[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fLAt9B-ALM_0O1jg0Lyu0KWBPTlqrXZQD6sLLAF3W7bA":3,"g5a-family:microsoft\u002Fwindows":500,"g5a-ex:microsoft\u002Fwindows@*":537},{"success":4,"data":5},true,{"product":6,"versions":41,"topVulnerabilitiesByEpss":53,"kevVulnerabilities":114,"seoMetadata":479,"meta":498},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":40},"microsoft","windows",11,8294,78,"2025-10-28",[14,18,20,22,25,27,30,32,34,36,38],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"1.0",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"2.0",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"2000",{"version":23,"cve_count":24,"kev_count":16,"has_kev":17},"2003_server",2,{"version":26,"cve_count":16,"kev_count":16,"has_kev":17},"3.0",{"version":28,"cve_count":29,"kev_count":16,"has_kev":17},"3.1",1,{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},"3.11",{"version":33,"cve_count":24,"kev_count":16,"has_kev":17},"server_2003",{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},"server_2008",{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},"vista",{"version":39,"cve_count":24,"kev_count":16,"has_kev":17},"xp","Windows by Microsoft is a technology product with 11 tracked versions and 8294 known security vulnerabilities including 78 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[42,43,44,45,46,47,48,49,50,51,52],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},{"version":23,"cve_count":24,"kev_count":16,"has_kev":17},{"version":26,"cve_count":16,"kev_count":16,"has_kev":17},{"version":28,"cve_count":29,"kev_count":16,"has_kev":17},{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},{"version":33,"cve_count":24,"kev_count":16,"has_kev":17},{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},{"version":39,"cve_count":24,"kev_count":16,"has_kev":17},[54,62,69,74,81,86,91,97,103,109],{"cveId":55,"description":56,"publishedDate":57,"cvssScore":58,"cvssVersion":59,"severity":60,"isKev":4,"epssScore":61},"CVE-2014-0497","Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.","2014-02-05",9.8,"v3.1","Critical",0.99883,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":66,"cvssVersion":59,"severity":67,"isKev":4,"epssScore":68},"CVE-2011-0611","Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader 9.x before 9.4.4 and 10.x through 10.0.1 on Windows, Adobe Reader 9.x before 9.4.4 and 10.x before 10.0.3 on Mac OS X, and Adobe Acrobat 9.x before 9.4.4 and 10.x before 10.0.3 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content; as demonstrated by a Microsoft Office document with an embedded .swf file that has a size inconsistency in a \"group of included constants,\" object type confusion, ActionScript that adds custom functions to prototypes, and Date objects; and as exploited in the wild in April 2011.","2011-04-13",8.8,"High",0.9941,{"cveId":70,"description":71,"publishedDate":72,"cvssScore":58,"cvssVersion":59,"severity":60,"isKev":4,"epssScore":73},"CVE-2015-0313","Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2015, a different vulnerability than CVE-2015-0315, CVE-2015-0320, and CVE-2015-0322.","2015-02-02",0.95683,{"cveId":75,"description":76,"publishedDate":77,"cvssScore":78,"cvssVersion":79,"severity":60,"isKev":17,"epssScore":80},"CVE-2014-0515","Buffer overflow in Adobe Flash Player before 11.7.700.279 and 11.8.x through 13.0.x before 13.0.0.206 on Windows and OS X, and before 11.2.202.356 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in April 2014.","2014-04-29",10,"v2",0.94569,{"cveId":82,"description":83,"publishedDate":84,"cvssScore":78,"cvssVersion":79,"severity":60,"isKev":17,"epssScore":85},"CVE-2010-0425","modules\u002Farch\u002Fwin32\u002Fmod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2.3.x before 2.3.7, when running on Windows, does not ensure that request processing is complete before calling isapi_unload for an ISAPI .dll module, which allows remote attackers to execute arbitrary code via unspecified vectors related to a crafted request, a reset packet, and \"orphaned callback pointers.\"","2010-03-05",0.94248,{"cveId":87,"description":88,"publishedDate":89,"cvssScore":58,"cvssVersion":59,"severity":60,"isKev":4,"epssScore":90},"CVE-2013-0625","Adobe ColdFusion 9.0, 9.0.1, and 9.0.2, when a password is not configured, allows remote attackers to bypass authentication and possibly execute arbitrary code via unspecified vectors, as exploited in the wild in January 2013.","2013-01-09",0.93797,{"cveId":92,"description":93,"publishedDate":94,"cvssScore":95,"cvssVersion":59,"severity":67,"isKev":4,"epssScore":96},"CVE-2012-0754","Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.","2012-02-16",8.1,0.9203,{"cveId":98,"description":99,"publishedDate":100,"cvssScore":101,"cvssVersion":79,"severity":60,"isKev":17,"epssScore":102},"CVE-2014-0569","Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allows attackers to execute arbitrary code via unspecified vectors.","2014-10-15",9.3,0.90208,{"cveId":104,"description":105,"publishedDate":106,"cvssScore":107,"cvssVersion":59,"severity":67,"isKev":4,"epssScore":108},"CVE-2013-0640","Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, as exploited in the wild in February 2013.","2013-02-14",7.8,0.86979,{"cveId":110,"description":111,"publishedDate":112,"cvssScore":78,"cvssVersion":79,"severity":60,"isKev":17,"epssScore":113},"CVE-2011-2110","Adobe Flash Player before 10.3.181.26 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.23 and earlier on Android, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in June 2011.","2011-06-16",0.86421,[115,124,132,140,148,155,163,171,180,189,198,205,208,214,222,230,238,247,255,265,272,280,288,296,304,314,323,330,337,338,345,352,359,365,371,378,385,393,401,409,416,423,430,437,444,452,455,461,468,474],{"cveId":116,"description":117,"publishedDate":118,"cvssScore":107,"severity":67,"isKev":4,"epssScore":119,"cisaVulnName":120,"cisaDateAdded":121,"cisaShortDescription":122,"cisaRequiredAction":123},"CVE-2020-9715","Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution .","2020-08-19",0.48441,"Adobe Acrobat Use-After-Free Vulnerability","2026-04-13","Adobe Acrobat contains a use-after-free vulnerability that allows for code execution","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":125,"description":126,"publishedDate":127,"cvssScore":107,"severity":67,"isKev":4,"epssScore":128,"cisaVulnName":129,"cisaDateAdded":130,"cisaShortDescription":131,"cisaRequiredAction":123},"CVE-2025-41244","VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.","2025-09-29",0.0788,"Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability","2025-10-30","Broadcom VMware Aria Operations and VMware Tools contain a privilege defined with unsafe actions vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.",{"cveId":133,"description":134,"publishedDate":135,"cvssScore":66,"severity":67,"isKev":4,"epssScore":136,"cisaVulnName":137,"cisaDateAdded":138,"cisaShortDescription":139,"cisaRequiredAction":123},"CVE-2025-10585","Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2025-09-24",0.05419,"Google Chromium V8 Type Confusion Vulnerability","2025-09-23","Google Chromium contains a type confusion vulnerability in the V8 JavaScript and WebAssembly engine.",{"cveId":141,"description":142,"publishedDate":143,"cvssScore":66,"severity":67,"isKev":4,"epssScore":144,"cisaVulnName":145,"cisaDateAdded":146,"cisaShortDescription":147,"cisaRequiredAction":123},"CVE-2025-8088","A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strý?ek\n     from ESET.","2025-08-08",0.85778,"RARLAB WinRAR Path Traversal Vulnerability","2025-08-12","RARLAB WinRAR contains a path traversal vulnerability affecting the Windows version of WinRAR. This vulnerability could allow an attacker to execute arbitrary code by crafting malicious archive files.",{"cveId":149,"description":150,"publishedDate":151,"cvssScore":95,"severity":67,"isKev":4,"epssScore":152,"cisaVulnName":137,"cisaDateAdded":153,"cisaShortDescription":154,"cisaRequiredAction":123},"CVE-2025-6554","Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read\u002Fwrite via a crafted HTML page. (Chromium security severity: High)","2025-06-30",0.06564,"2025-07-02","Google Chromium V8 contains a type confusion vulnerability that could allow a remote attacker to perform arbitrary read\u002Fwrite via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":156,"description":157,"publishedDate":158,"cvssScore":78,"severity":60,"isKev":4,"epssScore":159,"cisaVulnName":160,"cisaDateAdded":161,"cisaShortDescription":162,"cisaRequiredAction":123},"CVE-2025-34028","The Commvault Command Center Innovation Release allows an unauthenticated actor to upload ZIP files that represent install packages that, when expanded by the target server, are vulnerable to path traversal vulnerability that can result in Remote Code Execution via malicious JSP.\n\n\n\n\n\nThis issue affects Command Center Innovation Release: 11.38.0 to 11.38.20. The vulnerability is fixed in 11.38.20 with SP38-CU20-433 and SP38-CU20-436 and also fixed in 11.38.25 with SP38-CU25-434 and SP38-CU25-438.","2025-04-22",0.97157,"Commvault Command Center Path Traversal Vulnerability","2025-05-02","Commvault Command Center contains a path traversal vulnerability that allows a remote, unauthenticated attacker to execute arbitrary code.",{"cveId":164,"description":165,"publishedDate":166,"cvssScore":66,"severity":67,"isKev":4,"epssScore":167,"cisaVulnName":168,"cisaDateAdded":169,"cisaShortDescription":170,"cisaRequiredAction":123},"CVE-2025-3928","Commvault Web Server has an unspecified vulnerability that can be exploited by a remote, authenticated attacker. According to the Commvault advisory: \"Webservers can be compromised through bad actors creating and executing webshells.\" Fixed in version 11.36.46, 11.32.89, 11.28.141, and 11.20.217 for Windows and Linux platforms. This vulnerability was added to the CISA Known Exploited Vulnerabilities (KEV) Catalog on 2025-04-28.","2025-04-25",0.01932,"Commvault Web Server Unspecified Vulnerability","2025-04-28","Commvault Web Server contains an unspecified vulnerability that allows a remote, authenticated attacker to create and execute webshells.",{"cveId":172,"description":173,"publishedDate":174,"cvssScore":175,"severity":67,"isKev":4,"epssScore":176,"cisaVulnName":177,"cisaDateAdded":178,"cisaShortDescription":179,"cisaRequiredAction":123},"CVE-2025-2783","Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium security severity: High)","2025-03-26",8.3,0.08404,"Google Chromium Mojo Sandbox Escape Vulnerability","2025-03-27","Google Chromium Mojo on Windows contains a sandbox escape vulnerability caused by a logic error, which results from an incorrect handle being provided in unspecified circumstances. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":181,"description":182,"publishedDate":183,"cvssScore":107,"severity":67,"isKev":4,"epssScore":184,"cisaVulnName":185,"cisaDateAdded":186,"cisaShortDescription":187,"cisaRequiredAction":188},"CVE-2022-23748","mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In these scenarios, a malicious attacker could be using the valid and legitimate executable to load malicious files.","2022-11-17",0.09092,"Dante Discovery Process Control Vulnerability","2025-02-06","Dante Discovery contains a process control vulnerability in mDNSResponder.exe that all allows for a DLL sideloading attack. A local attacker can leverage this vulnerability in the Dante Application Library to execute arbitrary code.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":190,"description":191,"publishedDate":192,"cvssScore":66,"severity":67,"isKev":4,"epssScore":193,"cisaVulnName":194,"cisaDateAdded":195,"cisaShortDescription":196,"cisaRequiredAction":197},"CVE-2013-0648","Unspecified vulnerability in the ExternalInterface ActionScript functionality in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, allows remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.","2013-02-27",0.11094,"Adobe Flash Player Code Execution Vulnerability","2024-09-17","Adobe Flash Player contains an unspecified vulnerability in the ExternalInterface ActionScript functionality that allows a remote attacker to execute arbitrary code via crafted SWF content.","The impacted product is end-of-life (EoL) and\u002For end-of-service (EoS). Users should discontinue utilization of the product.",{"cveId":199,"description":200,"publishedDate":201,"cvssScore":66,"severity":67,"isKev":4,"epssScore":202,"cisaVulnName":203,"cisaDateAdded":195,"cisaShortDescription":204,"cisaRequiredAction":197},"CVE-2014-0502","Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2014.","2014-02-21",0.24204,"Adobe Flash Player Double Free Vulnerablity","Adobe Flash Player contains a double free vulnerability that allows a remote attacker to execute arbitrary code.",{"cveId":55,"description":56,"publishedDate":57,"cvssScore":58,"severity":60,"isKev":4,"epssScore":61,"cisaVulnName":206,"cisaDateAdded":195,"cisaShortDescription":207,"cisaRequiredAction":197},"Adobe Flash Player Integer Underflow Vulnerablity","Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to execute arbitrary code.",{"cveId":209,"description":210,"publishedDate":192,"cvssScore":66,"severity":67,"isKev":4,"epssScore":211,"cisaVulnName":212,"cisaDateAdded":195,"cisaShortDescription":213,"cisaRequiredAction":197},"CVE-2013-0643","The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, does not properly restrict privileges, which makes it easier for remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.",0.10533,"Adobe Flash Player Incorrect Default Permissions Vulnerability","Adobe Flash Player contains an incorrect default permissions vulnerability in the Firefox sandbox that allows a remote attacker to execute arbitrary code via crafted SWF content. ",{"cveId":215,"description":216,"publishedDate":217,"cvssScore":107,"severity":67,"isKev":4,"epssScore":218,"cisaVulnName":219,"cisaDateAdded":220,"cisaShortDescription":221,"cisaRequiredAction":188},"CVE-2024-7262","Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.16412 (exclusive) on Windows allows an attacker to load an arbitrary Windows library.\nThe vulnerability was found weaponized as a single-click exploit in the form of a deceptive spreadsheet document","2024-08-15",0.01773,"Kingsoft WPS Office Path Traversal Vulnerability","2024-09-03","Kingsoft WPS Office contains a path traversal vulnerability in promecefpluginhost.exe on Windows that allows an attacker to load an arbitrary Windows library.",{"cveId":223,"description":224,"publishedDate":225,"cvssScore":58,"severity":60,"isKev":4,"epssScore":226,"cisaVulnName":227,"cisaDateAdded":228,"cisaShortDescription":229,"cisaRequiredAction":188},"CVE-2024-4577","In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use \"Best-Fit\" behavior to replace characters in command line given to Win32 API functions. PHP CGI module may misinterpret those characters as PHP options, which may allow a malicious user to pass options to PHP binary being run, and thus reveal the source code of scripts, run arbitrary PHP code on the server, etc.","2024-06-09",0.99987,"PHP-CGI OS Command Injection Vulnerability","2024-06-12","PHP, specifically Windows-based PHP used in CGI mode, contains an OS command injection vulnerability that allows for arbitrary code execution. This vulnerability is a patch bypass for CVE-2012-1823.",{"cveId":231,"description":232,"publishedDate":233,"cvssScore":107,"severity":67,"isKev":4,"epssScore":234,"cisaVulnName":235,"cisaDateAdded":236,"cisaShortDescription":237,"cisaRequiredAction":188},"CVE-2023-21608","Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","2023-01-18",0.61475,"Adobe Acrobat and Reader Use-After-Free Vulnerability","2023-10-10","Adobe Acrobat and Reader contains a use-after-free vulnerability that allows for code execution in the context of the current user.",{"cveId":239,"description":240,"publishedDate":241,"cvssScore":242,"severity":67,"isKev":4,"epssScore":243,"cisaVulnName":244,"cisaDateAdded":245,"cisaShortDescription":246,"cisaRequiredAction":188},"CVE-2023-41179","A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security and Worry-Free Business Security Services could allow an attacker to manipulate the module to execute arbitrary commands on an affected installation.\r\n\r\nNote that an attacker must first obtain administrative console access on the target system in order to exploit this vulnerability.","2023-09-19",7.2,0.04739,"Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability","2023-09-21","Trend Micro Apex One and Worry-Free Business Security contain an unspecified vulnerability in the third-party anti-virus uninstaller that could allow an attacker to manipulate the module to conduct remote code execution. An attacker must first obtain administrative console access on the target system in order to exploit this vulnerability.",{"cveId":248,"description":249,"publishedDate":250,"cvssScore":107,"severity":67,"isKev":4,"epssScore":251,"cisaVulnName":252,"cisaDateAdded":253,"cisaShortDescription":254,"cisaRequiredAction":188},"CVE-2023-26369","Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","2023-09-13",0.07036,"Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability","2023-09-14","Adobe Acrobat and Reader contains an out-of-bounds write vulnerability that allows for code execution.",{"cveId":256,"description":257,"publishedDate":258,"cvssScore":259,"severity":67,"isKev":4,"epssScore":260,"cisaVulnName":261,"cisaDateAdded":262,"cisaShortDescription":263,"cisaRequiredAction":264},"CVE-2016-9079","A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users on Windows. This vulnerability affects Firefox \u003C 50.0.2, Firefox ESR \u003C 45.5.1, and Thunderbird \u003C 45.5.1.","2018-06-11",7.5,0.87598,"Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability","2023-06-22","Mozilla Firefox, Firefox ESR, and Thunderbird contain a use-after-free vulnerability in SVG Animation, targeting Firefox and Tor browser users on Windows.","Apply updates per vendor instructions.",{"cveId":266,"description":267,"publishedDate":268,"cvssScore":66,"severity":67,"isKev":4,"epssScore":269,"cisaVulnName":137,"cisaDateAdded":270,"cisaShortDescription":271,"cisaRequiredAction":264},"CVE-2023-3079","Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2023-06-05",0.32724,"2023-06-07","Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":273,"description":274,"publishedDate":275,"cvssScore":242,"severity":67,"isKev":4,"epssScore":276,"cisaVulnName":277,"cisaDateAdded":278,"cisaShortDescription":279,"cisaRequiredAction":264},"CVE-2020-5741","Deserialization of Untrusted Data in Plex Media Server on Windows allows a remote, authenticated attacker to execute arbitrary Python code.","2020-05-08",0.72936,"Plex Media Server Remote Code Execution Vulnerability","2023-03-10","Plex Media Server contains a remote code execution vulnerability that allows an attacker with access to the server administrator's Plex account to upload a malicious file via the Camera Upload feature and have the media server execute it.",{"cveId":281,"description":282,"publishedDate":283,"cvssScore":58,"severity":60,"isKev":4,"epssScore":284,"cisaVulnName":285,"cisaDateAdded":286,"cisaShortDescription":287,"cisaRequiredAction":264},"CVE-2022-47986","IBM Aspera Faspex 4.4.2 Patch Level 1 and earlier could allow a remote attacker to execute arbitrary code on the system, caused by a YAML deserialization flaw. By sending a specially crafted obsolete API call, an attacker could exploit this vulnerability to execute arbitrary code on the system. The obsolete API call was removed in Faspex 4.4.2 PL2. IBM X-Force ID: 243512.","2023-02-17",0.99968,"IBM Aspera Faspex Code Execution Vulnerability","2023-02-21","IBM Aspera Faspex could allow a remote attacker to execute code on the system, caused by a YAML deserialization flaw.",{"cveId":289,"description":290,"publishedDate":291,"cvssScore":107,"severity":67,"isKev":4,"epssScore":292,"cisaVulnName":293,"cisaDateAdded":294,"cisaShortDescription":295,"cisaRequiredAction":264},"CVE-2015-2291","(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F, or (d) 0x80862007 IOCTL call.","2017-08-09",0.09011,"Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability","2023-02-10","Intel ethernet diagnostics driver for Windows IQVW32.sys and IQVW64.sys contain an unspecified vulnerability that allows for a denial-of-service (DoS).",{"cveId":297,"description":298,"publishedDate":299,"cvssScore":242,"severity":67,"isKev":4,"epssScore":300,"cisaVulnName":301,"cisaDateAdded":302,"cisaShortDescription":303,"cisaRequiredAction":264},"CVE-2022-40139","Improper validation of some components used by the rollback mechanism in Trend Micro Apex One and Trend Micro Apex One as a Service clients could allow a Apex One server administrator to instruct affected clients to download an unverified rollback package, which could lead to remote code execution. Please note: an attacker must first obtain Apex One server administration console access in order to exploit this vulnerability.","2022-09-19",0.03054,"Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability","2022-09-15","Trend Micro Apex One and Apex One as a Service contain an improper validation of rollback mechanism components that could lead to remote code execution.",{"cveId":305,"description":306,"publishedDate":307,"cvssScore":308,"severity":309,"isKev":4,"epssScore":310,"cisaVulnName":311,"cisaDateAdded":312,"cisaShortDescription":313,"cisaRequiredAction":264},"CVE-2022-2856","Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML page.","2022-09-26",6.5,"Medium",0.04493,"Google Chromium Intents Insufficient Input Validation Vulnerability","2022-08-18","Google Chromium Intents contains an insufficient validation of untrusted input vulnerability that allows a remote attacker to browse to a malicious website via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":315,"description":316,"publishedDate":317,"cvssScore":107,"severity":67,"isKev":4,"epssScore":318,"cisaVulnName":319,"cisaDateAdded":320,"cisaShortDescription":321,"cisaRequiredAction":322},"CVE-2010-1297","Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content, related to authplay.dll and the ActionScript Virtual Machine 2 (AVM2) newfunction instruction, as exploited in the wild in June 2010.","2010-06-08",0.82365,"Adobe Flash Player Memory Corruption Vulnerability","2022-06-08","Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).","The impacted product is end-of-life and should be disconnected if still in use.",{"cveId":324,"description":325,"publishedDate":326,"cvssScore":58,"severity":60,"isKev":4,"epssScore":327,"cisaVulnName":328,"cisaDateAdded":320,"cisaShortDescription":329,"cisaRequiredAction":264},"CVE-2011-2462","Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, as exploited in the wild in December 2011.","2011-12-07",0.86238,"Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability","The Universal 3D (U3D) component in Adobe Reader and Acrobat contains a memory corruption vulnerability which could allow remote attackers to execute code or cause denial-of-service (DoS).",{"cveId":331,"description":332,"publishedDate":333,"cvssScore":66,"severity":67,"isKev":4,"epssScore":334,"cisaVulnName":335,"cisaDateAdded":320,"cisaShortDescription":336,"cisaRequiredAction":264},"CVE-2009-3953","The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document, related to a CLODProgressiveMeshDeclaration \"array boundary issue,\" a different vulnerability than CVE-2009-2994.","2010-01-13",0.83855,"Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability","Adobe Acrobat and Reader contains an array boundary issue in Universal 3D (U3D) support that could lead to remote code execution.",{"cveId":92,"description":93,"publishedDate":94,"cvssScore":95,"severity":67,"isKev":4,"epssScore":96,"cisaVulnName":319,"cisaDateAdded":320,"cisaShortDescription":321,"cisaRequiredAction":322},{"cveId":339,"description":340,"publishedDate":94,"cvssScore":341,"severity":309,"isKev":4,"epssScore":342,"cisaVulnName":343,"cisaDateAdded":320,"cisaShortDescription":344,"cisaRequiredAction":322},"CVE-2012-0767","Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka \"Universal XSS (UXSS),\" as exploited in the wild in February 2012.",6.1,0.06662,"Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability","Adobe Flash Player contains a XSS vulnerability that allows remote attackers to inject web script or HTML.",{"cveId":346,"description":347,"publishedDate":348,"cvssScore":66,"severity":67,"isKev":4,"epssScore":349,"cisaVulnName":350,"cisaDateAdded":320,"cisaShortDescription":351,"cisaRequiredAction":264},"CVE-2016-5198","V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac included incorrect optimisation assumptions, which allowed a remote attacker to perform arbitrary read\u002Fwrite operations, leading to code execution, via a crafted HTML page.","2017-01-19",0.34703,"Google Chromium V8 Out-of-Bounds Memory Vulnerability","Google Chromium V8 Engine contains an out-of-bounds memory access vulnerability that allows a remote attacker to perform read\u002Fwrite operations, leading to code execution, via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":353,"description":354,"publishedDate":355,"cvssScore":66,"severity":67,"isKev":4,"epssScore":356,"cisaVulnName":357,"cisaDateAdded":320,"cisaShortDescription":358,"cisaRequiredAction":264},"CVE-2017-5030","Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed a remote attacker to execute arbitrary code via a crafted HTML page.","2017-04-24",0.41603,"Google Chromium V8 Memory Corruption Vulnerability","Google Chromium V8 Engine contains a memory corruption vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":360,"description":361,"publishedDate":362,"cvssScore":66,"severity":67,"isKev":4,"epssScore":363,"cisaVulnName":137,"cisaDateAdded":320,"cisaShortDescription":364,"cisaRequiredAction":264},"CVE-2017-5070","Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.","2017-10-27",0.31212,"Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":366,"description":367,"publishedDate":368,"cvssScore":107,"severity":67,"isKev":4,"epssScore":369,"cisaVulnName":235,"cisaDateAdded":320,"cisaShortDescription":370,"cisaRequiredAction":264},"CVE-2009-4324","Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild in December 2009.","2009-12-15",0.81933,"Use-after-free vulnerability in Adobe Acrobat and Reader allows remote attackers to execute code via a crafted PDF file.",{"cveId":372,"description":373,"publishedDate":374,"cvssScore":66,"severity":67,"isKev":4,"epssScore":375,"cisaVulnName":376,"cisaDateAdded":320,"cisaShortDescription":377,"cisaRequiredAction":264},"CVE-2018-4990","Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Double Free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.","2018-07-09",0.40537,"Adobe Acrobat and Reader Double Free Vulnerability","Adobe Acrobat and Reader have a double free vulnerability that could lead to remote code execution.",{"cveId":379,"description":380,"publishedDate":381,"cvssScore":107,"severity":67,"isKev":4,"epssScore":382,"cisaVulnName":383,"cisaDateAdded":320,"cisaShortDescription":384,"cisaRequiredAction":322},"CVE-2011-0609","Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content, as demonstrated by a .swf file embedded in an Excel spreadsheet, and as exploited in the wild in March 2011.","2011-03-15",0.66821,"Adobe Flash Player Unspecified Vulnerability","Adobe Flash Player contains an unspecified vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).",{"cveId":386,"description":387,"publishedDate":388,"cvssScore":389,"severity":67,"isKev":4,"epssScore":390,"cisaVulnName":391,"cisaDateAdded":320,"cisaShortDescription":392,"cisaRequiredAction":264},"CVE-2010-2883","Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PDF document with a long field in a Smart INdependent Glyphlets (SING) table in a TTF font, as exploited in the wild in September 2010. NOTE: some of these details are obtained from third party information.","2010-09-09",7.3,0.82485,"Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability","Adobe Acrobat and Reader contain a stack-based buffer overflow vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).",{"cveId":394,"description":395,"publishedDate":396,"cvssScore":107,"severity":67,"isKev":4,"epssScore":397,"cisaVulnName":398,"cisaDateAdded":399,"cisaShortDescription":400,"cisaRequiredAction":322},"CVE-2015-0310","Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism on Windows, and have an unspecified impact on other platforms, via unknown vectors, as exploited in the wild in January 2015.","2015-01-23",0.15217,"Adobe Flash Player ASLR Bypass Vulnerability","2022-05-25","Adobe Flash Player does not properly restrict discovery of memory addresses, which allows attackers to bypass the address space layout randomization (ASLR) protection mechanism.",{"cveId":402,"description":403,"publishedDate":404,"cvssScore":66,"severity":67,"isKev":4,"epssScore":405,"cisaVulnName":406,"cisaDateAdded":399,"cisaShortDescription":407,"cisaRequiredAction":408},"CVE-2016-1010","Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0963 and CVE-2016-0993.","2016-03-12",0.19785,"Adobe Flash Player and AIR Integer Overflow Vulnerability","Integer overflow vulnerability in Adobe Flash Player and AIR allows attackers to execute code.","The impacted products are end-of-life and should be disconnected if still in use.",{"cveId":410,"description":411,"publishedDate":412,"cvssScore":66,"severity":67,"isKev":4,"epssScore":413,"cisaVulnName":414,"cisaDateAdded":399,"cisaShortDescription":415,"cisaRequiredAction":322},"CVE-2015-8651","Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors.","2015-12-28",0.67922,"Adobe Flash Player Integer Overflow Vulnerability","Integer overflow in Adobe Flash Player allows attackers to execute code.",{"cveId":417,"description":418,"publishedDate":419,"cvssScore":58,"severity":60,"isKev":4,"epssScore":420,"cisaVulnName":421,"cisaDateAdded":399,"cisaShortDescription":422,"cisaRequiredAction":264},"CVE-2014-0546","Adobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context, via unspecified vectors.","2014-08-12",0.2233,"Adobe Reader and Acrobat Sandbox Bypass Vulnerability","Adobe Reader and Acrobat on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context.",{"cveId":424,"description":425,"publishedDate":426,"cvssScore":66,"severity":67,"isKev":4,"epssScore":427,"cisaVulnName":428,"cisaDateAdded":399,"cisaShortDescription":429,"cisaRequiredAction":408},"CVE-2016-0984","Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0974, CVE-2016-0975, CVE-2016-0982, and CVE-2016-0983.","2016-02-10",0.55375,"Adobe Flash Player and AIR Use-After-Free Vulnerability","Use-after-free vulnerability in Adobe Flash Player and Adobe AIR allows attackers to execute code.",{"cveId":431,"description":432,"publishedDate":433,"cvssScore":66,"severity":67,"isKev":4,"epssScore":434,"cisaVulnName":435,"cisaDateAdded":399,"cisaShortDescription":436,"cisaRequiredAction":322},"CVE-2014-8439","Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.","2014-11-25",0.20008,"Adobe Flash Player Dereferenced Pointer Vulnerability","Adobe Flash Player has a vulnerability in the way it handles a dereferenced memory pointer which could lead to code execution.",{"cveId":438,"description":439,"publishedDate":374,"cvssScore":58,"severity":60,"isKev":4,"epssScore":440,"cisaVulnName":441,"cisaDateAdded":442,"cisaShortDescription":443,"cisaRequiredAction":322},"CVE-2018-5002","Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.",0.25353,"Adobe Flash Player Stack-based Buffer Overflow Vulnerability","2022-05-23","Adobe Flash Player have a stack-based buffer overflow vulnerability that could lead to remote code execution.",{"cveId":445,"description":446,"publishedDate":447,"cvssScore":107,"severity":67,"isKev":4,"epssScore":448,"cisaVulnName":449,"cisaDateAdded":450,"cisaShortDescription":451,"cisaRequiredAction":322},"CVE-2014-9163","Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in December 2014.","2014-12-10",0.20356,"Adobe Flash Player Stack-Based Buffer Overflow Vulnerability","2022-04-13","Stack-based buffer overflow in Adobe Flash Player allows attackers to execute code remotely.",{"cveId":70,"description":71,"publishedDate":72,"cvssScore":58,"severity":60,"isKev":4,"epssScore":73,"cisaVulnName":453,"cisaDateAdded":450,"cisaShortDescription":454,"cisaRequiredAction":322},"Adobe Flash Player Use-After-Free Vulnerability","Use-after-free vulnerability in Adobe Flash Player allows remote attackers to execute code.",{"cveId":456,"description":457,"publishedDate":396,"cvssScore":58,"severity":60,"isKev":4,"epssScore":458,"cisaVulnName":459,"cisaDateAdded":450,"cisaShortDescription":460,"cisaRequiredAction":322},"CVE-2015-0311","Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in January 2015.",0.8582,"Adobe Flash Player Remote Code Execution Vulnerability","Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute code.",{"cveId":462,"description":463,"publishedDate":464,"cvssScore":58,"severity":60,"isKev":4,"epssScore":465,"cisaVulnName":466,"cisaDateAdded":450,"cisaShortDescription":467,"cisaRequiredAction":322},"CVE-2015-3113","Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in June 2015.","2015-06-23",0.9994,"Adobe Flash Player Heap-Based Buffer Overflow Vulnerability","Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code.",{"cveId":469,"description":470,"publishedDate":471,"cvssScore":58,"severity":60,"isKev":4,"epssScore":472,"cisaVulnName":453,"cisaDateAdded":450,"cisaShortDescription":473,"cisaRequiredAction":322},"CVE-2015-5122","Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that leverages improper handling of the opaqueBackground property, as exploited in the wild in July 2015.","2015-07-14",0.93688,"Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).",{"cveId":475,"description":476,"publishedDate":471,"cvssScore":58,"severity":60,"isKev":4,"epssScore":477,"cisaVulnName":453,"cisaDateAdded":450,"cisaShortDescription":478,"cisaRequiredAction":322},"CVE-2015-5123","Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function, as exploited in the wild in July 2015.",0.18493,"Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).",{"title":480,"metaDescription":481,"keywords":482,"structuredData":483},"Windows by Microsoft - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Windows by Microsoft covering 11 versions with 8294 tracked vulnerabilities including 12 critical and 36 high-severity issues and 78 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Windows vulnerabilities, Windows security, Windows CVE, Microsoft Windows, Windows threat intelligence, Microsoft security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Windows KEV, Windows exploited vulnerabilities",{"@context":484,"@type":485,"name":486,"description":481,"url":487,"manufacturer":488,"applicationCategory":492,"softwareVersion":493,"mainEntity":494},"https:\u002F\u002Fschema.org","SoftwareApplication","Windows","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fmicrosoft\u002Fwindows",{"@type":489,"name":490,"url":491},"Organization","Microsoft","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fmicrosoft","Security Software","11 versions tracked",{"@type":495,"name":496,"description":497,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Windows Security Vulnerabilities","Security vulnerabilities affecting Windows by Microsoft",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":499,"apiVersion":26},"2026-10-28T13:12:35.310Z",[501,504,507,510,513,516,519,522,525,528,531,534],{"product":502,"cves":503},"windows_server_2016",4711,{"product":505,"cves":506},"windows_server_2019",4111,{"product":508,"cves":509},"windows_10",4066,{"product":511,"cves":512},"windows_server_2008",3906,{"product":514,"cves":515},"windows_server_2012",3842,{"product":517,"cves":518},"windows_7",3087,{"product":520,"cves":521},"windows_8.1",2876,{"product":523,"cves":524},"windows_rt_8.1",2336,{"product":526,"cves":527},"windows_server_2022",2137,{"product":529,"cves":530},"windows_11_22h2",1473,{"product":532,"cves":533},"windows_10_1809",1465,{"product":535,"cves":536},"windows_10_21h2",1430,{"rows":538,"total":659,"capped":4,"failed":16},[539,543,547,551,555,559,563,567,571,575,579,583,587,591,595,599,603,607,611,615,619,623,627,631,635,639,643,647,651,655],{"cveId":116,"name":120,"severity":67,"cvss":107,"added":121,"epss":119,"published":540,"ranges":541,"checked":4,"hits":542,"covers":17},"2020-08-19T14:15:13.407",[],[],{"cveId":125,"name":129,"severity":67,"cvss":107,"added":130,"epss":128,"published":544,"ranges":545,"checked":4,"hits":546,"covers":17},"2025-09-29T17:15:30.843",[],[],{"cveId":133,"name":137,"severity":67,"cvss":66,"added":138,"epss":136,"published":548,"ranges":549,"checked":4,"hits":550,"covers":17},"2025-09-24T17:15:39.473",[],[],{"cveId":141,"name":145,"severity":67,"cvss":66,"added":146,"epss":144,"published":552,"ranges":553,"checked":4,"hits":554,"covers":17},"2025-08-08T12:15:29.343",[],[],{"cveId":149,"name":137,"severity":67,"cvss":95,"added":153,"epss":152,"published":556,"ranges":557,"checked":4,"hits":558,"covers":17},"2025-06-30T22:15:29.873",[],[],{"cveId":156,"name":160,"severity":60,"cvss":78,"added":161,"epss":159,"published":560,"ranges":561,"checked":4,"hits":562,"covers":17},"2025-04-22T17:16:48.027",[],[],{"cveId":164,"name":168,"severity":67,"cvss":66,"added":169,"epss":167,"published":564,"ranges":565,"checked":4,"hits":566,"covers":17},"2025-04-25T16:15:27.817",[],[],{"cveId":172,"name":177,"severity":67,"cvss":175,"added":178,"epss":176,"published":568,"ranges":569,"checked":4,"hits":570,"covers":17},"2025-03-26T16:15:23.693",[],[],{"cveId":181,"name":185,"severity":67,"cvss":107,"added":186,"epss":184,"published":572,"ranges":573,"checked":4,"hits":574,"covers":17},"2022-11-17T23:15:14.383",[],[],{"cveId":190,"name":194,"severity":67,"cvss":66,"added":195,"epss":193,"published":576,"ranges":577,"checked":4,"hits":578,"covers":17},"2013-02-27T00:55:01.16",[],[],{"cveId":199,"name":203,"severity":67,"cvss":66,"added":195,"epss":202,"published":580,"ranges":581,"checked":4,"hits":582,"covers":17},"2014-02-21T05:07:00.017",[],[],{"cveId":55,"name":206,"severity":60,"cvss":58,"added":195,"epss":61,"published":584,"ranges":585,"checked":4,"hits":586,"covers":17},"2014-02-05T05:15:29.897",[],[],{"cveId":209,"name":212,"severity":67,"cvss":66,"added":195,"epss":211,"published":588,"ranges":589,"checked":4,"hits":590,"covers":17},"2013-02-27T00:55:01.017",[],[],{"cveId":215,"name":219,"severity":67,"cvss":107,"added":220,"epss":218,"published":592,"ranges":593,"checked":4,"hits":594,"covers":17},"2024-08-15T15:15:22.29",[],[],{"cveId":223,"name":227,"severity":60,"cvss":58,"added":228,"epss":226,"published":596,"ranges":597,"checked":4,"hits":598,"covers":17},"2024-06-09T20:15:09.55",[],[],{"cveId":231,"name":235,"severity":67,"cvss":107,"added":236,"epss":234,"published":600,"ranges":601,"checked":4,"hits":602,"covers":17},"2023-01-18T19:15:11.877",[],[],{"cveId":239,"name":244,"severity":67,"cvss":242,"added":245,"epss":243,"published":604,"ranges":605,"checked":4,"hits":606,"covers":17},"2023-09-19T14:15:21.343",[],[],{"cveId":248,"name":252,"severity":67,"cvss":107,"added":253,"epss":251,"published":608,"ranges":609,"checked":4,"hits":610,"covers":17},"2023-09-13T09:15:13.007",[],[],{"cveId":256,"name":261,"severity":67,"cvss":259,"added":262,"epss":260,"published":612,"ranges":613,"checked":4,"hits":614,"covers":17},"2018-06-11T21:29:01.797",[],[],{"cveId":266,"name":137,"severity":67,"cvss":66,"added":270,"epss":269,"published":616,"ranges":617,"checked":4,"hits":618,"covers":17},"2023-06-05T22:15:12.383",[],[],{"cveId":273,"name":277,"severity":67,"cvss":242,"added":278,"epss":276,"published":620,"ranges":621,"checked":4,"hits":622,"covers":17},"2020-05-08T13:15:11.137",[],[],{"cveId":281,"name":285,"severity":60,"cvss":58,"added":286,"epss":284,"published":624,"ranges":625,"checked":4,"hits":626,"covers":17},"2023-02-17T16:15:10.873",[],[],{"cveId":289,"name":293,"severity":67,"cvss":107,"added":294,"epss":292,"published":628,"ranges":629,"checked":4,"hits":630,"covers":17},"2017-08-09T18:29:00.933",[],[],{"cveId":297,"name":301,"severity":67,"cvss":242,"added":302,"epss":300,"published":632,"ranges":633,"checked":4,"hits":634,"covers":17},"2022-09-19T18:15:09.96",[],[],{"cveId":305,"name":311,"severity":309,"cvss":308,"added":312,"epss":310,"published":636,"ranges":637,"checked":4,"hits":638,"covers":17},"2022-09-26T16:15:11.207",[],[],{"cveId":315,"name":319,"severity":67,"cvss":107,"added":320,"epss":318,"published":640,"ranges":641,"checked":4,"hits":642,"covers":17},"2010-06-08T18:30:10.007",[],[],{"cveId":324,"name":328,"severity":60,"cvss":58,"added":320,"epss":327,"published":644,"ranges":645,"checked":4,"hits":646,"covers":17},"2011-12-07T19:55:01.673",[],[],{"cveId":331,"name":335,"severity":67,"cvss":66,"added":320,"epss":334,"published":648,"ranges":649,"checked":4,"hits":650,"covers":17},"2010-01-13T19:30:00.343",[],[],{"cveId":92,"name":319,"severity":67,"cvss":95,"added":320,"epss":96,"published":652,"ranges":653,"checked":4,"hits":654,"covers":17},"2012-02-16T19:55:01.13",[],[],{"cveId":339,"name":343,"severity":309,"cvss":341,"added":320,"epss":342,"published":656,"ranges":657,"checked":4,"hits":658,"covers":17},"2012-02-16T19:55:01.303",[],[],50]