",{"id":583,"product_name":584,"version_count":244,"cve_count":246,"kev_count":244,"last_cve_update":585},109722,"office_compatibility_pack_for_word_excel_ppt_2007","2009-06-10",{"id":587,"product_name":588,"version_count":111,"cve_count":246,"kev_count":244,"last_cve_update":383},109831,"project_server",{"id":590,"product_name":591,"version_count":244,"cve_count":246,"kev_count":244,"last_cve_update":592},110139,"windows_2000_terminal_services","2005-06-14",{"id":594,"product_name":595,"version_count":46,"cve_count":246,"kev_count":244,"last_cve_update":519},110250,"word_for_mac",{"id":597,"product_name":598,"version_count":117,"cve_count":201,"kev_count":69,"last_cve_update":599},110045,"vbscript","2016-06-16",{"id":601,"product_name":602,"version_count":178,"cve_count":201,"kev_count":244,"last_cve_update":603},110031,"team_foundation_server","2021-04-13",{"id":605,"product_name":606,"version_count":111,"cve_count":201,"kev_count":69,"last_cve_update":607},109558,"frontpage","2013-09-11",{"id":609,"product_name":610,"version_count":163,"cve_count":201,"kev_count":244,"last_cve_update":611},109710,"odbc_driver_for_sql_server","2024-04-09",{"id":613,"product_name":614,"version_count":615,"cve_count":616,"kev_count":244,"last_cve_update":29},109816,"powershell",270,21,{"id":618,"product_name":619,"version_count":117,"cve_count":616,"kev_count":244,"last_cve_update":620},109620,"isa_server","2009-08-12",{"id":622,"product_name":623,"version_count":46,"cve_count":41,"kev_count":244,"last_cve_update":624},109238,"3d_builder","2023-09-12",{"id":626,"product_name":627,"version_count":69,"cve_count":41,"kev_count":46,"last_cve_update":628},109870,"security_essentials","2021-02-25",{"id":630,"product_name":631,"version_count":616,"cve_count":41,"kev_count":244,"last_cve_update":487},109471,"defender_for_iot",{"id":633,"product_name":634,"version_count":213,"cve_count":207,"kev_count":46,"last_cve_update":635},110271,"xml_core_services","2017-03-17",{"id":637,"product_name":638,"version_count":46,"cve_count":207,"kev_count":244,"last_cve_update":639},109889,"sharepoint_services","2015-03-11",{"id":641,"product_name":642,"version_count":117,"cve_count":207,"kev_count":46,"last_cve_update":643},110071,"visual_foxpro","2012-08-15",{"id":645,"product_name":646,"version_count":52,"cve_count":207,"kev_count":46,"last_cve_update":643},110060,"visual_basic",{"id":648,"product_name":649,"version_count":650,"cve_count":257,"kev_count":244,"last_cve_update":651},109817,"powershell_core",17,"2021-08-12",{"id":653,"product_name":654,"version_count":46,"cve_count":257,"kev_count":244,"last_cve_update":655},109740,"office_powerpoint_viewer","2018-07-11",{"id":657,"product_name":658,"version_count":69,"cve_count":257,"kev_count":69,"last_cve_update":659},109744,"office_sharepoint_server","2015-10-14",{"id":661,"product_name":662,"version_count":663,"cve_count":650,"kev_count":244,"last_cve_update":229},109855,"remote_desktop",114,{"id":665,"product_name":666,"version_count":117,"cve_count":650,"kev_count":69,"last_cve_update":599},109625,"jscript",{"id":668,"product_name":669,"version_count":46,"cve_count":403,"kev_count":244,"last_cve_update":670},109639,"lync_server","2022-07-12",{"id":672,"product_name":673,"version_count":46,"cve_count":403,"kev_count":244,"last_cve_update":674},109893,"site_server","2002-12-31",{"id":676,"product_name":677,"version_count":178,"cve_count":39,"kev_count":244,"last_cve_update":574},109852,"raw_image_extension",{"id":679,"product_name":680,"version_count":180,"cve_count":39,"kev_count":69,"last_cve_update":272},109814,"powerpoint_viewer",{"id":682,"product_name":683,"version_count":178,"cve_count":39,"kev_count":244,"last_cve_update":684},109486,"dynamics_365_business_central","2024-09-17",{"id":686,"product_name":687,"version_count":111,"cve_count":39,"kev_count":69,"last_cve_update":688},109739,"office_powerpoint","2009-06-11",{"id":690,"product_name":691,"version_count":178,"cve_count":39,"kev_count":180,"last_cve_update":692},110017,"system_center_operations_manager","2024-03-12",{"id":694,"product_name":695,"version_count":69,"cve_count":39,"kev_count":244,"last_cve_update":696},109548,"forefront_client_security","2011-02-25",{"id":698,"product_name":699,"version_count":244,"cve_count":39,"kev_count":39,"last_cve_update":603},110216,"windows_server_1909",{"id":701,"product_name":702,"version_count":46,"cve_count":39,"kev_count":244,"last_cve_update":703},109723,"office_converter_pack","2010-12-16",{"id":705,"product_name":706,"version_count":436,"cve_count":537,"kev_count":69,"last_cve_update":707},109759,"onenote","2025-01-14",{"id":709,"product_name":710,"version_count":117,"cve_count":537,"kev_count":244,"last_cve_update":711},109922,"sql_server_reporting_services","2020-09-11",{"id":713,"product_name":714,"version_count":46,"cve_count":537,"kev_count":69,"last_cve_update":495},109899,"skype_for_business_server",{"id":716,"product_name":717,"version_count":180,"cve_count":537,"kev_count":244,"last_cve_update":718},109750,"office_word","2009-12-09",{"id":720,"product_name":721,"version_count":436,"cve_count":537,"kev_count":244,"last_cve_update":722},110196,"windows_mobile","2011-06-02",{"id":724,"product_name":725,"version_count":244,"cve_count":203,"kev_count":222,"last_cve_update":726},110213,"windows_server_1709","2019-06-12",{"id":728,"product_name":729,"version_count":46,"cve_count":203,"kev_count":244,"last_cve_update":730},109864,"report_viewer","2011-08-10",{"id":732,"product_name":733,"version_count":69,"cve_count":203,"kev_count":46,"last_cve_update":628},110016,"system_center_endpoint_protection",{"id":735,"product_name":736,"version_count":52,"cve_count":203,"kev_count":244,"last_cve_update":413},109757,"onedrive",{"id":738,"product_name":739,"version_count":207,"cve_count":203,"kev_count":244,"last_cve_update":740},109479,"directx","2012-12-12",{"id":742,"product_name":743,"version_count":180,"cve_count":203,"kev_count":46,"last_cve_update":643},109749,"office_web_components",{"id":745,"product_name":746,"version_count":69,"cve_count":163,"kev_count":244,"last_cve_update":747},109555,"forefront_unified_access_gateway","2018-07-05",{"id":749,"product_name":750,"version_count":46,"cve_count":163,"kev_count":244,"last_cve_update":751},109622,"java_virtual_machine","2004-07-27",{"id":753,"product_name":754,"version_count":244,"cve_count":163,"kev_count":244,"last_cve_update":465},109370,"azure_real_time_operating_system_guix_studio",{"id":756,"product_name":757,"version_count":178,"cve_count":163,"kev_count":69,"last_cve_update":758},110032,"teams","2024-08-13",{"id":760,"product_name":761,"version_count":257,"cve_count":163,"kev_count":180,"last_cve_update":762},109395,"azure_stack_hub","2025-08-12",{"id":764,"product_name":765,"version_count":46,"cve_count":163,"kev_count":69,"last_cve_update":766},109543,"expression_web","2013-01-09",{"id":768,"product_name":769,"version_count":244,"cve_count":19,"kev_count":244,"last_cve_update":469},110249,"word_automation_services",{"id":771,"product_name":772,"version_count":244,"cve_count":19,"kev_count":244,"last_cve_update":773},110037,"terminal_server","2007-05-11",{"id":775,"product_name":776,"version_count":537,"cve_count":19,"kev_count":244,"last_cve_update":777},109683,"msn_messenger","2007-08-31",{"id":779,"product_name":780,"version_count":436,"cve_count":19,"kev_count":244,"last_cve_update":781},109451,"data_access_components","2012-07-10",{"id":783,"product_name":784,"version_count":111,"cve_count":19,"kev_count":244,"last_cve_update":785},109698,"netmeeting","2006-06-09",{"id":787,"product_name":788,"version_count":117,"cve_count":19,"kev_count":244,"last_cve_update":789},109879,"sharepoint_designer","2020-10-16",{"id":791,"product_name":792,"version_count":180,"cve_count":222,"kev_count":244,"last_cve_update":585},109724,"office_excel",{"id":794,"product_name":795,"version_count":46,"cve_count":222,"kev_count":244,"last_cve_update":796},109727,"office_for_mac","2018-09-13",{"id":798,"product_name":799,"version_count":403,"cve_count":222,"kev_count":244,"last_cve_update":800},109376,"azure_rtos_usbx","2023-12-05",{"id":802,"product_name":803,"version_count":69,"cve_count":222,"kev_count":244,"last_cve_update":804},109746,"office_system","2008-12-10",{"id":806,"product_name":807,"version_count":244,"cve_count":222,"kev_count":244,"last_cve_update":808},109579,"high_efficiency_video_coding","2021-03-11",{"id":810,"product_name":811,"version_count":244,"cve_count":222,"kev_count":244,"last_cve_update":478},109550,"forefront_endpoint_protection_2010",{"id":813,"product_name":814,"version_count":46,"cve_count":222,"kev_count":244,"last_cve_update":624},109239,"3d_viewer",{"id":816,"product_name":817,"version_count":436,"cve_count":222,"kev_count":244,"last_cve_update":818},110048,"virtual_machine","2003-05-05",{"id":820,"product_name":821,"version_count":69,"cve_count":222,"kev_count":244,"last_cve_update":29},109468,"defender_for_endpoint",{"id":823,"product_name":824,"version_count":180,"cve_count":436,"kev_count":69,"last_cve_update":825},109606,"infopath","2018-05-09",{"id":827,"product_name":828,"version_count":244,"cve_count":436,"kev_count":244,"last_cve_update":474},109905,"sql_2016_azure_connect_feature_pack",{"id":830,"product_name":831,"version_count":69,"cve_count":436,"kev_count":244,"last_cve_update":832},109636,"lync_basic","2019-07-15",{"id":834,"product_name":835,"version_count":180,"cve_count":436,"kev_count":69,"last_cve_update":599},110059,"visio_viewer",{"id":837,"product_name":838,"version_count":180,"cve_count":436,"kev_count":46,"last_cve_update":643},109434,"commerce_server",{"id":840,"product_name":841,"version_count":69,"cve_count":436,"kev_count":244,"last_cve_update":842},109394,"azure_stack_hci","2024-11-15",{"id":844,"product_name":845,"version_count":111,"cve_count":436,"kev_count":244,"last_cve_update":846},110193,"windows_media_services","2009-09-08",{"id":848,"product_name":849,"version_count":111,"cve_count":436,"kev_count":244,"last_cve_update":850},109503,"dynamics_nav","2022-12-13",{"id":852,"product_name":853,"version_count":244,"cve_count":436,"kev_count":244,"last_cve_update":854},109502,"dynamics_gp","2022-02-09",{"id":856,"product_name":857,"version_count":180,"cve_count":436,"kev_count":244,"last_cve_update":858},109265,"asp.net","2010-05-27",{"id":860,"product_name":861,"version_count":69,"cve_count":436,"kev_count":244,"last_cve_update":862},109438,"compatibility_pack_word_excel_powerpoint","2009-11-11",{"id":864,"product_name":865,"version_count":111,"cve_count":436,"kev_count":244,"last_cve_update":866},110181,"windows_live_messenger","2010-01-12",{"id":868,"product_name":869,"version_count":69,"cve_count":436,"kev_count":244,"last_cve_update":870},109605,"index_server","2001-09-14",{"id":872,"product_name":873,"version_count":874,"cve_count":213,"kev_count":69,"last_cve_update":13},109345,"azure_kubernetes_service",208,{"id":876,"product_name":877,"version_count":117,"cve_count":213,"kev_count":244,"last_cve_update":878},109252,"activex","2020-05-07",{"id":880,"product_name":881,"version_count":69,"cve_count":213,"kev_count":244,"last_cve_update":804},109737,"office_outlook",{"id":883,"product_name":884,"version_count":178,"cve_count":213,"kev_count":244,"last_cve_update":885},109895,"skype","2021-01-11",{"id":887,"product_name":888,"version_count":111,"cve_count":213,"kev_count":69,"last_cve_update":889},109415,"biztalk_server","2015-08-15",{"id":891,"product_name":892,"version_count":180,"cve_count":213,"kev_count":244,"last_cve_update":432},109805,"power_bi_report_server",{"id":894,"product_name":895,"version_count":69,"cve_count":213,"kev_count":244,"last_cve_update":674},109894,"site_server_commerce",{"id":897,"product_name":898,"version_count":499,"cve_count":213,"kev_count":244,"last_cve_update":899},109316,"azure_cyclecloud","2024-11-12",{"id":901,"product_name":902,"version_count":244,"cve_count":213,"kev_count":244,"last_cve_update":42},109333,"azure_hdinsights",{"id":904,"product_name":905,"version_count":69,"cve_count":213,"kev_count":244,"last_cve_update":478},110255,"word_rt",{"id":907,"product_name":908,"version_count":111,"cve_count":213,"kev_count":244,"last_cve_update":909},110189,"windows_media_format_runtime","2013-07-10",{"id":911,"product_name":912,"version_count":46,"cve_count":213,"kev_count":244,"last_cve_update":825},110103,"web_applications",{"id":914,"product_name":915,"version_count":916,"cve_count":213,"kev_count":244,"last_cve_update":29},109311,"azure_connected_machine_agent",61,{"id":918,"product_name":919,"version_count":111,"cve_count":52,"kev_count":244,"last_cve_update":920},109624,"jet","2008-03-06",{"id":922,"product_name":923,"version_count":111,"cve_count":52,"kev_count":244,"last_cve_update":924},109383,"azure_service_fabric","2025-07-08",{"id":926,"product_name":927,"version_count":244,"cve_count":52,"kev_count":69,"last_cve_update":928},109551,"forefront_security","2017-05-26",{"id":930,"product_name":931,"version_count":46,"cve_count":52,"kev_count":69,"last_cve_update":932},109572,"groove_server","2013-04-09",{"id":934,"product_name":935,"version_count":46,"cve_count":52,"kev_count":244,"last_cve_update":936},109720,"office_communicator","2013-05-15",{"id":938,"product_name":939,"version_count":69,"cve_count":52,"kev_count":244,"last_cve_update":940},109729,"office_groove","2009-10-14",{"id":942,"product_name":943,"version_count":244,"cve_count":52,"kev_count":244,"last_cve_update":940},109794,"platform_sdk",{"id":945,"product_name":946,"version_count":178,"cve_count":52,"kev_count":244,"last_cve_update":542},110069,"visual_c\\+\\+",{"id":948,"product_name":949,"version_count":46,"cve_count":52,"kev_count":244,"last_cve_update":574},110097,"vp9_video_extensions",{"id":951,"product_name":952,"version_count":41,"cve_count":52,"kev_count":244,"last_cve_update":953},110169,"windows_embedded_compact","2018-03-12",{"id":955,"product_name":956,"version_count":69,"cve_count":52,"kev_count":244,"last_cve_update":957},110172,"windows_explorer","2007-03-08",{"id":959,"product_name":960,"version_count":961,"cve_count":178,"kev_count":244,"last_cve_update":60},109707,"nuget",123,{"id":963,"product_name":964,"version_count":244,"cve_count":178,"kev_count":244,"last_cve_update":655},110183,"windows_mail",{"id":966,"product_name":967,"version_count":46,"cve_count":178,"kev_count":244,"last_cve_update":607},109885,"sharepoint_portal_server",{"id":969,"product_name":970,"version_count":244,"cve_count":178,"kev_count":180,"last_cve_update":692},109445,"container_monitoring_solution",{"id":972,"product_name":973,"version_count":46,"cve_count":178,"kev_count":244,"last_cve_update":789},109534,"excel_web_app",{"id":975,"product_name":976,"version_count":457,"cve_count":178,"kev_count":244,"last_cve_update":578},109920,"sql_server_management_studio",{"id":978,"product_name":979,"version_count":46,"cve_count":178,"kev_count":244,"last_cve_update":980},109446,"content_management_server","2007-04-10",{"id":982,"product_name":983,"version_count":244,"cve_count":178,"kev_count":69,"last_cve_update":628},109519,"endpoint_protection",{"id":985,"product_name":986,"version_count":46,"cve_count":178,"kev_count":244,"last_cve_update":987},109277,"av1_video_extension","2023-05-09",{"id":989,"product_name":990,"version_count":244,"cve_count":178,"kev_count":180,"last_cve_update":692},109380,"azure_sentinel",{"id":992,"product_name":993,"version_count":244,"cve_count":178,"kev_count":180,"last_cve_update":692},109633,"log_analytics_agent",{"id":995,"product_name":996,"version_count":41,"cve_count":178,"kev_count":244,"last_cve_update":29},109357,"azure_monitor_agent",{"id":998,"product_name":999,"version_count":244,"cve_count":178,"kev_count":180,"last_cve_update":692},109379,"azure_security_center",{"id":1001,"product_name":1002,"version_count":46,"cve_count":178,"kev_count":244,"last_cve_update":1003},109436,"commercial_internet_system","2000-03-30",{"id":1005,"product_name":1006,"version_count":117,"cve_count":178,"kev_count":244,"last_cve_update":1007},109350,"azure_machine_learning","2025-07-18",{"id":1009,"product_name":1010,"version_count":69,"cve_count":178,"kev_count":244,"last_cve_update":574},109781,"paint_3d",{"id":1012,"product_name":1013,"version_count":244,"cve_count":178,"kev_count":244,"last_cve_update":487},110228,"windows_server_23h2",{"id":1015,"product_name":1016,"version_count":69,"cve_count":178,"kev_count":244,"last_cve_update":60},109778,"outlook_rt",{"id":1018,"product_name":1019,"version_count":46,"cve_count":178,"kev_count":244,"last_cve_update":538},109478,"digital_image_suite",{"id":1021,"product_name":1022,"version_count":244,"cve_count":178,"kev_count":180,"last_cve_update":692},109305,"azure_automation_update_management",{"id":1024,"product_name":1025,"version_count":69,"cve_count":111,"kev_count":244,"last_cve_update":1026},109833,"proxy_server","2005-01-27",{"id":1028,"product_name":1029,"version_count":244,"cve_count":111,"kev_count":244,"last_cve_update":1030},109717,"office_365","2019-11-12",{"id":1032,"product_name":1033,"version_count":69,"cve_count":111,"kev_count":69,"last_cve_update":1034},109549,"forefront_endpoint_protection","2017-06-29",{"id":1036,"product_name":1037,"version_count":203,"cve_count":111,"kev_count":244,"last_cve_update":655},109268,"asp.net_model_view_controller",{"id":1039,"product_name":1040,"version_count":69,"cve_count":111,"kev_count":244,"last_cve_update":808},109420,"business_productivity_servers",{"id":1042,"product_name":1043,"version_count":46,"cve_count":111,"kev_count":244,"last_cve_update":519},109810,"powerpoint_for_mac",{"id":1045,"product_name":1046,"version_count":46,"cve_count":111,"kev_count":244,"last_cve_update":1047},110072,"visual_interdev","2008-04-09",{"id":1049,"product_name":1050,"version_count":69,"cve_count":111,"kev_count":244,"last_cve_update":804},109728,"office_frontpage",{"id":1052,"product_name":1053,"version_count":69,"cve_count":111,"kev_count":244,"last_cve_update":1054},109531,"excel_rt","2022-04-15",{"id":1056,"product_name":1057,"version_count":163,"cve_count":111,"kev_count":244,"last_cve_update":561},109369,"azure_real_time_operating_system",{"id":1059,"product_name":1060,"version_count":244,"cve_count":111,"kev_count":244,"last_cve_update":1061},109714,"office_2010","2018-04-12",{"id":1063,"product_name":1064,"version_count":69,"cve_count":111,"kev_count":69,"last_cve_update":1065},109569,"groove","2012-06-13",{"id":1067,"product_name":1068,"version_count":69,"cve_count":111,"kev_count":111,"last_cve_update":635},109874,"server_message_block",{"id":1070,"product_name":1071,"version_count":244,"cve_count":111,"kev_count":180,"last_cve_update":1072},109304,"azure_automation_state_configuration","2022-06-15",{"id":1074,"product_name":1075,"version_count":46,"cve_count":111,"kev_count":244,"last_cve_update":1076},109560,"frontpage_server_extensions","2006-04-11",{"id":1078,"product_name":1079,"version_count":117,"cve_count":111,"kev_count":244,"last_cve_update":599},109779,"outlook_web_access",{"id":1081,"product_name":1082,"version_count":180,"cve_count":111,"kev_count":244,"last_cve_update":1083},109786,"personal_web_server","2001-03-12",{"id":1085,"product_name":1086,"version_count":107,"cve_count":111,"kev_count":244,"last_cve_update":252},109275,"autoupdate",{"id":1088,"product_name":1089,"version_count":69,"cve_count":180,"kev_count":244,"last_cve_update":565},109918,"sql_server_desktop_engine",{"id":1091,"product_name":1092,"version_count":69,"cve_count":180,"kev_count":244,"last_cve_update":832},109898,"skype_for_business_basic",{"id":1094,"product_name":1095,"version_count":69,"cve_count":180,"kev_count":244,"last_cve_update":1076},109890,"sharepoint_team_services",{"id":1097,"product_name":1098,"version_count":244,"cve_count":180,"kev_count":244,"last_cve_update":1034},110179,"windows_intune_endpoint_protection",{"id":1100,"product_name":1101,"version_count":41,"cve_count":180,"kev_count":244,"last_cve_update":800},109374,"azure_rtos_netx_duo",{"id":1103,"product_name":1104,"version_count":213,"cve_count":180,"kev_count":244,"last_cve_update":762},109291,"azure_app_service_on_azure_stack",{"id":1106,"product_name":1107,"version_count":244,"cve_count":180,"kev_count":180,"last_cve_update":1108},109362,"azure_open_management_infrastructure","2021-09-15",{"id":1110,"product_name":1111,"version_count":117,"cve_count":180,"kev_count":244,"last_cve_update":620},109615,"internet_security_and_acceleration_server",{"id":1113,"product_name":1114,"version_count":244,"cve_count":180,"kev_count":180,"last_cve_update":1108},109327,"azure_diagnostics_\\(lad\\)",{"id":1116,"product_name":1117,"version_count":69,"cve_count":180,"kev_count":244,"last_cve_update":1118},109680,"msde","2002-08-12",{"id":1120,"product_name":1121,"version_count":178,"cve_count":180,"kev_count":244,"last_cve_update":1122},109248,"active_directory_federation_services","2018-09-18",{"id":1124,"product_name":1125,"version_count":287,"cve_count":180,"kev_count":244,"last_cve_update":1126},109764,"open_enclave_software_development_kit","2021-07-14",{"id":1128,"product_name":1129,"version_count":178,"cve_count":180,"kev_count":244,"last_cve_update":1130},110028,"systems_management_server","2012-09-11",{"id":1132,"product_name":1133,"version_count":111,"cve_count":180,"kev_count":244,"last_cve_update":1134},109784,"pc_manager","2025-09-16",{"id":1136,"product_name":1137,"version_count":1138,"cve_count":180,"kev_count":244,"last_cve_update":1139},109708,"nugetgallery",46,"2024-12-06",{"id":1141,"product_name":1142,"version_count":244,"cve_count":180,"kev_count":244,"last_cve_update":1143},110035,"teredo","2006-12-04",{"id":1145,"product_name":1146,"version_count":244,"cve_count":180,"kev_count":244,"last_cve_update":1147},110129,"windows_10_update_assistant","2021-11-24",{"id":1149,"product_name":1150,"version_count":244,"cve_count":180,"kev_count":244,"last_cve_update":474},109360,"azure_network_watcher_agent",{"id":1152,"product_name":1153,"version_count":244,"cve_count":180,"kev_count":244,"last_cve_update":1154},109523,"entra_id","2025-10-09",{"id":1156,"product_name":1157,"version_count":180,"cve_count":180,"kev_count":244,"last_cve_update":1158},110197,"windows_movie_maker","2013-12-30",{"id":1160,"product_name":1161,"version_count":244,"cve_count":180,"kev_count":244,"last_cve_update":272},109621,"java_software_development_kit",{"id":1163,"product_name":1164,"version_count":244,"cve_count":180,"kev_count":244,"last_cve_update":696},110182,"windows_live_onecare",{"id":1166,"product_name":1167,"version_count":244,"cve_count":180,"kev_count":244,"last_cve_update":1168},110187,"windows_media_center_tv_pack","2014-08-12",{"id":1170,"product_name":1171,"version_count":244,"cve_count":180,"kev_count":244,"last_cve_update":1172},109303,"azure_automation","2025-05-08",{"id":1174,"product_name":1175,"version_count":178,"cve_count":180,"kev_count":244,"last_cve_update":1176},110050,"virtual_pc","2010-04-01",{"id":1178,"product_name":1179,"version_count":244,"cve_count":180,"kev_count":244,"last_cve_update":570},109712,"office_2007",{"id":1181,"product_name":1182,"version_count":1183,"cve_count":180,"kev_count":244,"last_cve_update":762},110232,"windows_subsystem_for_linux",103,{"id":1185,"product_name":1186,"version_count":244,"cve_count":180,"kev_count":244,"last_cve_update":1187},109604,"indexing_service","2001-07-21",{"id":1189,"product_name":1190,"version_count":46,"cve_count":180,"kev_count":244,"last_cve_update":1191},109410,"bing","2025-02-19",{"id":1193,"product_name":1194,"version_count":180,"cve_count":180,"kev_count":244,"last_cve_update":1195},109590,"html_help_workshop","2009-01-15",{"id":1197,"product_name":1198,"version_count":244,"cve_count":180,"kev_count":244,"last_cve_update":1199},109532,"excel_services","2021-01-12",{"id":1201,"product_name":1202,"version_count":46,"cve_count":180,"kev_count":244,"last_cve_update":29},110269,"xbox_gaming_services",{"id":1204,"product_name":1205,"version_count":244,"cve_count":180,"kev_count":244,"last_cve_update":1154},109236,"365_copilot_chat",{"id":1207,"product_name":1208,"version_count":366,"cve_count":180,"kev_count":244,"last_cve_update":762},109329,"azure_file_sync",{"id":1210,"product_name":1211,"version_count":111,"cve_count":180,"kev_count":69,"last_cve_update":533},109582,"host_integration_server",{"id":1213,"product_name":1214,"version_count":69,"cve_count":180,"kev_count":244,"last_cve_update":383},110078,"visual_studio_2015",{"id":1216,"product_name":1217,"version_count":244,"cve_count":180,"kev_count":244,"last_cve_update":1218},109330,"azure_functions","2025-04-30",{"id":1220,"product_name":1221,"version_count":46,"cve_count":117,"kev_count":244,"last_cve_update":1222},110024,"system.net.http","2017-05-12",{"id":1224,"product_name":1225,"version_count":244,"cve_count":117,"kev_count":244,"last_cve_update":1226},109716,"office_2013_rt","2013-12-11",{"id":1228,"product_name":1229,"version_count":46,"cve_count":117,"kev_count":244,"last_cve_update":278},109442,"configuration_manager_2403",{"id":1231,"product_name":1232,"version_count":117,"cve_count":117,"kev_count":244,"last_cve_update":1233},109731,"office_infopath","2011-06-16",{"id":1235,"product_name":1236,"version_count":46,"cve_count":117,"kev_count":69,"last_cve_update":1237},109610,"interix","2009-03-09",{"id":1239,"product_name":1240,"version_count":195,"cve_count":117,"kev_count":244,"last_cve_update":692},109765,"open_management_infrastructure",{"id":1242,"product_name":1243,"version_count":69,"cve_count":117,"kev_count":244,"last_cve_update":781},110160,"windows_data_access_components",{"id":1245,"product_name":1246,"version_count":331,"cve_count":117,"kev_count":244,"last_cve_update":29},110154,"windows_app",{"id":1248,"product_name":1249,"version_count":201,"cve_count":117,"kev_count":244,"last_cve_update":574},110153,"windows_admin_center",{"id":1251,"product_name":1252,"version_count":69,"cve_count":117,"kev_count":244,"last_cve_update":1253},109791,"pinyin_ime","2015-11-11",{"id":1255,"product_name":1256,"version_count":244,"cve_count":117,"kev_count":244,"last_cve_update":1257},109497,"dynamics_365_sales","2025-02-06",{"id":1259,"product_name":1260,"version_count":69,"cve_count":117,"kev_count":244,"last_cve_update":1172},109799,"power_apps",{"id":1262,"product_name":1263,"version_count":150,"cve_count":117,"kev_count":244,"last_cve_update":987},110233,"windows_sysmon",{"id":1265,"product_name":1266,"version_count":244,"cve_count":117,"kev_count":244,"last_cve_update":1267},109807,"power_platform","2024-10-15",{"id":1269,"product_name":1270,"version_count":244,"cve_count":117,"kev_count":244,"last_cve_update":1271},109355,"azure_migrate","2024-05-14",{"id":1273,"product_name":1274,"version_count":41,"cve_count":117,"kev_count":244,"last_cve_update":651},109280,"azure_active_directory_connect",{"id":1276,"product_name":1277,"version_count":69,"cve_count":117,"kev_count":69,"last_cve_update":1233},109554,"forefront_threat_management_gateway",{"id":1279,"product_name":1280,"version_count":46,"cve_count":117,"kev_count":244,"last_cve_update":703},110188,"windows_media_encoder",{"id":1282,"product_name":1283,"version_count":52,"cve_count":117,"kev_count":244,"last_cve_update":1222},109654,"microsoft.aspnetcore.mvc.abstractions",{"id":1285,"product_name":1286,"version_count":52,"cve_count":117,"kev_count":244,"last_cve_update":1222},109655,"microsoft.aspnetcore.mvc.apiexplorer",{"id":1288,"product_name":1289,"version_count":52,"cve_count":117,"kev_count":244,"last_cve_update":1222},109657,"microsoft.aspnetcore.mvc.cors",{"id":1291,"product_name":1292,"version_count":52,"cve_count":117,"kev_count":244,"last_cve_update":1222},109658,"microsoft.aspnetcore.mvc.dataannotations",{"id":1294,"product_name":1295,"version_count":52,"cve_count":117,"kev_count":244,"last_cve_update":1222},109659,"microsoft.aspnetcore.mvc.formatters.json",{"id":1297,"product_name":1298,"version_count":52,"cve_count":117,"kev_count":244,"last_cve_update":1222},109660,"microsoft.aspnetcore.mvc.formatters.xml",{"id":1300,"product_name":1301,"version_count":52,"cve_count":117,"kev_count":244,"last_cve_update":1222},109661,"microsoft.aspnetcore.mvc.localization",{"id":1303,"product_name":1304,"version_count":52,"cve_count":117,"kev_count":244,"last_cve_update":1222},109662,"microsoft.aspnetcore.mvc.razor",{"id":1306,"product_name":1307,"version_count":52,"cve_count":117,"kev_count":244,"last_cve_update":1222},109663,"microsoft.aspnetcore.mvc.razor.host",{"id":1309,"product_name":1310,"version_count":52,"cve_count":117,"kev_count":244,"last_cve_update":1222},109664,"microsoft.aspnetcore.mvc.taghelpers",{"id":1312,"product_name":1313,"version_count":244,"cve_count":117,"kev_count":244,"last_cve_update":361},109286,"azure_ai_bot_service",{"id":1315,"product_name":1316,"version_count":52,"cve_count":117,"kev_count":244,"last_cve_update":1222},109665,"microsoft.aspnetcore.mvc.viewfeatures",{"id":1318,"product_name":1319,"version_count":52,"cve_count":117,"kev_count":244,"last_cve_update":1222},109666,"microsoft.aspnetcore.mvc.webapicompatshim",{"id":1321,"product_name":1322,"version_count":244,"cve_count":117,"kev_count":244,"last_cve_update":1323},109245,"active_directory","2022-04-27",{"id":1325,"product_name":1326,"version_count":46,"cve_count":117,"kev_count":244,"last_cve_update":538},109873,"server",{"id":1328,"product_name":1329,"version_count":46,"cve_count":117,"kev_count":244,"last_cve_update":1330},109878,"services","2002-10-11",{"id":1332,"product_name":1333,"version_count":244,"cve_count":117,"kev_count":244,"last_cve_update":1334},109882,"sharepoint_enterprise_server_2016","2018-10-10",{"id":1336,"product_name":1337,"version_count":117,"cve_count":117,"kev_count":244,"last_cve_update":278},109444,"configuration_manager_2503",{"id":1339,"product_name":1340,"version_count":244,"cve_count":117,"kev_count":244,"last_cve_update":684},109573,"groupme",{"id":1342,"product_name":1343,"version_count":117,"cve_count":117,"kev_count":244,"last_cve_update":1344},109336,"azure_identity_sdk","2024-06-11",{"id":1346,"product_name":1347,"version_count":244,"cve_count":117,"kev_count":244,"last_cve_update":1348},109447,"copilot_studio","2024-11-26",{"id":1350,"product_name":1351,"version_count":244,"cve_count":117,"kev_count":244,"last_cve_update":229},109454,"dataverse",{"id":1353,"product_name":1354,"version_count":244,"cve_count":117,"kev_count":244,"last_cve_update":1355},109586,"hotmail","2000-01-10",{"id":1357,"product_name":1358,"version_count":244,"cve_count":117,"kev_count":244,"last_cve_update":29},109310,"azure_compute_gallery",{"id":1360,"product_name":1361,"version_count":69,"cve_count":117,"kev_count":244,"last_cve_update":1176},110051,"virtual_server",{"id":1363,"product_name":1364,"version_count":46,"cve_count":117,"kev_count":244,"last_cve_update":1222},110030,"system.text.encodings.web",{"id":1366,"product_name":1367,"version_count":46,"cve_count":117,"kev_count":244,"last_cve_update":1222},110027,"system.net.websockets.client",{"id":1369,"product_name":1370,"version_count":46,"cve_count":117,"kev_count":244,"last_cve_update":1222},110026,"system.net.security",{"id":1372,"product_name":1373,"version_count":46,"cve_count":117,"kev_count":244,"last_cve_update":1222},110025,"system.net.http.winhttphandler",{"id":1375,"product_name":1376,"version_count":46,"cve_count":117,"kev_count":244,"last_cve_update":278},109443,"configuration_manager_2409",{"id":1378,"product_name":1379,"version_count":244,"cve_count":46,"kev_count":69,"last_cve_update":758},109262,"app_installer",{"id":1381,"product_name":1382,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":1383},109591,"hyperlink_object_library","2006-08-09",{"id":1385,"product_name":1386,"version_count":69,"cve_count":46,"kev_count":244,"last_cve_update":1387},109261,"antispyware","2005-11-18",{"id":1389,"product_name":1390,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":1391},109260,"antigen_for_smtp_gateway","2008-05-13",{"id":1393,"product_name":1394,"version_count":46,"cve_count":46,"kev_count":244,"last_cve_update":1395},110268,"xbox_360","2007-03-02",{"id":1397,"product_name":1398,"version_count":117,"cve_count":46,"kev_count":244,"last_cve_update":267},109709,"odbc",{"id":1400,"product_name":1401,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":796},109450,"c_software_development_kit",{"id":1403,"product_name":1404,"version_count":436,"cve_count":46,"kev_count":244,"last_cve_update":1405},109412,"binwalk","2023-01-26",{"id":1407,"product_name":1408,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":1007},109846,"purview",{"id":1410,"product_name":1411,"version_count":46,"cve_count":46,"kev_count":244,"last_cve_update":533},109626,"jupyter",{"id":1413,"product_name":1414,"version_count":180,"cve_count":46,"kev_count":244,"last_cve_update":1415},110244,"wireless_display_adapter_firmware","2021-12-15",{"id":1417,"product_name":1418,"version_count":1419,"cve_count":46,"kev_count":244,"last_cve_update":899},109849,"python_extension",248,{"id":1421,"product_name":1422,"version_count":69,"cve_count":46,"kev_count":244,"last_cve_update":1423},109527,"excel_2013_rt","2018-08-15",{"id":1425,"product_name":1426,"version_count":69,"cve_count":46,"kev_count":69,"last_cve_update":1253},109713,"office_2007_ime",{"id":1428,"product_name":1429,"version_count":69,"cve_count":46,"kev_count":244,"last_cve_update":804},109231,"20007_office_system",{"id":1431,"product_name":1432,"version_count":69,"cve_count":46,"kev_count":244,"last_cve_update":1433},109428,"clarity","2024-02-29",{"id":1435,"product_name":1436,"version_count":46,"cve_count":46,"kev_count":244,"last_cve_update":1437},110229,"windows_services_for_unix","2009-04-01",{"id":1439,"product_name":1440,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":1441},109780,"package_manager_configurations","2021-04-29",{"id":1443,"product_name":1444,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":1445},110246,"wmi_administrative_tools","2010-12-23",{"id":1447,"product_name":1448,"version_count":117,"cve_count":46,"kev_count":244,"last_cve_update":313},109359,"azure_network_watcher",{"id":1450,"product_name":1451,"version_count":180,"cve_count":46,"kev_count":244,"last_cve_update":932},109858,"remote_desktop_connection",{"id":1453,"product_name":1454,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":13},109405,"azure_web_apps",{"id":1456,"product_name":1457,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":762},109505,"ecadsv5-series_azure_vm_firmware",{"id":1459,"product_name":1460,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":1461},109235,"365_copilot","2025-06-11",{"id":1463,"product_name":1464,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":1465},109673,"mn-500_wireless_base_station","2004-12-06",{"id":1467,"product_name":1468,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":762},109506,"ecasv5-series_azure_vm",{"id":1470,"product_name":1471,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":762},109507,"ecasv5-series_azure_vm_firmware",{"id":1473,"product_name":1474,"version_count":69,"cve_count":46,"kev_count":244,"last_cve_update":383},109865,"research_javascript_cryptography_library",{"id":1476,"product_name":1477,"version_count":117,"cve_count":46,"kev_count":244,"last_cve_update":1478},109676,"money","2009-01-02",{"id":1480,"product_name":1481,"version_count":1482,"cve_count":46,"kev_count":244,"last_cve_update":574},109677,"mono",205,{"id":1484,"product_name":1485,"version_count":83,"cve_count":46,"kev_count":244,"last_cve_update":1486},110273,"yammer","2019-09-11",{"id":1488,"product_name":1489,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":1490},109618,"intune_management_extension","2021-10-13",{"id":1492,"product_name":1493,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":1494},110110,"webtv","2000-11-14",{"id":1496,"product_name":1497,"version_count":244,"cve_count":46,"kev_count":69,"last_cve_update":624},110109,"webp_image_extension",{"id":1499,"product_name":1500,"version_count":117,"cve_count":46,"kev_count":244,"last_cve_update":533},109872,"send_customer_voice_survey_from_dynamics_365",{"id":1502,"product_name":1503,"version_count":69,"cve_count":46,"kev_count":244,"last_cve_update":718},110253,"wordpad",{"id":1505,"product_name":1506,"version_count":244,"cve_count":46,"kev_count":69,"last_cve_update":1507},109617,"intune_endpoint_protection","2018-04-04",{"id":1509,"product_name":1510,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":1511},110163,"windows_defender_for_endpoint","2022-09-21",{"id":1513,"product_name":1514,"version_count":69,"cve_count":46,"kev_count":244,"last_cve_update":692},109616,"intune_company_portal",{"id":1516,"product_name":1517,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":1072},109877,"service_fabric",{"id":1519,"product_name":1520,"version_count":69,"cve_count":46,"kev_count":244,"last_cve_update":1521},110070,"visual_database_tools_database_designer","2007-08-08",{"id":1523,"product_name":1524,"version_count":46,"cve_count":46,"kev_count":244,"last_cve_update":1525},110184,"windows_malicious_software_removal_tool","2023-01-10",{"id":1527,"product_name":1528,"version_count":178,"cve_count":46,"kev_count":244,"last_cve_update":800},109567,"graph",{"id":1530,"product_name":1531,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":796},109881,"sharepoint_enterprise_server_2013",{"id":1533,"product_name":1534,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":781},110062,"visual_basic_for_applications",{"id":1536,"product_name":1537,"version_count":46,"cve_count":46,"kev_count":244,"last_cve_update":1538},109568,"greetings","2004-09-28",{"id":1540,"product_name":1541,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":1542},110101,"w3who.dll","2005-01-10",{"id":1544,"product_name":1545,"version_count":69,"cve_count":46,"kev_count":244,"last_cve_update":707},109761,"on-prem_data_gateway",{"id":1547,"product_name":1548,"version_count":46,"cve_count":46,"kev_count":244,"last_cve_update":1118},109407,"backoffice",{"id":1550,"product_name":1551,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":762},109508,"ecedsv5-series_azure_vm",{"id":1553,"product_name":1554,"version_count":69,"cve_count":46,"kev_count":244,"last_cve_update":1555},109888,"sharepoint_server_client_components_sdk","2014-05-14",{"id":1557,"product_name":1558,"version_count":46,"cve_count":46,"kev_count":244,"last_cve_update":1226},110090,"visual_studio_team_foundation_server",{"id":1560,"product_name":1561,"version_count":46,"cve_count":46,"kev_count":244,"last_cve_update":1562},109409,"baseline_security_analyzer","2004-02-10",{"id":1564,"product_name":1565,"version_count":222,"cve_count":46,"kev_count":244,"last_cve_update":899},109317,"azure_database_for_postgresql_flexible_server",{"id":1567,"product_name":1568,"version_count":482,"cve_count":46,"kev_count":244,"last_cve_update":758},109340,"azure_iot_hub_device_client_sdk",{"id":1570,"product_name":1571,"version_count":191,"cve_count":46,"kev_count":244,"last_cve_update":503},110088,"visual_studio_live_share",{"id":1573,"product_name":1574,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":762},109510,"ecesv5-series_azure_vm",{"id":1576,"product_name":1577,"version_count":69,"cve_count":46,"kev_count":244,"last_cve_update":1578},110272,"xml_parser","2006-10-10",{"id":1580,"product_name":1581,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":762},109689,"nccadsh100v5-series_azure_vm",{"id":1583,"product_name":1584,"version_count":69,"cve_count":46,"kev_count":244,"last_cve_update":432},109382,"azure_service_connector",{"id":1586,"product_name":1587,"version_count":69,"cve_count":46,"kev_count":244,"last_cve_update":889},110258,"word_web_apps",{"id":1589,"product_name":1590,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":762},109463,"dcesv6-series_azure_vm",{"id":1592,"product_name":1593,"version_count":69,"cve_count":46,"kev_count":244,"last_cve_update":1594},109575,"heif_image_extension","2022-03-09",{"id":1596,"product_name":1597,"version_count":1598,"cve_count":46,"kev_count":244,"last_cve_update":808},110083,"visual_studio_code_eslint_extension",60,{"id":1600,"product_name":1601,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":674},110039,"tsac_activex_control",{"id":1603,"product_name":1604,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":762},109513,"ecesv6-series_azure_vm_firmware",{"id":1606,"product_name":1607,"version_count":117,"cve_count":46,"kev_count":244,"last_cve_update":267},109753,"ole_db",{"id":1609,"product_name":1610,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":332},109393,"azure_stack_edge",{"id":1612,"product_name":1613,"version_count":1614,"cve_count":46,"kev_count":244,"last_cve_update":432},109308,"azure_cli",174,{"id":1616,"product_name":1617,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":607},109249,"active_directory_lightweight_directory_service",{"id":1619,"product_name":1620,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":1621},109483,"distributed_transaction_coordinator","2006-05-10",{"id":1623,"product_name":1624,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":1391},109259,"antigen_for_exchange",{"id":1626,"product_name":1627,"version_count":69,"cve_count":46,"kev_count":244,"last_cve_update":1330},109699,".net_windows_server",{"id":1629,"product_name":1630,"version_count":69,"cve_count":46,"kev_count":244,"last_cve_update":1631},109752,"office_xp","2009-07-15",{"id":1633,"product_name":1634,"version_count":117,"cve_count":46,"kev_count":244,"last_cve_update":442},109267,"aspnetcore",{"id":1636,"product_name":1637,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":1638},109278,"azure","2025-06-04",{"id":1640,"product_name":1641,"version_count":1642,"cve_count":46,"kev_count":244,"last_cve_update":1643},109402,"azure_uamqp",48,"2024-02-27",{"id":1645,"product_name":1646,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":1647},109545,"file_transfer_manager","2002-09-24",{"id":1649,"product_name":1650,"version_count":69,"cve_count":46,"kev_count":244,"last_cve_update":796},109637,"lync_for_mac",{"id":1652,"product_name":1653,"version_count":69,"cve_count":46,"kev_count":244,"last_cve_update":1654},110180,"windows_live_mail","2010-05-12",{"id":1656,"product_name":1657,"version_count":436,"cve_count":46,"kev_count":244,"last_cve_update":1344},109273,"authentication_library",{"id":1659,"product_name":1660,"version_count":117,"cve_count":46,"kev_count":244,"last_cve_update":1661},109499,"dynamics_ax","2014-01-15",{"id":1663,"product_name":1664,"version_count":69,"cve_count":46,"kev_count":244,"last_cve_update":383},109498,"dynamics_365_server",{"id":1666,"product_name":1667,"version_count":52,"cve_count":46,"kev_count":244,"last_cve_update":1668},109797,"pocket_ie","2009-06-15",{"id":1670,"product_name":1671,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":1330},110149,"windows_98_plus_pack",{"id":1673,"product_name":1674,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":495},109279,"azure_active_directory",{"id":1676,"product_name":1677,"version_count":178,"cve_count":46,"kev_count":244,"last_cve_update":1678},110274,"yet_another_reverse_proxy","2023-06-23",{"id":1680,"product_name":1681,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":1682},109642,"malicious_software_removal_tool","2015-07-20",{"id":1684,"product_name":1685,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":1686},109815,"powerpoint_web_app","2011-04-13",{"id":1688,"product_name":1689,"version_count":46,"cve_count":46,"kev_count":244,"last_cve_update":1690},109518,"endpoint_configuration_manager","2022-09-20",{"id":1692,"product_name":1693,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":1694},109354,"azure_marketplace","2025-01-09",{"id":1696,"product_name":1697,"version_count":69,"cve_count":46,"kev_count":244,"last_cve_update":711},109496,"dynamics_365_for_finance_and_operations",{"id":1699,"product_name":1700,"version_count":83,"cve_count":46,"kev_count":244,"last_cve_update":1701},109644,"malware_protection_platform","2023-12-12",{"id":1703,"product_name":1704,"version_count":408,"cve_count":46,"kev_count":244,"last_cve_update":1415},109418,"bot_framework_software_development_kit",{"id":1706,"product_name":1707,"version_count":69,"cve_count":46,"kev_count":244,"last_cve_update":565},110247,"wmsde",{"id":1709,"product_name":1710,"version_count":69,"cve_count":46,"kev_count":244,"last_cve_update":1711},109500,"dynamics_crm_2015","2020-11-11",{"id":1713,"product_name":1714,"version_count":117,"cve_count":46,"kev_count":244,"last_cve_update":1715},110195,"windows_messenger","2008-08-13",{"id":1717,"product_name":1718,"version_count":69,"cve_count":46,"kev_count":244,"last_cve_update":1719},109824,"producer","2010-03-10",{"id":1721,"product_name":1722,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":1391},109552,"forefront_security_for_exchange_server",{"id":1724,"product_name":1725,"version_count":244,"cve_count":46,"kev_count":69,"last_cve_update":758},109826,"project_2016",{"id":1727,"product_name":1728,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":1391},109553,"forefront_security_for_sharepoint",{"id":1730,"product_name":1731,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":1007},109323,"azure_devops",{"id":1733,"product_name":1734,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":1334},109449,"csharp_software_development_kit",{"id":1736,"product_name":1737,"version_count":69,"cve_count":46,"kev_count":244,"last_cve_update":1391},109475,"diagnostics_and_recovery_toolkit",{"id":1739,"product_name":1740,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":565},110265,"wyukon",{"id":1742,"product_name":1743,"version_count":69,"cve_count":46,"kev_count":244,"last_cve_update":565},109919,"sql_server_express_edition",{"id":1745,"product_name":1746,"version_count":69,"cve_count":46,"kev_count":244,"last_cve_update":1415},110243,"wireless_display_adapter",{"id":1748,"product_name":1749,"version_count":69,"cve_count":46,"kev_count":244,"last_cve_update":628},109834,"psexec",{"id":1751,"product_name":1752,"version_count":39,"cve_count":46,"kev_count":244,"last_cve_update":42},109373,"azure_rtos_guix_studio",{"id":1754,"product_name":1755,"version_count":244,"cve_count":46,"kev_count":244,"last_cve_update":1271},109494,"dynamics_365_customer_insights",{"id":1757,"product_name":1758,"version_count":69,"cve_count":46,"kev_count":244,"last_cve_update":252},109738,"officeplus",{"id":1760,"product_name":1761,"version_count":537,"cve_count":69,"kev_count":244,"last_cve_update":487},109344,"azure_kinect_software_development_kit",{"id":1763,"product_name":1764,"version_count":257,"cve_count":69,"kev_count":244,"last_cve_update":1765},109343,"azure_key_vault_provider_for_secrets_store_csi_driver","2021-01-21",{"id":1767,"product_name":1768,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":1769},109342,"azure_ipam","2024-01-10",{"id":1771,"product_name":1772,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":796},109887,"sharepoint_server_2010",{"id":1774,"product_name":1775,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":387},109891,"sharepoint_workspace",{"id":1777,"product_name":1778,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1779},109338,"azure_iot_edge_for_linux","2022-11-09",{"id":1781,"product_name":1782,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1334},109337,"azure_internet_of_things_edge",{"id":1784,"product_name":1785,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1594},109896,"skype_extension",{"id":1787,"product_name":1788,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":611},109335,"azure_identity_library_for_.net",{"id":1790,"product_name":1791,"version_count":46,"cve_count":69,"kev_count":244,"last_cve_update":1792},109900,"small_business_server","2008-01-08",{"id":1794,"product_name":1795,"version_count":111,"cve_count":69,"kev_count":244,"last_cve_update":1796},109902,"sna_server","1999-12-31",{"id":1798,"product_name":1799,"version_count":46,"cve_count":69,"kev_count":244,"last_cve_update":1800},109903,"snipping_tool","2023-06-13",{"id":1802,"product_name":1803,"version_count":46,"cve_count":69,"kev_count":244,"last_cve_update":1800},109904,"snip_\\&_sketch",{"id":1805,"product_name":1806,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":758},109334,"azure_health_bot",{"id":1808,"product_name":1809,"version_count":244,"cve_count":69,"kev_count":69,"last_cve_update":1810},109907,"sql_server_2000","2012-04-10",{"id":1812,"product_name":1813,"version_count":244,"cve_count":69,"kev_count":69,"last_cve_update":1810},109908,"sql_server_2005",{"id":1815,"product_name":1816,"version_count":69,"cve_count":69,"kev_count":69,"last_cve_update":1810},109909,"sql_server_2008",{"id":1818,"product_name":1819,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1820},109331,"azure_guest_configuration","2022-09-13",{"id":1822,"product_name":1823,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1824},109912,"sql_server_2017_reporting_services","2019-12-10",{"id":1826,"product_name":1827,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":332},109914,"sql_server_2019_integration_services",{"id":1829,"product_name":1830,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1824},109915,"sql_server_2019_reporting_services",{"id":1832,"product_name":1833,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1834},109328,"azure_event_grid","2025-10-23",{"id":1836,"product_name":1837,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":332},109917,"sql_server_2022_integration_services",{"id":1839,"product_name":1840,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":1233},109921,"sql_server_management_studio_express",{"id":1842,"product_name":1843,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1844},109924,"step-by-step_interactive_training","2007-02-13",{"id":1846,"product_name":1847,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":515},109925,"storsimple_8010",{"id":1849,"product_name":1850,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":515},109926,"storsimple_8010_firmware",{"id":1852,"product_name":1853,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":515},109927,"storsimple_8020",{"id":1855,"product_name":1856,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":515},109928,"storsimple_8020_firmware",{"id":1858,"product_name":1859,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1437},109929,"subsystem_for_unix-based_applications",{"id":1861,"product_name":1862,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1863},109930,"surface","2018-05-22",{"id":1865,"product_name":1866,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":1863},109931,"surface_book",{"id":1868,"product_name":1869,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1870},109946,"surface_hub","2020-02-11",{"id":1872,"product_name":1873,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":247},109760,"onenote_for_mac",{"id":1875,"product_name":1876,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":42},109437,"common_data_model_sdk",{"id":1878,"product_name":1879,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":762},109455,"dcadsv5-series_azure_vm",{"id":1881,"product_name":1882,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":762},109456,"dcadsv5-series_azure_vm_firmware",{"id":1884,"product_name":1885,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":762},109457,"dcasv5-series_azure_vm",{"id":1887,"product_name":1888,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":762},109458,"dcasv5-series_azure_vm_firmware",{"id":1890,"product_name":1891,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":762},109459,"dcedsv5-series_azure_vm",{"id":1893,"product_name":1894,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":762},109460,"dcedsv5-series_azure_vm_firmware",{"id":1896,"product_name":1897,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":762},109461,"dcesv5-series_azure_vm",{"id":1899,"product_name":1900,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":762},109462,"dcesv5-series_azure_vm_firmware",{"id":1902,"product_name":1903,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":762},109464,"dcesv6-series_azure_vm_firmware",{"id":1905,"product_name":1906,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1907},109465,"debug_diagnostic_tool","2008-10-31",{"id":1909,"product_name":1910,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1911},109466,"debug_interface_access_software_development_kit","2014-05-20",{"id":1913,"product_name":1914,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":432},109467,"deepspeed",{"id":1916,"product_name":1917,"version_count":69,"cve_count":69,"kev_count":69,"last_cve_update":1810},109435,"commerce_server_2009",{"id":1919,"product_name":1920,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":1594},109469,"defender_for_endpoint_edr_sensor",{"id":1922,"product_name":1923,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":229},109470,"defender_for_identity",{"id":1925,"product_name":1926,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":332},109472,"defender_security_intelligence_updates",{"id":1928,"product_name":1929,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1930},109474,"dhcp_client_service","2006-07-11",{"id":1932,"product_name":1933,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":1934},109476,"digital_image","2008-10-08",{"id":1936,"product_name":1937,"version_count":46,"cve_count":69,"kev_count":244,"last_cve_update":1538},109477,"digital_image_pro",{"id":1939,"product_name":1940,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1647},109480,"directx_files_viewer_control",{"id":1942,"product_name":1943,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":1944},109481,"directx_media","2007-08-14",{"id":1946,"product_name":1947,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":1948},109482,"directx_sdk","2007-07-18",{"id":1950,"product_name":1951,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":692},109484,"django_backend",{"id":1953,"product_name":1954,"version_count":117,"cve_count":69,"kev_count":244,"last_cve_update":1955},109431,"codeql","2019-11-25",{"id":1957,"product_name":1958,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":1959},109430,"clip_art","2000-03-06",{"id":1961,"product_name":1962,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1218},109495,"dynamics_365_customer_service",{"id":1964,"product_name":1965,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1966},109501,"dynamics_crm_service_portal_web_resource","2024-08-06",{"id":1968,"product_name":1969,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":1970},109429,"class_package_export_tool","2006-10-18",{"id":1972,"product_name":1973,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":762},109504,"ecadsv5-series_azure_vm",{"id":1975,"product_name":1976,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":762},109509,"ecedsv5-series_azure_vm_firmware",{"id":1978,"product_name":1979,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":762},109511,"ecesv5-series_azure_vm_firmware",{"id":1981,"product_name":1982,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":762},109512,"ecesv6-series_azure_vm",{"id":1984,"product_name":1985,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":730},109427,"chart_control_for_microsoft_.net_framework",{"id":1987,"product_name":1988,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":599},109426,"chakra_javascript",{"id":1990,"product_name":1991,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1147},109516,"edge_ios",{"id":1993,"product_name":1994,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":1995},109520,"enhanced_mitigation_experience_toolkit","2013-11-29",{"id":1997,"product_name":1998,"version_count":117,"cve_count":69,"kev_count":244,"last_cve_update":1999},109521,"enterprise_library","2009-09-21",{"id":2001,"product_name":2002,"version_count":117,"cve_count":69,"kev_count":244,"last_cve_update":2003},109522,"entourage","2002-04-22",{"id":2005,"product_name":2006,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":495},109524,"entra_jira_sso_plugin",{"id":2008,"product_name":2009,"version_count":615,"cve_count":69,"kev_count":69,"last_cve_update":42},109424,"cbl-mariner",{"id":2011,"product_name":2012,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2013},109423,"capicom","2007-05-08",{"id":2015,"product_name":2016,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1054},109529,"excel_mobile",{"id":2018,"product_name":2019,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2020},109422,"cabarc","2004-12-31",{"id":2022,"product_name":2023,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2024},109535,"exchange","2011-05-24",{"id":2026,"product_name":2027,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2028},109421,"business_solutions_crm","2004-08-06",{"id":2030,"product_name":2031,"version_count":117,"cve_count":69,"kev_count":244,"last_cve_update":655},109540,"expression_blend",{"id":2033,"product_name":2034,"version_count":117,"cve_count":69,"kev_count":244,"last_cve_update":2035},109541,"expression_design","2012-03-13",{"id":2037,"product_name":2038,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2039},109542,"expression_media","2007-10-16",{"id":2041,"product_name":2042,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2043},109544,"fast_esp","2011-09-12",{"id":2045,"product_name":2046,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2047},109547,"flight_simulator_x","2010-04-20",{"id":2049,"product_name":2050,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2051},110270,"xbox_one","2020-06-08",{"id":2053,"product_name":2054,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":478},109417,"bond",{"id":2056,"product_name":2057,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":387},109556,"forms_server",{"id":2059,"product_name":2060,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":674},109557,"foundation_class_library",{"id":2062,"product_name":2063,"version_count":52,"cve_count":69,"kev_count":244,"last_cve_update":561},109561,"fslogix",{"id":2065,"product_name":2066,"version_count":46,"cve_count":69,"kev_count":244,"last_cve_update":2067},109562,"ftp_service","2012-11-14",{"id":2069,"product_name":2070,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1437},109563,"gdi\\+",{"id":2072,"product_name":2073,"version_count":39,"cve_count":69,"kev_count":244,"last_cve_update":2074},109564,"git_credential_manager_core","2020-12-08",{"id":2076,"product_name":2077,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":387},109570,"groove_data_bridge_server",{"id":2079,"product_name":2080,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":387},109571,"groove_management_server",{"id":2082,"product_name":2083,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2084},109232,"27mhz_wireless_keyboard","2010-03-29",{"id":2086,"product_name":2087,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2088},109574,"grpconv","2004-11-03",{"id":2090,"product_name":2091,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2092},109576,"help_file_viewer","2006-08-14",{"id":2094,"product_name":2095,"version_count":117,"cve_count":69,"kev_count":244,"last_cve_update":1415},109414,"biztalk_esb_toolkit",{"id":2097,"product_name":2098,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2099},109578,"high_definition_audio_bus_driver","2024-09-12",{"id":2101,"product_name":2102,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":1959},109580,"home_publishing",{"id":2104,"product_name":2105,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1792},109581,"home_server",{"id":2107,"product_name":2108,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2109},109583,"host_integration_server_2000","2008-10-15",{"id":2111,"product_name":2112,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2109},109584,"host_integration_server_2004",{"id":2114,"product_name":2115,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2109},109585,"host_integration_server_2006",{"id":2117,"product_name":2118,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":313},109587,"hpc_pack_2016",{"id":2120,"product_name":2121,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":313},109588,"hpc_pack_2019",{"id":2123,"product_name":2124,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2125},109589,"html_help","2006-02-06",{"id":2127,"product_name":2128,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":624},109593,"identity_linux_broker",{"id":2130,"product_name":2131,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2132},109594,"identity_manager","2018-02-26",{"id":2134,"product_name":2135,"version_count":370,"cve_count":69,"kev_count":244,"last_cve_update":323},109595,"identity_model",{"id":2137,"product_name":2138,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":832},109596,"identitymodel",{"id":2140,"product_name":2141,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1769},109597,"identitymodel_extensions",{"id":2143,"product_name":2144,"version_count":180,"cve_count":69,"kev_count":244,"last_cve_update":2145},109599,"ie_for_macintosh","2005-09-27",{"id":2147,"product_name":2148,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2149},109603,"image_color_management","2005-07-12",{"id":2151,"product_name":2152,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1271},109411,"bing_search",{"id":2154,"product_name":2155,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1621},109607,"infotech_storage_system_library",{"id":2157,"product_name":2158,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2159},109608,"intelligent_application_gateway_2007","2009-04-16",{"id":2161,"product_name":2162,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2163},109611,"internet_authentication_service_helper_com_component","2008-09-29",{"id":2165,"product_name":2166,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2167},109408,"backoffice_resource_kit","1999-02-22",{"id":2169,"product_name":2170,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1271},109619,"intune_mobile_application_management",{"id":2172,"product_name":2173,"version_count":2174,"cve_count":69,"kev_count":244,"last_cve_update":29},109623,"jdbc_driver_for_sql_server",98,{"id":2176,"product_name":2177,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1218},109404,"azure_virtual_desktop",{"id":2179,"product_name":2180,"version_count":482,"cve_count":69,"kev_count":244,"last_cve_update":2181},109627,"kubernetes_tools","2021-06-08",{"id":2183,"product_name":2184,"version_count":117,"cve_count":69,"kev_count":244,"last_cve_update":1844},109628,"learning_essentials",{"id":2186,"product_name":2187,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":899},109629,"lightgbm",{"id":2189,"product_name":2190,"version_count":33,"cve_count":69,"kev_count":244,"last_cve_update":2191},109403,"azure-umqtt-c","2019-03-12",{"id":2193,"product_name":2194,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2195},109631,"live_meeting_console","2015-09-09",{"id":2197,"product_name":2198,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2199},109632,"live_messenger","2005-07-19",{"id":2201,"product_name":2202,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2203},109634,"log_sink_class_activex_control","2005-07-05",{"id":2205,"product_name":2206,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1172},109401,"azure_storage_resource_provider",{"id":2208,"product_name":2209,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1253},109638,"lync_room_system",{"id":2211,"product_name":2212,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":670},109400,"azure_storage_queue",{"id":2214,"product_name":2215,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":832},109640,"mail_and_calendar",{"id":2217,"product_name":2218,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":323},109399,"azure_storage_mover",{"id":2220,"product_name":2221,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":766},109645,"management_odata_iis_extension",{"id":2223,"product_name":2224,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":846},109646,"media_foundation_sdk",{"id":2226,"product_name":2227,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2228},109648,"message_compiler","2007-01-05",{"id":2230,"product_name":2231,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2232},109649,"message_queuing","2007-12-12",{"id":2234,"product_name":2235,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2236},109650,"messenger_plus\\!_live","2009-07-20",{"id":2238,"product_name":2239,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":1118},109651,"metadirectory_services",{"id":2241,"product_name":2242,"version_count":46,"cve_count":69,"kev_count":244,"last_cve_update":2243},109652,"microsoft_advertising_universal_event_tracking","2022-08-01",{"id":2245,"product_name":2246,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":1118},109667,"microsoft_data_access_components",{"id":2248,"product_name":2249,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":796},109668,"microsoft.data.odata",{"id":2251,"product_name":2252,"version_count":213,"cve_count":69,"kev_count":244,"last_cve_update":323},109669,"microsoft.data.sqlclient",{"id":2254,"product_name":2255,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2256},109670,"microsoft_forefront_protection_2010","2014-02-12",{"id":2258,"product_name":2259,"version_count":117,"cve_count":69,"kev_count":244,"last_cve_update":2260},109671,"microsoft.powershell.archive","2018-11-14",{"id":2262,"product_name":2263,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2264},109672,"microsoft_tech_companion","2014-09-09",{"id":2266,"product_name":2267,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2268},109674,"modernflow","2021-02-19",{"id":2270,"product_name":2271,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2272},109675,"modern_mail","2013-03-29",{"id":2274,"product_name":2275,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1108},109678,"mpeg-2_video_extension",{"id":2277,"product_name":2278,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1172},109679,"msagsfeedback.azurewebsites.net",{"id":2280,"product_name":2281,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2282},109682,"msn_chat_control","2002-05-29",{"id":2284,"product_name":2285,"version_count":33,"cve_count":69,"kev_count":244,"last_cve_update":478},109398,"azure_storage_explorer",{"id":2287,"product_name":2288,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2149},109684,"msn_messenger_service",{"id":2290,"product_name":2291,"version_count":46,"cve_count":69,"kev_count":244,"last_cve_update":2282},109685,"msn_messenger_service_for_exchange",{"id":2293,"product_name":2294,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2295},109686,"msn_setup_bulletin_board_services","1999-09-24",{"id":2297,"product_name":2298,"version_count":173,"cve_count":69,"kev_count":244,"last_cve_update":603},109687,"ms-rest-nodeauth",{"id":2300,"product_name":2301,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2302},109688,"muzic","2024-12-12",{"id":2304,"product_name":2305,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":762},109690,"nccadsh100v5-series_azure_vm_firmware",{"id":2307,"product_name":2308,"version_count":346,"cve_count":69,"kev_count":244,"last_cve_update":1344},109397,"azure_storage_data_movement_library",{"id":2310,"product_name":2311,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":670},109396,"azure_storage_blobs",{"id":2313,"product_name":2314,"version_count":117,"cve_count":69,"kev_count":244,"last_cve_update":2315},109693,".net_core_sdk","2019-04-09",{"id":2317,"product_name":2318,"version_count":46,"cve_count":69,"kev_count":244,"last_cve_update":1126},109694,".net_education_bundle_sdk_install_tool",{"id":2320,"product_name":2321,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":655},109696,".net_framework_developer_pack",{"id":2323,"product_name":2324,"version_count":46,"cve_count":69,"kev_count":244,"last_cve_update":1126},109697,".net_install_tool_for_extension_authors",{"id":2326,"product_name":2327,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1030},109392,"azure_stack",{"id":2329,"product_name":2330,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":674},109700,"network_firmware",{"id":2332,"product_name":2333,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2334},109701,"network_monitor","2000-12-19",{"id":2336,"product_name":2337,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":789},109702,"network_watcher_agent",{"id":2339,"product_name":2340,"version_count":312,"cve_count":69,"kev_count":244,"last_cve_update":2341},109703,"neural_network_intelligence","2021-05-11",{"id":2343,"product_name":2344,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2345},109704,"nokia_asha_501","2014-09-22",{"id":2347,"product_name":2348,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2345},109705,"nokia_asha_501_software",{"id":2350,"product_name":2351,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":13},109391,"azure_sre_agent",{"id":2353,"product_name":2354,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":789},109715,"office_2013_click-to-run",{"id":2356,"product_name":2357,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":808},109389,"azure_spring_cloud",{"id":2359,"product_name":2360,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2361},109719,"office_communications_server","2008-11-20",{"id":2363,"product_name":2364,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":692},109387,"azure_software_development_kit",{"id":2366,"product_name":2367,"version_count":180,"cve_count":69,"kev_count":244,"last_cve_update":2368},109384,"azure_setup_kubectl","2023-03-06",{"id":2370,"product_name":2371,"version_count":52,"cve_count":69,"kev_count":244,"last_cve_update":2372},109381,"azure_service_broker","2019-08-05",{"id":2374,"product_name":2375,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2376},109726,"office_filter_pack","2013-03-13",{"id":2378,"product_name":2379,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":1944},109730,"office_groove_server",{"id":2381,"product_name":2382,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1054},109378,"azure_sdk_for_.net",{"id":2384,"product_name":2385,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2386},109733,"office_msodatasourcecontrol_activex","2007-06-19",{"id":2388,"product_name":2389,"version_count":46,"cve_count":69,"kev_count":244,"last_cve_update":2390},109734,"office_multilingual_user_interface_pack","2006-12-31",{"id":2392,"product_name":2393,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":538},109735,"office_onenote",{"id":2395,"product_name":2396,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2397},109377,"azure_sdk_for_java","2020-12-10",{"id":2399,"product_name":2400,"version_count":257,"cve_count":69,"kev_count":244,"last_cve_update":800},109375,"azure_rtos_threadx",{"id":2402,"product_name":2403,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":718},109741,"office_project",{"id":2405,"product_name":2406,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2390},109742,"office_proofing_tools",{"id":2408,"product_name":2409,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":1631},109743,"office_publisher",{"id":2411,"product_name":2412,"version_count":537,"cve_count":69,"kev_count":244,"last_cve_update":2413},109372,"azure_rtos_filex","2022-11-08",{"id":2415,"product_name":2416,"version_count":117,"cve_count":69,"kev_count":244,"last_cve_update":2417},109745,"office_snapshot_viewer_activex","2008-07-07",{"id":2419,"product_name":2420,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":561},109371,"azure_rtos",{"id":2422,"product_name":2423,"version_count":39,"cve_count":69,"kev_count":244,"last_cve_update":611},109366,"azure_private_5g_core",{"id":2425,"product_name":2426,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2427},109365,"azure_portal","2025-08-07",{"id":2429,"product_name":2430,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1154},109364,"azure_playfab",{"id":2432,"product_name":2433,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":533},109755,"ole_db_provider",{"id":2435,"product_name":2436,"version_count":2437,"cve_count":69,"kev_count":244,"last_cve_update":533},109363,"azure_pipelines_agent",258,{"id":2439,"product_name":2440,"version_count":417,"cve_count":69,"kev_count":244,"last_cve_update":2441},109758,"onefuzz","2021-08-13",{"id":2443,"product_name":2444,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2397},109448,"c_sdk_for_azure_iot",{"id":2446,"product_name":2447,"version_count":52,"cve_count":69,"kev_count":244,"last_cve_update":1054},109762,"on-premises_data_gateway",{"id":2449,"product_name":2450,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2427},109361,"azure_openai",{"id":2452,"product_name":2453,"version_count":119,"cve_count":69,"kev_count":244,"last_cve_update":692},109767,"operations_management_suite_agent_for_linux",{"id":2455,"product_name":2456,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":538},109769,"organization_chart",{"id":2458,"product_name":2459,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":854},109772,"outlook_2016",{"id":2461,"product_name":2462,"version_count":52,"cve_count":69,"kev_count":244,"last_cve_update":2463},109773,"outlook.com","2014-08-14",{"id":2465,"product_name":2466,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2467},109774,"outlook_connector","2005-05-02",{"id":2469,"product_name":2470,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2471},109776,"outlook_express_book_control","2005-12-31",{"id":2473,"product_name":2474,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":574},109782,"pandocupload",{"id":2476,"product_name":2477,"version_count":244,"cve_count":69,"kev_count":69,"last_cve_update":1348},109783,"partner_center",{"id":2479,"product_name":2480,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2481},109785,"peachtree_accounting","2008-10-22",{"id":2483,"product_name":2484,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2485},109788,"photodraw_2000","2000-05-11",{"id":2487,"product_name":2488,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":1072},109789,"photos",{"id":2490,"product_name":2491,"version_count":117,"cve_count":69,"kev_count":244,"last_cve_update":1538},109790,"picture_it",{"id":2493,"product_name":2494,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2495},109792,"pinyin_new_experience_style","2011-12-14",{"id":2497,"product_name":2498,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2495},109793,"pinyin_simple_fast_style",{"id":2500,"product_name":2501,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2502},109796,"plus","2001-05-03",{"id":2504,"product_name":2505,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":474},109800,"power_automate",{"id":2507,"product_name":2508,"version_count":163,"cve_count":69,"kev_count":244,"last_cve_update":707},109801,"power_automate_for_desktop",{"id":2510,"product_name":2511,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":854},109803,"powerbi-client_js_sdk",{"id":2513,"product_name":2514,"version_count":2515,"cve_count":69,"kev_count":244,"last_cve_update":1271},109804,"powerbi-javascript",63,{"id":2517,"product_name":2518,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":361},109358,"azure_networking",{"id":2520,"product_name":2521,"version_count":244,"cve_count":69,"kev_count":69,"last_cve_update":1191},109806,"power_pages",{"id":2523,"product_name":2524,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2525},109808,"power_platform_terraform_provider","2024-09-25",{"id":2527,"product_name":2528,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1054},109811,"powerpoint_mobile",{"id":2530,"product_name":2531,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2532},109813,"powerpoint_rt","2016-07-13",{"id":2534,"product_name":2535,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1154},109356,"azure_monitor",{"id":2537,"product_name":2538,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":655},109818,"powershell_editor_services",{"id":2540,"product_name":2541,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":655},109819,"powershell_extension",{"id":2543,"product_name":2544,"version_count":173,"cve_count":69,"kev_count":244,"last_cve_update":789},109820,"powershellget",{"id":2546,"product_name":2547,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":332},109822,"print_3d",{"id":2549,"product_name":2550,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":323},109823,"printer_metadata_troubleshooter_tool",{"id":2552,"product_name":2553,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1154},109353,"azure_managed_redis",{"id":2555,"product_name":2556,"version_count":46,"cve_count":69,"kev_count":244,"last_cve_update":2390},109827,"project_multilingual_user_interface_pack",{"id":2558,"product_name":2559,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":718},109828,"project_portfolio_server",{"id":2561,"product_name":2562,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2417},109829,"project_professional",{"id":2564,"product_name":2565,"version_count":650,"cve_count":69,"kev_count":244,"last_cve_update":1486},109830,"project_rome",{"id":2567,"product_name":2568,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2569},109352,"azure_managed_instance_for_apache_cassandra","2024-08-20",{"id":2571,"product_name":2572,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2417},109832,"project_standard",{"id":2574,"product_name":2575,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2020},109835,"psgetsid",{"id":2577,"product_name":2578,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2020},109836,"psinfo",{"id":2580,"product_name":2581,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2020},109837,"pskill",{"id":2583,"product_name":2584,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2020},109838,"pslist",{"id":2586,"product_name":2587,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2020},109839,"psloglist",{"id":2589,"product_name":2590,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2020},109840,"pspasswd",{"id":2592,"product_name":2593,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2020},109841,"psservice",{"id":2595,"product_name":2596,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2020},109842,"psshutdown",{"id":2598,"product_name":2599,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2020},109843,"pssuspend",{"id":2601,"product_name":2602,"version_count":436,"cve_count":69,"kev_count":244,"last_cve_update":1701},109351,"azure_machine_learning_software_development_kit",{"id":2604,"product_name":2605,"version_count":111,"cve_count":69,"kev_count":244,"last_cve_update":2606},109850,"qlib","2021-02-15",{"id":2608,"product_name":2609,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":808},109851,"quantum_development_kit",{"id":2611,"product_name":2612,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2613},109853,"register_server","2007-07-10",{"id":2615,"product_name":2616,"version_count":180,"cve_count":69,"kev_count":244,"last_cve_update":2341},109854,"remote",{"id":2618,"product_name":2619,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1701},109349,"azure_logic_apps",{"id":2621,"product_name":2622,"version_count":2623,"cve_count":69,"kev_count":244,"last_cve_update":29},109857,"remote_desktop_client",104,{"id":2625,"product_name":2626,"version_count":180,"cve_count":69,"kev_count":244,"last_cve_update":2627},109859,"remote_desktop_connection_client","2011-03-09",{"id":2629,"product_name":2630,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2631},109860,"remote_desktop_connection_manager","2020-03-12",{"id":2633,"product_name":2634,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":808},109862,"remote_development",{"id":2636,"product_name":2637,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":899},109863,"remote_ssh",{"id":2639,"product_name":2640,"version_count":213,"cve_count":69,"kev_count":244,"last_cve_update":2372},109348,"azure_log_analytics_nozzle",{"id":2642,"product_name":2643,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2644},109866,"rich_textbox_control","2008-01-11",{"id":2646,"product_name":2647,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":383},109867,"rms_sharing",{"id":2649,"product_name":2650,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":804},109868,"search_server",{"id":2652,"product_name":2653,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1930},109875,"server_service",{"id":2655,"product_name":2656,"version_count":46,"cve_count":69,"kev_count":244,"last_cve_update":2657},109876,"service_bus","2014-07-08",{"id":2659,"product_name":2660,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":611},109346,"azure_kubernetes_service_confidential_containers",{"id":2662,"product_name":2663,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1870},109955,"surface_hub_firmware",{"id":2665,"product_name":2666,"version_count":117,"cve_count":69,"kev_count":244,"last_cve_update":1863},109974,"surface_pro",{"id":2668,"product_name":2669,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2670},109979,"surface_pro_3","2021-10-20",{"id":2672,"product_name":2673,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2670},109980,"surface_pro_3_firmware",{"id":2675,"product_name":2676,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":1863},110003,"surface_pro_with_lte_advanced",{"id":2678,"product_name":2679,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1863},110006,"surface_studio",{"id":2681,"product_name":2682,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":60},110007,"sysinternals",{"id":2684,"product_name":2685,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2686},110008,"sysinternals_debugview","2007-11-08",{"id":2688,"product_name":2689,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":60},110009,"sysinternals_process_monitor",{"id":2691,"product_name":2692,"version_count":46,"cve_count":69,"kev_count":244,"last_cve_update":2020},110010,"sysinternals_pstools",{"id":2694,"product_name":2695,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2302},110011,"system_center_2019",{"id":2697,"product_name":2698,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2302},110012,"system_center_2022",{"id":2700,"product_name":2701,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2302},110013,"system_center_2025",{"id":2703,"product_name":2704,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":1130},110014,"system_center_configuration_manager",{"id":2706,"product_name":2707,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1072},109326,"azure_diagnostics",{"id":2709,"product_name":2710,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":323},110021,"system.data.sqlclient",{"id":2712,"product_name":2713,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2714},110022,"system_information_activex_control","2006-09-07",{"id":2716,"product_name":2717,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":796},110023,"system.io.pipelines",{"id":2719,"product_name":2720,"version_count":2721,"cve_count":69,"kev_count":244,"last_cve_update":692},109322,"azure_data_studio",153,{"id":2723,"product_name":2724,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2725},110033,"telemetry_dashboard","2024-06-13",{"id":2727,"product_name":2728,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":592},110034,"telnet_client",{"id":2730,"product_name":2731,"version_count":327,"cve_count":69,"kev_count":244,"last_cve_update":850},110036,"terminal",{"id":2733,"product_name":2734,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":1344},109321,"azure_data_science_virtual_machine",{"id":2736,"product_name":2737,"version_count":203,"cve_count":69,"kev_count":244,"last_cve_update":899},110038,"torchgeo",{"id":2739,"product_name":2740,"version_count":111,"cve_count":69,"kev_count":244,"last_cve_update":2741},110041,"typed-rest-client","2023-04-26",{"id":2743,"product_name":2744,"version_count":292,"cve_count":69,"kev_count":244,"last_cve_update":478},110042,"typescript",{"id":2746,"product_name":2747,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2302},110043,"update_catalog",{"id":2749,"product_name":2750,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2751},110044,"urlscan","2003-12-31",{"id":2753,"product_name":2754,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":854},109320,"azure_data_explorer",{"id":2756,"product_name":2757,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2644},110046,"vfp_ole_server_activex_control",{"id":2759,"product_name":2760,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":13},109319,"azure_databricks",{"id":2762,"product_name":2763,"version_count":117,"cve_count":69,"kev_count":244,"last_cve_update":2764},110049,"virtual_machine_manager","2015-02-11",{"id":2766,"product_name":2767,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":332},109318,"azure_data_box_gateway",{"id":2769,"product_name":2770,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2417},110057,"visio_professional",{"id":2772,"product_name":2773,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2417},110058,"visio_standard",{"id":2775,"product_name":2776,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":13},109315,"azure_custom_locations_resource_provider",{"id":2778,"product_name":2779,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2780},110061,"visual_basic_enterprise_edition","2008-07-02",{"id":2782,"product_name":2783,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":781},110063,"visual_basic_for_applications_sdk",{"id":2785,"product_name":2786,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2787},110064,"visual_basics","2016-01-13",{"id":2789,"product_name":2790,"version_count":117,"cve_count":69,"kev_count":244,"last_cve_update":1654},110065,"visual_basic_sdk",{"id":2792,"product_name":2793,"version_count":46,"cve_count":69,"kev_count":244,"last_cve_update":1538},110068,"visual_c\\#",{"id":2795,"product_name":2796,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":383},110275,"your_phone_companion",{"id":2798,"product_name":2799,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":1538},110075,"visual_j\\#_.net",{"id":2801,"product_name":2802,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":808},109313,"azure_container_registry",{"id":2804,"product_name":2805,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":523},110077,"visual_studio_2010_tools_for_office_runtime",{"id":2807,"product_name":2808,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":808},109312,"azure_container_instances",{"id":2810,"product_name":2811,"version_count":2812,"cve_count":69,"kev_count":244,"last_cve_update":2813},109309,"azure_command-line_interface",185,"2022-10-25",{"id":2815,"product_name":2816,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":603},110084,"visual_studio_code_github_pull_requests_and_issues",{"id":2818,"product_name":2819,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":603},110085,"visual_studio_code_kubernetes_tools",{"id":2821,"product_name":2822,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":628},110086,"visual_studio_code_npm-script_extension",{"id":2824,"product_name":2825,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2826},110087,"visual_studio_community","2018-06-26",{"id":2828,"product_name":2829,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1154},109307,"azure_cache_for_redis",{"id":2831,"product_name":2832,"version_count":154,"cve_count":69,"kev_count":244,"last_cve_update":2833},110276,"z3","2023-08-22",{"id":2835,"product_name":2836,"version_count":2515,"cve_count":69,"kev_count":244,"last_cve_update":603},110099,"vscode-maven",{"id":2838,"product_name":2839,"version_count":491,"cve_count":69,"kev_count":244,"last_cve_update":2315},110102,"walinuxagent",{"id":2841,"product_name":2842,"version_count":370,"cve_count":69,"kev_count":244,"last_cve_update":465},109306,"azure_batch",{"id":2844,"product_name":2845,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2846},110104,"web_apps","2010-09-17",{"id":2848,"product_name":2849,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":655},110105,"web_customizations",{"id":2851,"product_name":2852,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2853},110106,"webdav_mini-redirector","2008-02-12",{"id":2855,"product_name":2856,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":762},110107,"web_deploy_4.0",{"id":2858,"product_name":2859,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2341},110108,"web_media_extensions",{"id":2861,"product_name":2862,"version_count":46,"cve_count":69,"kev_count":244,"last_cve_update":2863},109302,"azure_arc_jumpstart","2023-05-18",{"id":2865,"product_name":2866,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":611},109301,"azure_arc_extension_microsoft.videoindexer",{"id":2868,"product_name":2869,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":611},109300,"azure_arc_extension_microsoft.openservicemesh",{"id":2871,"product_name":2872,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":611},109299,"azure_arc_extension_microsoft.networkfabricserviceextension",{"id":2874,"product_name":2875,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":611},109298,"azure_arc_extension_microsoft.iotoperations.mq",{"id":2877,"product_name":2878,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":611},109297,"azure_arc_extension_microsoft.azurekeyvaultsecretsprovider",{"id":2880,"product_name":2881,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":611},109296,"azure_arc_extension_microsoft.azure.hybridnetwork",{"id":2883,"product_name":2884,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":611},109295,"azure_arc_extension_microsoft.azstackhci.operator",{"id":2886,"product_name":2887,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":523},109294,"azure_arc-enabled_servers",{"id":2889,"product_name":2890,"version_count":180,"cve_count":69,"kev_count":244,"last_cve_update":515},109293,"azure_arc-enabled_kubernetes",{"id":2892,"product_name":2893,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1820},109292,"azure_arc",{"id":2895,"product_name":2896,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":611},109290,"azure_ai_search",{"id":2898,"product_name":2899,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2900},110128,"windows_10_mobile","2019-10-10",{"id":2902,"product_name":2903,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":13},109289,"azure_ai_foundry",{"id":2905,"product_name":2906,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2907},109288,"azure_ai_face_service","2025-01-29",{"id":2909,"product_name":2910,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":229},109287,"azure_ai_document_intelligence_studio",{"id":2912,"product_name":2913,"version_count":195,"cve_count":69,"kev_count":244,"last_cve_update":2914},109284,"azure_ad_pod_identity","2022-12-21",{"id":2916,"product_name":2917,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1147},109283,"azure_active_site_recovery",{"id":2919,"product_name":2920,"version_count":180,"cve_count":69,"kev_count":244,"last_cve_update":2921},110137,"windows_2000_advanced_server","2006-02-14",{"id":2923,"product_name":2924,"version_count":457,"cve_count":69,"kev_count":244,"last_cve_update":2925},109282,"azure_active_directory_passport","2016-09-28",{"id":2927,"product_name":2928,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2929},110140,"windows_2003","2007-05-09",{"id":2931,"product_name":2932,"version_count":52,"cve_count":69,"kev_count":244,"last_cve_update":651},109281,"azure_active_directory_connect_provisioning_agent",{"id":2934,"product_name":2935,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2936},110142,"windows_2008","2014-11-11",{"id":2938,"product_name":2939,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2940},110145,"windows_8.0","2016-04-22",{"id":2942,"product_name":2943,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2944},109276,"auto_updater_for_mac","2016-12-20",{"id":2946,"product_name":2947,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":674},110152,"windows_9x",{"id":2949,"product_name":2950,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2951},110155,"windows_azure_pack_rollup","2018-12-12",{"id":2953,"product_name":2954,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2955},110156,"windows_azure_sdk","2011-02-23",{"id":2957,"product_name":2958,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":655},110157,"windows_calendar",{"id":2960,"product_name":2961,"version_count":2962,"cve_count":69,"kev_count":244,"last_cve_update":692},109274,"authenticator",152,{"id":2964,"product_name":2965,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":692},110162,"windows_defender_antimalware_platform",{"id":2967,"product_name":2968,"version_count":2969,"cve_count":69,"kev_count":244,"last_cve_update":624},110164,"windows_defender_security_intelligence_updates",199,{"id":2971,"product_name":2972,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":599},110167,"windows_diagnostics_hub",{"id":2974,"product_name":2975,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2976},110168,"windows_digital_rights_management","2006-10-23",{"id":2978,"product_name":2979,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2980},110277,"zero_administration_kit","2005-01-07",{"id":2982,"product_name":2983,"version_count":46,"cve_count":69,"kev_count":244,"last_cve_update":936},110170,"windows_essentials",{"id":2985,"product_name":2986,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2987},110171,"windows_event_viewer","2006-12-27",{"id":2989,"product_name":2990,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2991},110278,"zune_software","2008-04-25",{"id":2993,"product_name":2994,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2995},110173,"windows_firewall","2022-12-05",{"id":2997,"product_name":2998,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":229},110174,"windows_hardware_lab_kit",{"id":3000,"product_name":3001,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1118},110175,"windows_help",{"id":3003,"product_name":3004,"version_count":143,"cve_count":69,"kev_count":244,"last_cve_update":3005},110176,"windows_host_compute_service_shim","2018-05-02",{"id":3007,"product_name":3008,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":538},110177,"windows_image_acquisition_logger",{"id":3010,"product_name":3011,"version_count":46,"cve_count":69,"kev_count":244,"last_cve_update":3012},110178,"windows_installer","2008-06-04",{"id":3014,"product_name":3015,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":3016},109272,"atlas_framework","2007-04-30",{"id":3018,"product_name":3019,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1168},110186,"windows_media_center",{"id":3021,"product_name":3022,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":655},109271,"asp.net_webpages",{"id":3024,"product_name":3025,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":846},110190,"windows_media_foundation",{"id":3027,"product_name":3028,"version_count":52,"cve_count":69,"kev_count":244,"last_cve_update":1226},109270,"asp.net_signalr",{"id":3030,"product_name":3031,"version_count":46,"cve_count":69,"kev_count":244,"last_cve_update":3032},110192,"windows_media_rights_manager","2000-03-17",{"id":3034,"product_name":3035,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":3036},110194,"windows_messaging","2000-02-29",{"id":3038,"product_name":3039,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":3040},110200,"windows_nt_helper_components","2006-10-31",{"id":3042,"product_name":3043,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":655},110202,"windows_people",{"id":3045,"product_name":3046,"version_count":46,"cve_count":69,"kev_count":244,"last_cve_update":3047},110203,"windows_phone","2014-03-03",{"id":3049,"product_name":3050,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":3051},110204,"windows_phone_7","2012-09-18",{"id":3053,"product_name":3054,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":3051},110205,"windows_phone_7_firmware",{"id":3056,"product_name":3057,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2631},109263,"application_inspector",{"id":3059,"product_name":3060,"version_count":46,"cve_count":69,"kev_count":244,"last_cve_update":1187},110209,"windows_script_host",{"id":3062,"product_name":3063,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":585},110210,"windows_search",{"id":3065,"product_name":3066,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":762},110211,"windows_security_app",{"id":3068,"product_name":3069,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1844},109258,"antigen",{"id":3071,"product_name":3072,"version_count":46,"cve_count":69,"kev_count":244,"last_cve_update":3073},109257,"anti-cross_site_scripting_library","2012-01-10",{"id":3075,"product_name":3076,"version_count":180,"cve_count":69,"kev_count":244,"last_cve_update":2921},110217,"windows_server_2000",{"id":3078,"product_name":3079,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":3080},109256,"ampx","2008-01-09",{"id":3082,"product_name":3083,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":899},109254,"airlift_microsoft_com",{"id":3085,"product_name":3086,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":585},109253,"adam",{"id":3088,"product_name":3089,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":3090},109251,"activesync","2007-10-15",{"id":3092,"product_name":3093,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":932},109250,"active_directory_services",{"id":3095,"product_name":3096,"version_count":213,"cve_count":69,"kev_count":244,"last_cve_update":3097},109247,"active_directory_authentication_library","2019-08-14",{"id":3099,"product_name":3100,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":932},109246,"active_directory_application_mode",{"id":3102,"product_name":3103,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":3104},110230,"windows_small_business_server_2011","2020-02-07",{"id":3106,"product_name":3107,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":3108},110235,"windows_terminal_services_using_rdp","2005-06-01",{"id":3110,"product_name":3111,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1054},110236,"windows_upgrade_assistant",{"id":3113,"product_name":3114,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1176},110237,"windows_virtual_pc",{"id":3116,"product_name":3117,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":2907},109244,"account",{"id":3119,"product_name":3120,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":2627},110240,"windows_xp_media_center",{"id":3122,"product_name":3123,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":3124},110241,"wins","1997-10-01",{"id":3126,"product_name":3127,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":3128},110242,"winsock","1997-12-01",{"id":3130,"product_name":3131,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1061},110245,"wireless_keyboard_850",{"id":3133,"product_name":3134,"version_count":366,"cve_count":69,"kev_count":244,"last_cve_update":2341},109242,"accessibility_insights_for_web",{"id":3136,"product_name":3137,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1108},109241,"accessibility_insights_for_android",{"id":3139,"product_name":3140,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1154},109237,"365_word_copilot",{"id":3142,"product_name":3143,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1054},110251,"word_mobile",{"id":3145,"product_name":3146,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":3147},110254,"wordperfect_converter","2003-10-20",{"id":3149,"product_name":3150,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":3151},110257,"word_web_app","2010-10-13",{"id":3153,"product_name":3154,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":889},110259,"word_web_apps_server",{"id":3156,"product_name":3157,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":413},109233,"365",{"id":3159,"product_name":3160,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":1810},110261,"works_6-9_file_converter",{"id":3162,"product_name":3163,"version_count":107,"cve_count":69,"kev_count":244,"last_cve_update":3164},110262,"workspace-tools","2022-05-13",{"id":3166,"product_name":3167,"version_count":244,"cve_count":69,"kev_count":69,"last_cve_update":3168},110264,"works_suite","2006-05-20",{"id":3170,"product_name":3171,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":711},110266,"xamarin.forms",{"id":3173,"product_name":3174,"version_count":69,"cve_count":69,"kev_count":244,"last_cve_update":3175},110267,"xamarin.ios","2017-08-15",{"id":3177,"product_name":3178,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":3179},109439,"compatibility_pack_word_excel_powerpoint_2007","2008-03-11",{"id":3181,"product_name":3182,"version_count":244,"cve_count":69,"kev_count":244,"last_cve_update":692},109440,"confidental_containers",{"id":3184,"product_name":3185,"version_count":117,"cve_count":69,"kev_count":69,"last_cve_update":432},109441,"configuration_manager",{"id":3187,"product_name":3188,"version_count":19,"cve_count":244,"kev_count":244,"last_cve_update":3189},109367,"azure_promptflow_core",null,{"id":3191,"product_name":3192,"version_count":19,"cve_count":244,"kev_count":244,"last_cve_update":3189},109368,"azure_promptflow_tools",{"id":3194,"product_name":3195,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109390,"azure_sql_managed_instance",{"id":3197,"product_name":3198,"version_count":1642,"cve_count":244,"kev_count":244,"last_cve_update":3189},109706,"npm",{"id":3200,"product_name":3201,"version_count":3202,"cve_count":244,"kev_count":244,"last_cve_update":3189},109871,"semantic_kernel",120,{"id":3204,"product_name":3205,"version_count":3206,"cve_count":244,"kev_count":244,"last_cve_update":3189},109347,"azure_linux",409,{"id":3208,"product_name":3209,"version_count":546,"cve_count":244,"kev_count":244,"last_cve_update":3189},110111,"windbg",{"id":3211,"product_name":3212,"version_count":52,"cve_count":244,"kev_count":244,"last_cve_update":3189},109869,"security_compliance_manager",{"id":3214,"product_name":3215,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109861,"remote_desktop_protocol",{"id":3217,"product_name":3218,"version_count":203,"cve_count":244,"kev_count":244,"last_cve_update":3189},109856,"remote_desktop_app",{"id":3220,"product_name":3221,"version_count":203,"cve_count":244,"kev_count":244,"last_cve_update":3189},109681,"ms-dos",{"id":3223,"product_name":3224,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109559,"frontpage_express",{"id":3226,"product_name":3227,"version_count":117,"cve_count":244,"kev_count":244,"last_cve_update":3189},109416,"biztalk_srv",{"id":3229,"product_name":3230,"version_count":52,"cve_count":244,"kev_count":244,"last_cve_update":3189},109656,"microsoft.aspnetcore.mvc.core",{"id":3232,"product_name":3233,"version_count":52,"cve_count":244,"kev_count":244,"last_cve_update":3189},109653,"microsoft.aspnetcore.mvc",{"id":3235,"product_name":3236,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109432,"comfort_curve_keyboard_2000",{"id":3238,"product_name":3239,"version_count":537,"cve_count":244,"kev_count":244,"last_cve_update":3189},110231,"windows_software_development_kit",{"id":3241,"product_name":3242,"version_count":69,"cve_count":244,"kev_count":244,"last_cve_update":3189},109419,"build_tools",{"id":3244,"product_name":3245,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109949,"surface_hub_2s_85_firmware",{"id":3247,"product_name":3248,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109950,"surface_hub_2s_firmware",{"id":3250,"product_name":3251,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109951,"surface_hub_3_50",{"id":3253,"product_name":3254,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109952,"surface_hub_3_50_firmware",{"id":3256,"product_name":3257,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109953,"surface_hub_3_85",{"id":3259,"product_name":3260,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109954,"surface_hub_3_85_firmware",{"id":3262,"product_name":3263,"version_count":81,"cve_count":244,"kev_count":244,"last_cve_update":3189},109546,"flatcar_linux",{"id":3265,"product_name":3266,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109956,"surface_laptop_3_1867",{"id":3268,"product_name":3269,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109957,"surface_laptop_3_1867_firmware",{"id":3271,"product_name":3272,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109958,"surface_laptop_3_1872",{"id":3274,"product_name":3275,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109959,"surface_laptop_3_1872_firmware",{"id":3277,"product_name":3278,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109960,"surface_laptop_4_1950",{"id":3280,"product_name":3281,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109961,"surface_laptop_4_1950_firmware",{"id":3283,"product_name":3284,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109962,"surface_laptop_4_1952",{"id":3286,"product_name":3287,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109963,"surface_laptop_4_1952_firmware",{"id":3289,"product_name":3290,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109964,"surface_laptop_4_1958",{"id":3292,"product_name":3293,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109965,"surface_laptop_4_1958_firmware",{"id":3295,"product_name":3296,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109966,"surface_laptop_4_1978",{"id":3298,"product_name":3299,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109967,"surface_laptop_4_1978_firmware",{"id":3301,"product_name":3302,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109968,"surface_laptop_go",{"id":3304,"product_name":3305,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109969,"surface_laptop_go_2",{"id":3307,"product_name":3308,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109970,"surface_laptop_go_2_firmware",{"id":3310,"product_name":3311,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109971,"surface_laptop_go_3",{"id":3313,"product_name":3314,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109972,"surface_laptop_go_3_firmware",{"id":3316,"product_name":3317,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109973,"surface_laptop_go_firmware",{"id":3319,"product_name":3320,"version_count":69,"cve_count":244,"kev_count":244,"last_cve_update":3189},109269,"asp.net_mvc",{"id":3322,"product_name":3323,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109975,"surface_pro_1",{"id":3325,"product_name":3326,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109976,"surface_pro_1_firmware",{"id":3328,"product_name":3329,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109977,"surface_pro_2",{"id":3331,"product_name":3332,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109978,"surface_pro_2_firmware",{"id":3334,"product_name":3335,"version_count":69,"cve_count":244,"kev_count":244,"last_cve_update":3189},110234,"windowst",{"id":3337,"product_name":3338,"version_count":3339,"cve_count":244,"kev_count":244,"last_cve_update":3189},109848,"python",347,{"id":3341,"product_name":3342,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109981,"surface_pro_4",{"id":3344,"product_name":3345,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109982,"surface_pro_4_firmware",{"id":3347,"product_name":3348,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109983,"surface_pro_6",{"id":3350,"product_name":3351,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109984,"surface_pro_6_firmware",{"id":3353,"product_name":3354,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109985,"surface_pro_7",{"id":3356,"product_name":3357,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109986,"surface_pro_7\\+",{"id":3359,"product_name":3360,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109987,"surface_pro_7_firmware",{"id":3362,"product_name":3363,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109988,"surface_pro_7\\+_firmware",{"id":3365,"product_name":3366,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109989,"surface_pro_8",{"id":3368,"product_name":3369,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109990,"surface_pro_8_1983",{"id":3371,"product_name":3372,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109991,"surface_pro_8_1983_firmware",{"id":3374,"product_name":3375,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109992,"surface_pro_8_firmware",{"id":3377,"product_name":3378,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109993,"surface_pro_8_for_business_1983",{"id":3380,"product_name":3381,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109994,"surface_pro_8_for_business_1983_firmware",{"id":3383,"product_name":3384,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109995,"surface_pro_8_for_business_with_lte_advanced_1982",{"id":3386,"product_name":3387,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109996,"surface_pro_8_for_business_with_lte_advanced_1982_firmware",{"id":3389,"product_name":3390,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109997,"surface_pro_9",{"id":3392,"product_name":3393,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109998,"surface_pro_9_firmware",{"id":3395,"product_name":3396,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109999,"surface_pro_9_with_5g_1996",{"id":3398,"product_name":3399,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},110000,"surface_pro_9_with_5g_1996_firmware",{"id":3401,"product_name":3402,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},110001,"surface_pro_9_with_5g_1997",{"id":3404,"product_name":3405,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},110002,"surface_pro_9_with_5g_1997_firmware",{"id":3407,"product_name":3408,"version_count":117,"cve_count":244,"kev_count":244,"last_cve_update":3189},109647,"media_player",{"id":3410,"product_name":3411,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},110004,"surface_pro_x",{"id":3413,"product_name":3414,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},110005,"surface_pro_x_firmware",{"id":3416,"product_name":3417,"version_count":3418,"cve_count":244,"kev_count":244,"last_cve_update":3189},109641,"maker.js",150,{"id":3420,"product_name":3421,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109847,"purview_data_governance",{"id":3423,"product_name":3424,"version_count":69,"cve_count":244,"kev_count":244,"last_cve_update":3189},109406,"background_intelligent_transfer_service",{"id":3426,"product_name":3427,"version_count":69,"cve_count":244,"kev_count":244,"last_cve_update":3189},109609,"interdev",{"id":3429,"product_name":3430,"version_count":366,"cve_count":244,"kev_count":244,"last_cve_update":3189},109264,"applicationinspector",{"id":3432,"product_name":3433,"version_count":69,"cve_count":244,"kev_count":244,"last_cve_update":3189},109845,"publisher_multilingual_user_interface_pack",{"id":3435,"product_name":3436,"version_count":46,"cve_count":244,"kev_count":244,"last_cve_update":3189},109285,"azure_agent",{"id":3438,"product_name":3439,"version_count":69,"cve_count":244,"kev_count":244,"last_cve_update":3189},109517,"edge_update",{"id":3441,"product_name":3442,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},110201,"windows_nt_option_pack",{"id":3444,"product_name":3445,"version_count":117,"cve_count":244,"kev_count":244,"last_cve_update":3189},110015,"system_center_data_protection_manager",{"id":3447,"product_name":3448,"version_count":180,"cve_count":244,"kev_count":244,"last_cve_update":3189},109493,"dynamics_365_business_central_2025",{"id":3450,"product_name":3451,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109325,"azure_devops_server_2019",{"id":3453,"product_name":3454,"version_count":117,"cve_count":244,"kev_count":244,"last_cve_update":3189},110018,"system_center_orchestrator",{"id":3456,"product_name":3457,"version_count":117,"cve_count":244,"kev_count":244,"last_cve_update":3189},110019,"system_center_service_manager",{"id":3459,"product_name":3460,"version_count":117,"cve_count":244,"kev_count":244,"last_cve_update":3189},110020,"system_center_virtual_machine_manager",{"id":3462,"product_name":3463,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},110138,"windows_2000_resource_kit",{"id":3465,"product_name":3466,"version_count":312,"cve_count":244,"kev_count":244,"last_cve_update":3189},109490,"dynamics_365_business_central_2022",{"id":3468,"product_name":3469,"version_count":546,"cve_count":244,"kev_count":244,"last_cve_update":3189},109492,"dynamics_365_business_central_2024",{"id":3471,"product_name":3472,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109948,"surface_hub_2s_85",{"id":3474,"product_name":3475,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109947,"surface_hub_2s",{"id":3477,"product_name":3478,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109945,"surface_go_3_firmware",{"id":3480,"product_name":3481,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109944,"surface_go_3_2022_firmware",{"id":3483,"product_name":3484,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109943,"surface_go_3_2022",{"id":3486,"product_name":3487,"version_count":117,"cve_count":244,"kev_count":244,"last_cve_update":3189},110029,"systems_management_srv",{"id":3489,"product_name":3490,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109942,"surface_go_3_1926_firmware",{"id":3492,"product_name":3493,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109941,"surface_go_3_1926",{"id":3495,"product_name":3496,"version_count":69,"cve_count":244,"kev_count":244,"last_cve_update":3189},109243,"access_multilingual_user_interface_pack",{"id":3498,"product_name":3499,"version_count":156,"cve_count":244,"kev_count":244,"last_cve_update":3189},109489,"dynamics_365_business_central_2021",{"id":3501,"product_name":3502,"version_count":195,"cve_count":244,"kev_count":244,"last_cve_update":3189},109821,"powertoys",{"id":3504,"product_name":3505,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109940,"surface_go_3_1901_firmware",{"id":3507,"product_name":3508,"version_count":69,"cve_count":244,"kev_count":244,"last_cve_update":3189},109812,"powerpoint_multilingual_user_interface_pack",{"id":3510,"product_name":3511,"version_count":19,"cve_count":244,"kev_count":244,"last_cve_update":3189},109602,"iis",{"id":3513,"product_name":3514,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109802,"power_bi",{"id":3516,"product_name":3517,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109939,"surface_go_3_1901",{"id":3519,"product_name":3520,"version_count":616,"cve_count":244,"kev_count":244,"last_cve_update":3189},110040,"tslint",{"id":3522,"product_name":3523,"version_count":52,"cve_count":244,"kev_count":244,"last_cve_update":3189},109798,"pocket_internet_explorer",{"id":3525,"product_name":3526,"version_count":117,"cve_count":244,"kev_count":244,"last_cve_update":3189},110208,"windows_script",{"id":3528,"product_name":3529,"version_count":96,"cve_count":244,"kev_count":244,"last_cve_update":3189},109795,"playwright",{"id":3531,"product_name":3532,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109787,"photodraw",{"id":3534,"product_name":3535,"version_count":117,"cve_count":244,"kev_count":244,"last_cve_update":3189},110151,"windows-9x",{"id":3537,"product_name":3538,"version_count":69,"cve_count":244,"kev_count":244,"last_cve_update":3189},109473,"desktop_engine",{"id":3540,"product_name":3541,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},110047,"viewer",{"id":3543,"product_name":3544,"version_count":69,"cve_count":244,"kev_count":244,"last_cve_update":3189},109777,"outlook_multilingual_user_interface_pack",{"id":3546,"product_name":3547,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109771,"outlook_2013_rt",{"id":3549,"product_name":3550,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109938,"surface_go_3",{"id":3552,"product_name":3553,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109937,"surface_go_2_1927_firmware",{"id":3555,"product_name":3556,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},109433,"comfort_mouse_4500",{"id":3558,"product_name":3559,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},110053,"visio_2000",{"id":3561,"product_name":3562,"version_count":69,"cve_count":244,"kev_count":244,"last_cve_update":3189},110054,"visio_2003-",{"id":3564,"product_name":3565,"version_count":244,"cve_count":244,"kev_count":244,"last_cve_update":3189},110055,"visio_2007",{"id":3567,"product_name":3568,"version_count":46,"cve_count":244,"kev_count":244,"last_cve_update":3189},110056,"visio_multilingual_user_interface_pack","Microsoft is a technology vendor with 1048 tracked products and 21814 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[3571,3580,3585,3590,3595,3602,3606,3610,3615,3619],{"cveId":3572,"description":3573,"publishedDate":3574,"cvssScore":3575,"cvssVersion":3576,"severity":3577,"isKev":3578,"epssScore":3579},"CVE-2003-0352","Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed message, as exploited by the Blaster\u002FMSblast\u002FLovSAN and Nachi\u002FWelchia worms.","2003-08-18",7.5,"v2","High",false,0.98484,{"cveId":3581,"description":3582,"publishedDate":1187,"cvssScore":222,"cvssVersion":3576,"severity":3583,"isKev":3578,"epssScore":3584},"CVE-2001-0500","Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackers to execute arbitrary commands via a long argument to Internet Data Administration (.ida) and Internet Data Query (.idq) files such as default.ida, as commonly exploited by Code Red.","Critical",0.96731,{"cveId":3586,"description":3587,"publishedDate":3128,"cvssScore":111,"cvssVersion":3576,"severity":3588,"isKev":3578,"epssScore":3589},"CVE-1999-0016","Land IP denial of service.","Medium",0.96429,{"cveId":3591,"description":3592,"publishedDate":3593,"cvssScore":3575,"cvssVersion":3576,"severity":3577,"isKev":3578,"epssScore":3594},"CVE-2001-0333","Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding .. (dot dot) and \"\\\" characters twice.","2001-06-27",0.9077,{"cveId":3596,"description":3597,"publishedDate":3598,"cvssScore":3599,"cvssVersion":3576,"severity":3600,"isKev":3578,"epssScore":3601},"CVE-2000-0402","The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file which is readable by any user, aka the \"SQL Server 7.0 Service Pack Password\" vulnerability.","2000-05-30",2.1,"Low",0.90609,{"cveId":3603,"description":3604,"publishedDate":2088,"cvssScore":111,"cvssVersion":3576,"severity":3588,"isKev":3578,"epssScore":3605},"CVE-2003-0718","The WebDAV Message Handler for Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows remote attackers to cause a denial of service (memory and CPU exhaustion, application crash) via a PROPFIND request with an XML message containing XML elements with a large number of attributes.",0.87908,{"cveId":3607,"description":3608,"publishedDate":1118,"cvssScore":222,"cvssVersion":3576,"severity":3583,"isKev":3578,"epssScore":3609},"CVE-2000-1209","The \"sa\" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages that use these products such as (4) Tumbleweed Secure Mail (MMS) (5) Compaq Insight Manager, and (6) Visio 2000, which allows remote attackers to gain privileges, as exploited by worms such as Voyager Alpha Force and Spida.",0.87307,{"cveId":3611,"description":3612,"publishedDate":3613,"cvssScore":111,"cvssVersion":3576,"severity":3588,"isKev":3578,"epssScore":3614},"CVE-2000-0778","IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a \"Translate: f\" header, aka the \"Specialized Header\" vulnerability.","2000-10-20",0.87284,{"cveId":3616,"description":3617,"publishedDate":3593,"cvssScore":222,"cvssVersion":3576,"severity":3583,"isKev":3578,"epssScore":3618},"CVE-2001-0241","Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges via a long print request that is passed to the extension through IIS 5.0.",0.85698,{"cveId":3620,"description":3621,"publishedDate":3622,"cvssScore":3575,"cvssVersion":3576,"severity":3577,"isKev":3578,"epssScore":3623},"CVE-2003-0109","Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute arbitrary code, as demonstrated via a WebDAV request to IIS 5.0.","2003-03-31",0.85681,[3625,3635,3641,3650,3659,3667,3672,3678,3685,3694,3701,3708,3713,3719,3724,3732,3739,3745,3752,3759,3767,3774,3782,3790,3797,3805,3811,3817,3825,3834,3841,3848,3853,3861,3868,3875,3882,3890,3897,3903,3911,3917,3924,3930,3936,3942,3948,3954,3962,3970,3978,3982,3991,3997,4003,4009,4015,4022,4028,4035,4043,4052,4059,4066,4072,4079,4087,4093,4098,4101,4108,4113,4119,4125,4133,4139,4145,4151,4158,4166,4173,4180,4186,4191,4197,4203,4210,4217,4226,4234,4241,4246,4252,4258,4263,4269,4274,4279,4286,4294,4300,4304,4311,4319,4325,4331,4338,4346,4353,4359,4366,4373,4379,4385,4392,4398,4406,4412,4416,4421,4427,4434,4439,4444,4450,4457,4465,4473,4481,4487,4493,4498,4505,4512,4517,4522,4528,4533,4542,4549,4556,4562,4567,4574,4581,4587,4592,4600,4608,4611,4617,4622,4630,4636,4640,4645,4653,4657,4663,4667,4672,4675,4681,4688,4692,4699,4706,4710,4717,4723,4730,4735,4741,4749,4756,4764,4771,4778,4784,4791,4798,4804,4810,4815,4822,4828,4834,4841,4848,4854,4860,4866,4870,4877,4884,4891,4898,4905,4911,4917,4922,4929,4935,4940,4947,4954,4961,4968,4975,4981,4987,4994,5000,5006,5013,5020,5026,5033,5039,5045,5050,5056,5061,5067,5073,5080,5086,5092,5099,5104,5110,5115,5121,5126,5133,5139,5144,5151,5155,5159,5161,5167,5171,5176,5184,5189,5195,5200,5207,5214,5220,5225,5230,5233,5240,5246,5250,5257,5263,5269,5275,5279,5284,5291,5298,5305,5311,5317,5323,5328,5333,5339,5344,5350,5353,5359,5365,5370,5375,5383,5388,5394,5400,5406,5412,5419,5426,5433,5437,5443,5450,5455,5461,5467,5472,5476,5482,5488,5493,5499,5503,5507,5513,5517,5524,5530,5536,5544,5550,5556,5562,5568,5574,5578,5584,5590,5597,5602,5608,5615,5621,5627,5633,5639,5645,5651,5657,5663,5670,5676,5682,5688,5695,5700,5705,5711,5718,5724,5729,5735,5741,5747,5754,5760,5766,5771,5777,5784,5790,5797,5804,5811,5817,5823,5830,5835,5841,5847,5851,5856,5863,5868,5872,5879,5885,5891,5897,5902,5908,5914,5919,5924,5930,5937,5943,5949,5955,5961,5966,5971,5976,5979,5986,5989,5995,6001,6007,6014,6021,6027,6033,6039,6045,6050,6056,6062,6069,6074,6079,6084,6090,6095,6101,6105,6110,6116,6121,6127,6133,6138,6143,6148,6152,6157,6163,6168,6174,6181,6186,6190,6196,6201,6207,6210,6216,6219,6224,6230,6234,6238,6241,6244,6247,6252,6258,6262,6267,6272,6277,6282,6288,6295,6301,6305,6311,6315,6321,6327,6333,6337,6341,6346,6351,6358,6361,6367,6372,6378,6384,6391,6394],{"cveId":3626,"description":3627,"publishedDate":3628,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":3631,"cisaVulnName":3632,"cisaDateAdded":3628,"cisaShortDescription":3633,"cisaRequiredAction":3634},"CVE-2026-81963","Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.","2026-09-08",7.8,"v3.1",0.00393,"Microsoft Windows Link Following Vulnerability","Microsoft Windows Update Stack contains a link following vulnerability that allows a local attacker to escalate privileges locally up to SYSTEM.","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",{"cveId":3636,"description":3637,"publishedDate":3628,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":3638,"cisaVulnName":3639,"cisaDateAdded":3628,"cisaShortDescription":3640,"cisaRequiredAction":3634},"CVE-2026-85880","Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.",0.00387,"Microsoft Windows Heap-Based Buffer Overflow Vulnerability","Microsoft Windows Advanced Local Procedure Call contains a heap-based buffer overflow vulnerability that allows an attacker to elevate privileges locally.",{"cveId":3642,"description":3643,"publishedDate":832,"cvssScore":3644,"cvssVersion":3645,"severity":3577,"isKev":4,"epssScore":3646,"cisaVulnName":3647,"cisaDateAdded":3648,"cisaShortDescription":3649,"cisaRequiredAction":3634},"CVE-2019-1068","A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.",8.8,"v3.0",0.57273,"Microsoft SQL Server Remote Code Execution Vulnerability","2026-08-26","Microsoft SQL Server contains a remote code execution vulnerability that could allow an attacker to execute code in the context of the SQL Server Database Engine service account.",{"cveId":3651,"description":3652,"publishedDate":3653,"cvssScore":3654,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":3655,"cisaVulnName":3656,"cisaDateAdded":3657,"cisaShortDescription":3658,"cisaRequiredAction":3634},"CVE-2026-55040","Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network.","2026-07-14",9.1,0.69536,"Microsoft SharePoint Weak Authentication Vulnerability","2026-08-18","Microsoft SharePoint contains a weak authentication vulnerability which allows an unauthorized attacker to bypass a security feature over a network.",{"cveId":3660,"description":3661,"publishedDate":3653,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":3663,"cisaVulnName":3664,"cisaDateAdded":3665,"cisaShortDescription":3666,"cisaRequiredAction":3634},"CVE-2026-50522","Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.",9.8,0.03042,"Microsoft SharePoint Deserialization of Untrusted Data Vulnerability","2026-07-22","Microsoft SharePoint contains a deserialization of untrusted data vulnerability which could allow an unauthorized attacker to execute code over a network.",{"cveId":3668,"description":3661,"publishedDate":3653,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":3669,"cisaVulnName":3664,"cisaDateAdded":3670,"cisaShortDescription":3671,"cisaRequiredAction":3634},"CVE-2026-58644",0.15873,"2026-07-16","Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network.",{"cveId":3673,"description":3674,"publishedDate":3653,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":3675,"cisaVulnName":3676,"cisaDateAdded":3653,"cisaShortDescription":3677,"cisaRequiredAction":3634},"CVE-2026-56155","Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally.",0.00346,"Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability","Microsoft Active Directory Federation Services contains an insufficient granularity of access control vulnerability that allows an authorized attacker to elevate privileges locally.",{"cveId":3679,"description":3680,"publishedDate":3653,"cvssScore":3681,"cvssVersion":3630,"severity":3588,"isKev":4,"epssScore":3682,"cisaVulnName":3683,"cisaDateAdded":3653,"cisaShortDescription":3684,"cisaRequiredAction":3634},"CVE-2026-56164","Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.",5.3,0.01011,"Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability","Microsoft SharePoint contains a missing authentication for critical function vulnerability that allows an unauthorized attacker to elevate privileges over a network.",{"cveId":3686,"description":3687,"publishedDate":3688,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":3689,"cisaVulnName":3690,"cisaDateAdded":3691,"cisaShortDescription":3692,"cisaRequiredAction":3693},"CVE-2008-4250","The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as exploited in the wild by Gimmiv.A in October 2008, aka \"Server Service Vulnerability.\"","2008-10-23",0.98751,"Microsoft Windows Buffer Overflow Vulnerability","2026-05-20","Microsoft Windows contains a buffer overflow vulnerability in the Windows Server Service that allows remote attackers to execute arbitrary code via a crafted RPC request that triggers an overflow during path canonicalization.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":3695,"description":3696,"publishedDate":3697,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":3698,"cisaVulnName":3699,"cisaDateAdded":3691,"cisaShortDescription":3700,"cisaRequiredAction":3693},"CVE-2010-0249","Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2008 Gold, SP2, and R2; and Windows 7 allows remote attackers to execute arbitrary code by accessing a pointer associated with a deleted object, related to incorrectly initialized memory and improper handling of objects in memory, as exploited in the wild in December 2009 and January 2010 during Operation Aurora, aka \"HTML Object Memory Corruption Vulnerability.\"","2010-01-15",0.91939,"Microsoft Internet Explorer Use-After-Free Vulnerability","Microsoft Internet Explorer contains an use-after-free vulnerability that could allow remote attackers to execute arbitrary code by accessing a pointer associated with a deleted object. The impacted product could be end-of-life (EoL) and\u002For end-of-service (EoS). Users should discontinue product utilization.",{"cveId":3702,"description":3703,"publishedDate":3704,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":3705,"cisaVulnName":3706,"cisaDateAdded":3691,"cisaShortDescription":3707,"cisaRequiredAction":3693},"CVE-2009-1537","Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted QuickTime media file, as exploited in the wild in May 2009, aka \"DirectX NULL Byte Overwrite Vulnerability.\"","2009-05-29",0.51362,"Microsoft DirectX NULL Byte Overwrite Vulnerability","Microsoft DirectX contains a NULL byte overwrite vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow which could allow remote attackers to execute arbitrary code via a crafted QuickTime media file.",{"cveId":3709,"description":3710,"publishedDate":1719,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":3711,"cisaVulnName":3699,"cisaDateAdded":3691,"cisaShortDescription":3712,"cisaRequiredAction":3693},"CVE-2010-0806","Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object, as exploited in the wild in March 2010, aka \"Uninitialized Memory Corruption Vulnerability.\"",0.82241,"Microsoft Internet Explorer contains an use-after-free vulnerability that could allow remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object. The impacted product could be end-of-life (EoL) and\u002For end-of-service (EoS). Users should discontinue product utilization.",{"cveId":3714,"description":3715,"publishedDate":3691,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":3716,"cisaVulnName":3717,"cisaDateAdded":3691,"cisaShortDescription":3718,"cisaRequiredAction":3693},"CVE-2026-41091","Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally.",0.08202,"Microsoft Defender Link Following Vulnerability","Microsoft Defender contains a link following vulnerability that allows an authorized attacker to elevate privileges locally.",{"cveId":3720,"description":3721,"publishedDate":3691,"cvssScore":180,"cvssVersion":3630,"severity":3588,"isKev":4,"epssScore":3722,"cisaVulnName":3721,"cisaDateAdded":3691,"cisaShortDescription":3723,"cisaRequiredAction":3693},"CVE-2026-45498","Microsoft Defender Denial of Service Vulnerability",0.63076,"Microsoft Defender contains an unspecified vulnerability that allows for denial of service.",{"cveId":3725,"description":3726,"publishedDate":3727,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":3728,"cisaVulnName":3729,"cisaDateAdded":3730,"cisaShortDescription":3731,"cisaRequiredAction":3693},"CVE-2009-0238","Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1; and Excel in Microsoft Office 2004 and 2008 for Mac allow remote attackers to execute arbitrary code via a crafted Excel document that triggers an access attempt on an invalid object, as exploited in the wild in February 2009 by Trojan.Mdropper.AC.","2009-02-25",0.42941,"Microsoft Office Remote Code Execution","2026-04-14","Microsoft Office Excel contains a remote code execution vulnerability that could allow an attacker to take complete control of an affected system if a user opens a specially crafted Excel file that includes a malformed object.",{"cveId":3733,"description":3734,"publishedDate":332,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":3735,"cisaVulnName":3736,"cisaDateAdded":3737,"cisaShortDescription":3738,"cisaRequiredAction":3693},"CVE-2023-21529","Microsoft Exchange Server Remote Code Execution Vulnerability",0.59294,"Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability","2026-04-13","Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code execution.",{"cveId":3740,"description":3741,"publishedDate":533,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":3742,"cisaVulnName":3743,"cisaDateAdded":3737,"cisaShortDescription":3744,"cisaRequiredAction":3693},"CVE-2023-36424","Windows Common Log File System Driver Elevation of Privilege Vulnerability",0.12087,"Microsoft Windows Out-of-Bounds Read Vulnerability","Microsoft Windows Common Log File System Driver contains an out-of-bounds read vulnerability that could allow a threat actor for privileges escalation",{"cveId":3746,"description":3747,"publishedDate":3748,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":3749,"cisaVulnName":3750,"cisaDateAdded":3737,"cisaShortDescription":3751,"cisaRequiredAction":3693},"CVE-2020-9715","Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution .","2020-08-19",0.33491,"Adobe Acrobat Use-After-Free Vulnerability","Adobe Acrobat contains a use-after-free vulnerability that allows for code execution",{"cveId":3753,"description":3754,"publishedDate":781,"cvssScore":3755,"cvssVersion":3576,"severity":3588,"isKev":4,"epssScore":3756,"cisaVulnName":3757,"cisaDateAdded":3737,"cisaShortDescription":3758,"cisaRequiredAction":3693},"CVE-2012-1854","Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for Applications (VBA); and Summit Microsoft Visual Basic for Applications SDK allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .docx file, aka \"Visual Basic for Applications Insecure Library Loading Vulnerability,\" as exploited in the wild in July 2012.",6.9,0.20867,"Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability","Microsoft Visual Basic for Applications (VBA) contains an insecure library loading vulnerability that could allow for remote code execution.",{"cveId":3760,"description":3761,"publishedDate":3762,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":3763,"cisaVulnName":3764,"cisaDateAdded":3765,"cisaShortDescription":3766,"cisaRequiredAction":3693},"CVE-2008-0015","Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in the MPEG2TuneRequest ActiveX control in msvidctl.dll in DirectShow, in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted web page, as exploited in the wild in July 2009, aka \"Microsoft Video ActiveX Control Vulnerability.\"","2009-07-07",0.76576,"Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability","2026-02-17","Microsoft Windows Video ActiveX Control contains a remote code execution vulnerability. An attacker could exploit the vulnerability by constructing a specially crafted Web page. When a user views the Web page, the vulnerability could allow remote code execution. An attacker who successfully exploited this vulnerability could gain the same user rights as the logged-on user.",{"cveId":3768,"description":3769,"publishedDate":432,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":3770,"cisaVulnName":3771,"cisaDateAdded":3772,"cisaShortDescription":3773,"cisaRequiredAction":3693},"CVE-2024-43468","Microsoft Configuration Manager Remote Code Execution Vulnerability",0.81043,"Microsoft Configuration Manager SQL Injection Vulnerability","2026-02-12","Microsoft Configuration Manager contains an SQL injection vulnerability. An unauthenticated attacker could exploit this vulnerability by sending specially crafted requests to the target environment which are processed in an unsafe manner enabling the attacker to execute commands on the server and\u002For underlying database.",{"cveId":3775,"description":3776,"publishedDate":3777,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":3778,"cisaVulnName":3779,"cisaDateAdded":3780,"cisaShortDescription":3781,"cisaRequiredAction":3693},"CVE-2009-0556","Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an an invalid index value that triggers memory corruption, as exploited in the wild in April 2009 by Exploit:Win32\u002FApptom.gen, aka \"Memory Corruption Vulnerability.\"","2009-04-03",0.67312,"Microsoft Office PowerPoint Code Injection Vulnerability","2026-01-07","Microsoft Office PowerPoint contains a code injection vulnerability that allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an invalid index value that triggers memory corruption.",{"cveId":3783,"description":3784,"publishedDate":3785,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":3786,"cisaVulnName":3787,"cisaDateAdded":3788,"cisaShortDescription":3789,"cisaRequiredAction":3693},"CVE-2025-41244","VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.","2025-09-29",0.08629,"Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability","2025-10-30","Broadcom VMware Aria Operations and VMware Tools contain a privilege defined with unsafe actions vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.",{"cveId":3791,"description":3792,"publishedDate":29,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":3793,"cisaVulnName":3794,"cisaDateAdded":3795,"cisaShortDescription":3796,"cisaRequiredAction":3693},"CVE-2025-59287","Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.",0.9998,"Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability","2025-10-24","Microsoft Windows Server Update Service (WSUS) contains a deserialization of untrusted data vulnerability that allows for remote code execution.",{"cveId":3798,"description":3799,"publishedDate":3800,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":3801,"cisaVulnName":3802,"cisaDateAdded":3803,"cisaShortDescription":3804,"cisaRequiredAction":3693},"CVE-2025-33073","Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.","2025-06-10",0.82699,"Microsoft Windows SMB Client Improper Access Control Vulnerability","2025-10-20","Microsoft Windows SMB Client contains an improper access control vulnerability that could allow for privilege escalation. An attacker could execute a specially crafted malicious script to coerce the victim machine to connect back to the attack system using SMB and authenticate.",{"cveId":3806,"description":3807,"publishedDate":29,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":3808,"cisaVulnName":3809,"cisaDateAdded":29,"cisaShortDescription":3810,"cisaRequiredAction":3693},"CVE-2025-59230","Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.",0.02657,"Microsoft Windows Improper Access Control Vulnerability","Microsoft Windows contains an improper access control vulnerability in Windows Remote Access Connection Manager which could allow an authorized attacker to elevate privileges locally.",{"cveId":3812,"description":3813,"publishedDate":29,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":3814,"cisaVulnName":3815,"cisaDateAdded":29,"cisaShortDescription":3816,"cisaRequiredAction":3693},"CVE-2025-24990","Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems.  This is an announcement of the upcoming removal of ltmdm64.sys driver.  The driver has been removed in the October cumulative update.\nFax modem hardware dependent on this specific driver will no longer work on Windows.\nMicrosoft recommends removing any existing dependencies on this hardware.",0.06369,"Microsoft Windows Untrusted Pointer Dereference Vulnerability","Microsoft Windows Agere Modem Driver contains an untrusted pointer dereference vulnerability that allows for privilege escalation. An attacker who successfully exploited this vulnerability could gain administrator privileges.",{"cveId":3818,"description":3819,"publishedDate":3820,"cvssScore":3821,"cvssVersion":3630,"severity":3588,"isKev":4,"epssScore":3822,"cisaVulnName":3823,"cisaDateAdded":29,"cisaShortDescription":3824,"cisaRequiredAction":3693},"CVE-2025-47827","In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image.","2025-06-05",4.6,0.04927,"IGEL OS Use of a Key Past its Expiration Date Vulnerability","IGEL OS contains a use of a key past its expiration date vulnerability that allows for Secure Boot bypass. The igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image.",{"cveId":3826,"description":3827,"publishedDate":3828,"cvssScore":3829,"cvssVersion":3576,"severity":3583,"isKev":4,"epssScore":3830,"cisaVulnName":3831,"cisaDateAdded":3832,"cisaShortDescription":3833,"cisaRequiredAction":3693},"CVE-2010-3962","Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code via vectors related to Cascading Style Sheets (CSS) token sequences and the clip attribute, aka an \"invalid flag reference\" issue or \"Uninitialized Memory Corruption Vulnerability,\" as exploited in the wild in November 2010.","2010-11-05",9.3,0.96831,"Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability","2025-10-06","Microsoft Internet Explorer contains an uninitialized memory corruption vulnerability that could allow for remote code execution. The impacted product could be end-of-life (EoL) and\u002For end-of-service (EoS). Users should discontinue product utilization.",{"cveId":3835,"description":3836,"publishedDate":3837,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":3838,"cisaVulnName":3839,"cisaDateAdded":3832,"cisaShortDescription":3840,"cisaRequiredAction":3693},"CVE-2013-3918","The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via a crafted web page that is accessed by Internet Explorer, as exploited in the wild in November 2013, aka \"InformationCardSigninHelper Vulnerability.\"","2013-11-12",0.73693,"Microsoft Windows Out-of-Bounds Write Vulnerability","Microsoft Windows contains an out-of-bounds write vulnerability in the InformationCardSigninHelper Class ActiveX control, icardie.dll. An attacker could exploit the vulnerability by constructing a specially crafted webpage. When a user views the webpage, the vulnerability could allow remote code execution. An attacker who successfully exploited this vulnerability could gain the same user rights as the current user. The impacted product could be end-of-life (EoL) and\u002For end-of-service (EoS). Users should discontinue product utilization.",{"cveId":3842,"description":3843,"publishedDate":3844,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":3845,"cisaVulnName":3846,"cisaDateAdded":3832,"cisaShortDescription":3847,"cisaRequiredAction":3693},"CVE-2011-3402","Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via crafted font data in a Word document or web page, as exploited in the wild in November 2011 by Duqu, aka \"TrueType Font Parsing Vulnerability.\"","2011-11-04",0.78138,"Microsoft Windows Remote Code Execution Vulnerability","Microsoft Windows Kernel contains an unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers that allows remote attackers to execute arbitrary code via crafted font data in a Word document or web page.",{"cveId":3849,"description":3741,"publishedDate":1415,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":3850,"cisaVulnName":3851,"cisaDateAdded":3832,"cisaShortDescription":3852,"cisaRequiredAction":3693},"CVE-2021-43226",0.03275,"Microsoft Windows Privilege Escalation Vulnerability","Microsoft Windows Common Log File System Driver contains a privilege escalation vulnerability that could allow a local, privileged attacker to bypass certain security mechanisms.",{"cveId":3854,"description":3855,"publishedDate":3856,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":3857,"cisaVulnName":3858,"cisaDateAdded":3859,"cisaShortDescription":3860,"cisaRequiredAction":3693},"CVE-2025-10585","Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2025-09-24",0.08974,"Google Chromium V8 Type Confusion Vulnerability","2025-09-23","Google Chromium contains a type confusion vulnerability in the V8 JavaScript and WebAssembly engine.",{"cveId":3862,"description":3863,"publishedDate":3864,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":3865,"cisaVulnName":3866,"cisaDateAdded":762,"cisaShortDescription":3867,"cisaRequiredAction":3693},"CVE-2025-8088","A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strý?ek\n     from ESET.","2025-08-08",0.94509,"RARLAB WinRAR Path Traversal Vulnerability","RARLAB WinRAR contains a path traversal vulnerability affecting the Windows version of WinRAR. This vulnerability could allow an attacker to execute arbitrary code by crafting malicious archive files.",{"cveId":3869,"description":3870,"publishedDate":3871,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":3872,"cisaVulnName":3873,"cisaDateAdded":762,"cisaShortDescription":3874,"cisaRequiredAction":3693},"CVE-2007-0671","Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks.","2007-02-03",0.43241,"Microsoft Office Excel Remote Code Execution Vulnerability","Microsoft Office Excel contains a remote code execution vulnerability that can be exploited when a specially crafted Excel file is opened. This malicious file could be delivered as an email attachment or hosted on a malicious website. An attacker could leverage this vulnerability by creating a specially crafted Excel file, which, when opened, allowing an attacker to execute remote code on the affected system.",{"cveId":3876,"description":3877,"publishedDate":3878,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":3879,"cisaVulnName":3880,"cisaDateAdded":762,"cisaShortDescription":3881,"cisaRequiredAction":3693},"CVE-2013-3893","Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code via crafted JavaScript strings, as demonstrated by use of an ms-help: URL that triggers loading of hxds.dll.","2013-09-18",0.87639,"Microsoft Internet Explorer Resource Management Errors Vulnerability","Microsoft Internet Explorer contains a memory corruption vulnerability that allows for remote code execution. The impacted products could be end-of-life (EoL) and\u002For end-of-service (EoS). Users should discontinue product utilization.",{"cveId":3883,"description":3884,"publishedDate":924,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":3885,"cisaVulnName":3886,"cisaDateAdded":3887,"cisaShortDescription":3888,"cisaRequiredAction":3889},"CVE-2025-49704","Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.",0.99995,"Microsoft SharePoint Code Injection Vulnerability","2025-07-22","Microsoft SharePoint contains a code injection vulnerability that could allow an authorized attacker to execute code over a network. This vulnerability could be chained with CVE-2025-49706. CVE-2025-53770 is a patch bypass for CVE-2025-49704, and the updates for CVE-2025-53770 include more robust protection than those for CVE-2025-49704.","Disconnect public-facing versions of SharePoint Server that have reached their end-of-life (EOL) or end-of-service (EOS) to include SharePoint Server 2013 and earlier versions. For supported versions, please follow the mitigations according to CISA (URL listed below in Notes) and vendor instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.",{"cveId":3891,"description":3892,"publishedDate":924,"cvssScore":3893,"cvssVersion":3630,"severity":3588,"isKev":4,"epssScore":3894,"cisaVulnName":3895,"cisaDateAdded":3887,"cisaShortDescription":3896,"cisaRequiredAction":3889},"CVE-2025-49706","Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.",6.5,0.99057,"Microsoft SharePoint Improper Authentication Vulnerability","Microsoft SharePoint contains an improper authentication vulnerability that allows an authorized attacker to perform spoofing over a network. Successfully exploitation could allow an attacker to view sensitive information and make some changes to disclosed information. This vulnerability could be chained with CVE-2025-49704. CVE-2025-53771 is a patch bypass for CVE-2025-49706, and the updates for CVE-2025-53771 include more robust protection than those for CVE-2025-49706.",{"cveId":3898,"description":3899,"publishedDate":3900,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":3901,"cisaVulnName":3664,"cisaDateAdded":3900,"cisaShortDescription":3902,"cisaRequiredAction":3889},"CVE-2025-53770","Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network.\nMicrosoft is aware that an exploit for CVE-2025-53770 exists in the wild.\nMicrosoft is preparing and fully testing a comprehensive update to address this vulnerability.  In the meantime, please make sure that the mitigation provided in this CVE documentation is in place so that you are protected from exploitation.","2025-07-20",0.99999,"Microsoft SharePoint Server on-premises contains a deserialization of untrusted data vulnerability that could allow an unauthorized attacker to execute code over a network. This vulnerability could be chained with CVE-2025-53771. CVE-2025-53770 is a patch bypass for CVE-2025-49704, and the updates for CVE-2025-53770 include more robust protection than those for CVE-2025-49704.",{"cveId":3904,"description":3905,"publishedDate":3906,"cvssScore":3907,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":3908,"cisaVulnName":3858,"cisaDateAdded":3909,"cisaShortDescription":3910,"cisaRequiredAction":3693},"CVE-2025-6554","Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read\u002Fwrite via a crafted HTML page. (Chromium security severity: High)","2025-06-30",8.1,0.14142,"2025-07-02","Google Chromium V8 contains a type confusion vulnerability that could allow a remote attacker to perform arbitrary read\u002Fwrite via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":3912,"description":3913,"publishedDate":3800,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":3914,"cisaVulnName":3915,"cisaDateAdded":3800,"cisaShortDescription":3916,"cisaRequiredAction":3693},"CVE-2025-33053","External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network.",0.87015,"Microsoft Windows External Control of File Name or Path Vulnerability","Microsoft Windows contains an external control of file name or path vulnerability that could allow an attacker to execute code from a remote WebDAV location specified by the WorkingDirectory attribute of Internet Shortcut files.",{"cveId":3918,"description":3919,"publishedDate":3920,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":3921,"cisaVulnName":3922,"cisaDateAdded":3820,"cisaShortDescription":3923,"cisaRequiredAction":3693},"CVE-2025-5419","Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2025-06-03",0.07821,"Google Chromium V8 Out-of-Bounds Read and Write Vulnerability","Google Chromium V8 contains an out-of-bounds read and write vulnerability that could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":3925,"description":3926,"publishedDate":229,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":3927,"cisaVulnName":3928,"cisaDateAdded":229,"cisaShortDescription":3929,"cisaRequiredAction":3693},"CVE-2025-32709","Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.",0.01818,"Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability","Microsoft Windows Ancillary Function Driver for WinSock contains a use-after-free vulnerability that allows an authorized attacker to escalate privileges to administrator.",{"cveId":3931,"description":3932,"publishedDate":229,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":3933,"cisaVulnName":3934,"cisaDateAdded":229,"cisaShortDescription":3935,"cisaRequiredAction":3693},"CVE-2025-32701","Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.",0.01416,"Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability","Microsoft Windows Common Log File System (CLFS) Driver contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.",{"cveId":3937,"description":3938,"publishedDate":229,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":3939,"cisaVulnName":3940,"cisaDateAdded":229,"cisaShortDescription":3941,"cisaRequiredAction":3693},"CVE-2025-32706","Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.",0.02333,"Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability","Microsoft Windows Common Log File System (CLFS) Driver contains a heap-based buffer overflow vulnerability that allows an authorized attacker to elevate privileges locally.",{"cveId":3943,"description":3944,"publishedDate":229,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":3945,"cisaVulnName":3946,"cisaDateAdded":229,"cisaShortDescription":3947,"cisaRequiredAction":3693},"CVE-2025-30400","Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.",0.01917,"Microsoft Windows DWM Core Library Use-After-Free Vulnerability","Microsoft Windows DWM Core Library contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.",{"cveId":3949,"description":3950,"publishedDate":229,"cvssScore":3575,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":3951,"cisaVulnName":3952,"cisaDateAdded":229,"cisaShortDescription":3953,"cisaRequiredAction":3693},"CVE-2025-30397","Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network.",0.27263,"Microsoft Windows Scripting Engine Type Confusion Vulnerability","Microsoft Windows Scripting Engine contains a type confusion vulnerability that allows an unauthorized attacker to execute code over a network via a specially crafted URL.",{"cveId":3955,"description":3956,"publishedDate":3957,"cvssScore":222,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":3958,"cisaVulnName":3959,"cisaDateAdded":3960,"cisaShortDescription":3961,"cisaRequiredAction":3693},"CVE-2025-34028","The Commvault Command Center Innovation Release allows an unauthenticated actor to upload ZIP files that represent install packages that, when expanded by the target server, are vulnerable to path traversal vulnerability that can result in Remote Code Execution via malicious JSP.\n\n\n\n\n\nThis issue affects Command Center Innovation Release: 11.38.0 to 11.38.20. The vulnerability is fixed in 11.38.20 with SP38-CU20-433 and SP38-CU20-436 and also fixed in 11.38.25 with SP38-CU25-434 and SP38-CU25-438.","2025-04-22",0.97604,"Commvault Command Center Path Traversal Vulnerability","2025-05-02","Commvault Command Center contains a path traversal vulnerability that allows a remote, unauthenticated attacker to execute arbitrary code.",{"cveId":3963,"description":3964,"publishedDate":3965,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":3966,"cisaVulnName":3967,"cisaDateAdded":3968,"cisaShortDescription":3969,"cisaRequiredAction":3693},"CVE-2025-3928","Commvault Web Server has an unspecified vulnerability that can be exploited by a remote, authenticated attacker. According to the Commvault advisory: \"Webservers can be compromised through bad actors creating and executing webshells.\" Fixed in version 11.36.46, 11.32.89, 11.28.141, and 11.20.217 for Windows and Linux platforms. This vulnerability was added to the CISA Known Exploited Vulnerabilities (KEV) Catalog on 2025-04-28.","2025-04-25",0.02527,"Commvault Web Server Unspecified Vulnerability","2025-04-28","Commvault Web Server contains an unspecified vulnerability that allows a remote, authenticated attacker to create and execute webshells.",{"cveId":3971,"description":3972,"publishedDate":3973,"cvssScore":3893,"cvssVersion":3630,"severity":3588,"isKev":4,"epssScore":3974,"cisaVulnName":3975,"cisaDateAdded":3976,"cisaShortDescription":3977,"cisaRequiredAction":3693},"CVE-2025-24054","External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.","2025-03-11",0.6227,"Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability","2025-04-17","Microsoft Windows NTLM contains an external control of file name or path vulnerability that allows an unauthorized attacker to perform spoofing over a network.",{"cveId":3979,"description":3932,"publishedDate":3980,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":3981,"cisaVulnName":3934,"cisaDateAdded":3980,"cisaShortDescription":3935,"cisaRequiredAction":3693},"CVE-2025-29824","2025-04-08",0.19254,{"cveId":3983,"description":3984,"publishedDate":3985,"cvssScore":3986,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":3987,"cisaVulnName":3988,"cisaDateAdded":3989,"cisaShortDescription":3990,"cisaRequiredAction":3693},"CVE-2025-2783","Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium security severity: High)","2025-03-26",8.3,0.09238,"Google Chromium Mojo Sandbox Escape Vulnerability","2025-03-27","Google Chromium Mojo on Windows contains a sandbox escape vulnerability caused by a logic error, which results from an incorrect handle being provided in unspecified circumstances. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":3992,"description":3993,"publishedDate":3973,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":3994,"cisaVulnName":3995,"cisaDateAdded":3973,"cisaShortDescription":3996,"cisaRequiredAction":3693},"CVE-2025-24993","Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.",0.02216,"Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability","Microsoft Windows New Technology File System (NTFS) contains a heap-based buffer overflow vulnerability that allows an unauthorized attacker to execute code locally.",{"cveId":3998,"description":3999,"publishedDate":3973,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4000,"cisaVulnName":4001,"cisaDateAdded":3973,"cisaShortDescription":4002,"cisaRequiredAction":3693},"CVE-2025-24985","Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.",0.0389,"Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability","Microsoft Windows Fast FAT File System Driver contains an integer overflow or wraparound vulnerability that allows an unauthorized attacker to execute code locally.",{"cveId":4004,"description":4005,"publishedDate":3973,"cvssScore":52,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4006,"cisaVulnName":4007,"cisaDateAdded":3973,"cisaShortDescription":4008,"cisaRequiredAction":3693},"CVE-2025-24983","Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.",0.0187,"Microsoft Windows Win32k Use-After-Free Vulnerability","Microsoft Windows Win32 Kernel Subsystem contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.",{"cveId":4010,"description":4011,"publishedDate":3973,"cvssScore":52,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4012,"cisaVulnName":4013,"cisaDateAdded":3973,"cisaShortDescription":4014,"cisaRequiredAction":3693},"CVE-2025-26633","Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.",0.30391,"Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability","Microsoft Windows Management Console (MMC) contains an improper neutralization vulnerability that allows an unauthorized attacker to bypass a security feature locally.",{"cveId":4016,"description":4017,"publishedDate":3973,"cvssScore":4018,"cvssVersion":3630,"severity":3588,"isKev":4,"epssScore":4019,"cisaVulnName":4020,"cisaDateAdded":3973,"cisaShortDescription":4021,"cisaRequiredAction":3693},"CVE-2025-24991","Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.",5.5,0.02018,"Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability","Microsoft Windows New Technology File System (NTFS) contains an out-of-bounds read vulnerability that allows an authorized attacker to disclose information locally.",{"cveId":4023,"description":4024,"publishedDate":3973,"cvssScore":3821,"cvssVersion":3630,"severity":3588,"isKev":4,"epssScore":4025,"cisaVulnName":4026,"cisaDateAdded":3973,"cisaShortDescription":4027,"cisaRequiredAction":3693},"CVE-2025-24984","Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.",0.01994,"Microsoft Windows NTFS Information Disclosure Vulnerability","Microsoft Windows New Technology File System (NTFS) contains an insertion of sensitive Information into log file vulnerability that allows an unauthorized attacker to disclose information with a physical attack. An attacker who successfully exploited this vulnerability could potentially read portions of heap memory.",{"cveId":4029,"description":4030,"publishedDate":2951,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4031,"cisaVulnName":4032,"cisaDateAdded":4033,"cisaShortDescription":4034,"cisaRequiredAction":3693},"CVE-2018-8639","An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka \"Win32k Elevation of Privilege Vulnerability.\" This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8641.",0.22179,"Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability","2025-03-03","Microsoft Windows Win32k contains an improper resource shutdown or release vulnerability that allows for local, authenticated privilege escalation. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.",{"cveId":4036,"description":4037,"publishedDate":1348,"cvssScore":4038,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4039,"cisaVulnName":4040,"cisaDateAdded":4041,"cisaShortDescription":4042,"cisaRequiredAction":3693},"CVE-2024-49035","An improper access control vulnerability in Partner.Microsoft.com allows an a unauthenticated attacker to elevate privileges over a network.",8.7,0.013,"Microsoft Partner Center Improper Access Control Vulnerability","2025-02-25","Microsoft Partner Center contains an improper access control vulnerability that allows an attacker to escalate privileges.",{"cveId":4044,"description":4045,"publishedDate":1191,"cvssScore":4046,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4047,"cisaVulnName":4048,"cisaDateAdded":4049,"cisaShortDescription":4050,"cisaRequiredAction":4051},"CVE-2025-24989","An improper access control vulnerability in Power Pages allows an unauthorized attacker to elevate privileges over a network potentially bypassing the user registration control.\nThis vulnerability has already been mitigated in the service and all affected customers have been notified. This update addressed the registration control bypass. Affected customers have been given instructions on reviewing their sites for potential exploitation and clean up methods. If you've not been notified this vulnerability does not affect you.",8.2,0.01622,"Microsoft Power Pages Improper Access Control Vulnerability","2025-02-21","Microsoft Power Pages contains an improper access control vulnerability that allows an unauthorized attacker to elevate privileges over a network potentially bypassing the user registration control.","Apply mitigations per vendor instructions, follow BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":4053,"description":4054,"publishedDate":313,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4055,"cisaVulnName":4056,"cisaDateAdded":313,"cisaShortDescription":4057,"cisaRequiredAction":4058},"CVE-2025-21418","Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability",0.02132,"Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability","Microsoft Windows Ancillary Function Driver for WinSock contains a heap-based buffer overflow vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":4060,"description":4061,"publishedDate":313,"cvssScore":4062,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4063,"cisaVulnName":4064,"cisaDateAdded":313,"cisaShortDescription":4065,"cisaRequiredAction":4058},"CVE-2025-21391","Windows Storage Elevation of Privilege Vulnerability",7.1,0.02284,"Microsoft Windows Storage Link Following Vulnerability","Microsoft Windows Storage contains a link following vulnerability that could allow for privilege escalation. This vulnerability could allow an attacker to delete data including data that results in the service being unavailable.",{"cveId":4067,"description":4068,"publishedDate":495,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":4069,"cisaVulnName":4070,"cisaDateAdded":1257,"cisaShortDescription":4071,"cisaRequiredAction":4058},"CVE-2024-21413","Microsoft Outlook Remote Code Execution Vulnerability",0.9466,"Microsoft Outlook Improper Input Validation Vulnerability","Microsoft Outlook contains an improper input validation vulnerability that allows for remote code execution. Successful exploitation of this vulnerability would allow an attacker to bypass the Office Protected View and open in editing mode rather than protected mode.",{"cveId":4073,"description":4074,"publishedDate":4075,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4076,"cisaVulnName":4077,"cisaDateAdded":1257,"cisaShortDescription":4078,"cisaRequiredAction":4058},"CVE-2022-23748","mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In these scenarios, a malicious attacker could be using the valid and legitimate executable to load malicious files.","2022-11-17",0.08329,"Dante Discovery Process Control Vulnerability","Dante Discovery contains a process control vulnerability in mDNSResponder.exe that all allows for a DLL sideloading attack. A local attacker can leverage this vulnerability in the Dante Application Library to execute arbitrary code.",{"cveId":4080,"description":4081,"publishedDate":4082,"cvssScore":3575,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4083,"cisaVulnName":4084,"cisaDateAdded":4085,"cisaShortDescription":4086,"cisaRequiredAction":4058},"CVE-2024-29059",".NET Framework Information Disclosure Vulnerability","2024-03-23",0.98624,"Microsoft .NET Framework Information Disclosure Vulnerability","2025-02-04","Microsoft .NET Framework contains an information disclosure vulnerability that exposes the ObjRef URI to an attacker, ultimately enabling remote code execution.",{"cveId":4088,"description":4089,"publishedDate":707,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4090,"cisaVulnName":4091,"cisaDateAdded":707,"cisaShortDescription":4092,"cisaRequiredAction":4058},"CVE-2025-21335","Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability",0.01401,"Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability","Microsoft Windows Hyper-V NT Kernel Integration VSP contains a use-after-free vulnerability that allows a local attacker to gain SYSTEM privileges.",{"cveId":4094,"description":4089,"publishedDate":707,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4095,"cisaVulnName":4096,"cisaDateAdded":707,"cisaShortDescription":4097,"cisaRequiredAction":4058},"CVE-2025-21333",0.10066,"Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability","Microsoft Windows Hyper-V NT Kernel Integration VSP contains a heap-based buffer overflow vulnerability that allows a local attacker to gain SYSTEM privileges.",{"cveId":4099,"description":4089,"publishedDate":707,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4100,"cisaVulnName":4091,"cisaDateAdded":707,"cisaShortDescription":4092,"cisaRequiredAction":4058},"CVE-2025-21334",0.01573,{"cveId":4102,"description":4103,"publishedDate":1344,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4104,"cisaVulnName":4105,"cisaDateAdded":4106,"cisaShortDescription":4107,"cisaRequiredAction":4058},"CVE-2024-35250","Windows Kernel-Mode Driver Elevation of Privilege Vulnerability",0.25222,"Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability ","2024-12-16","Microsoft Windows Kernel-Mode Driver contains an untrusted pointer dereference vulnerability that allows a local attacker to escalate privileges.",{"cveId":4109,"description":3741,"publishedDate":2302,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4110,"cisaVulnName":3940,"cisaDateAdded":4111,"cisaShortDescription":4112,"cisaRequiredAction":4058},"CVE-2024-49138",0.26215,"2024-12-10","Microsoft Windows Common Log File System (CLFS) driver contains a heap-based buffer overflow vulnerability that allows a local attacker to escalate privileges.",{"cveId":4114,"description":4115,"publishedDate":899,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4116,"cisaVulnName":4117,"cisaDateAdded":899,"cisaShortDescription":4118,"cisaRequiredAction":4058},"CVE-2024-49039","Windows Task Scheduler Elevation of Privilege Vulnerability",0.14179,"Microsoft Windows Task Scheduler Privilege Escalation Vulnerability","Microsoft Windows Task Scheduler contains a privilege escalation vulnerability that can allow an attacker-provided, local application to escalate privileges outside of its AppContainer, and access privileged RPC functions.",{"cveId":4120,"description":4121,"publishedDate":899,"cvssScore":3893,"cvssVersion":3630,"severity":3588,"isKev":4,"epssScore":4122,"cisaVulnName":4123,"cisaDateAdded":899,"cisaShortDescription":4124,"cisaRequiredAction":4058},"CVE-2024-43451","NTLM Hash Disclosure Spoofing Vulnerability",0.84266,"Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability","Microsoft Windows contains an NTLMv2 hash spoofing vulnerability that could result in disclosing a user's NTLMv2 hash to an attacker via a file open operation. The attacker could then leverage this hash to impersonate that user.",{"cveId":4126,"description":4127,"publishedDate":487,"cvssScore":4128,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4129,"cisaVulnName":4130,"cisaDateAdded":4131,"cisaShortDescription":4132,"cisaRequiredAction":4058},"CVE-2024-38094","Microsoft SharePoint Remote Code Execution Vulnerability",7.2,0.50892,"Microsoft SharePoint Deserialization Vulnerability","2024-10-22","Microsoft SharePoint contains a deserialization vulnerability that allows for remote code execution.",{"cveId":4134,"description":4135,"publishedDate":1344,"cvssScore":52,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4136,"cisaVulnName":4137,"cisaDateAdded":1267,"cisaShortDescription":4138,"cisaRequiredAction":4058},"CVE-2024-30088","Windows Kernel Elevation of Privilege Vulnerability",0.68202,"Microsoft Windows Kernel TOCTOU Race Condition Vulnerability","Microsoft Windows Kernel contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that could allow for privilege escalation. ",{"cveId":4140,"description":4141,"publishedDate":432,"cvssScore":3907,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4142,"cisaVulnName":4143,"cisaDateAdded":432,"cisaShortDescription":4144,"cisaRequiredAction":4058},"CVE-2024-43573","Windows MSHTML Platform Spoofing Vulnerability",0.46109,"Microsoft Windows MSHTML Platform Spoofing Vulnerability","Microsoft Windows MSHTML Platform contains an unspecified spoofing vulnerability which can lead to a loss of confidentiality.",{"cveId":4146,"description":4147,"publishedDate":432,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4148,"cisaVulnName":4149,"cisaDateAdded":432,"cisaShortDescription":4150,"cisaRequiredAction":4058},"CVE-2024-43572","Microsoft Management Console Remote Code Execution Vulnerability",0.66695,"Microsoft Windows Management Console Remote Code Execution Vulnerability","Microsoft Windows Management Console contains unspecified vulnerability that allows for remote code execution.",{"cveId":4152,"description":4153,"publishedDate":1870,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4154,"cisaVulnName":4155,"cisaDateAdded":4156,"cisaShortDescription":4157,"cisaRequiredAction":4058},"CVE-2020-0618","A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'.",0.99046,"Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability","2024-09-18","Microsoft SQL Server Reporting Services contains a deserialization vulnerability when handling page requests incorrectly. An authenticated attacker can exploit this vulnerability to execute code in the context of the Report Server service account.",{"cveId":4159,"description":4160,"publishedDate":4161,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":4162,"cisaVulnName":4163,"cisaDateAdded":684,"cisaShortDescription":4164,"cisaRequiredAction":4165},"CVE-2014-0497","Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.","2014-02-05",0.99879,"Adobe Flash Player Integer Underflow Vulnerablity","Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to execute arbitrary code.","The impacted product is end-of-life (EoL) and\u002For end-of-service (EoS). Users should discontinue utilization of the product.",{"cveId":4167,"description":4168,"publishedDate":4169,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4170,"cisaVulnName":4171,"cisaDateAdded":684,"cisaShortDescription":4172,"cisaRequiredAction":4165},"CVE-2013-0648","Unspecified vulnerability in the ExternalInterface ActionScript functionality in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, allows remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.","2013-02-27",0.11094,"Adobe Flash Player Code Execution Vulnerability","Adobe Flash Player contains an unspecified vulnerability in the ExternalInterface ActionScript functionality that allows a remote attacker to execute arbitrary code via crafted SWF content.",{"cveId":4174,"description":4175,"publishedDate":4176,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4177,"cisaVulnName":4178,"cisaDateAdded":684,"cisaShortDescription":4179,"cisaRequiredAction":4165},"CVE-2014-0502","Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2014.","2014-02-21",0.24817,"Adobe Flash Player Double Free Vulnerablity","Adobe Flash Player contains a double free vulnerability that allows a remote attacker to execute arbitrary code.",{"cveId":4181,"description":4182,"publishedDate":4169,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4183,"cisaVulnName":4184,"cisaDateAdded":684,"cisaShortDescription":4185,"cisaRequiredAction":4165},"CVE-2013-0643","The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, does not properly restrict privileges, which makes it easier for remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.",0.10533,"Adobe Flash Player Incorrect Default Permissions Vulnerability","Adobe Flash Player contains an incorrect default permissions vulnerability in the Firefox sandbox that allows a remote attacker to execute arbitrary code via crafted SWF content. ",{"cveId":4187,"description":4141,"publishedDate":474,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4188,"cisaVulnName":4143,"cisaDateAdded":4189,"cisaShortDescription":4190,"cisaRequiredAction":4058},"CVE-2024-43461",0.54486,"2024-09-16","Microsoft Windows MSHTML Platform contains a user interface (UI) misrepresentation of critical information vulnerability that allows an attacker to spoof a web page. This vulnerability was exploited in conjunction with CVE-2024-38112.",{"cveId":4192,"description":4193,"publishedDate":474,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":4194,"cisaVulnName":4195,"cisaDateAdded":474,"cisaShortDescription":4196,"cisaRequiredAction":4058},"CVE-2024-43491","Microsoft is aware of a vulnerability in Servicing Stack that has rolled back the fixes for some vulnerabilities affecting Optional Components on Windows 10, version 1507 (initial version released July 2015). This means that an attacker could exploit these previously mitigated vulnerabilities on Windows 10, version 1507 (Windows 10 Enterprise 2015 LTSB and Windows 10 IoT Enterprise 2015 LTSB) systems that have installed the Windows security update released on March 12, 2024—KB5035858 (OS Build 10240.20526) or other updates released until August 2024. All later versions of Windows 10 are not impacted by this vulnerability.\nThis servicing stack vulnerability is addressed by installing the September 2024 Servicing stack update (SSU KB5043936) AND the September 2024 Windows security update (KB5043083), in that order.\nNote: Windows 10, version 1507 reached the end of support (EOS) on May 9, 2017 for devices running the Pro, Home, Enterprise, Education, and Enterprise IoT editions. Only Windows 10 Enterprise 2015 LTSB and Windows 10 IoT Enterprise 2015 LTSB editions are still under support.",0.12916,"Microsoft Windows Update Use-After-Free Vulnerability","Microsoft Windows Update contains a use-after-free vulnerability that allows for remote code execution.",{"cveId":4198,"description":4199,"publishedDate":474,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4200,"cisaVulnName":4201,"cisaDateAdded":474,"cisaShortDescription":4202,"cisaRequiredAction":4058},"CVE-2024-38014","Windows Installer Elevation of Privilege Vulnerability",0.06263,"Microsoft Windows Installer Improper Privilege Management Vulnerability","Microsoft Windows Installer contains an improper privilege management vulnerability that could allow an attacker to gain SYSTEM privileges.",{"cveId":4204,"description":4205,"publishedDate":474,"cvssScore":4206,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4207,"cisaVulnName":4208,"cisaDateAdded":474,"cisaShortDescription":4209,"cisaRequiredAction":4058},"CVE-2024-38226","Microsoft Publisher Security Feature Bypass Vulnerability",7.3,0.02667,"Microsoft Publisher Protection Mechanism Failure Vulnerability","Microsoft Publisher contains a protection mechanism failure vulnerability that allows attacker to bypass Office macro policies used to block untrusted or malicious files.",{"cveId":4211,"description":4212,"publishedDate":474,"cvssScore":4213,"cvssVersion":3630,"severity":3588,"isKev":4,"epssScore":4214,"cisaVulnName":4215,"cisaDateAdded":474,"cisaShortDescription":4216,"cisaRequiredAction":4058},"CVE-2024-38217","Windows Mark of the Web Security Feature Bypass Vulnerability",5.4,0.10026,"Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability","Microsoft Windows Mark of the Web (MOTW) contains a protection mechanism failure vulnerability that allows an attacker to bypass MOTW-based defenses. This can result in a limited loss of integrity and availability of security features such as Protected View in Microsoft Office, which rely on MOTW tagging.",{"cveId":4218,"description":4219,"publishedDate":4220,"cvssScore":3829,"cvssVersion":4221,"severity":3583,"isKev":4,"epssScore":4222,"cisaVulnName":4223,"cisaDateAdded":4224,"cisaShortDescription":4225,"cisaRequiredAction":4058},"CVE-2024-7262","Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.16412 (exclusive) on Windows allows an attacker to load an arbitrary Windows library.\nThe vulnerability was found weaponized as a single-click exploit in the form of a deceptive spreadsheet document","2024-08-15","v4.0",0.03058,"Kingsoft WPS Office Path Traversal Vulnerability","2024-09-03","Kingsoft WPS Office contains a path traversal vulnerability in promecefpluginhost.exe on Windows that allows an attacker to load an arbitrary Windows library.",{"cveId":4227,"description":4228,"publishedDate":4229,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4230,"cisaVulnName":4231,"cisaDateAdded":4232,"cisaShortDescription":4233,"cisaRequiredAction":4058},"CVE-2024-7965","Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2024-08-21",0.18528,"Google Chromium V8 Inappropriate Implementation Vulnerability","2024-08-28","Google Chromium V8 contains an inappropriate implementation vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":4235,"description":4236,"publishedDate":4229,"cvssScore":4237,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":4238,"cisaVulnName":3858,"cisaDateAdded":4239,"cisaShortDescription":4240,"cisaRequiredAction":4058},"CVE-2024-7971","Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",9.6,0.21009,"2024-08-26","Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":4242,"description":3734,"publishedDate":1126,"cvssScore":4128,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4243,"cisaVulnName":4244,"cisaDateAdded":4229,"cisaShortDescription":4245,"cisaRequiredAction":4058},"CVE-2021-31196",0.54056,"Microsoft Exchange Server Information Disclosure Vulnerability","Microsoft Exchange Server contains an information disclosure vulnerability that allows for remote code execution.",{"cveId":4247,"description":4248,"publishedDate":758,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4249,"cisaVulnName":4250,"cisaDateAdded":758,"cisaShortDescription":4251,"cisaRequiredAction":4058},"CVE-2024-38189","Microsoft Project Remote Code Execution Vulnerability",0.08194,"Microsoft Project Remote Code Execution Vulnerability ","Microsoft Project contains an unspecified vulnerability that allows for remote code execution via a malicious file.",{"cveId":4253,"description":4254,"publishedDate":758,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4255,"cisaVulnName":4256,"cisaDateAdded":758,"cisaShortDescription":4257,"cisaRequiredAction":4058},"CVE-2024-38107","Windows Power Dependency Coordinator Elevation of Privilege Vulnerability",0.01635,"Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability","Microsoft Windows Power Dependency Coordinator contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to obtain SYSTEM privileges.",{"cveId":4259,"description":4054,"publishedDate":758,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4260,"cisaVulnName":4261,"cisaDateAdded":758,"cisaShortDescription":4262,"cisaRequiredAction":4058},"CVE-2024-38193",0.28739,"Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability","Microsoft Windows Ancillary Function Driver for WinSock contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges.",{"cveId":4264,"description":4265,"publishedDate":758,"cvssScore":3575,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4266,"cisaVulnName":4267,"cisaDateAdded":758,"cisaShortDescription":4268,"cisaRequiredAction":4058},"CVE-2024-38178","Scripting Engine Memory Corruption Vulnerability",0.4138,"Microsoft Windows Scripting Engine Memory Corruption Vulnerability","Microsoft Windows Scripting Engine contains a memory corruption vulnerability that allows unauthenticated attacker to initiate remote code execution via a specially crafted URL.",{"cveId":4270,"description":4135,"publishedDate":758,"cvssScore":52,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4271,"cisaVulnName":4272,"cisaDateAdded":758,"cisaShortDescription":4273,"cisaRequiredAction":4058},"CVE-2024-38106",0.06337,"Microsoft Windows Kernel Privilege Escalation Vulnerability","Microsoft Windows Kernel contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges. Successful exploitation of this vulnerability requires an attacker to win a race condition.",{"cveId":4275,"description":4212,"publishedDate":758,"cvssScore":3893,"cvssVersion":3630,"severity":3588,"isKev":4,"epssScore":4276,"cisaVulnName":4277,"cisaDateAdded":758,"cisaShortDescription":4278,"cisaRequiredAction":4058},"CVE-2024-38213",0.13626,"Microsoft Windows SmartScreen Security Feature Bypass Vulnerability","Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experience via a malicious file.",{"cveId":4280,"description":4281,"publishedDate":825,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4282,"cisaVulnName":4283,"cisaDateAdded":4284,"cisaShortDescription":4285,"cisaRequiredAction":4058},"CVE-2018-0824","A remote code execution vulnerability exists in \"Microsoft COM for Windows\" when it fails to properly handle serialized objects, aka \"Microsoft COM for Windows Remote Code Execution Vulnerability.\" This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.",0.73037,"Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability","2024-08-05","Microsoft COM for Windows contains a deserialization of untrusted data vulnerability that allows for privilege escalation and remote code execution via a specially crafted file or script.",{"cveId":4287,"description":4288,"publishedDate":4289,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4290,"cisaVulnName":3699,"cisaDateAdded":4291,"cisaShortDescription":4292,"cisaRequiredAction":4293},"CVE-2012-4792","Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object, and exploited in the wild in December 2012.","2012-12-30",0.78823,"2024-07-23","Microsoft Internet Explorer contains a use-after-free vulnerability that allows a remote attacker to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object.","The impacted product is end-of-life and should be disconnected if still in use.",{"cveId":4295,"description":4296,"publishedDate":487,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4297,"cisaVulnName":4298,"cisaDateAdded":487,"cisaShortDescription":4299,"cisaRequiredAction":4058},"CVE-2024-38080","Windows Hyper-V Elevation of Privilege Vulnerability",0.07115,"Microsoft Windows Hyper-V Privilege Escalation Vulnerability","Microsoft Windows Hyper-V contains a privilege escalation vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges.",{"cveId":4301,"description":4141,"publishedDate":487,"cvssScore":3575,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4302,"cisaVulnName":4143,"cisaDateAdded":487,"cisaShortDescription":4303,"cisaRequiredAction":4058},"CVE-2024-38112",0.84225,"Microsoft Windows MSHTML Platform contains a spoofing vulnerability that has a high impact to confidentiality, integrity, and availability.",{"cveId":4305,"description":4306,"publishedDate":692,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4307,"cisaVulnName":4308,"cisaDateAdded":2725,"cisaShortDescription":4309,"cisaRequiredAction":4310},"CVE-2024-26169","Windows Error Reporting Service Elevation of Privilege Vulnerability",0.03981,"Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability","Microsoft Windows Error Reporting Service contains an improper privilege management vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges.","Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.",{"cveId":4312,"description":4313,"publishedDate":4314,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":4315,"cisaVulnName":4316,"cisaDateAdded":4317,"cisaShortDescription":4318,"cisaRequiredAction":4058},"CVE-2024-4577","In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use \"Best-Fit\" behavior to replace characters in command line given to Win32 API functions. PHP CGI module may misinterpret those characters as PHP options, which may allow a malicious user to pass options to PHP binary being run, and thus reveal the source code of scripts, run arbitrary PHP code on the server, etc.","2024-06-09",0.99987,"PHP-CGI OS Command Injection Vulnerability","2024-06-12","PHP, specifically Windows-based PHP used in CGI mode, contains an OS command injection vulnerability that allows for arbitrary code execution. This vulnerability is a patch bypass for CVE-2012-1823.",{"cveId":4320,"description":4321,"publishedDate":1271,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4322,"cisaVulnName":4323,"cisaDateAdded":1271,"cisaShortDescription":4324,"cisaRequiredAction":4058},"CVE-2024-30040","Windows MSHTML Platform Security Feature Bypass Vulnerability",0.03939,"Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability","Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for a security feature bypass.",{"cveId":4326,"description":4327,"publishedDate":1271,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4328,"cisaVulnName":4329,"cisaDateAdded":1271,"cisaShortDescription":4330,"cisaRequiredAction":4058},"CVE-2024-30051","Windows DWM Core Library Elevation of Privilege Vulnerability",0.05687," Microsoft DWM Core Library Privilege Escalation Vulnerability","Microsoft DWM Core Library contains a privilege escalation vulnerability that allows an attacker to gain SYSTEM privileges.",{"cveId":4332,"description":4333,"publishedDate":611,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4334,"cisaVulnName":4335,"cisaDateAdded":4336,"cisaShortDescription":4337,"cisaRequiredAction":4058},"CVE-2024-29988","SmartScreen Prompt Security Feature Bypass Vulnerability",0.45151,"Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability","2024-04-30","Microsoft SmartScreen Prompt contains a security feature bypass vulnerability that allows an attacker to bypass the Mark of the Web (MotW) feature. This vulnerability can be chained with CVE-2023-38831 and CVE-2024-21412 to execute a malicious file.",{"cveId":4339,"description":4340,"publishedDate":515,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4341,"cisaVulnName":4342,"cisaDateAdded":4343,"cisaShortDescription":4344,"cisaRequiredAction":4345},"CVE-2022-38028","Windows Print Spooler Elevation of Privilege Vulnerability",0.14949,"Microsoft Windows Print Spooler Privilege Escalation Vulnerability ","2024-04-23","Microsoft Windows Print Spooler service contains a privilege escalation vulnerability. An attacker may modify a JavaScript constraints file and execute it with SYSTEM-level permissions.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.  ",{"cveId":4347,"description":4348,"publishedDate":987,"cvssScore":4128,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4349,"cisaVulnName":4350,"cisaDateAdded":4351,"cisaShortDescription":4352,"cisaRequiredAction":4058},"CVE-2023-24955","Microsoft SharePoint Server Remote Code Execution Vulnerability",0.84974,"Microsoft SharePoint Server Code Injection Vulnerability","2024-03-26","Microsoft SharePoint Server contains a code injection vulnerability that allows an authenticated attacker with Site Owner privileges to execute code remotely.",{"cveId":4354,"description":4135,"publishedDate":495,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4355,"cisaVulnName":4356,"cisaDateAdded":4357,"cisaShortDescription":4358,"cisaRequiredAction":4058},"CVE-2024-21338",0.5981,"Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability","2024-03-04","Microsoft Windows Kernel contains an exposed IOCTL with insufficient access control vulnerability within the IOCTL (input and output control) dispatcher in appid.sys that allows a local attacker to achieve privilege escalation.",{"cveId":4360,"description":4361,"publishedDate":60,"cvssScore":4362,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4363,"cisaVulnName":4364,"cisaDateAdded":1433,"cisaShortDescription":4365,"cisaRequiredAction":4058},"CVE-2023-29360","Microsoft Streaming Service Elevation of Privilege Vulnerability",8.4,0.2162,"Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability","Microsoft Streaming Service contains an untrusted pointer dereference vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges.",{"cveId":4367,"description":4368,"publishedDate":495,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":4369,"cisaVulnName":4370,"cisaDateAdded":4371,"cisaShortDescription":4372,"cisaRequiredAction":4058},"CVE-2024-21410","Microsoft Exchange Server Elevation of Privilege Vulnerability",0.12661,"Microsoft Exchange Server Privilege Escalation Vulnerability","2024-02-15","Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.",{"cveId":4374,"description":4375,"publishedDate":495,"cvssScore":3907,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4376,"cisaVulnName":4377,"cisaDateAdded":495,"cisaShortDescription":4378,"cisaRequiredAction":4058},"CVE-2024-21412","Internet Shortcut Files Security Feature Bypass Vulnerability",0.9941,"Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability","Microsoft Windows Internet Shortcut Files contains an unspecified vulnerability that allows for a security feature bypass.",{"cveId":4380,"description":4381,"publishedDate":495,"cvssScore":4382,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4383,"cisaVulnName":4277,"cisaDateAdded":495,"cisaShortDescription":4384,"cisaRequiredAction":4058},"CVE-2024-21351","Windows SmartScreen Security Feature Bypass Vulnerability",7.6,0.27798,"Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experience and inject code to potentially gain code execution, which could lead to some data exposure, lack of system availability, or both.",{"cveId":4386,"description":4387,"publishedDate":4388,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4389,"cisaVulnName":3858,"cisaDateAdded":4390,"cisaShortDescription":4391,"cisaRequiredAction":4058},"CVE-2023-4762","Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)","2023-09-05",0.41375,"2024-02-06","Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":4393,"description":4394,"publishedDate":60,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":4395,"cisaVulnName":4396,"cisaDateAdded":1769,"cisaShortDescription":4397,"cisaRequiredAction":4058},"CVE-2023-29357","Microsoft SharePoint Server Elevation of Privilege Vulnerability",0.99984,"Microsoft SharePoint Server Privilege Escalation Vulnerability","Microsoft SharePoint Server contains an unspecified vulnerability that allows an unauthenticated attacker, who has gained access to spoofed JWT authentication tokens, to use them for executing a network attack. This attack bypasses authentication, enabling the attacker to gain administrator privileges.",{"cveId":4399,"description":4400,"publishedDate":4401,"cvssScore":4237,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":4402,"cisaVulnName":4403,"cisaDateAdded":4404,"cisaShortDescription":4405,"cisaRequiredAction":4058},"CVE-2023-6345","Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)","2023-11-29",0.16468,"Google Skia Integer Overflow Vulnerability","2023-11-30","Google Chromium Skia contains an integer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a malicious file. This vulnerability affects Google Chrome and ChromeOS, Android, Flutter, and possibly other products.",{"cveId":4407,"description":4212,"publishedDate":42,"cvssScore":4213,"cvssVersion":3630,"severity":3588,"isKev":4,"epssScore":4408,"cisaVulnName":4409,"cisaDateAdded":4410,"cisaShortDescription":4411,"cisaRequiredAction":4058},"CVE-2023-36584",0.03251,"Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability","2023-11-16","Microsoft Windows Mark of the Web (MOTW) contains a security feature bypass vulnerability resulting in a limited loss of integrity and availability of security features.",{"cveId":4413,"description":4381,"publishedDate":533,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4414,"cisaVulnName":4277,"cisaDateAdded":533,"cisaShortDescription":4415,"cisaRequiredAction":4058},"CVE-2023-36025",0.88085,"Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to bypass Windows Defender SmartScreen checks and their associated prompts.",{"cveId":4417,"description":4327,"publishedDate":533,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4418,"cisaVulnName":4419,"cisaDateAdded":533,"cisaShortDescription":4420,"cisaRequiredAction":4058},"CVE-2023-36033",0.10945,"Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability","Microsoft Windows Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that allows for privilege escalation.",{"cveId":4422,"description":4423,"publishedDate":533,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4424,"cisaVulnName":4425,"cisaDateAdded":533,"cisaShortDescription":4426,"cisaRequiredAction":4058},"CVE-2023-36036","Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability",0.1667,"Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability","Microsoft Windows Cloud Files Mini Filter Driver contains a privilege escalation vulnerability that could allow an attacker to gain SYSTEM privileges.",{"cveId":4428,"description":4429,"publishedDate":4430,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4431,"cisaVulnName":4432,"cisaDateAdded":42,"cisaShortDescription":4433,"cisaRequiredAction":4058},"CVE-2023-21608","Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","2023-01-18",0.59427,"Adobe Acrobat and Reader Use-After-Free Vulnerability","Adobe Acrobat and Reader contains a use-after-free vulnerability that allows for code execution in the context of the current user.",{"cveId":4435,"description":4436,"publishedDate":42,"cvssScore":3575,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":3901,"cisaVulnName":4437,"cisaDateAdded":42,"cisaShortDescription":4438,"cisaRequiredAction":3693},"CVE-2023-44487","The HTTP\u002F2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.","HTTP\u002F2 Rapid Reset Attack Vulnerability","HTTP\u002F2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).",{"cveId":4440,"description":4441,"publishedDate":42,"cvssScore":3893,"cvssVersion":3630,"severity":3588,"isKev":4,"epssScore":4442,"cisaVulnName":4441,"cisaDateAdded":42,"cisaShortDescription":4443,"cisaRequiredAction":4058},"CVE-2023-36563","Microsoft WordPad Information Disclosure Vulnerability",0.20318,"Microsoft WordPad contains an unspecified vulnerability that allows for information disclosure.",{"cveId":4445,"description":4446,"publishedDate":42,"cvssScore":3681,"cvssVersion":3630,"severity":3588,"isKev":4,"epssScore":4447,"cisaVulnName":4448,"cisaDateAdded":42,"cisaShortDescription":4449,"cisaRequiredAction":4058},"CVE-2023-41763","Skype for Business Elevation of Privilege Vulnerability",0.90547,"Microsoft Skype for Business Privilege Escalation Vulnerability","Microsoft Skype for Business contains an unspecified vulnerability that allows for privilege escalation.",{"cveId":4451,"description":4452,"publishedDate":267,"cvssScore":52,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4453,"cisaVulnName":4454,"cisaDateAdded":4455,"cisaShortDescription":4456,"cisaRequiredAction":4058},"CVE-2023-28229","Windows CNG Key Isolation Service Elevation of Privilege Vulnerability",0.01671,"Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability","2023-10-04","Microsoft Windows Cryptographic Next Generation (CNG) Key Isolation Service contains an unspecified vulnerability that allows an attacker to gain specific limited SYSTEM privileges.",{"cveId":4458,"description":4459,"publishedDate":4460,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4461,"cisaVulnName":4462,"cisaDateAdded":4463,"cisaShortDescription":4464,"cisaRequiredAction":4058},"CVE-2023-5217","Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2023-09-28",0.49013,"Google Chromium libvpx Heap Buffer Overflow Vulnerability","2023-10-02","Google Chromium libvpx contains a heap buffer overflow vulnerability in vp8 encoding that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could impact web browsers using libvpx, including but not limited to Google Chrome.",{"cveId":4466,"description":4467,"publishedDate":4468,"cvssScore":4128,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4469,"cisaVulnName":4470,"cisaDateAdded":4471,"cisaShortDescription":4472,"cisaRequiredAction":4058},"CVE-2023-41179","A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security and Worry-Free Business Security Services could allow an attacker to manipulate the module to execute arbitrary commands on an affected installation.\r\n\r\nNote that an attacker must first obtain administrative console access on the target system in order to exploit this vulnerability.","2023-09-19",0.04216,"Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability","2023-09-21","Trend Micro Apex One and Worry-Free Business Security contain an unspecified vulnerability in the third-party anti-virus uninstaller that could allow an attacker to manipulate the module to conduct remote code execution. An attacker must first obtain administrative console access on the target system in order to exploit this vulnerability.",{"cveId":4474,"description":4475,"publishedDate":4476,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4477,"cisaVulnName":4478,"cisaDateAdded":4479,"cisaShortDescription":4480,"cisaRequiredAction":4058},"CVE-2023-26369","Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","2023-09-13",0.06746,"Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability","2023-09-14","Adobe Acrobat and Reader contains an out-of-bounds write vulnerability that allows for code execution.",{"cveId":4482,"description":4483,"publishedDate":624,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4484,"cisaVulnName":4485,"cisaDateAdded":4476,"cisaShortDescription":4486,"cisaRequiredAction":4058},"CVE-2023-4863","Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)",0.99979,"Google Chromium WebP Heap-Based Buffer Overflow Vulnerability","Google Chromium WebP contains a heap-based buffer overflow vulnerability that allows a remote attacker to perform an out-of-bounds memory write via a crafted HTML page. This vulnerability can affect applications that use the WebP Codec.",{"cveId":4488,"description":4489,"publishedDate":624,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4490,"cisaVulnName":4491,"cisaDateAdded":624,"cisaShortDescription":4492,"cisaRequiredAction":4058},"CVE-2023-36802","Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability",0.27909,"Microsoft Streaming Service Proxy Privilege Escalation Vulnerability","Microsoft Streaming Service Proxy contains an unspecified vulnerability that allows for privilege escalation.",{"cveId":4494,"description":4495,"publishedDate":624,"cvssScore":3893,"cvssVersion":3630,"severity":3588,"isKev":4,"epssScore":4496,"cisaVulnName":4495,"cisaDateAdded":624,"cisaShortDescription":4497,"cisaRequiredAction":4058},"CVE-2023-36761","Microsoft Word Information Disclosure Vulnerability",0.1957,"Microsoft Word contains an unspecified vulnerability that allows for information disclosure.",{"cveId":4499,"description":4500,"publishedDate":523,"cvssScore":3575,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4501,"cisaVulnName":4502,"cisaDateAdded":4503,"cisaShortDescription":4504,"cisaRequiredAction":4058},"CVE-2023-38180",".NET and Visual Studio Denial of Service Vulnerability",0.14127,"Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability","2023-08-09","Microsoft .NET Core and Visual Studio contain an unspecified vulnerability that allows for denial-of-service (DoS).",{"cveId":4506,"description":4507,"publishedDate":574,"cvssScore":3575,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4508,"cisaVulnName":4509,"cisaDateAdded":4510,"cisaShortDescription":4511,"cisaRequiredAction":4058},"CVE-2023-36884","Windows Search Remote Code Execution Vulnerability",0.99439,"Microsoft Windows Search Remote Code Execution Vulnerability","2023-07-17","Microsoft Windows Search contains an unspecified vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file, leading to remote code execution.",{"cveId":4513,"description":4514,"publishedDate":574,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4515,"cisaVulnName":4514,"cisaDateAdded":574,"cisaShortDescription":4516,"cisaRequiredAction":4310},"CVE-2023-35311","Microsoft Outlook Security Feature Bypass Vulnerability",0.15522,"Microsoft Outlook contains a security feature bypass vulnerability that allows an attacker to bypass the Microsoft Outlook Security Notice prompt.",{"cveId":4518,"description":4381,"publishedDate":574,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4519,"cisaVulnName":4520,"cisaDateAdded":574,"cisaShortDescription":4521,"cisaRequiredAction":4310},"CVE-2023-32049",0.04156,"Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability","Microsoft Windows Defender SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the Open File - Security Warning prompt.",{"cveId":4523,"description":4524,"publishedDate":574,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4525,"cisaVulnName":4526,"cisaDateAdded":574,"cisaShortDescription":4527,"cisaRequiredAction":4310},"CVE-2023-32046","Windows MSHTML Platform Elevation of Privilege Vulnerability",0.09969,"Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability","Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for privilege escalation.",{"cveId":4529,"description":4306,"publishedDate":574,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4530,"cisaVulnName":4531,"cisaDateAdded":574,"cisaShortDescription":4532,"cisaRequiredAction":4310},"CVE-2023-36874",0.42564,"Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability","Microsoft Windows Error Reporting Service contains an unspecified vulnerability that allows for privilege escalation.",{"cveId":4534,"description":4535,"publishedDate":4536,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4537,"cisaVulnName":4538,"cisaDateAdded":4539,"cisaShortDescription":4540,"cisaRequiredAction":4541},"CVE-2016-0165","The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka \"Win32k Elevation of Privilege Vulnerability,\" a different vulnerability than CVE-2016-0143 and CVE-2016-0167.","2016-04-12",0.1368,"Microsoft Win32k Privilege Escalation Vulnerability","2023-06-22","Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.","Apply updates per vendor instructions.",{"cveId":4543,"description":4544,"publishedDate":4545,"cvssScore":3575,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4546,"cisaVulnName":4547,"cisaDateAdded":4539,"cisaShortDescription":4548,"cisaRequiredAction":4541},"CVE-2016-9079","A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users on Windows. This vulnerability affects Firefox \u003C 50.0.2, Firefox ESR \u003C 45.5.1, and Thunderbird \u003C 45.5.1.","2018-06-11",0.87357,"Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability","Mozilla Firefox, Firefox ESR, and Thunderbird contain a use-after-free vulnerability in SVG Animation, targeting Firefox and Tor browser users on Windows.",{"cveId":4550,"description":4551,"publishedDate":4552,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4553,"cisaVulnName":3858,"cisaDateAdded":4554,"cisaShortDescription":4555,"cisaRequiredAction":4541},"CVE-2023-3079","Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2023-06-05",0.37858,"2023-06-07","Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":4557,"description":4558,"publishedDate":987,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4559,"cisaVulnName":4560,"cisaDateAdded":987,"cisaShortDescription":4561,"cisaRequiredAction":4541},"CVE-2023-29336","Win32k Elevation of Privilege Vulnerability",0.41185,"Microsoft Win32K Privilege Escalation Vulnerability","Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation up to SYSTEM privileges.",{"cveId":4563,"description":3741,"publishedDate":267,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4564,"cisaVulnName":4565,"cisaDateAdded":267,"cisaShortDescription":4566,"cisaRequiredAction":4541},"CVE-2023-28252",0.48892,"Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability","Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.",{"cveId":4568,"description":4569,"publishedDate":1030,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4570,"cisaVulnName":4571,"cisaDateAdded":4572,"cisaShortDescription":4573,"cisaRequiredAction":4541},"CVE-2019-1388","An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Windows Certificate Dialog Elevation of Privilege Vulnerability'.",0.08589,"Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability","2023-04-07","Microsoft Windows Certificate Dialog contains a privilege escalation vulnerability, allowing attackers to run processes in an elevated context.",{"cveId":4575,"description":4576,"publishedDate":909,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4577,"cisaVulnName":4578,"cisaDateAdded":4579,"cisaShortDescription":4580,"cisaRequiredAction":4293},"CVE-2013-3163","Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3144 and CVE-2013-3151.",0.70676,"Microsoft Internet Explorer Memory Corruption Vulnerability","2023-03-30","Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause a denial of service via a crafted website.",{"cveId":4582,"description":4583,"publishedDate":413,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":4584,"cisaVulnName":4585,"cisaDateAdded":413,"cisaShortDescription":4586,"cisaRequiredAction":4541},"CVE-2023-23397","Microsoft Outlook Elevation of Privilege Vulnerability",0.97159,"Microsoft Office Outlook Privilege Escalation Vulnerability","Microsoft Office Outlook contains a privilege escalation vulnerability that allows for a NTLM Relay attack against another service to authenticate as the user.",{"cveId":4588,"description":4381,"publishedDate":413,"cvssScore":4589,"cvssVersion":3630,"severity":3588,"isKev":4,"epssScore":4590,"cisaVulnName":4277,"cisaDateAdded":413,"cisaShortDescription":4591,"cisaRequiredAction":4541},"CVE-2023-24880",4.4,0.78005,"Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file.",{"cveId":4593,"description":4594,"publishedDate":4595,"cvssScore":4128,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4596,"cisaVulnName":4597,"cisaDateAdded":4598,"cisaShortDescription":4599,"cisaRequiredAction":4541},"CVE-2020-5741","Deserialization of Untrusted Data in Plex Media Server on Windows allows a remote, authenticated attacker to execute arbitrary Python code.","2020-05-08",0.72936,"Plex Media Server Remote Code Execution Vulnerability","2023-03-10","Plex Media Server contains a remote code execution vulnerability that allows an attacker with access to the server administrator's Plex account to upload a malicious file via the Camera Upload feature and have the media server execute it.",{"cveId":4601,"description":4602,"publishedDate":4603,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":4604,"cisaVulnName":4605,"cisaDateAdded":4606,"cisaShortDescription":4607,"cisaRequiredAction":4541},"CVE-2022-47986","IBM Aspera Faspex 4.4.2 Patch Level 1 and earlier could allow a remote attacker to execute arbitrary code on the system, caused by a YAML deserialization flaw. By sending a specially crafted obsolete API call, an attacker could exploit this vulnerability to execute arbitrary code on the system. The obsolete API call was removed in Faspex 4.4.2 PL2. IBM X-Force ID: 243512.","2023-02-17",0.99965,"IBM Aspera Faspex Code Execution Vulnerability","2023-02-21","IBM Aspera Faspex could allow a remote attacker to execute code on the system, caused by a YAML deserialization flaw.",{"cveId":4609,"description":3741,"publishedDate":332,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4610,"cisaVulnName":4565,"cisaDateAdded":332,"cisaShortDescription":4566,"cisaRequiredAction":4541},"CVE-2023-23376",0.10853,{"cveId":4612,"description":4613,"publishedDate":332,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4614,"cisaVulnName":4615,"cisaDateAdded":332,"cisaShortDescription":4616,"cisaRequiredAction":4541},"CVE-2023-21823","Windows Graphics Component Remote Code Execution Vulnerability",0.05563,"Microsoft Windows Graphic Component Privilege Escalation Vulnerability","Microsoft Windows Graphic Component contains an unspecified vulnerability that allows for privilege escalation.",{"cveId":4618,"description":4205,"publishedDate":332,"cvssScore":4206,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4619,"cisaVulnName":4620,"cisaDateAdded":332,"cisaShortDescription":4621,"cisaRequiredAction":4541},"CVE-2023-21715",0.12011,"Microsoft Office Publisher Security Feature Bypass Vulnerability","Microsoft Office Publisher contains a security feature bypass vulnerability that allows for a local, authenticated attack on a targeted system.",{"cveId":4623,"description":4624,"publishedDate":4625,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4626,"cisaVulnName":4627,"cisaDateAdded":4628,"cisaShortDescription":4629,"cisaRequiredAction":4541},"CVE-2015-2291","(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F, or (d) 0x80862007 IOCTL call.","2017-08-09",0.15685,"Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability","2023-02-10","Intel ethernet diagnostics driver for Windows IQVW32.sys and IQVW64.sys contain an unspecified vulnerability that allows for a denial-of-service (DoS).",{"cveId":4631,"description":4632,"publishedDate":1525,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4633,"cisaVulnName":4634,"cisaDateAdded":1525,"cisaShortDescription":4635,"cisaRequiredAction":4541},"CVE-2023-21674","Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability",0.34206,"Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability","Microsoft Windows Advanced Local Procedure Call (ALPC) contains an unspecified vulnerability that allows for privilege escalation.",{"cveId":4637,"description":4368,"publishedDate":1779,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4638,"cisaVulnName":4370,"cisaDateAdded":1525,"cisaShortDescription":4639,"cisaRequiredAction":4541},"CVE-2022-41080",0.77326,"Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. This vulnerability is chainable with CVE-2022-41082, which allows for remote code execution.",{"cveId":4641,"description":4381,"publishedDate":850,"cvssScore":4213,"cvssVersion":3630,"severity":3588,"isKev":4,"epssScore":4642,"cisaVulnName":4643,"cisaDateAdded":850,"cisaShortDescription":4644,"cisaRequiredAction":4541},"CVE-2022-44698",0.76267,"Microsoft Defender SmartScreen Security Feature Bypass Vulnerability","Microsoft Defender SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file.",{"cveId":4646,"description":4647,"publishedDate":4648,"cvssScore":4237,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":4649,"cisaVulnName":4650,"cisaDateAdded":4651,"cisaShortDescription":4652,"cisaRequiredAction":4541},"CVE-2022-4135","Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)","2022-11-25",0.31864,"Google Chromium GPU Heap Buffer Overflow Vulnerability","2022-11-28","Google Chromium GPU contains a heap buffer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":4654,"description":4212,"publishedDate":1779,"cvssScore":4213,"cvssVersion":3630,"severity":3588,"isKev":4,"epssScore":4655,"cisaVulnName":4409,"cisaDateAdded":4656,"cisaShortDescription":4411,"cisaRequiredAction":4541},"CVE-2022-41049",0.02634,"2022-11-14",{"cveId":4658,"description":4659,"publishedDate":1779,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4660,"cisaVulnName":4661,"cisaDateAdded":2413,"cisaShortDescription":4662,"cisaRequiredAction":4541},"CVE-2022-41128","Windows Scripting Languages Remote Code Execution Vulnerability",0.24623,"Microsoft Windows Scripting Languages Remote Code Execution Vulnerability","Microsoft Windows contains an unspecified vulnerability in the JScript9 scripting language which allows for remote code execution.",{"cveId":4664,"description":4452,"publishedDate":1779,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4665,"cisaVulnName":4454,"cisaDateAdded":2413,"cisaShortDescription":4666,"cisaRequiredAction":4541},"CVE-2022-41125",0.03046,"Microsoft Windows Cryptographic Next Generation (CNG) Key Isolation Service contains an unspecified vulnerability that allows an attacker to gain SYSTEM-level privileges.",{"cveId":4668,"description":4340,"publishedDate":1779,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4669,"cisaVulnName":4670,"cisaDateAdded":2413,"cisaShortDescription":4671,"cisaRequiredAction":4541},"CVE-2022-41073",0.02362,"Microsoft Windows Print Spooler Privilege Escalation Vulnerability","Microsoft Windows Print Spooler contains an unspecified vulnerability that allows an attacker to gain SYSTEM-level privileges.",{"cveId":4673,"description":4212,"publishedDate":1779,"cvssScore":4213,"cvssVersion":3630,"severity":3588,"isKev":4,"epssScore":4674,"cisaVulnName":4409,"cisaDateAdded":2413,"cisaShortDescription":4411,"cisaRequiredAction":4541},"CVE-2022-41091",0.0191,{"cveId":4676,"description":4677,"publishedDate":515,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4678,"cisaVulnName":4679,"cisaDateAdded":515,"cisaShortDescription":4680,"cisaRequiredAction":4541},"CVE-2022-41033","Windows COM+ Event System Service Elevation of Privilege Vulnerability",0.01886,"Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability","Microsoft Windows COM+ Event System Service contains an unspecified vulnerability that allows for privilege escalation.",{"cveId":4682,"description":4368,"publishedDate":4683,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4684,"cisaVulnName":4685,"cisaDateAdded":4686,"cisaShortDescription":4687,"cisaRequiredAction":4541},"CVE-2022-41040","2022-10-03",0.99956,"Microsoft Exchange Server Server-Side Request Forgery Vulnerability","2022-09-30","Microsoft Exchange Server allows for server-side request forgery. Dubbed \"ProxyNotShell,\" this vulnerability is chainable with CVE-2022-41082 which allows for remote code execution.",{"cveId":4689,"description":3734,"publishedDate":4683,"cvssScore":213,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4690,"cisaVulnName":3734,"cisaDateAdded":4686,"cisaShortDescription":4691,"cisaRequiredAction":4541},"CVE-2022-41082",0.9997,"Microsoft Exchange Server contains an unspecified vulnerability that allows for authenticated remote code execution. Dubbed \"ProxyNotShell,\" this vulnerability is chainable with CVE-2022-41040 which allows for the remote code execution.",{"cveId":4693,"description":4694,"publishedDate":4695,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4696,"cisaVulnName":3846,"cisaDateAdded":4697,"cisaShortDescription":4698,"cisaRequiredAction":4541},"CVE-2010-2568","Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or remote attackers to execute arbitrary code via a crafted (1) .LNK or (2) .PIF shortcut file, which is not properly handled during icon display in Windows Explorer, as demonstrated in the wild in July 2010, and originally reported for malware that leverages CVE-2010-2772 in Siemens WinCC SCADA systems.","2010-07-22",0.89623,"2022-09-15","Microsoft Windows incorrectly parses shortcuts in such a way that malicious code may be executed when the operating system displays the icon of a malicious shortcut file. An attacker who successfully exploited this vulnerability could execute code as the logged-on user.",{"cveId":4700,"description":4701,"publishedDate":4702,"cvssScore":4128,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4703,"cisaVulnName":4704,"cisaDateAdded":4697,"cisaShortDescription":4705,"cisaRequiredAction":4541},"CVE-2022-40139","Improper validation of some components used by the rollback mechanism in Trend Micro Apex One and Trend Micro Apex One as a Service clients could allow a Apex One server administrator to instruct affected clients to download an unverified rollback package, which could lead to remote code execution. Please note: an attacker must first obtain Apex One server administration console access in order to exploit this vulnerability.","2022-09-19",0.03439,"Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability","Trend Micro Apex One and Apex One as a Service contain an improper validation of rollback mechanism components that could lead to remote code execution.",{"cveId":4707,"description":3741,"publishedDate":1820,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4708,"cisaVulnName":4565,"cisaDateAdded":4709,"cisaShortDescription":4566,"cisaRequiredAction":4541},"CVE-2022-37969",0.28275,"2022-09-14",{"cveId":4711,"description":4712,"publishedDate":224,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4713,"cisaVulnName":4714,"cisaDateAdded":4715,"cisaShortDescription":4716,"cisaRequiredAction":4541},"CVE-2022-26923","Active Directory Domain Services Elevation of Privilege Vulnerability",0.835,"Microsoft Active Directory Domain Services Privilege Escalation Vulnerability","2022-08-18","An authenticated user could manipulate attributes on computer accounts they own or manage, and acquire a certificate from Active Directory Certificate Services that would allow for privilege escalation to SYSTEM.",{"cveId":4718,"description":4719,"publishedDate":854,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4720,"cisaVulnName":4721,"cisaDateAdded":4715,"cisaShortDescription":4722,"cisaRequiredAction":4541},"CVE-2022-21971","Windows Runtime Remote Code Execution Vulnerability",0.53781,"Microsoft Windows Runtime Remote Code Execution Vulnerability","Microsoft Windows Runtime contains an unspecified vulnerability that allows for remote code execution.",{"cveId":4724,"description":4725,"publishedDate":4726,"cvssScore":3893,"cvssVersion":3630,"severity":3588,"isKev":4,"epssScore":4727,"cisaVulnName":4728,"cisaDateAdded":4715,"cisaShortDescription":4729,"cisaRequiredAction":4541},"CVE-2022-2856","Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML page.","2022-09-26",0.04561,"Google Chromium Intents Insufficient Input Validation Vulnerability","Google Chromium Intents contains an insufficient validation of untrusted input vulnerability that allows a remote attacker to browse to a malicious website via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":4731,"description":4732,"publishedDate":465,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4733,"cisaVulnName":4732,"cisaDateAdded":465,"cisaShortDescription":4734,"cisaRequiredAction":4541},"CVE-2022-34713","Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability",0.67757,"A remote code execution vulnerability exists when Microsoft Windows MSDT is called using the URL protocol from a calling application.",{"cveId":4736,"description":4737,"publishedDate":670,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4738,"cisaVulnName":4739,"cisaDateAdded":670,"cisaShortDescription":4740,"cisaRequiredAction":4541},"CVE-2022-22047","Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability",0.18765,"Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability","Microsoft Windows CSRSS contains an unspecified vulnerability that allows for privilege escalation to SYSTEM privileges.",{"cveId":4742,"description":4743,"publishedDate":224,"cvssScore":3907,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4744,"cisaVulnName":4745,"cisaDateAdded":4746,"cisaShortDescription":4747,"cisaRequiredAction":4748},"CVE-2022-26925","Windows LSA Spoofing Vulnerability",0.10476,"Microsoft Windows LSA Spoofing Vulnerability","2022-07-01","Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability where an attacker can coerce the domain controller to authenticate to the attacker using NTLM.","Apply remediation actions outlined in CISA guidance [https:\u002F\u002Fwww.cisa.gov\u002Fguidance-applying-june-microsoft-patch].",{"cveId":4750,"description":4751,"publishedDate":4752,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4753,"cisaVulnName":4732,"cisaDateAdded":4754,"cisaShortDescription":4755,"cisaRequiredAction":4541},"CVE-2022-30190","A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The attacker can then install programs, view, change, or delete data, or create new accounts in the context allowed by the user’s rights.\nPlease see the MSRC Blog Entry for important information about steps you can take to protect your system from this vulnerability.","2022-06-01",0.99163,"2022-06-14","A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run code with the privileges of the calling application.",{"cveId":4757,"description":4758,"publishedDate":4759,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":4760,"cisaVulnName":4761,"cisaDateAdded":4762,"cisaShortDescription":4763,"cisaRequiredAction":4541},"CVE-2011-2462","Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, as exploited in the wild in December 2011.","2011-12-07",0.88581,"Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability","2022-06-08","The Universal 3D (U3D) component in Adobe Reader and Acrobat contains a memory corruption vulnerability which could allow remote attackers to execute code or cause denial-of-service (DoS).",{"cveId":4765,"description":4766,"publishedDate":4767,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4768,"cisaVulnName":4769,"cisaDateAdded":4762,"cisaShortDescription":4770,"cisaRequiredAction":4541},"CVE-2016-5198","V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac included incorrect optimisation assumptions, which allowed a remote attacker to perform arbitrary read\u002Fwrite operations, leading to code execution, via a crafted HTML page.","2017-01-19",0.34164,"Google Chromium V8 Out-of-Bounds Memory Vulnerability","Google Chromium V8 Engine contains an out-of-bounds memory access vulnerability that allows a remote attacker to perform read\u002Fwrite operations, leading to code execution, via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":4772,"description":4773,"publishedDate":4774,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4775,"cisaVulnName":4776,"cisaDateAdded":4762,"cisaShortDescription":4777,"cisaRequiredAction":4541},"CVE-2009-3953","The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document, related to a CLODProgressiveMeshDeclaration \"array boundary issue,\" a different vulnerability than CVE-2009-2994.","2010-01-13",0.83219,"Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability","Adobe Acrobat and Reader contains an array boundary issue in Universal 3D (U3D) support that could lead to remote code execution.",{"cveId":4779,"description":4780,"publishedDate":4781,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4782,"cisaVulnName":3858,"cisaDateAdded":4762,"cisaShortDescription":4783,"cisaRequiredAction":4541},"CVE-2017-5070","Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.","2017-10-27",0.32071,"Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":4785,"description":4786,"publishedDate":4787,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4788,"cisaVulnName":4789,"cisaDateAdded":4762,"cisaShortDescription":4790,"cisaRequiredAction":4541},"CVE-2017-5030","Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed a remote attacker to execute arbitrary code via a crafted HTML page.","2017-04-24",0.40635,"Google Chromium V8 Memory Corruption Vulnerability","Google Chromium V8 Engine contains a memory corruption vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":4792,"description":4793,"publishedDate":4794,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4795,"cisaVulnName":4796,"cisaDateAdded":4762,"cisaShortDescription":4797,"cisaRequiredAction":4541},"CVE-2018-4990","Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Double Free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.","2018-07-09",0.3594,"Adobe Acrobat and Reader Double Free Vulnerability","Adobe Acrobat and Reader have a double free vulnerability that could lead to remote code execution.",{"cveId":4799,"description":4800,"publishedDate":1065,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4801,"cisaVulnName":4802,"cisaDateAdded":4762,"cisaShortDescription":4803,"cisaRequiredAction":4541},"CVE-2012-1889","Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.",0.83516,"Microsoft XML Core Services Memory Corruption Vulnerability","Microsoft XML Core Services contains a memory corruption vulnerability which could allow for remote code execution.",{"cveId":4805,"description":4806,"publishedDate":3168,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4807,"cisaVulnName":4808,"cisaDateAdded":4762,"cisaShortDescription":4809,"cisaRequiredAction":4541},"CVE-2006-2492","Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-assisted attackers to execute arbitrary code via a malformed object pointer, as originally reported by ISC on 20060519 for a zero-day attack.",0.48107,"Microsoft Word Malformed Object Pointer Vulnerability","Microsoft Word and Microsoft Works Suites contain a malformed object pointer which allows attackers to execute code.",{"cveId":4811,"description":4812,"publishedDate":3051,"cvssScore":3907,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4813,"cisaVulnName":3699,"cisaDateAdded":4762,"cisaShortDescription":4814,"cisaRequiredAction":4541},"CVE-2012-4969","Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site, as exploited in the wild in September 2012.",0.8025,"Microsoft Internet Explorer contains a use-after-free vulnerability that allows remote attackers to execute code via a crafted web site.",{"cveId":4816,"description":4817,"publishedDate":4818,"cvssScore":3907,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4819,"cisaVulnName":4820,"cisaDateAdded":4762,"cisaShortDescription":4821,"cisaRequiredAction":4293},"CVE-2012-0754","Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.","2012-02-16",0.91085,"Adobe Flash Player Memory Corruption Vulnerability","Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).",{"cveId":4823,"description":4824,"publishedDate":585,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4825,"cisaVulnName":4826,"cisaDateAdded":4762,"cisaShortDescription":4827,"cisaRequiredAction":4541},"CVE-2009-0557","Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open XML File Format Converter for Mac; Microsoft Office Excel Viewer 2003 SP3; Microsoft Office Excel Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allow remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka \"Object Record Corruption Vulnerability.\"",0.52845,"Microsoft Office Object Record Corruption Vulnerability","Microsoft Office contains an object record corruption vulnerability that allows remote attackers to execute code via a crafted Excel file with a malformed record object.",{"cveId":4829,"description":4830,"publishedDate":1810,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4831,"cisaVulnName":4832,"cisaDateAdded":4762,"cisaShortDescription":4833,"cisaRequiredAction":4541},"CVE-2012-0151","The Authenticode Signature Verification function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly validate the digest of a signed portable executable (PE) file, which allows user-assisted remote attackers to execute arbitrary code via a modified file with additional content, aka \"WinVerifyTrust Signature Validation Vulnerability.\"",0.87658,"Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability","The Authenticode Signature Verification function in Microsoft Windows (WinVerifyTrust) does not properly validate the digest of a signed portable executable (PE) file, which allows user-assisted remote attackers to execute code.",{"cveId":4835,"description":4836,"publishedDate":4837,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4838,"cisaVulnName":4839,"cisaDateAdded":4762,"cisaShortDescription":4840,"cisaRequiredAction":4541},"CVE-2010-2572","Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint 95 document, aka \"PowerPoint Parsing Buffer Overflow Vulnerability.\"","2010-11-10",0.58646,"Microsoft PowerPoint Buffer Overflow Vulnerability","Microsoft PowerPoint contains a buffer overflow vulnerability that alllows for remote code execution.",{"cveId":4842,"description":4843,"publishedDate":4844,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4845,"cisaVulnName":4846,"cisaDateAdded":4762,"cisaShortDescription":4847,"cisaRequiredAction":4293},"CVE-2011-0609","Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content, as demonstrated by a .swf file embedded in an Excel spreadsheet, and as exploited in the wild in March 2011.","2011-03-15",0.63507,"Adobe Flash Player Unspecified Vulnerability","Adobe Flash Player contains an unspecified vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).",{"cveId":4849,"description":4850,"publishedDate":585,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4851,"cisaVulnName":4852,"cisaDateAdded":4762,"cisaShortDescription":4853,"cisaRequiredAction":4541},"CVE-2009-0563","Stack-based buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File Format Converter for Mac; Microsoft Office Word Viewer 2003 SP3; Microsoft Office Word Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a Word document with a crafted tag containing an invalid length field, aka \"Word Buffer Overflow Vulnerability.\"",0.59634,"Microsoft Office Buffer Overflow Vulnerability","Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via a Word document with a crafted tag containing an invalid length field.",{"cveId":4855,"description":4856,"publishedDate":4857,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4858,"cisaVulnName":4432,"cisaDateAdded":4762,"cisaShortDescription":4859,"cisaRequiredAction":4541},"CVE-2009-4324","Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild in December 2009.","2009-12-15",0.8188,"Use-after-free vulnerability in Adobe Acrobat and Reader allows remote attackers to execute code via a crafted PDF file.",{"cveId":4861,"description":4862,"publishedDate":4863,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4864,"cisaVulnName":4852,"cisaDateAdded":4762,"cisaShortDescription":4865,"cisaRequiredAction":4541},"CVE-2013-1331","Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an Office document, leading to improper memory allocation, aka \"Office Buffer Overflow Vulnerability.\"","2013-06-12",0.79822,"Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via crafted PNG data in an Office document.",{"cveId":4867,"description":4868,"publishedDate":550,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4869,"cisaVulnName":4820,"cisaDateAdded":4762,"cisaShortDescription":4821,"cisaRequiredAction":4293},"CVE-2010-1297","Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content, related to authplay.dll and the ActionScript Virtual Machine 2 (AVM2) newfunction instruction, as exploited in the wild in June 2010.",0.82531,{"cveId":4871,"description":4872,"publishedDate":4873,"cvssScore":4206,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4874,"cisaVulnName":4875,"cisaDateAdded":4762,"cisaShortDescription":4876,"cisaRequiredAction":4541},"CVE-2010-2883","Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PDF document with a long field in a Smart INdependent Glyphlets (SING) table in a TTF font, as exploited in the wild in September 2010. NOTE: some of these details are obtained from third party information.","2010-09-09",0.81376,"Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability","Adobe Acrobat and Reader contain a stack-based buffer overflow vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).",{"cveId":4878,"description":4879,"publishedDate":4818,"cvssScore":4880,"cvssVersion":3630,"severity":3588,"isKev":4,"epssScore":4881,"cisaVulnName":4882,"cisaDateAdded":4762,"cisaShortDescription":4883,"cisaRequiredAction":4293},"CVE-2012-0767","Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka \"Universal XSS (UXSS),\" as exploited in the wild in February 2012.",6.1,0.06187,"Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability","Adobe Flash Player contains a XSS vulnerability that allows remote attackers to inject web script or HTML.",{"cveId":4885,"description":4886,"publishedDate":1168,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":4887,"cisaVulnName":4888,"cisaDateAdded":4889,"cisaShortDescription":4890,"cisaRequiredAction":4541},"CVE-2014-0546","Adobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context, via unspecified vectors.",0.2233,"Adobe Reader and Acrobat Sandbox Bypass Vulnerability","2022-05-25","Adobe Reader and Acrobat on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context.",{"cveId":4892,"description":4893,"publishedDate":4894,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":4895,"cisaVulnName":4896,"cisaDateAdded":4889,"cisaShortDescription":4897,"cisaRequiredAction":4293},"CVE-2015-0310","Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism on Windows, and have an unspecified impact on other platforms, via unknown vectors, as exploited in the wild in January 2015.","2015-01-23",0.15097,"Adobe Flash Player ASLR Bypass Vulnerability","Adobe Flash Player does not properly restrict discovery of memory addresses, which allows attackers to bypass the address space layout randomization (ASLR) protection mechanism.",{"cveId":4899,"description":4900,"publishedDate":2787,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4901,"cisaVulnName":4902,"cisaDateAdded":4889,"cisaShortDescription":4903,"cisaRequiredAction":4904},"CVE-2016-0034","Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or cause a denial of service (object-header corruption) via a crafted web site, aka \"Silverlight Runtime Remote Code Execution Vulnerability.\"",0.69397,"Microsoft Silverlight Runtime Remote Code Execution Vulnerability","Microsoft Silverlight mishandles negative offsets during decoding, which allows attackers to execute remote code or cause a denial-of-service (DoS).","The impacted products are end-of-life and should be disconnected if still in use.",{"cveId":4906,"description":4907,"publishedDate":1168,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4908,"cisaVulnName":4909,"cisaDateAdded":4889,"cisaShortDescription":4910,"cisaRequiredAction":4541},"CVE-2014-2817","Microsoft Internet Explorer 6 through 11 allows remote attackers to gain privileges via a crafted web site, aka \"Internet Explorer Elevation of Privilege Vulnerability.\"",0.26349,"Microsoft Internet Explorer Privilege Escalation Vulnerability","Microsoft Internet Explorer cotains an unspecified vulnerability that allows remote attackers to gain privileges via a crafted web site.",{"cveId":4912,"description":4913,"publishedDate":4914,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4915,"cisaVulnName":4909,"cisaDateAdded":4889,"cisaShortDescription":4916,"cisaRequiredAction":4541},"CVE-2014-4123","Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka \"Internet Explorer Elevation of Privilege Vulnerability,\" as exploited in the wild in October 2014, a different vulnerability than CVE-2014-4124.","2014-10-15",0.47133,"Microsoft Internet Explorer contains an unspecified vulnerability that allows remote attackers to gain privileges via a crafted web site.",{"cveId":4918,"description":4919,"publishedDate":4914,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4920,"cisaVulnName":3846,"cisaDateAdded":4889,"cisaShortDescription":4921,"cisaRequiredAction":4541},"CVE-2014-4148","win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted TrueType font, as exploited in the wild in October 2014, aka \"TrueType Font Parsing Remote Code Execution Vulnerability.\"",0.5985,"A remote code execution vulnerability exists when the Windows kernel-mode driver improperly handles TrueType fonts.",{"cveId":4923,"description":4924,"publishedDate":4925,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4926,"cisaVulnName":4927,"cisaDateAdded":4889,"cisaShortDescription":4928,"cisaRequiredAction":4293},"CVE-2014-8439","Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.","2014-11-25",0.20369,"Adobe Flash Player Dereferenced Pointer Vulnerability","Adobe Flash Player has a vulnerability in the way it handles a dereferenced memory pointer which could lead to code execution.",{"cveId":4930,"description":4931,"publishedDate":4932,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4933,"cisaVulnName":4538,"cisaDateAdded":4889,"cisaShortDescription":4934,"cisaRequiredAction":4541},"CVE-2015-2360","win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application, aka \"Win32k Elevation of Privilege Vulnerability.\"","2015-06-10",0.1484,"Win32k.sys in the kernel-mode drivers in Microsoft Windows allows local users to gain privileges or cause denial-of-service (DoS).",{"cveId":4936,"description":4937,"publishedDate":197,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4938,"cisaVulnName":4578,"cisaDateAdded":4889,"cisaShortDescription":4939,"cisaRequiredAction":4541},"CVE-2015-2425","Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2015-2383 and CVE-2015-2384.",0.44727,"Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).",{"cveId":4941,"description":4942,"publishedDate":4943,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4944,"cisaVulnName":4945,"cisaDateAdded":4889,"cisaShortDescription":4946,"cisaRequiredAction":4293},"CVE-2015-8651","Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors.","2015-12-28",0.67698,"Adobe Flash Player Integer Overflow Vulnerability","Integer overflow in Adobe Flash Player allows attackers to execute code.",{"cveId":4948,"description":4949,"publishedDate":4950,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4951,"cisaVulnName":4952,"cisaDateAdded":4889,"cisaShortDescription":4953,"cisaRequiredAction":4904},"CVE-2016-0984","Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0974, CVE-2016-0975, CVE-2016-0982, and CVE-2016-0983.","2016-02-10",0.54544,"Adobe Flash Player and AIR Use-After-Free Vulnerability","Use-after-free vulnerability in Adobe Flash Player and Adobe AIR allows attackers to execute code.",{"cveId":4955,"description":4956,"publishedDate":4957,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4958,"cisaVulnName":4959,"cisaDateAdded":4889,"cisaShortDescription":4960,"cisaRequiredAction":4904},"CVE-2016-1010","Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0963 and CVE-2016-0993.","2016-03-12",0.19333,"Adobe Flash Player and AIR Integer Overflow Vulnerability","Integer overflow vulnerability in Adobe Flash Player and AIR allows attackers to execute code.",{"cveId":4962,"description":4963,"publishedDate":4964,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4965,"cisaVulnName":4966,"cisaDateAdded":4889,"cisaShortDescription":4967,"cisaRequiredAction":4541},"CVE-2016-7256","atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site, aka \"Open Type Font Remote Code Execution Vulnerability.\"","2016-11-10",0.64591,"Microsoft Windows Open Type Font Remote Code Execution Vulnerability","A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploits this vulnerability could take control of the affected system.",{"cveId":4969,"description":4970,"publishedDate":4971,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4972,"cisaVulnName":4973,"cisaDateAdded":4889,"cisaShortDescription":4974,"cisaRequiredAction":4541},"CVE-2016-3393","Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows remote attackers to execute arbitrary code via a crafted web site, aka \"Windows Graphics Component RCE Vulnerability.\"","2016-10-14",0.68465,"Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability","A remote code execution vulnerability exists due to the way the Windows GDI component handles objects in the memory. An attacker who successfully exploits this vulnerability could take control of the affected system.",{"cveId":4976,"description":4977,"publishedDate":2376,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4978,"cisaVulnName":4979,"cisaDateAdded":4889,"cisaShortDescription":4980,"cisaRequiredAction":4293},"CVE-2013-0074","Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML object rendering, which allows remote attackers to execute arbitrary code via a crafted Silverlight application, aka \"Silverlight Double Dereference Vulnerability.\"",0.78885,"Microsoft Silverlight Double Dereference Vulnerability","Microsoft Silverlight does not properly validate pointers during HTML object rendering, which allows remote attackers to execute code via a crafted Silverlight application.",{"cveId":4982,"description":4983,"publishedDate":2936,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4984,"cisaVulnName":4985,"cisaDateAdded":4889,"cisaShortDescription":4986,"cisaRequiredAction":4541},"CVE-2014-4077","Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Office 2007 SP3, when IMJPDCT.EXE (aka IME for Japanese) is installed, allow remote attackers to bypass a sandbox protection mechanism via a crafted PDF document, aka \"Microsoft IME (Japanese) Elevation of Privilege Vulnerability,\" as exploited in the wild in 2014.",0.54577,"Microsoft IME Japanese Privilege Escalation Vulnerability","Microsoft Input Method Editor (IME) Japanese is a keyboard with Japanese characters that can be enabled on Windows systems as it is included by default (with the default set as disabled). IME Japanese contains an unspecified vulnerability when IMJPDCT.EXE (IME for Japanese) is installed which allows attackers to bypass a sandbox and perform privilege escalation.",{"cveId":4988,"description":4989,"publishedDate":4990,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4991,"cisaVulnName":4992,"cisaDateAdded":4889,"cisaShortDescription":4993,"cisaRequiredAction":4541},"CVE-2015-0016","Directory traversal vulnerability in the TS WebProxy (aka TSWbPrxy) component in Microsoft Windows Vista SP2, Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to gain privileges via a crafted pathname in an executable file, as demonstrated by a transition from Low Integrity to Medium Integrity, aka \"Directory Traversal Elevation of Privilege Vulnerability.\"","2015-01-13",0.75777,"Microsoft Windows TS WebProxy Directory Traversal Vulnerability","Directory traversal vulnerability in the TS WebProxy (TSWbPrxy) component in Microsoft Windows allows remote attackers to escalate privileges.",{"cveId":4995,"description":4996,"publishedDate":4997,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4998,"cisaVulnName":4272,"cisaDateAdded":4889,"cisaShortDescription":4999,"cisaRequiredAction":4541},"CVE-2015-6175","The kernel in Microsoft Windows 10 Gold allows local users to gain privileges via a crafted application, aka \"Windows Kernel Memory Elevation of Privilege Vulnerability.\"","2015-12-09",0.05325,"The kernel in Microsoft Windows contains a vulnerability that allows local users to gain privileges via a crafted application.",{"cveId":5001,"description":5002,"publishedDate":5003,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5004,"cisaVulnName":3846,"cisaDateAdded":4889,"cisaShortDescription":5005,"cisaRequiredAction":4541},"CVE-2015-1671","The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 SP2; Live Meeting 2007 Console; Lync 2010; Lync 2010 Attendee; Lync 2013 SP1; Lync Basic 2013 SP1; Silverlight 5 before 5.1.40416.00; and Silverlight 5 Developer Runtime before 5.1.40416.00, allows remote attackers to execute arbitrary code via a crafted TrueType font, aka \"TrueType Font Parsing Vulnerability.\"","2015-05-13",0.48832,"A remote code execution vulnerability exists when components of Windows, .NET Framework, Office, Lync, and Silverlight fail to properly handle TrueType fonts.",{"cveId":5007,"description":5008,"publishedDate":889,"cvssScore":5009,"cvssVersion":3630,"severity":3588,"isKev":4,"epssScore":5010,"cisaVulnName":5011,"cisaDateAdded":4889,"cisaShortDescription":5012,"cisaRequiredAction":4541},"CVE-2015-1769","Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 mishandles symlinks, which allows physically proximate attackers to execute arbitrary code by connecting a crafted USB device, aka \"Mount Manager Elevation of Privilege Vulnerability.\"",6.6,0.04078,"Microsoft Windows Mount Manager Privilege Escalation Vulnerability","A privilege escalation vulnerability exists when the Windows Mount Manager component improperly processes symbolic links.",{"cveId":5014,"description":5015,"publishedDate":5016,"cvssScore":3893,"cvssVersion":3630,"severity":3588,"isKev":4,"epssScore":5017,"cisaVulnName":5018,"cisaDateAdded":4889,"cisaShortDescription":5019,"cisaRequiredAction":4541},"CVE-2013-7331","The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the existence of local pathnames, UNC share pathnames, intranet hostnames, and intranet IP addresses by examining error codes, as demonstrated by a res:\u002F\u002F URL, and exploited in the wild in February 2014.","2014-02-26",0.5021,"Microsoft Internet Explorer Information Disclosure Vulnerability","An information disclosure vulnerability exists in Internet Explorer which allows resources loaded into memory to be queried. This vulnerability could allow an attacker to detect anti-malware applications.",{"cveId":5021,"description":5022,"publishedDate":2764,"cvssScore":3893,"cvssVersion":3630,"severity":3588,"isKev":4,"epssScore":5023,"cisaVulnName":5024,"cisaDateAdded":4889,"cisaShortDescription":5025,"cisaRequiredAction":4541},"CVE-2015-0071","Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka \"Internet Explorer ASLR Bypass Vulnerability.\"",0.33581,"Microsoft Internet Explorer ASLR Bypass Vulnerability","Microsoft Internet Explorer allows remote attackers to bypass the address space layout randomization (ASLR) protection mechanism via a crafted web site.",{"cveId":5027,"description":5028,"publishedDate":5029,"cvssScore":4018,"cvssVersion":3630,"severity":3588,"isKev":4,"epssScore":5030,"cisaVulnName":5031,"cisaDateAdded":4889,"cisaShortDescription":5032,"cisaRequiredAction":4293},"CVE-2013-3896","Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application, aka \"Silverlight Vulnerability.\"","2013-10-09",0.67959,"Microsoft Silverlight Information Disclosure Vulnerability","Microsoft Silverlight does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application.",{"cveId":5034,"description":5035,"publishedDate":519,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":5036,"cisaVulnName":4509,"cisaDateAdded":5037,"cisaShortDescription":5038,"cisaRequiredAction":4541},"CVE-2017-8543","Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to take control of the affected system when Windows Search fails to handle objects in memory, aka \"Windows Search Remote Code Execution Vulnerability\".",0.74388,"2022-05-24","Microsoft Windows allows an attacker to take control of the affected system when Windows Search fails to handle objects in memory.",{"cveId":5040,"description":5041,"publishedDate":5042,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5043,"cisaVulnName":4909,"cisaDateAdded":5037,"cisaShortDescription":5044,"cisaRequiredAction":4541},"CVE-2017-0210","An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain, aka \"Internet Explorer Elevation of Privilege Vulnerability.\"","2017-04-12",0.22334,"A privilege escalation vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information.",{"cveId":5046,"description":5047,"publishedDate":635,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5048,"cisaVulnName":4578,"cisaDateAdded":5037,"cisaShortDescription":5049,"cisaRequiredAction":4541},"CVE-2017-0149","Microsoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\" This vulnerability is different from those described in CVE-2017-0018 and CVE-2017-0037.",0.29178,"Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause a denial-of-service (DoS) via a crafted website.",{"cveId":5051,"description":5052,"publishedDate":635,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5053,"cisaVulnName":5054,"cisaDateAdded":5037,"cisaShortDescription":5055,"cisaRequiredAction":4541},"CVE-2017-0005","The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application, aka \"Windows GDI Elevation of Privilege Vulnerability.\" This vulnerability is different from those described in CVE-2017-0001, CVE-2017-0025, and CVE-2017-0047.",0.11022,"Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability","The Graphics Device Interface (GDI) in Microsoft Windows allows local users to gain privileges via a crafted application.",{"cveId":5057,"description":5058,"publishedDate":2951,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5059,"cisaVulnName":4272,"cisaDateAdded":5037,"cisaShortDescription":5060,"cisaRequiredAction":4541},"CVE-2018-8611","An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka \"Windows Kernel Elevation of Privilege Vulnerability.\" This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.",0.04196,"A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory.",{"cveId":5062,"description":5063,"publishedDate":635,"cvssScore":3575,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5064,"cisaVulnName":5065,"cisaDateAdded":5037,"cisaShortDescription":5066,"cisaRequiredAction":4541},"CVE-2017-0147","The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to obtain sensitive information from process memory via a crafted packets, aka \"Windows SMB Information Disclosure Vulnerability.\"",0.99693,"Microsoft Windows SMBv1 Information Disclosure Vulnerability","The SMBv1 server in Microsoft Windows allows remote attackers to obtain sensitive information from process memory via a crafted packet.",{"cveId":5068,"description":5069,"publishedDate":635,"cvssScore":3893,"cvssVersion":3630,"severity":3588,"isKev":4,"epssScore":5070,"cisaVulnName":5071,"cisaDateAdded":5037,"cisaShortDescription":5072,"cisaRequiredAction":4541},"CVE-2017-0022","Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 and R2 SP1; Windows Server 2012 Gold and R2; Windows Server 2016; and Windows Vista SP2 improperly handles objects in memory, allowing attackers to test for files on disk via a crafted web site, aka \"Microsoft XML Information Disclosure Vulnerability.\"",0.18069,"Microsoft XML Core Services Information Disclosure Vulnerability","Microsoft XML Core Services (MSXML) improperly handles objects in memory, allowing attackers to test for files on disk via a crafted web site.",{"cveId":5074,"description":5075,"publishedDate":5076,"cvssScore":3893,"cvssVersion":3630,"severity":3588,"isKev":4,"epssScore":5077,"cisaVulnName":5078,"cisaDateAdded":5037,"cisaShortDescription":5079,"cisaRequiredAction":4541},"CVE-2016-3351","Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka \"Microsoft Browser Information Disclosure Vulnerability.\"","2016-09-14",0.26483,"Microsoft Internet Explorer and Edge Information Disclosure Vulnerability","An information disclosure vulnerability exists in the way that certain functions in Internet Explorer and Edge handle objects in memory. The vulnerability could allow an attacker to detect specific files on the user's computer.",{"cveId":5081,"description":5082,"publishedDate":4971,"cvssScore":3893,"cvssVersion":3630,"severity":3588,"isKev":4,"epssScore":5083,"cisaVulnName":5084,"cisaDateAdded":5037,"cisaShortDescription":5085,"cisaRequiredAction":4541},"CVE-2016-3298","Microsoft Internet Explorer 9 through 11 and the Internet Messaging API in Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow remote attackers to determine the existence of arbitrary files via a crafted web site, aka \"Internet Explorer Information Disclosure Vulnerability.\"",0.33332,"Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability","An information disclosure vulnerability exists when the Microsoft Internet Messaging API improperly handles objects in memory. An attacker who successfully exploited this vulnerability could allow the attacker to test for the presence of files on disk.",{"cveId":5087,"description":5088,"publishedDate":4536,"cvssScore":5089,"cvssVersion":3630,"severity":3588,"isKev":4,"epssScore":5090,"cisaVulnName":5018,"cisaDateAdded":5037,"cisaShortDescription":5091,"cisaRequiredAction":4541},"CVE-2016-0162","Microsoft Internet Explorer 9 through 11 allows remote attackers to determine the existence of files via crafted JavaScript code, aka \"Internet Explorer Information Disclosure Vulnerability.\"",4.3,0.21932,"An information disclosure vulnerability exists when Internet Explorer does not properly handle JavaScript. The vulnerability could allow an attacker to detect specific files on the user's computer.",{"cveId":5093,"description":5094,"publishedDate":4794,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":5095,"cisaVulnName":5096,"cisaDateAdded":5097,"cisaShortDescription":5098,"cisaRequiredAction":4293},"CVE-2018-5002","Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.",0.25059,"Adobe Flash Player Stack-based Buffer Overflow Vulnerability","2022-05-23","Adobe Flash Player have a stack-based buffer overflow vulnerability that could lead to remote code execution.",{"cveId":5100,"description":5101,"publishedDate":832,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5102,"cisaVulnName":3851,"cisaDateAdded":5097,"cisaShortDescription":5103,"cisaRequiredAction":4541},"CVE-2019-0880","A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'.",0.02308,"A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited the vulnerability could elevate privileges on an affected system from low-integrity to medium-integrity.",{"cveId":5105,"description":5106,"publishedDate":832,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5107,"cisaVulnName":5108,"cisaDateAdded":5097,"cisaShortDescription":5109,"cisaRequiredAction":4541},"CVE-2019-1130","An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1129.",0.01719,"Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability","A privilege escalation vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links.",{"cveId":5111,"description":5112,"publishedDate":2260,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5113,"cisaVulnName":4538,"cisaDateAdded":5097,"cisaShortDescription":5114,"cisaRequiredAction":4541},"CVE-2018-8589","An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka \"Windows Win32k Elevation of Privilege Vulnerability.\" This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.",0.03023,"A privilege escalation vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this vulnerability could run remote code in the security context of the local system.",{"cveId":5116,"description":5117,"publishedDate":1030,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5118,"cisaVulnName":5119,"cisaDateAdded":5097,"cisaShortDescription":5120,"cisaRequiredAction":4541},"CVE-2019-1385","An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate privileges.The security update addresses the vulnerability by correcting how AppX Deployment Extensions manages privileges., aka 'Windows AppX Deployment Extensions Elevation of Privilege Vulnerability'.",0.03604,"Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability","A privilege escalation vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.",{"cveId":5122,"description":5123,"publishedDate":383,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5124,"cisaVulnName":4272,"cisaDateAdded":5097,"cisaShortDescription":5125,"cisaRequiredAction":4541},"CVE-2020-1027","An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0913, CVE-2020-1000, CVE-2020-1003.",0.04723,"An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.",{"cveId":5127,"description":5128,"publishedDate":5129,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5130,"cisaVulnName":5131,"cisaDateAdded":5097,"cisaShortDescription":5132,"cisaRequiredAction":4541},"CVE-2020-0638","An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Update Notification Manager Elevation of Privilege Vulnerability'.","2020-01-14",0.0237,"Microsoft Update Notification Manager Privilege Escalation Vulnerability","Microsoft Update Notification Manager contains an unspecified vulnerability that allows for privilege escalation.",{"cveId":5134,"description":5135,"publishedDate":2315,"cvssScore":3893,"cvssVersion":3630,"severity":3588,"isKev":4,"epssScore":5136,"cisaVulnName":5137,"cisaDateAdded":5097,"cisaShortDescription":5138,"cisaRequiredAction":4541},"CVE-2019-0703","An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0704, CVE-2019-0821.",0.09385,"Microsoft Windows SMB Information Disclosure Vulnerability","An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, which could lead to information disclosure from the server.",{"cveId":5140,"description":5141,"publishedDate":272,"cvssScore":3893,"cvssVersion":3630,"severity":3588,"isKev":4,"epssScore":5142,"cisaVulnName":5018,"cisaDateAdded":5097,"cisaShortDescription":5143,"cisaRequiredAction":4541},"CVE-2019-0676","An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker who successfully exploited this vulnerability could test for the presence of files on disk, aka 'Internet Explorer Information Disclosure Vulnerability'.",0.0811,"An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory. An attacker who successfully exploited this vulnerability could test for the presence of files on disk.",{"cveId":5145,"description":5146,"publishedDate":5147,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5148,"cisaVulnName":3699,"cisaDateAdded":5149,"cisaShortDescription":5150,"cisaRequiredAction":4541},"CVE-2014-0322","Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via vectors involving crafted JavaScript code, CMarkup, and the onpropertychange attribute of a script element, as exploited in the wild in January and February 2014.","2014-02-14",0.85122,"2022-05-04","Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute code.",{"cveId":5152,"description":5153,"publishedDate":4914,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5154,"cisaVulnName":4538,"cisaDateAdded":5149,"cisaShortDescription":4540,"cisaRequiredAction":4541},"CVE-2014-4113","win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, as exploited in the wild in October 2014, aka \"Win32k.sys Elevation of Privilege Vulnerability.\"",0.86648,{"cveId":5156,"description":4558,"publishedDate":1490,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5157,"cisaVulnName":4538,"cisaDateAdded":5158,"cisaShortDescription":4540,"cisaRequiredAction":4541},"CVE-2021-41357",0.01582,"2022-04-25",{"cveId":5160,"description":4558,"publishedDate":1490,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5157,"cisaVulnName":4538,"cisaDateAdded":5158,"cisaShortDescription":4540,"cisaRequiredAction":4541},"CVE-2021-40450",{"cveId":5162,"description":5163,"publishedDate":1054,"cvssScore":52,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5164,"cisaVulnName":5165,"cisaDateAdded":5158,"cisaShortDescription":5166,"cisaRequiredAction":4541},"CVE-2022-26904","Windows User Profile Service Elevation of Privilege Vulnerability",0.16948,"Microsoft Windows User Profile Service Privilege Escalation Vulnerability","Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.",{"cveId":5168,"description":5163,"publishedDate":5169,"cvssScore":52,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5170,"cisaVulnName":5165,"cisaDateAdded":5158,"cisaShortDescription":5166,"cisaRequiredAction":4541},"CVE-2022-21919","2022-01-11",0.02434,{"cveId":5172,"description":4340,"publishedDate":854,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5173,"cisaVulnName":4670,"cisaDateAdded":5174,"cisaShortDescription":5175,"cisaRequiredAction":4541},"CVE-2022-22718",0.18464,"2022-04-19","Microsoft Windows Print Spooler contains an unspecified vulnerability which allow for privilege escalation.",{"cveId":5177,"description":5178,"publishedDate":5179,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":5180,"cisaVulnName":5181,"cisaDateAdded":5182,"cisaShortDescription":5183,"cisaRequiredAction":4293},"CVE-2015-0313","Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2015, a different vulnerability than CVE-2015-0315, CVE-2015-0320, and CVE-2015-0322.","2015-02-02",0.95266,"Adobe Flash Player Use-After-Free Vulnerability","2022-04-13","Use-after-free vulnerability in Adobe Flash Player allows remote attackers to execute code.",{"cveId":5185,"description":5186,"publishedDate":197,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":5187,"cisaVulnName":5181,"cisaDateAdded":5182,"cisaShortDescription":5188,"cisaRequiredAction":4293},"CVE-2015-5122","Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that leverages improper handling of the opaqueBackground property, as exploited in the wild in July 2015.",0.87033,"Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).",{"cveId":5190,"description":5191,"publishedDate":4894,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":5192,"cisaVulnName":5193,"cisaDateAdded":5182,"cisaShortDescription":5194,"cisaRequiredAction":4293},"CVE-2015-0311","Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in January 2015.",0.85589,"Adobe Flash Player Remote Code Execution Vulnerability","Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute code.",{"cveId":5196,"description":5197,"publishedDate":197,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":5198,"cisaVulnName":5181,"cisaDateAdded":5182,"cisaShortDescription":5199,"cisaRequiredAction":4293},"CVE-2015-5123","Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function, as exploited in the wild in July 2015.",0.1883,"Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).",{"cveId":5201,"description":5202,"publishedDate":5203,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":5204,"cisaVulnName":5205,"cisaDateAdded":5182,"cisaShortDescription":5206,"cisaRequiredAction":4293},"CVE-2015-3113","Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in June 2015.","2015-06-23",0.99812,"Adobe Flash Player Heap-Based Buffer Overflow Vulnerability","Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code.",{"cveId":5208,"description":5209,"publishedDate":5210,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":5211,"cisaVulnName":5212,"cisaDateAdded":5182,"cisaShortDescription":5213,"cisaRequiredAction":4293},"CVE-2014-9163","Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in December 2014.","2014-12-10",0.4488,"Adobe Flash Player Stack-Based Buffer Overflow Vulnerability","Stack-based buffer overflow in Adobe Flash Player allows attackers to execute code remotely.",{"cveId":5215,"description":5216,"publishedDate":5217,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5218,"cisaVulnName":4578,"cisaDateAdded":5182,"cisaShortDescription":5219,"cisaRequiredAction":4541},"CVE-2015-2502","Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Memory Corruption Vulnerability,\" as exploited in the wild in August 2015.","2015-08-19",0.51001,"Microsoft Internet Explorer contains a memory corruption vulnerability that allows an attacker to execute code or cause a denial-of-service (DoS).",{"cveId":5221,"description":3741,"publishedDate":1054,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5222,"cisaVulnName":5223,"cisaDateAdded":5182,"cisaShortDescription":5224,"cisaRequiredAction":4541},"CVE-2022-24521",0.07134,"Microsoft Windows CLFS Driver Privilege Escalation Vulnerability","Microsoft Windows Common Log File System (CLFS) Driver contains an unspecified vulnerability that allows for privilege escalation.",{"cveId":5226,"description":4712,"publishedDate":561,"cvssScore":3575,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5227,"cisaVulnName":4714,"cisaDateAdded":5228,"cisaShortDescription":5229,"cisaRequiredAction":4541},"CVE-2021-42278",0.73297,"2022-04-11","Microsoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation.",{"cveId":5231,"description":4712,"publishedDate":561,"cvssScore":3575,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5232,"cisaVulnName":4714,"cisaDateAdded":5228,"cisaShortDescription":5229,"cisaRequiredAction":4541},"CVE-2021-42287",0.7717,{"cveId":5234,"description":5235,"publishedDate":2341,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":5236,"cisaVulnName":5237,"cisaDateAdded":5238,"cisaShortDescription":5239,"cisaRequiredAction":4541},"CVE-2021-31166","HTTP Protocol Stack Remote Code Execution Vulnerability",0.99867,"Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability","2022-04-06","Microsoft HTTP Protocol Stack contains a vulnerability in http.sys that allows for remote code execution.",{"cveId":5241,"description":5242,"publishedDate":635,"cvssScore":3907,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5243,"cisaVulnName":5244,"cisaDateAdded":5238,"cisaShortDescription":5245,"cisaRequiredAction":4541},"CVE-2017-0148","The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka \"Windows SMB Remote Code Execution Vulnerability.\" This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, and CVE-2017-0146.",0.99356,"Microsoft SMBv1 Server Remote Code Execution Vulnerability","The SMBv1 server in Microsoft allows remote attackers to execute arbitrary code via crafted packets.",{"cveId":5247,"description":5163,"publishedDate":651,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5248,"cisaVulnName":5165,"cisaDateAdded":5249,"cisaShortDescription":5166,"cisaRequiredAction":4541},"CVE-2021-34484",0.21827,"2022-03-31",{"cveId":5251,"description":5252,"publishedDate":4964,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5253,"cisaVulnName":5254,"cisaDateAdded":5255,"cisaShortDescription":5256,"cisaRequiredAction":4541},"CVE-2016-7201","The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Scripting Engine Memory Corruption Vulnerability,\" a different vulnerability than CVE-2016-7200, CVE-2016-7202, CVE-2016-7203, CVE-2016-7208, CVE-2016-7240, CVE-2016-7242, and CVE-2016-7243.",0.80004,"Microsoft Edge Memory Corruption Vulnerability","2022-03-28","The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.",{"cveId":5258,"description":5259,"publishedDate":5260,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5261,"cisaVulnName":3699,"cisaDateAdded":5255,"cisaShortDescription":5262,"cisaRequiredAction":4541},"CVE-2013-2551","Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2013, aka \"Internet Explorer Use After Free Vulnerability,\" a different vulnerability than CVE-2013-1308 and CVE-2013-1309.","2013-03-11",0.73918,"Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute remote code via a crafted web site that triggers access to a deleted object.",{"cveId":5264,"description":5265,"publishedDate":1682,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5266,"cisaVulnName":5267,"cisaDateAdded":5255,"cisaShortDescription":5268,"cisaRequiredAction":4541},"CVE-2015-2426","Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted OpenType font, aka \"OpenType Font Driver Vulnerability.\"",0.86576,"Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability","A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts.",{"cveId":5270,"description":5271,"publishedDate":4932,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5272,"cisaVulnName":5273,"cisaDateAdded":5255,"cisaShortDescription":5274,"cisaRequiredAction":4541},"CVE-2015-1770","Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka \"Microsoft Office Uninitialized Memory Use Vulnerability.\"",0.34995,"Microsoft Office Uninitialized Memory Use Vulnerability","Microsoft Office allows remote attackers to execute arbitrary code via a crafted Office document.",{"cveId":5276,"description":5277,"publishedDate":4964,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5278,"cisaVulnName":5254,"cisaDateAdded":5255,"cisaShortDescription":5256,"cisaRequiredAction":4541},"CVE-2016-7200","The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Scripting Engine Memory Corruption Vulnerability,\" a different vulnerability than CVE-2016-7201, CVE-2016-7202, CVE-2016-7203, CVE-2016-7208, CVE-2016-7240, CVE-2016-7242, and CVE-2016-7243.",0.82779,{"cveId":5280,"description":5281,"publishedDate":197,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5282,"cisaVulnName":4578,"cisaDateAdded":5255,"cisaShortDescription":5283,"cisaRequiredAction":4541},"CVE-2015-2419","JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"JScript9 Memory Corruption Vulnerability.\"",0.5298,"JScript in Microsoft Internet Explorer allows remote attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.",{"cveId":5285,"description":5286,"publishedDate":5287,"cvssScore":3907,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5288,"cisaVulnName":5289,"cisaDateAdded":5255,"cisaShortDescription":5290,"cisaRequiredAction":4541},"CVE-2017-0037","Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilder::HandleColumnBreakOnColumnSpanningElement function in mshtml.dll, which allows remote attackers to execute arbitrary code via vectors involving a crafted Cascading Style Sheets (CSS) token sequence and crafted JavaScript code that operates on a TH element.","2017-02-26",0.80386,"Microsoft Edge and Internet Explorer Type Confusion Vulnerability","Microsoft Edge and Internet Explorer have a type confusion vulnerability in mshtml.dll, which allows remote code execution.",{"cveId":5292,"description":5293,"publishedDate":5294,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5295,"cisaVulnName":5296,"cisaDateAdded":5255,"cisaShortDescription":5297,"cisaRequiredAction":4541},"CVE-2010-4398","Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges, and bypass the User Account Control (UAC) feature, via a crafted REG_BINARY value for a SystemDefaultEUDCFont registry key, aka \"Driver Improper Interaction with Windows Kernel Vulnerability.\"","2010-12-06",0.08661,"Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability","Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows allows local users to gain privileges, and bypass the User Account Control (UAC) feature.",{"cveId":5299,"description":5300,"publishedDate":5301,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5302,"cisaVulnName":5303,"cisaDateAdded":5255,"cisaShortDescription":5304,"cisaRequiredAction":4541},"CVE-2011-2005","afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka \"Ancillary Function Driver Elevation of Privilege Vulnerability.\"","2011-10-12",0.31761,"Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability","afd.sys in the Ancillary Function Driver in Microsoft Windows does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application.",{"cveId":5306,"description":5307,"publishedDate":740,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5308,"cisaVulnName":5309,"cisaDateAdded":5255,"cisaShortDescription":5310,"cisaRequiredAction":4541},"CVE-2012-2539","Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, aka \"Word RTF 'listoverridecount' Remote Code Execution Vulnerability.\"",0.53033,"Microsoft Word Remote Code Execution Vulnerability","Microsoft Word allows attackers to execute remote code or cause a denial-of-service (DoS) via crafted RTF data.",{"cveId":5312,"description":5313,"publishedDate":5314,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5315,"cisaVulnName":4538,"cisaDateAdded":5255,"cisaShortDescription":5316,"cisaRequiredAction":4541},"CVE-2013-3660","The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, and Windows Server 2012 does not properly initialize a pointer for the next object in a certain list, which allows local users to obtain write access to the PATHRECORD chain, and consequently gain privileges, by triggering excessive consumption of paged memory and then making many FlattenPath function calls, aka \"Win32k Read AV Vulnerability.\"","2013-05-24",0.39318,"The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft does not properly initialize a pointer for the next object in a certain list, which allows local users to gain privileges.",{"cveId":5318,"description":5319,"publishedDate":651,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5320,"cisaVulnName":5321,"cisaDateAdded":5255,"cisaShortDescription":5322,"cisaRequiredAction":4541},"CVE-2021-34486","Windows Event Tracing Elevation of Privilege Vulnerability",0.09328,"Microsoft Windows Event Tracing Privilege Escalation Vulnerability","Microsoft Windows Event Tracing contains an unspecified vulnerability which can allow for privilege escalation.",{"cveId":5324,"description":5325,"publishedDate":1108,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5326,"cisaVulnName":5325,"cisaDateAdded":5255,"cisaShortDescription":5327,"cisaRequiredAction":4541},"CVE-2021-38646","Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability",0.07987,"Microsoft Office Access Connectivity Engine contains an unspecified vulnerability which can allow for remote code execution.",{"cveId":5329,"description":5330,"publishedDate":4950,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5331,"cisaVulnName":4272,"cisaDateAdded":5255,"cisaShortDescription":5332,"cisaRequiredAction":4541},"CVE-2016-0040","The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a crafted application, aka \"Windows Elevation of Privilege Vulnerability.\"",0.24283,"The kernel in Microsoft Windows allows local users to gain privileges via a crafted application.",{"cveId":5334,"description":5335,"publishedDate":4536,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5336,"cisaVulnName":5337,"cisaDateAdded":5255,"cisaShortDescription":5338,"cisaRequiredAction":4541},"CVE-2016-0151","The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mismanages process tokens, which allows local users to gain privileges via a crafted application, aka \"Windows CSRSS Security Feature Bypass Vulnerability.\"",0.62823,"Microsoft Windows CSRSS Security Feature Bypass Vulnerability","The Client-Server Run-time Subsystem (CSRSS) in Microsoft mismanages process tokens, which allows local users to gain privileges via a crafted application.",{"cveId":5340,"description":5341,"publishedDate":796,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5342,"cisaVulnName":3851,"cisaDateAdded":5255,"cisaShortDescription":5343,"cisaRequiredAction":4541},"CVE-2018-8440","An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka \"Windows ALPC Elevation of Privilege Vulnerability.\" This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.",0.1853,"An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).",{"cveId":5345,"description":5346,"publishedDate":1423,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5347,"cisaVulnName":5348,"cisaDateAdded":5255,"cisaShortDescription":5349,"cisaRequiredAction":4541},"CVE-2018-8406","An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka \"DirectX Graphics Kernel Elevation of Privilege Vulnerability.\" This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8400, CVE-2018-8401, CVE-2018-8405.",0.03444,"Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability","An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory.",{"cveId":5351,"description":5352,"publishedDate":1423,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5347,"cisaVulnName":5348,"cisaDateAdded":5255,"cisaShortDescription":5349,"cisaRequiredAction":4541},"CVE-2018-8405","An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka \"DirectX Graphics Kernel Elevation of Privilege Vulnerability.\" This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8400, CVE-2018-8401, CVE-2018-8406.",{"cveId":5354,"description":5355,"publishedDate":5356,"cvssScore":3575,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5357,"cisaVulnName":4578,"cisaDateAdded":5255,"cisaShortDescription":5358,"cisaRequiredAction":4541},"CVE-2016-0189","The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Scripting Engine Memory Corruption Vulnerability,\" a different vulnerability than CVE-2016-0187.","2016-05-11",0.94062,"The Microsoft JScript nd VBScript engines, as used in Internet Explorer and other products, allow attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.",{"cveId":5360,"description":5361,"publishedDate":5362,"cvssScore":3575,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5363,"cisaVulnName":4820,"cisaDateAdded":5255,"cisaShortDescription":5364,"cisaRequiredAction":4293},"CVE-2012-2034","Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2037.","2012-06-09",0.07713,"Adobe Flash Player contains a memory corruption vulnerability that allows for remote code execution or denial-of-service (DoS).",{"cveId":5366,"description":5367,"publishedDate":1222,"cvssScore":4206,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5368,"cisaVulnName":3851,"cisaDateAdded":5255,"cisaShortDescription":5369,"cisaRequiredAction":4541},"CVE-2017-0213","Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerability when an attacker runs a specially crafted application, aka \"Windows COM Elevation of Privilege Vulnerability\". This CVE ID is unique from CVE-2017-0214.",0.84258,"Microsoft Windows COM Aggregate Marshaler allows for privilege escalation when an attacker runs a specially crafted application.",{"cveId":5371,"description":5372,"publishedDate":635,"cvssScore":5089,"cvssVersion":3630,"severity":3588,"isKev":4,"epssScore":5373,"cisaVulnName":5018,"cisaDateAdded":5255,"cisaShortDescription":5374,"cisaRequiredAction":4541},"CVE-2017-0059","Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka \"Internet Explorer Information Disclosure Vulnerability.\" This vulnerability is different from those described in CVE-2017-0008 and CVE-2017-0009.",0.61968,"Microsoft Internet Explorer allow remote attackers to obtain sensitive information from process memory via a crafted web site.",{"cveId":5376,"description":5377,"publishedDate":5378,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":5379,"cisaVulnName":5380,"cisaDateAdded":5381,"cisaShortDescription":5382,"cisaRequiredAction":4541},"CVE-2013-2251","Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or (3) redirectAction: prefix.","2013-07-20",0.99998,"Apache Struts Improper Input Validation Vulnerability","2022-03-25","Apache Struts allows remote attackers to execute arbitrary Object-Graph Navigation Language (OGNL) expressions.",{"cveId":5384,"description":5385,"publishedDate":599,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":5386,"cisaVulnName":5193,"cisaDateAdded":5381,"cisaShortDescription":5387,"cisaRequiredAction":4293},"CVE-2016-4171","Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.",0.20055,"Unspecified vulnerability in Adobe Flash Player allows for remote code execution.",{"cveId":5389,"description":5390,"publishedDate":2936,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5391,"cisaVulnName":5392,"cisaDateAdded":5381,"cisaShortDescription":5393,"cisaRequiredAction":4541},"CVE-2014-6332","OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted web site, as demonstrated by an array-redimensioning attempt that triggers improper handling of a size value in the SafeArrayDimen function, aka \"Windows OLE Automation Array Remote Code Execution Vulnerability.\"",0.94918,"Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability","OleAut32.dll in OLE in Microsoft Windows allows remote attackers to remotely execute code via a crafted web site.",{"cveId":5395,"description":5396,"publishedDate":635,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5397,"cisaVulnName":5398,"cisaDateAdded":5381,"cisaShortDescription":5399,"cisaRequiredAction":4541},"CVE-2017-0146","The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka \"Windows SMB Remote Code Execution Vulnerability.\" This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, and CVE-2017-0148.",0.89755,"Microsoft Windows SMB Remote Code Execution Vulnerability","The SMBv1 server in Microsoft Windows allows remote attackers to perform remote code execution.",{"cveId":5401,"description":5402,"publishedDate":5403,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5404,"cisaVulnName":5181,"cisaDateAdded":5381,"cisaShortDescription":5405,"cisaRequiredAction":4293},"CVE-2016-7892","Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField class. Successful exploitation could lead to arbitrary code execution.","2016-12-15",0.18786,"Adobe Flash Player has an exploitable use-after-free vulnerability in the TextField class.",{"cveId":5407,"description":5408,"publishedDate":1423,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5409,"cisaVulnName":5410,"cisaDateAdded":5381,"cisaShortDescription":5411,"cisaRequiredAction":4541},"CVE-2018-8414","A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka \"Windows Shell Remote Code Execution Vulnerability.\" This affects Windows 10 Servers, Windows 10.",0.72621,"Microsoft Windows Shell Remote Code Execution Vulnerability","A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.",{"cveId":5413,"description":5414,"publishedDate":5415,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5416,"cisaVulnName":5417,"cisaDateAdded":5381,"cisaShortDescription":5418,"cisaRequiredAction":4541},"CVE-2019-0903","A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.","2019-05-16",0.21713,"Microsoft GDI Remote Code Execution Vulnerability","A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system.",{"cveId":5420,"description":5421,"publishedDate":5422,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5423,"cisaVulnName":5424,"cisaDateAdded":5381,"cisaShortDescription":5425,"cisaRequiredAction":4541},"CVE-2014-6324","The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote authenticated domain users to obtain domain administrator privileges via a forged signature in a ticket, as exploited in the wild in November 2014, aka \"Kerberos Checksum Vulnerability.\"","2014-11-18",0.87335,"Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability","The Kerberos Key Distribution Center (KDC) in Microsoft allows remote authenticated domain users to obtain domain administrator privileges.",{"cveId":5427,"description":5428,"publishedDate":5429,"cvssScore":3907,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5430,"cisaVulnName":5431,"cisaDateAdded":5381,"cisaShortDescription":5432,"cisaRequiredAction":4541},"CVE-2017-12615","When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.","2017-09-19",0.99707,"Apache Tomcat on Windows Remote Code Execution Vulnerability","When running Apache Tomcat on Windows with HTTP PUTs enabled, it is possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.",{"cveId":5434,"description":4340,"publishedDate":854,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5435,"cisaVulnName":4670,"cisaDateAdded":5381,"cisaShortDescription":5436,"cisaRequiredAction":4541},"CVE-2022-21999",0.41007,"Microsoft Windows Print Spooler contains an unspecified vulnerability which can allow for privilege escalation.",{"cveId":5438,"description":5439,"publishedDate":1423,"cvssScore":3575,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5440,"cisaVulnName":5441,"cisaDateAdded":5381,"cisaShortDescription":5442,"cisaRequiredAction":4541},"CVE-2018-8373","A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka \"Scripting Engine Memory Corruption Vulnerability.\" This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-8353, CVE-2018-8355, CVE-2018-8359, CVE-2018-8371, CVE-2018-8372, CVE-2018-8385, CVE-2018-8389, CVE-2018-8390.",0.61511,"Microsoft Scripting Engine Memory Corruption Vulnerability","A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer.",{"cveId":5444,"description":5445,"publishedDate":2195,"cvssScore":4046,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5446,"cisaVulnName":5447,"cisaDateAdded":5448,"cisaShortDescription":5449,"cisaRequiredAction":4541},"CVE-2015-2546","The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows local users to gain privileges via a crafted application, aka \"Win32k Memory Corruption Elevation of Privilege Vulnerability,\" a different vulnerability than CVE-2015-2511, CVE-2015-2517, and CVE-2015-2518.",0.10107,"Microsoft Win32k Memory Corruption Vulnerability","2022-03-15","The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application.",{"cveId":5451,"description":5452,"publishedDate":469,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5453,"cisaVulnName":3851,"cisaDateAdded":5448,"cisaShortDescription":5454,"cisaRequiredAction":4541},"CVE-2019-0543","An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka \"Microsoft Windows Elevation of Privilege Vulnerability.\" This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.",0.04679,"A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.",{"cveId":5456,"description":5457,"publishedDate":832,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5458,"cisaVulnName":5459,"cisaDateAdded":5448,"cisaShortDescription":5460,"cisaRequiredAction":4541},"CVE-2019-1129","An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1130.",0.01782,"Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability","A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.",{"cveId":5462,"description":5463,"publishedDate":1030,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5464,"cisaVulnName":5465,"cisaDateAdded":5448,"cisaShortDescription":5466,"cisaRequiredAction":4541},"CVE-2019-1405","An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP Service Elevation of Privilege Vulnerability'.",0.30168,"Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability","A privilege escalation vulnerability exists when the Windows UPnP service improperly allows COM object creation.",{"cveId":5468,"description":5469,"publishedDate":247,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5470,"cisaVulnName":4272,"cisaDateAdded":5448,"cisaShortDescription":5471,"cisaRequiredAction":4541},"CVE-2016-3309","The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka \"Win32k Elevation of Privilege Vulnerability,\" a different vulnerability than CVE-2016-3308, CVE-2016-3310, and CVE-2016-3311.",0.20467,"A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.",{"cveId":5473,"description":5474,"publishedDate":2900,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5475,"cisaVulnName":3851,"cisaDateAdded":5448,"cisaShortDescription":5454,"cisaRequiredAction":4541},"CVE-2019-1322","An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1320, CVE-2019-1340.",0.18843,{"cveId":5477,"description":5478,"publishedDate":1486,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5479,"cisaVulnName":5480,"cisaDateAdded":5448,"cisaShortDescription":5481,"cisaRequiredAction":4541},"CVE-2019-1253","An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1215, CVE-2019-1278, CVE-2019-1303.",0.11616,"Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability","A privilege escalation vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.",{"cveId":5483,"description":5484,"publishedDate":2900,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5485,"cisaVulnName":5486,"cisaDateAdded":5448,"cisaShortDescription":5487,"cisaRequiredAction":4541},"CVE-2019-1315","An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1339, CVE-2019-1342.",0.03478,"Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability","A privilege escalation vulnerability exists when Windows Error Reporting manager improperly handles hard links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status.",{"cveId":5489,"description":5490,"publishedDate":832,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5491,"cisaVulnName":4538,"cisaDateAdded":5448,"cisaShortDescription":5492,"cisaRequiredAction":4541},"CVE-2019-1132","An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.",0.09867,"A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.",{"cveId":5494,"description":5495,"publishedDate":635,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5496,"cisaVulnName":5497,"cisaDateAdded":5448,"cisaShortDescription":5498,"cisaRequiredAction":4541},"CVE-2017-0101","The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allow local users to gain privileges via a crafted application, aka \"Windows Elevation of Privilege Vulnerability.\"",0.57482,"Microsoft Windows Transaction Manager Privilege Escalation Vulnerability","A privilege escalation vulnerability exists when the Windows Transaction Manager improperly handles objects in memory.",{"cveId":5500,"description":5501,"publishedDate":726,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5502,"cisaVulnName":5459,"cisaDateAdded":5448,"cisaShortDescription":5460,"cisaRequiredAction":4541},"CVE-2019-1064","An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could then install programs; view, change or delete data.\nTo exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.\nThe security update addresses the vulnerability by correcting how Windows AppX Deployment Service handles hard links.",0.06886,{"cveId":5504,"description":5505,"publishedDate":2315,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5506,"cisaVulnName":5459,"cisaDateAdded":5448,"cisaShortDescription":5460,"cisaRequiredAction":4541},"CVE-2019-0841","An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836.",0.414,{"cveId":5508,"description":5509,"publishedDate":726,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5510,"cisaVulnName":5511,"cisaDateAdded":5448,"cisaShortDescription":5512,"cisaRequiredAction":4541},"CVE-2019-1069","An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited the vulnerability could gain elevated privileges on a victim system.\nTo exploit the vulnerability, an attacker would require unprivileged code execution on a victim system.\nThe security update addresses the vulnerability by correctly validating file operations.",0.06117,"Microsoft Task Scheduler Privilege Escalation Vulnerability","A privilege escalation vulnerability exists in the way the Task Scheduler Service validates certain file operations.",{"cveId":5514,"description":5515,"publishedDate":825,"cvssScore":52,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5516,"cisaVulnName":4538,"cisaDateAdded":5448,"cisaShortDescription":5492,"cisaRequiredAction":4541},"CVE-2018-8120","An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka \"Win32k Elevation of Privilege Vulnerability.\" This affects Windows Server 2008, Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8124, CVE-2018-8164, CVE-2018-8166.",0.73288,{"cveId":5518,"description":5519,"publishedDate":766,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":5520,"cisaVulnName":5521,"cisaDateAdded":5522,"cisaShortDescription":5523,"cisaRequiredAction":4541},"CVE-2013-0625","Adobe ColdFusion 9.0, 9.0.1, and 9.0.2, when a password is not configured, allows remote attackers to bypass authentication and possibly execute arbitrary code via unspecified vectors, as exploited in the wild in January 2013.",0.93758,"Adobe ColdFusion Authentication Bypass Vulnerability","2022-03-07","Adobe Coldfusion contains an authentication bypass vulnerability, which could result in an unauthorized user gaining administrative access.",{"cveId":5525,"description":5526,"publishedDate":766,"cvssScore":3575,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5527,"cisaVulnName":5528,"cisaDateAdded":5522,"cisaShortDescription":5529,"cisaRequiredAction":4541},"CVE-2013-0631","Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via unspecified vectors, as exploited in the wild in January 2013.",0.66413,"Adobe ColdFusion Information Disclosure Vulnerability","Adobe Coldfusion contains an unspecified vulnerability, which could result in information disclosure from a compromised server.",{"cveId":5531,"description":5532,"publishedDate":766,"cvssScore":3575,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5533,"cisaVulnName":5534,"cisaDateAdded":5522,"cisaShortDescription":5535,"cisaRequiredAction":4541},"CVE-2013-0629","Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10, when a password is not configured, allows attackers to access restricted directories via unspecified vectors, as exploited in the wild in January 2013.",0.65795,"Adobe ColdFusion Directory Traversal Vulnerability","Adobe Coldfusion contains a directory traversal vulnerability, which could permit an unauthorized user access to restricted directories.",{"cveId":5537,"description":5538,"publishedDate":5539,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":5540,"cisaVulnName":5541,"cisaDateAdded":5542,"cisaShortDescription":5543,"cisaRequiredAction":4293},"CVE-2016-1019","Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016.","2016-04-07",0.22316,"Adobe Flash Player Arbitrary Code Execution Vulnerability","2022-03-03","Adobe Flash Player allows remote attackers to cause a denial of service or possibly execute arbitrary code.",{"cveId":5545,"description":5546,"publishedDate":1233,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":5547,"cisaVulnName":5548,"cisaDateAdded":5542,"cisaShortDescription":5549,"cisaRequiredAction":4541},"CVE-2011-1889","The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remote attackers to execute arbitrary code via vectors involving unspecified requests, aka \"TMG Firewall Client Memory Corruption Vulnerability.\"",0.4902,"Microsoft Forefront TMG Remote Code Execution Vulnerability","A remote code execution vulnerability exists in the Forefront Threat Management Gateway (TMG) Firewall Client Winsock provider that could allow code execution in the security context of the client application.",{"cveId":5551,"description":5552,"publishedDate":1661,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":5553,"cisaVulnName":5554,"cisaDateAdded":5542,"cisaShortDescription":5555,"cisaRequiredAction":4541},"CVE-2014-0496","Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors.",0.3998,"Adobe Reader and Acrobat Use-After-Free Vulnerability","Adobe Reader and Acrobat contain a use-after-free vulnerability which can allow for code execution.",{"cveId":5557,"description":5558,"publishedDate":5559,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":5560,"cisaVulnName":4820,"cisaDateAdded":5542,"cisaShortDescription":5561,"cisaRequiredAction":4293},"CVE-2015-3043","Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042.","2015-04-14",0.73862,"A memory corruption vulnerability exists in Adobe Flash Player that allows an attacker to perform remote code execution.",{"cveId":5563,"description":5564,"publishedDate":5565,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":5566,"cisaVulnName":5181,"cisaDateAdded":5542,"cisaShortDescription":5567,"cisaRequiredAction":4293},"CVE-2015-5119","Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows and OS X and 11.x through 11.2.202.468 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function, as exploited in the wild in July 2015.","2015-07-08",0.98618,"A use-after-free vulnerability exists within the ActionScript 3 ByteArray class in Adobe Flash Player that allows an attacker to perform remote code execution.",{"cveId":5569,"description":5570,"publishedDate":643,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5571,"cisaVulnName":5572,"cisaDateAdded":5542,"cisaShortDescription":5573,"cisaRequiredAction":4541},"CVE-2012-1856","The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3, Office 2010 SP1, SQL Server 2000 SP4, SQL Server 2005 SP4, SQL Server 2008 SP2, SP3, R2, R2 SP1, and R2 SP2, Commerce Server 2002 SP4, Commerce Server 2007 SP2, Commerce Server 2009 Gold and R2, Host Integration Server 2004 SP1, Visual FoxPro 8.0 SP1, Visual FoxPro 9.0 SP2, and Visual Basic 6.0 Runtime allows remote attackers to execute arbitrary code via a crafted (1) document or (2) web page that triggers system-state corruption, aka \"MSCOMCTL.OCX RCE Vulnerability.\"",0.72032,"Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability","The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office allows remote attackers to execute arbitrary code via a crafted (1) document or (2) web page that triggers system-state corruption.",{"cveId":5575,"description":5576,"publishedDate":1686,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":4376,"cisaVulnName":5193,"cisaDateAdded":5542,"cisaShortDescription":5577,"cisaRequiredAction":4293},"CVE-2011-0611","Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader 9.x before 9.4.4 and 10.x through 10.0.1 on Windows, Adobe Reader 9.x before 9.4.4 and 10.x before 10.0.3 on Mac OS X, and Adobe Acrobat 9.x before 9.4.4 and 10.x before 10.0.3 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content; as demonstrated by a Microsoft Office document with an embedded .swf file that has a size inconsistency in a \"group of included constants,\" object type confusion, ActionScript that adds custom functions to prototypes, and Date objects; and as exploited in the wild in April 2011.","Adobe Flash Player contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content.",{"cveId":5579,"description":5580,"publishedDate":5581,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5582,"cisaVulnName":5181,"cisaDateAdded":5542,"cisaShortDescription":5583,"cisaRequiredAction":4293},"CVE-2016-7855","Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in October 2016.","2016-11-01",0.25198,"Use-after-free vulnerability in Adobe Flash Player Windows and OS and Linux allows remote attackers to execute arbitrary code.",{"cveId":5585,"description":5586,"publishedDate":197,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5587,"cisaVulnName":5588,"cisaDateAdded":5542,"cisaShortDescription":5589,"cisaRequiredAction":4541},"CVE-2015-2424","Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, and PowerPoint 2013 RT SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka \"Microsoft Office Memory Corruption Vulnerability.\"",0.40388,"Microsoft PowerPoint Memory Corruption Vulnerability","Microsoft PowerPoint allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document.",{"cveId":5591,"description":5592,"publishedDate":5593,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5594,"cisaVulnName":5595,"cisaDateAdded":5542,"cisaShortDescription":5596,"cisaRequiredAction":4541},"CVE-2013-1347","Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly allocated or (2) is deleted, as exploited in the wild in May 2013.","2013-05-05",0.7774,"Microsoft Internet Explorer Remote Code Execution Vulnerability","This vulnerability may corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user within Internet Explorer.",{"cveId":5598,"description":5599,"publishedDate":5029,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5600,"cisaVulnName":3699,"cisaDateAdded":5542,"cisaShortDescription":5601,"cisaRequiredAction":4541},"CVE-2013-3897","Use-after-free vulnerability in the CDisplayPointer class in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted JavaScript code that uses the onpropertychange event handler, as exploited in the wild in September and October 2013, aka \"Internet Explorer Memory Corruption Vulnerability.\"",0.7731,"A use-after-free vulnerability exists within CDisplayPointer in Microsoft Internet Explorer that allows an attacker to remotely execute arbitrary code.",{"cveId":5603,"description":5604,"publishedDate":1486,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5605,"cisaVulnName":5606,"cisaDateAdded":5542,"cisaShortDescription":5607,"cisaRequiredAction":4541},"CVE-2019-1297","A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.",0.21805,"Microsoft Excel Remote Code Execution Vulnerability","A remote code execution vulnerability exists in Microsoft Excel when the software fails to properly handle objects in memory.",{"cveId":5609,"description":5610,"publishedDate":5611,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5612,"cisaVulnName":5613,"cisaDateAdded":5542,"cisaShortDescription":5614,"cisaRequiredAction":4293},"CVE-2017-11292","Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an untrusted value to be used in the calculation of an array index. This can lead to type confusion, and successful exploitation could lead to arbitrary code execution.","2017-10-22",0.11885,"Adobe Flash Player Type Confusion Vulnerability","Adobe Flash Player contains a type confusion vulnerability which can allow for remote code execution.",{"cveId":5616,"description":5617,"publishedDate":2944,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5618,"cisaVulnName":5619,"cisaDateAdded":5542,"cisaShortDescription":5620,"cisaRequiredAction":4541},"CVE-2016-7262","Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow user-assisted remote attackers to execute arbitrary commands via a crafted cell that is mishandled upon a click, aka \"Microsoft Office Security Feature Bypass Vulnerability.\"",0.57733,"Microsoft Office Security Feature Bypass Vulnerability","A security feature bypass vulnerability exists when Microsoft Office improperly handles input. An attacker who successfully exploited the vulnerability could execute arbitrary commands.",{"cveId":5622,"description":5623,"publishedDate":1222,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5624,"cisaVulnName":5625,"cisaDateAdded":5542,"cisaShortDescription":5626,"cisaRequiredAction":4541},"CVE-2017-0261","Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka \"Office Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-0262 and CVE-2017-0281.",0.7813,"Microsoft Office Use-After-Free Vulnerability","Microsoft Office contains a use-after-free vulnerability which can allow for remote code execution.",{"cveId":5628,"description":5629,"publishedDate":5630,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5631,"cisaVulnName":4538,"cisaDateAdded":5542,"cisaShortDescription":5632,"cisaRequiredAction":4541},"CVE-2015-1701","Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in April 2015, aka \"Win32k Elevation of Privilege Vulnerability.\"","2015-04-21",0.55923,"An unspecified vulnerability exists in the Win32k.sys kernel-mode driver in Microsoft Windows Server that allows a local attacker to execute arbitrary code with elevated privileges.",{"cveId":5634,"description":5635,"publishedDate":5636,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5637,"cisaVulnName":4272,"cisaDateAdded":5542,"cisaShortDescription":5638,"cisaRequiredAction":4541},"CVE-2013-5065","NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in November 2013.","2013-11-28",0.34651,"Microsoft Windows NDProxy.sys in the kernel contains an improper input validation vulnerability which can allow a local attacker to escalate privileges.",{"cveId":5640,"description":5641,"publishedDate":197,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5642,"cisaVulnName":5643,"cisaDateAdded":5542,"cisaShortDescription":5644,"cisaRequiredAction":4541},"CVE-2015-2387","ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, aka \"ATMFD.DLL Memory Corruption Vulnerability.\"",0.34878,"Microsoft ATM Font Driver Privilege Escalation Vulnerability","ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server allows local users to gain privileges via a crafted application.",{"cveId":5646,"description":5647,"publishedDate":889,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5648,"cisaVulnName":5649,"cisaDateAdded":5542,"cisaShortDescription":5650,"cisaRequiredAction":4541},"CVE-2015-1642","Microsoft Office 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted document, aka \"Microsoft Office Memory Corruption Vulnerability.\"",0.53087,"Microsoft Office Memory Corruption Vulnerability","Microsoft Office contains a memory corruption vulnerability that allows remote attackers to execute arbitrary code via a crafted document.",{"cveId":5652,"description":5653,"publishedDate":4914,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5654,"cisaVulnName":5655,"cisaDateAdded":5542,"cisaShortDescription":5656,"cisaRequiredAction":4541},"CVE-2014-4114","Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to execute arbitrary code via a crafted OLE object in an Office document, as exploited in the wild with a \"Sandworm\" attack in June through October 2014, aka \"Windows OLE Remote Code Execution Vulnerability.\"",0.81628,"Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability","A vulnerability exists in Windows Object Linking & Embedding (OLE) that could allow remote code execution if a user opens a file that contains a specially crafted OLE object.",{"cveId":5658,"description":5659,"publishedDate":2195,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5660,"cisaVulnName":5661,"cisaDateAdded":5542,"cisaShortDescription":5662,"cisaRequiredAction":4541},"CVE-2015-2545","Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted EPS image, aka \"Microsoft Office Malformed EPS File Vulnerability.\"",0.85937,"Microsoft Office Malformed EPS File Vulnerability","Microsoft Office allows remote attackers to execute arbitrary code via a crafted EPS image.",{"cveId":5664,"description":5665,"publishedDate":5666,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5667,"cisaVulnName":5668,"cisaDateAdded":5542,"cisaShortDescription":5669,"cisaRequiredAction":4541},"CVE-2013-0641","Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in the wild in February 2013.","2013-02-14",0.32346,"Adobe Reader Buffer Overflow Vulnerability","A buffer overflow vulnerability exists in Adobe Reader which allows an attacker to perform remote code execution.",{"cveId":5671,"description":5672,"publishedDate":5666,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5673,"cisaVulnName":5674,"cisaDateAdded":5542,"cisaShortDescription":5675,"cisaRequiredAction":4541},"CVE-2013-0640","Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, as exploited in the wild in February 2013.",0.86927,"Adobe Reader and Acrobat Memory Corruption Vulnerability","An memory corruption vulnerability exists in the acroform.dll in Adobe Reader that allows an attacker to perform remote code execution.",{"cveId":5677,"description":5678,"publishedDate":5679,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5680,"cisaVulnName":5541,"cisaDateAdded":5542,"cisaShortDescription":5681,"cisaRequiredAction":4293},"CVE-2015-7645","Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to execute arbitrary code via a crafted SWF file, as exploited in the wild in October 2015.","2015-10-15",0.65339,"Adobe Flash Player allows remote attackers to execute arbitrary code via a crafted SWF file.",{"cveId":5683,"description":5684,"publishedDate":5685,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5686,"cisaVulnName":3851,"cisaDateAdded":5542,"cisaShortDescription":5687,"cisaRequiredAction":4541},"CVE-2002-0367","smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit.","2002-06-25",0.04919,"smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges.",{"cveId":5689,"description":5690,"publishedDate":5691,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5692,"cisaVulnName":5693,"cisaDateAdded":5542,"cisaShortDescription":5694,"cisaRequiredAction":4541},"CVE-2016-0099","The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 does not properly process request handles, which allows local users to gain privileges via a crafted application, aka \"Secondary Logon Elevation of Privilege Vulnerability.\"","2016-03-09",0.37045,"Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability","A privilege escalation vulnerability exists in Microsoft Windows if the Windows Secondary Logon Service fails to properly manage request handles in memory. An attacker who successfully exploited this vulnerability could run arbitrary code as an administrator.",{"cveId":5696,"description":5697,"publishedDate":2028,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5698,"cisaVulnName":3851,"cisaDateAdded":5542,"cisaShortDescription":5699,"cisaRequiredAction":4541},"CVE-2004-0210","The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow.",0.07214,"A privilege elevation vulnerability exists in the POSIX subsystem. This vulnerability could allow a logged on user to take complete control of the system.",{"cveId":5701,"description":5702,"publishedDate":643,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5703,"cisaVulnName":5541,"cisaDateAdded":5542,"cisaShortDescription":5704,"cisaRequiredAction":4293},"CVE-2012-1535","Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted SWF content, as exploited in the wild in August 2012 with SWF content in a Word document.",0.70384,"Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute arbitrary code or cause a denial of service via crafted SWF content.",{"cveId":5706,"description":5707,"publishedDate":4837,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5708,"cisaVulnName":5709,"cisaDateAdded":5542,"cisaShortDescription":5710,"cisaRequiredAction":4541},"CVE-2010-3333","Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via crafted RTF data, aka \"RTF Stack Buffer Overflow Vulnerability.\"",0.89389,"Microsoft Office Stack-based Buffer Overflow Vulnerability","A stack-based buffer overflow vulnerability exists in the parsing of RTF data in Microsoft Office and earlier allows an attacker to perform remote code execution.",{"cveId":5712,"description":5713,"publishedDate":5714,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5715,"cisaVulnName":5716,"cisaDateAdded":5542,"cisaShortDescription":5717,"cisaRequiredAction":4541},"CVE-2010-0232","The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2, when access to 16-bit applications is enabled on a 32-bit x86 platform, does not properly validate certain BIOS calls, which allows local users to gain privileges by crafting a VDM_TIB data structure in the Thread Environment Block (TEB), and then calling the NtVdmControl function to start the Windows Virtual DOS Machine (aka NTVDM) subsystem, leading to improperly handled exceptions involving the #GP trap handler (nt!KiTrap0D), aka \"Windows Kernel Exception Handler Vulnerability.\"","2010-01-21",0.28735,"Microsoft Windows Kernel Exception Handler Vulnerability","The kernel in Microsoft Windows, when access to 16-bit applications is enabled on a 32-bit x86 platform, does not properly validate certain BIOS calls, which allows local users to gain privileges.",{"cveId":5719,"description":5720,"publishedDate":635,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5721,"cisaVulnName":5722,"cisaDateAdded":5542,"cisaShortDescription":5723,"cisaRequiredAction":4541},"CVE-2017-0001","The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application, aka \"Windows GDI Elevation of Privilege Vulnerability.\" This vulnerability is different from those described in CVE-2017-0005, CVE-2017-0025, and CVE-2017-0047.",0.03114,"Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability","The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges",{"cveId":5725,"description":5726,"publishedDate":4971,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5727,"cisaVulnName":5649,"cisaDateAdded":5542,"cisaShortDescription":5728,"cisaRequiredAction":4541},"CVE-2016-7193","Microsoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, Office Web Apps Server 2013 SP1, and Office Online Server allow remote attackers to execute arbitrary code via a crafted RTF document, aka \"Microsoft Office Memory Corruption Vulnerability.\"",0.57582,"Microsoft Office contains a memory corruption vulnerability which can allow for remote code execution.",{"cveId":5730,"description":5731,"publishedDate":862,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5732,"cisaVulnName":5733,"cisaDateAdded":5542,"cisaShortDescription":5734,"cisaRequiredAction":4541},"CVE-2009-3129","Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset, aka \"Excel Featheader Record Memory Corruption Vulnerability.\"",0.84034,"Microsoft Excel Featheader Record Memory Corruption Vulnerability","Microsoft Office Excel allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset.",{"cveId":5736,"description":5737,"publishedDate":928,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5738,"cisaVulnName":5739,"cisaDateAdded":5542,"cisaShortDescription":5740,"cisaRequiredAction":4541},"CVE-2017-8540","The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to memory corruption. aka \"Microsoft Malware Protection Engine Remote Code Execution Vulnerability\", a different vulnerability than CVE-2017-8538 and CVE-2017-8541.",0.71874,"Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability","The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to memory corruption. aka \"Microsoft Malware Protection Engine Remote Code Execution Vulnerability\".",{"cveId":5742,"description":5743,"publishedDate":585,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5744,"cisaVulnName":5745,"cisaDateAdded":5542,"cisaShortDescription":5746,"cisaRequiredAction":4541},"CVE-2009-1123","The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate changes to unspecified kernel objects, which allows local users to gain privileges via a crafted application, aka \"Windows Kernel Desktop Vulnerability.\"",0.04878,"Microsoft Windows Improper Input Validation Vulnerability","The kernel in Microsoft Windows does not properly validate changes to unspecified kernel objects, which allows local users to gain privileges via a crafted application.",{"cveId":5748,"description":5749,"publishedDate":5750,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5751,"cisaVulnName":5752,"cisaDateAdded":5542,"cisaShortDescription":5753,"cisaRequiredAction":4541},"CVE-2017-11826","Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation Services, and Office Online Server allow remote code execution when the software fails to properly handle objects in memory.","2017-10-13",0.81333,"Microsoft Office Remote Code Execution Vulnerability","A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user.",{"cveId":5755,"description":5756,"publishedDate":655,"cvssScore":3575,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5757,"cisaVulnName":5758,"cisaDateAdded":5542,"cisaShortDescription":5759,"cisaRequiredAction":4541},"CVE-2018-8298","A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability.\" This affects ChakraCore. This CVE ID is unique from CVE-2018-8242, CVE-2018-8283, CVE-2018-8287, CVE-2018-8288, CVE-2018-8291, CVE-2018-8296.",0.74694,"ChakraCore Scripting Engine Type Confusion Vulnerability","The ChakraCore scripting engine contains a type confusion vulnerability which can allow for remote code execution.",{"cveId":5761,"description":5762,"publishedDate":2260,"cvssScore":5763,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5764,"cisaVulnName":4370,"cisaDateAdded":5542,"cisaShortDescription":5765,"cisaRequiredAction":4541},"CVE-2018-8581","An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka \"Microsoft Exchange Server Elevation of Privilege Vulnerability.\" This affects Microsoft Exchange Server.",7.4,0.27355,"A privilege escalation vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could attempt to impersonate any other user of the Exchange server.",{"cveId":5767,"description":4199,"publishedDate":561,"cvssScore":4018,"cvssVersion":3630,"severity":3588,"isKev":4,"epssScore":5768,"cisaVulnName":5769,"cisaDateAdded":5542,"cisaShortDescription":5770,"cisaRequiredAction":4541},"CVE-2021-41379",0.19452,"Microsoft Windows Installer Privilege Escalation Vulnerability","Microsoft Windows Installer contains an unspecified vulnerability that allows for privilege escalation.",{"cveId":5772,"description":5773,"publishedDate":1222,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5774,"cisaVulnName":5595,"cisaDateAdded":5775,"cisaShortDescription":5776,"cisaRequiredAction":4541},"CVE-2017-0222","A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka \"Internet Explorer Memory Corruption Vulnerability.\" This CVE ID is unique from CVE-2017-0226.",0.29645,"2022-02-25","A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory.",{"cveId":5778,"description":5779,"publishedDate":5780,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5781,"cisaVulnName":5782,"cisaDateAdded":5775,"cisaShortDescription":5783,"cisaRequiredAction":4541},"CVE-2014-6352","Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to execute arbitrary code via a crafted OLE object, as exploited in the wild in October 2014 with a crafted PowerPoint document.","2014-10-22",0.77485,"Microsoft Windows Code Injection Vulnerability","Microsoft Windows allow remote attackers to execute arbitrary code via a crafted OLE object.",{"cveId":5785,"description":5786,"publishedDate":5787,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5788,"cisaVulnName":5752,"cisaDateAdded":5775,"cisaShortDescription":5789,"cisaRequiredAction":4541},"CVE-2017-8570","Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka \"Microsoft Office Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-0243.","2017-07-11",0.89889,"A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory.",{"cveId":5791,"description":5792,"publishedDate":5793,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":5794,"cisaVulnName":5181,"cisaDateAdded":5795,"cisaShortDescription":5796,"cisaRequiredAction":4293},"CVE-2018-15982","Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.","2019-01-18",0.89581,"2022-02-15","Adobe Flash Player com.adobe.tvsdk.mediacore.metadata Use After Free Vulnerability",{"cveId":5798,"description":5799,"publishedDate":5800,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5801,"cisaVulnName":5802,"cisaDateAdded":5795,"cisaShortDescription":5803,"cisaRequiredAction":4541},"CVE-2013-3906","GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Lync 2010, 2010 Attendee, 2013, and Basic 2013 allows remote attackers to execute arbitrary code via a crafted TIFF image, as demonstrated by an image in a Word document, and exploited in the wild in October and November 2013.","2013-11-06",0.84853,"Microsoft Graphics Component Memory Corruption Vulnerability","Microsoft Graphics Component contains a memory corruption vulnerability which can allow for remote code execution.",{"cveId":5805,"description":5806,"publishedDate":5807,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5808,"cisaVulnName":5809,"cisaDateAdded":5795,"cisaShortDescription":5810,"cisaRequiredAction":4541},"CVE-2014-1761","Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automation Services on SharePoint Server 2010 SP1 and SP2 and 2013; Office Web Apps 2010 SP1 and SP2; and Office Web Apps Server 2013 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, as exploited in the wild in March 2014.","2014-03-25",0.77734,"Microsoft Word Memory Corruption Vulnerability","Microsoft Word contains a memory corruption vulnerability which when exploited could allow for remote code execution.",{"cveId":5812,"description":5813,"publishedDate":2315,"cvssScore":3575,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5814,"cisaVulnName":5815,"cisaDateAdded":5795,"cisaShortDescription":5816,"cisaRequiredAction":4541},"CVE-2019-0752","A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0739, CVE-2019-0753, CVE-2019-0862.",0.81679,"Microsoft Internet Explorer Type Confusion Vulnerability","A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer",{"cveId":5818,"description":5819,"publishedDate":825,"cvssScore":3575,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5820,"cisaVulnName":5821,"cisaDateAdded":5795,"cisaShortDescription":5822,"cisaRequiredAction":4541},"CVE-2018-8174","A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka \"Windows VBScript Engine Remote Code Execution Vulnerability.\" This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.",0.88243,"Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability","A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka \"Windows VBScript Engine Remote Code Execution\"",{"cveId":5824,"description":5825,"publishedDate":2631,"cvssScore":222,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":5826,"cisaVulnName":5827,"cisaDateAdded":5828,"cisaShortDescription":5829,"cisaRequiredAction":4541},"CVE-2020-0796","A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client\u002FServer Remote Code Execution Vulnerability'.",0.9981,"Microsoft SMBv3 Remote Code Execution Vulnerability","2022-02-10","A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server or client.",{"cveId":5831,"description":5832,"publishedDate":5559,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":3901,"cisaVulnName":5833,"cisaDateAdded":5828,"cisaShortDescription":5834,"cisaRequiredAction":4541},"CVE-2015-1635","HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted HTTP requests, aka \"HTTP.sys Remote Code Execution Vulnerability.\"","Microsoft HTTP.sys Remote Code Execution Vulnerability","Microsoft HTTP protocol stack (HTTP.sys) contains a vulnerability that allows for remote code execution.",{"cveId":5836,"description":5837,"publishedDate":635,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5838,"cisaVulnName":5839,"cisaDateAdded":5828,"cisaShortDescription":5840,"cisaRequiredAction":4541},"CVE-2017-0144","The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka \"Windows SMB Remote Code Execution Vulnerability.\" This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148.",0.9923,"Microsoft SMBv1 Remote Code Execution Vulnerability","The SMBv1 server in multiple Microsoft Windows versions allows remote attackers to execute arbitrary code via crafted packets.",{"cveId":5842,"description":5843,"publishedDate":519,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5844,"cisaVulnName":5845,"cisaDateAdded":5828,"cisaShortDescription":5846,"cisaRequiredAction":4541},"CVE-2017-8464","Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows local users or remote attackers to execute arbitrary code via a crafted .LNK file, which is not properly handled during icon display in Windows Explorer or any other application that parses the icon of the shortcut. aka \"LNK Remote Code Execution Vulnerability.\"",0.90026,"Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability","Windows Shell in multiple versions of Microsoft Windows allows local users or remote attackers to execute arbitrary code via a crafted .LNK file",{"cveId":5848,"description":5849,"publishedDate":635,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5850,"cisaVulnName":5839,"cisaDateAdded":5828,"cisaShortDescription":5840,"cisaRequiredAction":4541},"CVE-2017-0145","The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka \"Windows SMB Remote Code Execution Vulnerability.\" This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0144, CVE-2017-0146, and CVE-2017-0148.",0.8985,{"cveId":5852,"description":5853,"publishedDate":1222,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5854,"cisaVulnName":4538,"cisaDateAdded":5828,"cisaShortDescription":5855,"cisaRequiredAction":4541},"CVE-2017-0263","The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka \"Win32k Elevation of Privilege Vulnerability.\"",0.10034,"Microsoft Win32k contains a privilege escalation vulnerability due to the Windows kernel-mode driver failing to properly handle objects in memory.",{"cveId":5857,"description":5858,"publishedDate":5859,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5860,"cisaVulnName":5861,"cisaDateAdded":5828,"cisaShortDescription":5862,"cisaRequiredAction":4541},"CVE-2021-36934","\u003Cp>An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accounts Manager (SAM) database. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.\u003C\u002Fp>\n\u003Cp>An attacker must have the ability to execute code on a victim system to exploit this vulnerability.\u003C\u002Fp>\n\u003Cp>After installing this security update, you \u003Cem>must\u003C\u002Fem> manually delete all shadow copies of system files, including the SAM database, to fully mitigate this vulnerabilty. \u003Cstrong>Simply installing this security update will not fully mitigate this vulnerability.\u003C\u002Fstrong> See \u003Ca href=\"https:\u002F\u002Fsupport.microsoft.com\u002Ftopic\u002F1ceaa637-aaa3-4b58-a48b-baf72a2fa9e7\">KB5005357- Delete Volume Shadow Copies\u003C\u002Fa>.\u003C\u002Fp>\n","2021-07-22",0.67252,"Microsoft Windows SAM Local Privilege Escalation Vulnerability","If a Volume Shadow Copy (VSS) shadow copy of the system drive is available, users can read the SAM file which would allow any user to escalate privileges to SYSTEM level.",{"cveId":5864,"description":5865,"publishedDate":1222,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5866,"cisaVulnName":5752,"cisaDateAdded":5828,"cisaShortDescription":5867,"cisaRequiredAction":4541},"CVE-2017-0262","Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka \"Office Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-0261 and CVE-2017-0281.",0.81005,"A remote code execution vulnerability exists in Microsoft Office.",{"cveId":5869,"description":4558,"publishedDate":5169,"cvssScore":52,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5870,"cisaVulnName":4538,"cisaDateAdded":5871,"cisaShortDescription":4540,"cisaRequiredAction":4541},"CVE-2022-21882",0.59205,"2022-02-04",{"cveId":5873,"description":5874,"publishedDate":5875,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":5876,"cisaVulnName":4578,"cisaDateAdded":5877,"cisaShortDescription":5878,"cisaRequiredAction":4541},"CVE-2014-1776","Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to the CMarkup::IsConnectedToPrimaryMarkup function, as exploited in the wild in April 2014.  NOTE: this issue originally emphasized VGX.DLL, but Microsoft clarified that \"VGX.DLL does not contain the vulnerable code leveraged in this exploit. Disabling VGX.DLL is an exploit-specific workaround that provides an immediate, effective workaround to help block known attacks.\"","2014-04-27",0.82682,"2022-01-28","Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code in the context of the current user.",{"cveId":5880,"description":5881,"publishedDate":2631,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5882,"cisaVulnName":5883,"cisaDateAdded":5877,"cisaShortDescription":5884,"cisaRequiredAction":4541},"CVE-2020-0787","An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'.",0.42524,"Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability","Microsoft Windows BITS is vulnerable to to a privilege elevation vulnerability if it improperly handles symbolic links. An actor can exploit this vulnerability to execute arbitrary code with system-level privileges.",{"cveId":5886,"description":5887,"publishedDate":1334,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5888,"cisaVulnName":4538,"cisaDateAdded":5889,"cisaShortDescription":5890,"cisaRequiredAction":4541},"CVE-2018-8453","An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka \"Win32k Elevation of Privilege Vulnerability.\" This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.",0.70042,"2022-01-21","Microsoft Windows Win32k contains a vulnerability that allows an attacker to escalate privileges.",{"cveId":5892,"description":4244,"publishedDate":1126,"cvssScore":4206,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5893,"cisaVulnName":5894,"cisaDateAdded":5895,"cisaShortDescription":5896,"cisaRequiredAction":4541},"CVE-2021-33766",0.98176,"Microsoft Exchange Server Information Disclosure","2022-01-18","Microsoft Exchange Server contains an information disclosure vulnerability which can allow an unauthenticated attacker to steal email traffic from target.",{"cveId":5898,"description":5490,"publishedDate":1824,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5899,"cisaVulnName":4538,"cisaDateAdded":5900,"cisaShortDescription":5901,"cisaRequiredAction":4541},"CVE-2019-1458",0.74438,"2022-01-10","A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k EoP.",{"cveId":5903,"description":5904,"publishedDate":1226,"cvssScore":4018,"cvssVersion":3630,"severity":3588,"isKev":4,"epssScore":5905,"cisaVulnName":5906,"cisaDateAdded":5900,"cisaShortDescription":5907,"cisaRequiredAction":4541},"CVE-2013-3900","Why is Microsoft republishing a CVE from 2013?\nWe are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the format is different from the original CVE published in 2013, except for clarifications about how to configure the EnableCertPaddingCheck registry value, the information herein remains unchanged from the original text published on December 10, 2013,\nMicrosoft does not plan to enforce the stricter verification behavior as a default functionality on supported releases of Microsoft Windows. This behavior remains available as an opt-in feature via reg key setting, and is available on supported editions of Windows released since December 10, 2013. This includes all currently supported versions of Windows 10 and Windows 11. The supporting code for this reg key was incorporated at the time of release for Windows 10 and Windows 11, so no security update is required; however, the reg key must be set. See the Security Updates table for the list of affected software.\nVulnerability Description\nA remote code execution vulnerability exists in the way that the WinVerifyTrust function handles Windows Authenticode signature verification for portable executable (PE) files. An anonymous attacker could exploit the vulnerability by modifying an existing signed executable file to leverage unverified portions of the file in such a way as to add malicious code to the file without invalidating the signature. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.\nIf a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.\nExploitation of this vulnerability requires that a user or application run or install a specially crafted, signed PE file. An attacker could modify an... See more at https:\u002F\u002Fmsrc.microsoft.com\u002Fupdate-guide\u002Fvulnerability\u002FCVE-2013-3900",0.44647,"Microsoft WinVerifyTrust function Remote Code Execution","A remote code execution vulnerability exists in the way that the WinVerifyTrust function handles Windows Authenticode signature verification for PE files.",{"cveId":5909,"description":5910,"publishedDate":1415,"cvssScore":4062,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5911,"cisaVulnName":5912,"cisaDateAdded":1415,"cisaShortDescription":5913,"cisaRequiredAction":4541},"CVE-2021-43890","We have investigated reports of a spoofing vulnerability in AppX installer that affects Microsoft Windows. Microsoft is aware of attacks that attempt to exploit this vulnerability by using specially crafted packages that include the malware family known as Emotet\u002FTrickbot\u002FBazaloader.\nAn attacker could craft a malicious attachment to be used in phishing campaigns. The attacker would then have to convince the user to open the specially crafted attachment. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.\nPlease see the Security Updates table for the link to the updated app. Alternatively you can download and install the Installer using the links provided in the FAQ section.\nPlease see the Mitigations and Workaround sections for important information about steps you can take to protect your system from this vulnerability.\nDecember 27 2023 Update:\nIn recent months, Microsoft Threat Intelligence has seen an increase in activity from threat actors leveraging social engineering and phishing techniques to target Windows OS users and utilizing the ms-appinstaller URI scheme.\nTo address this increase in activity, we have updated the App Installer to disable the ms-appinstaller protocol by default and recommend other potential mitigations.\n",0.11294,"Microsoft Windows AppX Installer Spoofing Vulnerability","Microsoft Windows AppX Installer contains a spoofing vulnerability which has a high impacts to confidentiality, integrity, and availability.",{"cveId":5915,"description":3734,"publishedDate":561,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5916,"cisaVulnName":3734,"cisaDateAdded":5917,"cisaShortDescription":5918,"cisaRequiredAction":4541},"CVE-2021-42321",0.91737,"2021-11-17","An authenticated attacker could leverage improper validation in cmdlet arguments within Microsoft Exchange and perform remote code execution.",{"cveId":5920,"description":4558,"publishedDate":1490,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5921,"cisaVulnName":5922,"cisaDateAdded":5917,"cisaShortDescription":5923,"cisaRequiredAction":4541},"CVE-2021-40449",0.81936,"Microsoft Windows Win32k Privilege Escalation Vulnerability","Unspecified vulnerability allows for an authenticated user to escalate privileges.",{"cveId":5925,"description":5926,"publishedDate":561,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5927,"cisaVulnName":5928,"cisaDateAdded":5917,"cisaShortDescription":5929,"cisaRequiredAction":4541},"CVE-2021-42292","Microsoft Excel Security Feature Bypass Vulnerability",0.43005,"Microsoft Excel Security Feature Bypass","A security feature bypass vulnerability in Microsoft Excel would allow a local user to perform arbitrary code execution.",{"cveId":5931,"description":5932,"publishedDate":478,"cvssScore":222,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":5933,"cisaVulnName":5934,"cisaDateAdded":5935,"cisaShortDescription":5936,"cisaRequiredAction":4541},"CVE-2020-1350","A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'.",0.96721,"Microsoft Windows DNS Server Remote Code Execution Vulnerability","2021-11-03","Microsoft Windows DNS Servers fail to properly handle requests, allowing an attacker to perform remote code execution in the context of the Local System Account. The vulnerability is also known under the moniker of SIGRed.",{"cveId":5938,"description":5939,"publishedDate":5940,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":5941,"cisaVulnName":5181,"cisaDateAdded":5935,"cisaShortDescription":5942,"cisaRequiredAction":4293},"CVE-2018-4878","A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to media player handling of listener objects. A successful attack can lead to arbitrary code execution. This was exploited in the wild in January and February 2018.","2018-02-06",0.9028,"Adobe Flash Player contains a use-after-free vulnerability that could allow for code execution.",{"cveId":5944,"description":5945,"publishedDate":352,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":5946,"cisaVulnName":5947,"cisaDateAdded":5935,"cisaShortDescription":5948,"cisaRequiredAction":4541},"CVE-2017-7269","Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with \"If: \u003Chttp:\u002F\u002F\" in a PROPFIND request, as exploited in the wild in July or August 2016.",0.99823,"Microsoft Windows Server Buffer Overflow Vulnerability","Microsoft Windows Server 2003 R2 contains a buffer overflow vulnerability in Internet Information Services (IIS) 6.0 which allows remote attackers to execute code via a long header beginning with \"If: \u003Chttp:\u002F\u002F\" in a PROPFIND request.",{"cveId":5950,"description":5951,"publishedDate":5129,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":5952,"cisaVulnName":5953,"cisaDateAdded":5935,"cisaShortDescription":5954,"cisaRequiredAction":4541},"CVE-2020-0646","A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote Code Execution Injection Vulnerability'.",0.99222,"Microsoft .NET Framework Remote Code Execution Vulnerability","Microsoft .NET Framework contains an improper input validation vulnerability that allows for remote code execution.",{"cveId":5956,"description":5957,"publishedDate":1108,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":5958,"cisaVulnName":5959,"cisaDateAdded":5935,"cisaShortDescription":5960,"cisaRequiredAction":4541},"CVE-2021-38647","Open Management Infrastructure Remote Code Execution Vulnerability",0.99933,"Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability","Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing remote code execution.",{"cveId":5962,"description":5963,"publishedDate":5415,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":3901,"cisaVulnName":5964,"cisaDateAdded":5935,"cisaShortDescription":5965,"cisaRequiredAction":4541},"CVE-2019-0708","A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.","Microsoft Remote Desktop Services Remote Code Execution Vulnerability","Microsoft Remote Desktop Services, formerly known as Terminal Service, contains an unspecified vulnerability that allows an unauthenticated attacker to connect to the target system using RDP and send specially crafted requests. Successful exploitation allows for remote code execution. The vulnerability is also known under the moniker of BlueKeep.",{"cveId":5967,"description":5968,"publishedDate":272,"cvssScore":3662,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":5969,"cisaVulnName":4127,"cisaDateAdded":5935,"cisaShortDescription":5970,"cisaRequiredAction":4541},"CVE-2019-0604","A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594.",0.99913,"Microsoft SharePoint fails to check the source markup of an application package. An attacker who successfully exploits the vulnerability could run remote code in the context of the SharePoint application pool and the SharePoint server farm account.",{"cveId":5972,"description":3734,"publishedDate":5973,"cvssScore":3654,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":5974,"cisaVulnName":3734,"cisaDateAdded":5935,"cisaShortDescription":5975,"cisaRequiredAction":4541},"CVE-2021-26855","2021-03-03",0.99996,"Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.",{"cveId":5977,"description":3734,"publishedDate":1126,"cvssScore":3654,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":3901,"cisaVulnName":3734,"cisaDateAdded":5935,"cisaShortDescription":5978,"cisaRequiredAction":4541},"CVE-2021-34473","Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution.",{"cveId":5980,"description":5981,"publishedDate":5982,"cvssScore":3654,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":5983,"cisaVulnName":5984,"cisaDateAdded":5935,"cisaShortDescription":5985,"cisaRequiredAction":4541},"CVE-2020-4006","VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command injection vulnerability.","2020-11-23",0.17302,"Multiple VMware Products Command Injection Vulnerability","VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector contain a command injection vulnerability. An attacker with network access to the administrative configurator on port 8443 and a valid password for the configurator administrator account can execute commands with unrestricted privileges on the underlying operating system.",{"cveId":5987,"description":4368,"publishedDate":1126,"cvssScore":436,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":5988,"cisaVulnName":4370,"cisaDateAdded":5935,"cisaShortDescription":4372,"cisaRequiredAction":4541},"CVE-2021-34523",0.9999,{"cveId":5990,"description":5991,"publishedDate":478,"cvssScore":436,"cvssVersion":3630,"severity":3583,"isKev":4,"epssScore":5992,"cisaVulnName":5993,"cisaDateAdded":5935,"cisaShortDescription":5994,"cisaRequiredAction":4541},"CVE-2020-1040","A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1032, CVE-2020-1036, CVE-2020-1041, CVE-2020-1042, CVE-2020-1043.",0.07393,"Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability","Microsoft Hyper-V RemoteFX vGPU contains an improper input validation vulnerability due to the host server failing to properly validate input from an authenticated user on a guest operating system. Successful exploitation allows for remote code execution on the host operating system.",{"cveId":5996,"description":5997,"publishedDate":5998,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":5999,"cisaVulnName":4432,"cisaDateAdded":5935,"cisaShortDescription":6000,"cisaRequiredAction":4541},"CVE-2021-28550","Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","2021-09-02",0.51851,"Adobe Acrobat and Reader contains a use-after-free vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user.",{"cveId":6002,"description":6003,"publishedDate":635,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6004,"cisaVulnName":6005,"cisaDateAdded":5935,"cisaShortDescription":6006,"cisaRequiredAction":4541},"CVE-2017-0143","The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka \"Windows SMB Remote Code Execution Vulnerability.\" This vulnerability is different from those described in CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148.",0.93307,"Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability","Microsoft Windows Server Message Block 1.0 (SMBv1) contains an unspecified vulnerability that allows for remote code execution.",{"cveId":6008,"description":6009,"publishedDate":6010,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6011,"cisaVulnName":6012,"cisaDateAdded":5935,"cisaShortDescription":6013,"cisaRequiredAction":4541},"CVE-2021-34527","\u003Cp>A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.\u003C\u002Fp>\n\u003Cp>UPDATE July 7, 2021: The security update for Windows Server 2012, Windows Server 2016 and Windows 10, Version 1607 have been released. Please see the Security Updates table for the applicable update for your system. We recommend that you install these updates immediately. If you are unable to install these updates, see the FAQ and Workaround sections in this CVE for information on how to help protect your system from this vulnerability.\u003C\u002Fp>\n\u003Cp>In addition to installing the updates, in order to secure your system, you must confirm that the following registry settings are set to 0 (zero) or are not defined (\u003Cstrong>Note\u003C\u002Fstrong>: These registry keys do not exist by default, and therefore are already at the secure setting.), also that your Group Policy setting are correct (see FAQ):\u003C\u002Fp>\n\u003Cul>\n\u003Cli>HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows NT\\Printers\\PointAndPrint\u003C\u002Fli>\n\u003Cli>NoWarningNoElevationOnInstall = 0 (DWORD) or not defined (default setting)\u003C\u002Fli>\n\u003Cli>UpdatePromptSettings = 0 (DWORD) or not defined (default setting)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Having NoWarningNoElevationOnInstall set to 1 makes your system vulnerable by design.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>UPDATE July 6, 2021: Microsoft has completed the investigation and has released security updates to address this vulnerability. Please see the Security Updates table for the applicable update for your system. We recommend that you install these updates immediately. If you are unable to install these updates, see the FAQ and Workaround sections in this CVE for information on how to help protect your system from this vulnerability. See also \u003Ca href=\"https:\u002F\u002Fsupport.microsoft.com\u002Ftopic\u002F31b91c02-05bc-4ada-a7ea-183b129578a7\">KB5005010: Restricting installation of new printer drivers after applying the July 6, 2021 updates\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Note that the security updates released on and after July 6, 2021 contain protections for CVE-2021-1675 and the additional remote code execution exploit in the Windows Print Spooler service known as “PrintNightmare”, documented in CVE-2021-34527.\u003C\u002Fp>\n","2021-07-02",0.99792,"Microsoft Windows Print Spooler Remote Code Execution Vulnerability","Microsoft Windows Print Spooler contains an unspecified vulnerability due to the Windows Print Spooler service improperly performing privileged file operations. Successful exploitation allows an attacker to perform remote code execution with SYSTEM privileges. The vulnerability is also known under the moniker of PrintNightmare.",{"cveId":6015,"description":6016,"publishedDate":6017,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6018,"cisaVulnName":6019,"cisaDateAdded":5935,"cisaShortDescription":6020,"cisaRequiredAction":4541},"CVE-2021-36741","An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 10.0 SP1 allows a remote attached to upload arbitrary files on affected installations. Please note: an attacker must first obtain the ability to logon to the product�s management console in order to exploit this vulnerability.","2021-07-29",0.04951,"Trend Micro Multiple Products Improper Input Validation Vulnerability","Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security contain an improper input validation vulnerability that allows a remote attacker to upload files.",{"cveId":6022,"description":6023,"publishedDate":1810,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6024,"cisaVulnName":6025,"cisaDateAdded":5935,"cisaShortDescription":6026,"cisaRequiredAction":4541},"CVE-2012-0158","The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2003 Web Components SP3; SQL Server 2000 SP4, 2005 SP4, and 2008 SP2, SP3, and R2; BizTalk Server 2002 SP1; Commerce Server 2002 SP4, 2007 SP2, and 2009 Gold and R2; Visual FoxPro 8.0 SP1 and 9.0 SP2; and Visual Basic 6.0 Runtime allow remote attackers to execute arbitrary code via a crafted (a) web site, (b) Office document, or (c) .rtf file that triggers \"system state\" corruption, as exploited in the wild in April 2012, aka \"MSCOMCTL.OCX RCE Vulnerability.\"",0.99976,"Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability","Microsoft MSCOMCTL.OCX contains an unspecified vulnerability that allows for remote code execution, allowing an attacker to take complete control of an affected system under the context of the current user.",{"cveId":6028,"description":6029,"publishedDate":1870,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6030,"cisaVulnName":6031,"cisaDateAdded":5935,"cisaShortDescription":6032,"cisaRequiredAction":4541},"CVE-2020-0688","A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'.",0.99962,"Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability","Microsoft Exchange Server Validation Key fails to properly create unique keys at install time, allowing for remote code execution.",{"cveId":6034,"description":6035,"publishedDate":383,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6036,"cisaVulnName":6037,"cisaDateAdded":5935,"cisaShortDescription":6038,"cisaRequiredAction":4541},"CVE-2020-1020","A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could execute code remotely, aka 'Adobe Font Manager Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0938.",0.65037,"Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability","Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerability when handling specially crafted multi-master fonts (Adobe Type 1 PostScript format) that allows for remote code execution for all systems except Windows 10. For systems running Windows 10, an attacker who successfully exploited the vulnerability could execute code in an AppContainer sandbox context with limited privileges and capabilities.",{"cveId":6040,"description":6041,"publishedDate":6042,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6043,"cisaVulnName":5649,"cisaDateAdded":5935,"cisaShortDescription":6044,"cisaRequiredAction":4541},"CVE-2018-0798","Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka \"Microsoft Office Memory Corruption Vulnerability\".","2018-01-10",0.95121,"Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for remote code execution in the context of the current user. This vulnerability is known to be chained with CVE-2018-0802.",{"cveId":6046,"description":6047,"publishedDate":6048,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6049,"cisaVulnName":3858,"cisaDateAdded":5935,"cisaShortDescription":4555,"cisaRequiredAction":4541},"CVE-2020-16009","Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2020-11-03",0.48293,{"cveId":6051,"description":6052,"publishedDate":469,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6053,"cisaVulnName":6054,"cisaDateAdded":5935,"cisaShortDescription":6055,"cisaRequiredAction":4541},"CVE-2019-0541","A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka \"MSHTML Engine Remote Code Execution Vulnerability.\" This affects Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, Internet Explorer 11, Microsoft Excel Viewer, Internet Explorer 10, Office 365 ProPlus.",0.53202,"Microsoft MSHTML Remote Code Execution Vulnerability","Microsoft MSHTML engine contains an improper input validation vulnerability that allows for remote code execution vulnerability.",{"cveId":6057,"description":6058,"publishedDate":1555,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6059,"cisaVulnName":6060,"cisaDateAdded":5935,"cisaShortDescription":6061,"cisaRequiredAction":4541},"CVE-2014-1812","The Group Policy implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 does not properly handle distribution of passwords, which allows remote authenticated users to obtain sensitive credential information and consequently gain privileges by leveraging access to the SYSVOL share, as exploited in the wild in May 2014, aka \"Group Policy Preferences Password Elevation of Privilege Vulnerability.\"",0.65117,"Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability","Microsoft Windows Active Directory contains a privilege escalation vulnerability due to the way it distributes passwords that are configured using Group Policy preferences. An authenticated attacker who successfully exploits the vulnerability could decrypt the passwords and use them to elevate privileges on the domain.",{"cveId":6063,"description":6064,"publishedDate":6065,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6066,"cisaVulnName":6067,"cisaDateAdded":5935,"cisaShortDescription":6068,"cisaRequiredAction":4541},"CVE-2021-21017","Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a heap-based buffer overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","2021-02-11",0.86326,"Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability","Acrobat Acrobat and Reader contain a heap-based buffer overflow vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user.",{"cveId":6070,"description":6071,"publishedDate":808,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6072,"cisaVulnName":4578,"cisaDateAdded":5935,"cisaShortDescription":6073,"cisaRequiredAction":4541},"CVE-2021-26411","Internet Explorer Memory Corruption Vulnerability",0.81667,"Microsoft Internet Explorer contains an unspecified vulnerability that allows for memory corruption.",{"cveId":6075,"description":6076,"publishedDate":1108,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6077,"cisaVulnName":6054,"cisaDateAdded":5935,"cisaShortDescription":6078,"cisaRequiredAction":4541},"CVE-2021-40444","\u003Cp>Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks that attempt to exploit this vulnerability by using specially-crafted Microsoft Office documents.\u003C\u002Fp>\n\u003Cp>An attacker could craft a malicious ActiveX control to be used by a Microsoft Office document that hosts the browser rendering engine. The attacker would then have to convince the user to open the malicious document. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.\u003C\u002Fp>\n\u003Cp>Microsoft Defender Antivirus and Microsoft Defender for Endpoint both provide detection and protections for the known vulnerability. Customers should keep antimalware products up to date. Customers who utilize automatic updates do not need to take additional action. Enterprise customers who manage updates should select the detection build 1.349.22.0 or newer and deploy it across their environments. Microsoft Defender for Endpoint alerts will be displayed as: “Suspicious Cpl File Execution”.\u003C\u002Fp>\n\u003Cp>Upon completion of this investigation, Microsoft will take the appropriate action to help protect our customers. This may include providing a security update through our monthly release process or providing an out-of-cycle security update, depending on customer needs.\u003C\u002Fp>\n\u003Cp>Please see the \u003Cstrong>Mitigations\u003C\u002Fstrong> and \u003Cstrong>Workaround\u003C\u002Fstrong> sections for important information about steps you can take to protect your system from this vulnerability.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>UPDATE\u003C\u002Fstrong> September 14, 2021: Microsoft has released security updates to address this vulnerability. Please see the Security Updates table for the applicable update for your system. We recommend that you install these updates immediately. Please see the FAQ for important information about which updates are applicable to your system.\u003C\u002Fp>\n",0.9784,"Microsoft MSHTML contains a unspecified vulnerability that allows for remote code execution.",{"cveId":6080,"description":6081,"publishedDate":808,"cvssScore":3644,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6082,"cisaVulnName":5595,"cisaDateAdded":5935,"cisaShortDescription":6083,"cisaRequiredAction":4541},"CVE-2021-27085","Internet Explorer Remote Code Execution Vulnerability",0.05448,"Microsoft Internet Explorer contains an unspecified vulnerability that allows for remote code execution.",{"cveId":6085,"description":6086,"publishedDate":2181,"cvssScore":4362,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6087,"cisaVulnName":6088,"cisaDateAdded":5935,"cisaShortDescription":6089,"cisaRequiredAction":4541},"CVE-2021-33739","Microsoft DWM Core Library Elevation of Privilege Vulnerability",0.06555,"Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability","Microsoft Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that allows for privilege escalation.",{"cveId":6091,"description":6092,"publishedDate":2397,"cvssScore":4362,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6093,"cisaVulnName":3734,"cisaDateAdded":5935,"cisaShortDescription":6094,"cisaRequiredAction":4541},"CVE-2020-17144","Microsoft Exchange Remote Code Execution Vulnerability",0.36514,"Microsoft Exchange Server improperly validates cmdlet arguments which allow an attacker to perform remote code execution.",{"cveId":6096,"description":6097,"publishedDate":5129,"cvssScore":3907,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6098,"cisaVulnName":6099,"cisaDateAdded":5935,"cisaShortDescription":6100,"cisaRequiredAction":4541},"CVE-2020-0601","A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, legitimate source, aka 'Windows CryptoAPI Spoofing Vulnerability'.",0.89078,"Microsoft Windows CryptoAPI Spoofing Vulnerability","Microsoft Windows CryptoAPI (Crypt32.dll) contains a spoofing vulnerability in the way it validates Elliptic Curve Cryptography (ECC) certificates. An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, legitimate source. A successful exploit could also allow the attacker to conduct man-in-the-middle attacks and decrypt confidential information on user connections to the affected software. The vulnerability is also known under the moniker of CurveBall.",{"cveId":6102,"description":4135,"publishedDate":1126,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6103,"cisaVulnName":4272,"cisaDateAdded":5935,"cisaShortDescription":6104,"cisaRequiredAction":4541},"CVE-2021-33771",0.10172,"Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.",{"cveId":6106,"description":6107,"publishedDate":4964,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6108,"cisaVulnName":4538,"cisaDateAdded":5935,"cisaShortDescription":6109,"cisaRequiredAction":4541},"CVE-2016-7255","The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka \"Win32k Elevation of Privilege Vulnerability.\"",0.80968,"Microsoft Win32k kernel-mode driver fails to properly handle objects in memory which allows for privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.",{"cveId":6111,"description":6112,"publishedDate":578,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6113,"cisaVulnName":6114,"cisaDateAdded":5935,"cisaShortDescription":6115,"cisaRequiredAction":4541},"CVE-2020-1380","A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.\nIn a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked "safe for initialization" in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.\nThe security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.\n",0.24188,"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","Microsoft Internet Explorer contains a memory corruption vulnerability which can allow for remote code execution in the context of the current user.",{"cveId":6117,"description":6118,"publishedDate":6042,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6119,"cisaVulnName":5649,"cisaDateAdded":5935,"cisaShortDescription":6120,"cisaRequiredAction":4541},"CVE-2018-0802","Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka \"Microsoft Office Memory Corruption Vulnerability\". This CVE is unique from CVE-2018-0797 and CVE-2018-0812.",0.93289,"Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for remote code execution in the context of the current user. This vulnerability is known to be chained with CVE-2018-0798.",{"cveId":6122,"description":6123,"publishedDate":478,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6124,"cisaVulnName":6125,"cisaDateAdded":5935,"cisaShortDescription":6126,"cisaRequiredAction":4541},"CVE-2020-1147","A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.",0.93966,"Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability","Microsoft .NET Framework, Microsoft SharePoint, and Visual Studio contain a remote code execution vulnerability when the software fails to check the source markup of XML file input. Successful exploitation allows an attacker to execute code in the context of the process responsible for deserialization of the XML content.",{"cveId":6128,"description":6129,"publishedDate":6130,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6131,"cisaVulnName":4538,"cisaDateAdded":5935,"cisaShortDescription":6132,"cisaRequiredAction":4541},"CVE-2020-1054","An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1143.","2020-05-21",0.53878,"Microsoft Win32k contains a privilege escalation vulnerability when the Windows kernel-mode driver fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode.",{"cveId":6134,"description":6135,"publishedDate":570,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6136,"cisaVulnName":5953,"cisaDateAdded":5935,"cisaShortDescription":6137,"cisaRequiredAction":4541},"CVE-2017-8759","Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application, aka \".NET Framework Remote Code Execution Vulnerability.\"",0.88698,"Microsoft .NET Framework contains a remote code execution vulnerability when processing untrusted input that could allow an attacker to take control of an affected system.",{"cveId":6139,"description":6140,"publishedDate":442,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6141,"cisaVulnName":5649,"cisaDateAdded":5935,"cisaShortDescription":6142,"cisaRequiredAction":4541},"CVE-2017-11882","Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Microsoft Office 2016 allow an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka \"Microsoft Office Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11884.",0.99945,"Microsoft Office contains a memory corruption vulnerability that allows remote code execution in the context of the current user.",{"cveId":6144,"description":6145,"publishedDate":503,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6146,"cisaVulnName":4272,"cisaDateAdded":5935,"cisaShortDescription":6147,"cisaRequiredAction":4541},"CVE-2020-0986","An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020-1269, CVE-2020-1273, CVE-2020-1274, CVE-2020-1275, CVE-2020-1276, CVE-2020-1307, CVE-2020-1316.",0.16405,"Microsoft Windows kernel contains an unspecified vulnerability when handling objects in memory that allows attackers to escalate privileges and execute code in kernel mode.",{"cveId":6149,"description":6150,"publishedDate":383,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6151,"cisaVulnName":6037,"cisaDateAdded":5935,"cisaShortDescription":6038,"cisaRequiredAction":4541},"CVE-2020-0938","A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could execute code remotely, aka 'Adobe Font Manager Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1020.",0.6895,{"cveId":6153,"description":6154,"publishedDate":1870,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6155,"cisaVulnName":5769,"cisaDateAdded":5935,"cisaShortDescription":6156,"cisaRequiredAction":4541},"CVE-2020-0683","An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0686.",0.07605,"Microsoft Windows Installer contains a privilege escalation vulnerability when MSI packages process symbolic links, which allows attackers to bypass access restrictions to add or remove files.",{"cveId":6158,"description":6159,"publishedDate":5750,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6160,"cisaVulnName":6161,"cisaDateAdded":5935,"cisaShortDescription":6162,"cisaRequiredAction":4541},"CVE-2017-11774","Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Microsoft Office handles objects in memory, aka \"Microsoft Outlook Security Feature Bypass Vulnerability.\"",0.59627,"Microsoft Office Outlook Security Feature Bypass Vulnerability","Microsoft Office Outlook contains a security feature bypass vulnerability due to improperly handling objects in memory. Successful exploitation allows an attacker to execute commands.",{"cveId":6164,"description":6165,"publishedDate":2315,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6166,"cisaVulnName":4538,"cisaDateAdded":5935,"cisaShortDescription":6167,"cisaRequiredAction":4541},"CVE-2019-0803","An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0859.",0.4523,"Microsoft Win32k contains an unspecified vulnerability due to it failing to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.",{"cveId":6169,"description":6170,"publishedDate":5042,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6171,"cisaVulnName":6172,"cisaDateAdded":5935,"cisaShortDescription":6173,"cisaRequiredAction":4541},"CVE-2017-0199","Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1 allow remote attackers to execute arbitrary code via a crafted document, aka \"Microsoft Office\u002FWordPad Remote Code Execution Vulnerability w\u002FWindows API.\"",0.99497,"Microsoft Office and WordPad Remote Code Execution Vulnerability","Microsoft Office and WordPad contain an unspecified vulnerability due to the way the applications parse specially crafted files. Successful exploitation allows for remote code execution.",{"cveId":6175,"description":6176,"publishedDate":6177,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6178,"cisaVulnName":6179,"cisaDateAdded":5935,"cisaShortDescription":6180,"cisaRequiredAction":4541},"CVE-2019-15752","Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\\DockerDesktop\\version-bin\\ as a low-privilege user, and then waiting for an admin or service user to authenticate with Docker, restart Docker, or run 'docker login' to force the command.","2019-08-28",0.48628,"Docker Desktop Community Edition Privilege Escalation Vulnerability","Docker Desktop Community Edition contains a vulnerability that may allow local users to escalate privileges by placing a trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\\DockerDesktop\\version-bin\\.",{"cveId":6182,"description":6183,"publishedDate":2315,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6184,"cisaVulnName":4538,"cisaDateAdded":5935,"cisaShortDescription":6185,"cisaRequiredAction":4541},"CVE-2019-0808","An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0797.",0.53017,"Microsoft Win32k contains a privilege escalation vulnerability due to the component failing to properly handle objects in memory. Successful exploitation allows an attacker to run code in kernel mode.",{"cveId":6187,"description":6188,"publishedDate":1486,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":3981,"cisaVulnName":3851,"cisaDateAdded":5935,"cisaShortDescription":6189,"cisaRequiredAction":4541},"CVE-2019-1215","An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1253, CVE-2019-1278, CVE-2019-1303.","Microsoft Windows contains an unspecified vulnerability due to the way ws2ifsl.sys (Winsock) handles objects in memory, allowing for privilege escalation. Successful exploitation allows an attacker to execute code with elevated privileges.",{"cveId":6191,"description":6192,"publishedDate":1486,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6193,"cisaVulnName":6194,"cisaDateAdded":5935,"cisaShortDescription":6195,"cisaRequiredAction":4541},"CVE-2019-1214","An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common Log File System Driver Elevation of Privilege Vulnerability'.",0.01419,"Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability","Microsoft Windows Common Log File System (CLFS) driver improperly handles objects in memory which can allow for privilege escalation.",{"cveId":6197,"description":6198,"publishedDate":6017,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6199,"cisaVulnName":6019,"cisaDateAdded":5935,"cisaShortDescription":6200,"cisaRequiredAction":4541},"CVE-2021-36742","A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1 allows a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.",0.01482,"Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security contain an improper input validation vulnerability that allows for privilege escalation.",{"cveId":6202,"description":6203,"publishedDate":651,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6204,"cisaVulnName":6205,"cisaDateAdded":5935,"cisaShortDescription":6206,"cisaRequiredAction":4541},"CVE-2021-36948","Windows Update Medic Service Elevation of Privilege Vulnerability",0.2327,"Microsoft Windows Update Medic Service Privilege Escalation Vulnerability","Microsoft Windows Update Medic Service contains an unspecified vulnerability that allows for privilege escalation.",{"cveId":6208,"description":4135,"publishedDate":1126,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6209,"cisaVulnName":4272,"cisaDateAdded":5935,"cisaShortDescription":6104,"cisaRequiredAction":4541},"CVE-2021-31979",0.0454,{"cveId":6211,"description":6212,"publishedDate":2181,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6213,"cisaVulnName":6214,"cisaDateAdded":5935,"cisaShortDescription":6215,"cisaRequiredAction":4541},"CVE-2021-31956","Windows NTFS Elevation of Privilege Vulnerability",0.22273,"Microsoft Windows NTFS Privilege Escalation Vulnerability","Microsoft Windows New Technology File System (NTFS) contains an unspecified vulnerability that allows attackers to escalate privileges via a specially crafted application.",{"cveId":6217,"description":3741,"publishedDate":1108,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6218,"cisaVulnName":4565,"cisaDateAdded":5935,"cisaShortDescription":4566,"cisaRequiredAction":4541},"CVE-2021-36955",0.04071,{"cveId":6220,"description":6221,"publishedDate":5559,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6222,"cisaVulnName":5649,"cisaDateAdded":5935,"cisaShortDescription":6223,"cisaRequiredAction":4541},"CVE-2015-1641","Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, and Office Web Apps Server 2010 SP2 and 2013 SP1 allow remote attackers to execute arbitrary code via a crafted RTF document, aka \"Microsoft Office Memory Corruption Vulnerability.\"",0.97246,"Microsoft Office contains a memory corruption vulnerability due to failure to properly handle rich text format files in memory. Successful exploitation allows for remote code execution in the context of the current user.",{"cveId":6225,"description":6226,"publishedDate":1108,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6227,"cisaVulnName":6228,"cisaDateAdded":5935,"cisaShortDescription":6229,"cisaRequiredAction":4541},"CVE-2021-38645","Open Management Infrastructure Elevation of Privilege Vulnerability",0.02727,"Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability","Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability that allows for privilege escalation.",{"cveId":6231,"description":4558,"publishedDate":603,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6232,"cisaVulnName":4538,"cisaDateAdded":5935,"cisaShortDescription":6233,"cisaRequiredAction":4541},"CVE-2021-28310",0.08398,"Microsoft Windows Win32k contains an unspecified vulnerability that allows for privilege escalation.",{"cveId":6235,"description":6226,"publishedDate":1108,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6236,"cisaVulnName":6228,"cisaDateAdded":5935,"cisaShortDescription":6237,"cisaRequiredAction":4541},"CVE-2021-38648",0.11424,"Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing privilege escalation.",{"cveId":6239,"description":3734,"publishedDate":5973,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6240,"cisaVulnName":3734,"cisaDateAdded":5935,"cisaShortDescription":5975,"cisaRequiredAction":4541},"CVE-2021-27065",0.99876,{"cveId":6242,"description":3734,"publishedDate":5973,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6243,"cisaVulnName":3734,"cisaDateAdded":5935,"cisaShortDescription":5975,"cisaRequiredAction":4541},"CVE-2021-26858",0.93651,{"cveId":6245,"description":3734,"publishedDate":5973,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6246,"cisaVulnName":3734,"cisaDateAdded":5935,"cisaShortDescription":5975,"cisaRequiredAction":4541},"CVE-2021-26857",0.95762,{"cveId":6248,"description":6249,"publishedDate":4536,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6250,"cisaVulnName":4538,"cisaDateAdded":5935,"cisaShortDescription":6251,"cisaRequiredAction":4541},"CVE-2016-0167","The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka \"Win32k Elevation of Privilege Vulnerability,\" a different vulnerability than CVE-2016-0143 and CVE-2016-0165.",0.05661,"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation via a crafted application",{"cveId":6253,"description":6254,"publishedDate":5356,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6255,"cisaVulnName":6256,"cisaDateAdded":5935,"cisaShortDescription":6257,"cisaRequiredAction":4541},"CVE-2016-0185","Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, and Windows 8.1 allows remote attackers to execute arbitrary code via a crafted Media Center link (aka .mcl) file, aka \"Windows Media Center Remote Code Execution Vulnerability.\"",0.69846,"Microsoft Windows Media Center Remote Code Execution Vulnerability","Microsoft Windows Media Center contains a remote code execution vulnerability when Windows Media Center opens a specially crafted Media Center link (.mcl) file that references malicious code.",{"cveId":6259,"description":6260,"publishedDate":628,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6261,"cisaVulnName":4538,"cisaDateAdded":5935,"cisaShortDescription":4540,"cisaRequiredAction":4541},"CVE-2021-1732","Windows Win32k Elevation of Privilege Vulnerability",0.78376,{"cveId":6263,"description":6264,"publishedDate":2181,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6265,"cisaVulnName":6012,"cisaDateAdded":5935,"cisaShortDescription":6266,"cisaRequiredAction":4541},"CVE-2021-1675","Windows Print Spooler Remote Code Execution Vulnerability",0.85305,"Microsoft Windows Print Spooler contains an unspecified vulnerability that allows for remote code execution.",{"cveId":6268,"description":6269,"publishedDate":2315,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6270,"cisaVulnName":4538,"cisaDateAdded":5935,"cisaShortDescription":6271,"cisaRequiredAction":4541},"CVE-2019-0859","An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0803.",0.04151,"Microsoft Win32k fails to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.",{"cveId":6273,"description":6274,"publishedDate":1199,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6275,"cisaVulnName":6274,"cisaDateAdded":5935,"cisaShortDescription":6276,"cisaRequiredAction":4541},"CVE-2021-1647","Microsoft Defender Remote Code Execution Vulnerability",0.39653,"Microsoft Defender contains an unspecified vulnerability that allows for remote code execution.",{"cveId":6278,"description":6279,"publishedDate":2315,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6280,"cisaVulnName":4538,"cisaDateAdded":5935,"cisaShortDescription":6281,"cisaRequiredAction":4541},"CVE-2019-0797","An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0808.",0.01874,"Microsoft Win32k contains a privilege escalation vulnerability when the Win32k component fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode.",{"cveId":6283,"description":6284,"publishedDate":599,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6285,"cisaVulnName":6286,"cisaDateAdded":5935,"cisaShortDescription":6287,"cisaRequiredAction":4541},"CVE-2016-3235","Microsoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and Visio Viewer 2010 mishandle library loading, which allows local users to gain privileges via a crafted application, aka \"Microsoft Office OLE DLL Side Loading Vulnerability.\"",0.43308,"Microsoft Office OLE DLL Side Loading Vulnerability","Microsoft Office Object Linking & Embedding (OLE) dynamic link library (DLL) contains a side loading vulnerability due to it improperly validating input before loading libraries. Successful exploitation allows for remote code execution.",{"cveId":6289,"description":6290,"publishedDate":6291,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6292,"cisaVulnName":6293,"cisaDateAdded":5935,"cisaShortDescription":6294,"cisaRequiredAction":4541},"CVE-2020-24557","A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a particular product folder to disable the security temporarily, abuse a specific Windows function and attain privilege escalation. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Please note that version 1909 (OS Build 18363.719) of Microsoft Windows 10 mitigates hard links, but previous versions are affected.","2020-09-01",0.02666,"Trend Micro Multiple Products Improper Access Control Vulnerability","Trend Micro Apex One, OfficeScan, and Worry-Free Business Security on Microsoft Windows contain an improper access control vulnerability that may allow an attacker to manipulate a particular product folder to disable the security temporarily, abuse a specific Windows function, and attain privilege escalation.",{"cveId":6296,"description":6297,"publishedDate":5415,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6298,"cisaVulnName":6299,"cisaDateAdded":5935,"cisaShortDescription":6300,"cisaRequiredAction":4541},"CVE-2019-0863","An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'.",0.05207,"Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability","Microsoft Windows Error Reporting (WER) contains a privilege escalation vulnerability due to the way it handles files, allowing for code execution in kernel mode.",{"cveId":6302,"description":6303,"publishedDate":1711,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6304,"cisaVulnName":4272,"cisaDateAdded":5935,"cisaShortDescription":6104,"cisaRequiredAction":4541},"CVE-2020-17087","Windows Kernel Local Elevation of Privilege Vulnerability",0.05431,{"cveId":6306,"description":6307,"publishedDate":578,"cvssScore":3629,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6308,"cisaVulnName":6309,"cisaDateAdded":5935,"cisaShortDescription":6310,"cisaRequiredAction":4541},"CVE-2020-1464","A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and load improperly signed files.\nIn an attack scenario, an attacker could bypass security features intended to prevent improperly signed files from being loaded.\nThe update addresses the vulnerability by correcting how Windows validates file signatures.\n",0.38946,"Microsoft Windows Spoofing Vulnerability","Microsoft Windows contains a spoofing vulnerability when Windows incorrectly validates file signatures, allowing an attacker to bypass security features and load improperly signed files.",{"cveId":6312,"description":5752,"publishedDate":808,"cvssScore":4382,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6313,"cisaVulnName":5752,"cisaDateAdded":5935,"cisaShortDescription":6314,"cisaRequiredAction":4541},"CVE-2021-27059",0.06076,"Microsoft Office contains an unspecified vulnerability that allows for remote code execution.",{"cveId":6316,"description":6317,"publishedDate":6318,"cvssScore":3575,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6319,"cisaVulnName":6114,"cisaDateAdded":5935,"cisaShortDescription":6320,"cisaRequiredAction":4541},"CVE-2019-1367","A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1221.","2019-09-23",0.52449,"Microsoft Internet Explorer contains a memory corruption vulnerability in how the scripting engine handles objects in memory. Successful exploitation allows for remote code execution in the context of the current user.",{"cveId":6322,"description":6323,"publishedDate":6324,"cvssScore":3575,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6325,"cisaVulnName":6114,"cisaDateAdded":5935,"cisaShortDescription":6326,"cisaRequiredAction":4541},"CVE-2018-8653","A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka \"Scripting Engine Memory Corruption Vulnerability.\" This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-8643.","2018-12-20",0.29606,"Microsoft Internet Explorer contains a memory corruption vulnerability due to how the Scripting Engine handles objects in memory, leading to remote code execution.",{"cveId":6328,"description":6329,"publishedDate":2181,"cvssScore":3575,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6330,"cisaVulnName":6331,"cisaDateAdded":5935,"cisaShortDescription":6332,"cisaRequiredAction":4541},"CVE-2021-33742","Windows MSHTML Platform Remote Code Execution Vulnerability",0.59407,"Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability","Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for remote code execution.",{"cveId":6334,"description":6335,"publishedDate":383,"cvssScore":3575,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6336,"cisaVulnName":6114,"cisaDateAdded":5935,"cisaShortDescription":6326,"cisaRequiredAction":4541},"CVE-2020-0968","A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0970.",0.30676,{"cveId":6338,"description":6339,"publishedDate":1030,"cvssScore":3575,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6340,"cisaVulnName":6114,"cisaDateAdded":5935,"cisaShortDescription":6115,"cisaRequiredAction":4541},"CVE-2019-1429","A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1426, CVE-2019-1427, CVE-2019-1428.",0.7729,{"cveId":6342,"description":4743,"publishedDate":651,"cvssScore":3575,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6343,"cisaVulnName":6344,"cisaDateAdded":5935,"cisaShortDescription":6345,"cisaRequiredAction":4541},"CVE-2021-36942",0.66023,"Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability","Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability allowing an unauthenticated attacker to call a method on the LSARPC interface and coerce the domain controller to authenticate against another server using NTLM.",{"cveId":6347,"description":6348,"publishedDate":1870,"cvssScore":3575,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6349,"cisaVulnName":6114,"cisaDateAdded":5935,"cisaShortDescription":6350,"cisaRequiredAction":4541},"CVE-2020-0674","A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0710, CVE-2020-0711, CVE-2020-0712, CVE-2020-0713, CVE-2020-0767.",0.86863,"Microsoft Internet Explorer contains a memory corruption vulnerability due to the way the Scripting Engine handles objects in memory. Successful exploitation could allow remote code execution in the context of the current user.",{"cveId":6352,"description":6353,"publishedDate":6354,"cvssScore":3575,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6355,"cisaVulnName":6356,"cisaDateAdded":5935,"cisaShortDescription":6357,"cisaRequiredAction":4541},"CVE-2019-18187","Trend Micro OfficeScan versions 11.0 and XG (12.0) could be exploited by an attacker utilizing a directory traversal vulnerability to extract files from an arbitrary zip file to a specific folder on the OfficeScan server, which could potentially lead to remote code execution (RCE). The remote process execution is bound to a web service account, which depending on the web platform used may have restricted permissions. An attempted attack requires user authentication.","2019-10-28",0.25125,"Trend Micro OfficeScan Directory Traversal Vulnerability","Trend Micro OfficeScan contains a directory traversal vulnerability by extracting files from a zip file to a specific folder on the OfficeScan server, leading to remote code execution.",{"cveId":6359,"description":6226,"publishedDate":1108,"cvssScore":52,"cvssVersion":3630,"severity":3577,"isKev":4,"epssScore":6360,"cisaVulnName":6228,"cisaDateAdded":5935,"cisaShortDescription":6237,"cisaRequiredAction":4541},"CVE-2021-38649",0.02887,{"cveId":6362,"description":4265,"publishedDate":6363,"cvssScore":6364,"cvssVersion":3630,"severity":3588,"isKev":4,"epssScore":6365,"cisaVulnName":4267,"cisaDateAdded":5935,"cisaShortDescription":6366,"cisaRequiredAction":4541},"CVE-2021-34448","2021-07-16",6.8,0.40062,"Microsoft Windows Scripting Engine contains an unspecified vulnerability that allows for memory corruption.",{"cveId":6368,"description":6369,"publishedDate":2341,"cvssScore":5009,"cvssVersion":3630,"severity":3588,"isKev":4,"epssScore":6370,"cisaVulnName":6369,"cisaDateAdded":5935,"cisaShortDescription":6371,"cisaRequiredAction":4541},"CVE-2021-31207","Microsoft Exchange Server Security Feature Bypass Vulnerability",0.99782,"Microsoft Exchange Server contains an unspecified vulnerability that allows for security feature bypass.",{"cveId":6373,"description":6374,"publishedDate":2181,"cvssScore":4018,"cvssVersion":3630,"severity":3588,"isKev":4,"epssScore":6375,"cisaVulnName":6376,"cisaDateAdded":5935,"cisaShortDescription":6377,"cisaRequiredAction":4541},"CVE-2021-31955","Windows Kernel Information Disclosure Vulnerability",0.81107,"Microsoft Windows Kernel Information Disclosure Vulnerability","Microsoft Windows Kernel contains an unspecified vulnerability that allows for information disclosure. Successful exploitation allows attackers to read the contents of kernel memory from a user-mode process.",{"cveId":6379,"description":6380,"publishedDate":578,"cvssScore":4018,"cvssVersion":3630,"severity":3588,"isKev":4,"epssScore":6381,"cisaVulnName":6382,"cisaDateAdded":5935,"cisaShortDescription":6383,"cisaRequiredAction":4541},"CVE-2020-1472","An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC). An attacker who successfully exploited the vulnerability could run a specially crafted application on a device on the network.\nTo exploit the vulnerability, an unauthenticated attacker would be required to use MS-NRPC to connect to a domain controller to obtain domain administrator access.\nMicrosoft is addressing the vulnerability in a phased two-part rollout. These updates address the vulnerability by modifying how Netlogon handles the usage of Netlogon secure channels.\nFor guidelines on how to manage the changes required for this vulnerability and more information on the phased rollout, see  How to manage the changes in Netlogon secure channel connections associated with CVE-2020-1472 (updated September 28, 2020).\nWhen the second phase of Windows updates become available in Q1 2021, customers will be notified via a revision to this security vulnerability. If you wish to be notified when these updates are released, we recommend that you register for the security notifications mailer to be alerted of content changes to this advisory. See Microsoft Technical Security Notifications.\n",0.99389,"Microsoft Netlogon Privilege Escalation Vulnerability","Microsoft's Netlogon Remote Protocol (MS-NRPC) contains a privilege escalation vulnerability when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller. An attacker who successfully exploits the vulnerability could run a specially crafted application on a device on the network. The vulnerability is also known under the moniker of Zerologon.",{"cveId":6385,"description":6386,"publishedDate":2181,"cvssScore":6387,"cvssVersion":3630,"severity":3588,"isKev":4,"epssScore":6388,"cisaVulnName":6389,"cisaDateAdded":5935,"cisaShortDescription":6390,"cisaRequiredAction":4541},"CVE-2021-31201","Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability",5.2,0.02617,"Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability","Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation.",{"cveId":6392,"description":6386,"publishedDate":2181,"cvssScore":6387,"cvssVersion":3630,"severity":3588,"isKev":4,"epssScore":6393,"cisaVulnName":6389,"cisaDateAdded":5935,"cisaShortDescription":6390,"cisaRequiredAction":4541},"CVE-2021-31199",0.02954,{"cveId":6395,"description":6396,"publishedDate":711,"cvssScore":6397,"cvssVersion":3630,"severity":3588,"isKev":4,"epssScore":6398,"cisaVulnName":6399,"cisaDateAdded":5935,"cisaShortDescription":6400,"cisaRequiredAction":4541},"CVE-2020-0878","\u003Cp>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.\u003C\u002Fp>\n\u003Cp>An attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft browsers, and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically via an enticement in email or instant message, or by getting them to open an email attachment.\u003C\u002Fp>\n\u003Cp>The security update addresses the vulnerability by modifying how Microsoft browsers handle objects in memory.\u003C\u002Fp>\n",4.2,0.02696,"Microsoft Edge and Internet Explorer Memory Corruption Vulnerability","Microsoft Edge and Internet Explorer contain a memory corruption vulnerability that allows attackers to execute code in the context of the current user.",[6402,6403,6404,6405,6406,6407,6408,6409,6410,6411],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":21,"last_cve_update":22},{"id":24,"product_name":25,"version_count":26,"cve_count":27,"kev_count":28,"last_cve_update":29},{"id":31,"product_name":32,"version_count":33,"cve_count":34,"kev_count":35,"last_cve_update":29},{"id":37,"product_name":38,"version_count":39,"cve_count":40,"kev_count":41,"last_cve_update":42},{"id":44,"product_name":45,"version_count":46,"cve_count":47,"kev_count":48,"last_cve_update":29},{"id":50,"product_name":51,"version_count":52,"cve_count":53,"kev_count":54,"last_cve_update":29},{"id":56,"product_name":57,"version_count":46,"cve_count":58,"kev_count":59,"last_cve_update":60},{"id":62,"product_name":63,"version_count":46,"cve_count":64,"kev_count":59,"last_cve_update":65},{"id":67,"product_name":68,"version_count":69,"cve_count":70,"kev_count":71,"last_cve_update":65},{"id":73,"product_name":74,"version_count":75,"cve_count":76,"kev_count":77,"last_cve_update":29},{"title":6413,"metaDescription":6414,"keywords":6415,"structuredData":6416},"Microsoft - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Microsoft covering 1048 products with 21814 tracked vulnerabilities including 57 critical and 363 high-severity issues and 442 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Microsoft vulnerabilities, Microsoft security, Microsoft CVE, Microsoft threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking, Microsoft KEV, Microsoft exploited vulnerabilities",{"@context":6417,"@type":6418,"name":6419,"description":6414,"url":6420},"https:\u002F\u002Fschema.org","Organization","Microsoft","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fmicrosoft",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":6422,"apiVersion":6423},"2026-10-29T10:31:24.561Z","3.0"]