The KEV catalog lists vulnerabilities that are known to be actively exploited in the wild. Federal agencies are required to remediate these on defined deadlines.
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2016-7855 | UNKNOWN | — | Use-after-free vulnerability in Adobe Flash Player Windows and OS and Linux allows remote attackers to execute arbitrary code. | Mar 3, 2022 |
| CVE-2017-6737 | UNKNOWN | — | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code. | Mar 3, 2022 |
| CVE-2020-11899 | UNKNOWN | — | The Treck TCP/IP stack contains an IPv6 out-of-bounds read vulnerability. | Mar 3, 2022 |
| CVE-2017-8540 | UNKNOWN | — | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to memory corruption. aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability". | Mar 3, 2022 |
| CVE-2022-20700 | UNKNOWN | — | A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS). | Mar 3, 2022 |
| CVE-2011-3544 | UNKNOWN | — | An access control vulnerability exists in the Applet Rhino Script Engine component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code. | Mar 3, 2022 |
| CVE-2012-1535 | UNKNOWN | — | Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute arbitrary code or cause a denial of service via crafted SWF content. | Mar 3, 2022 |
| CVE-2017-6738 | UNKNOWN | — | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code. | Mar 3, 2022 |
| CVE-2012-1856 | UNKNOWN | — | The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office allows remote attackers to execute arbitrary code via a crafted (1) document or (2) web page that triggers system-state corruption. | Mar 3, 2022 |
| CVE-2013-0632 | UNKNOWN | — | An authentication bypass vulnerability exists in Adobe ColdFusion which could result in an unauthorized user gaining administrative access. | Mar 3, 2022 |
| CVE-2013-0640 | UNKNOWN | — | An memory corruption vulnerability exists in the acroform.dll in Adobe Reader that allows an attacker to perform remote code execution. | Mar 3, 2022 |
| CVE-2013-5065 | UNKNOWN | — | Microsoft Windows NDProxy.sys in the kernel contains an improper input validation vulnerability which can allow a local attacker to escalate privileges. | Mar 3, 2022 |
| CVE-2014-4114 | UNKNOWN | — | A vulnerability exists in Windows Object Linking & Embedding (OLE) that could allow remote code execution if a user opens a file that contains a specially crafted OLE object. | Mar 3, 2022 |
| CVE-2015-1642 | UNKNOWN | — | Microsoft Office contains a memory corruption vulnerability that allows remote attackers to execute arbitrary code via a crafted document. | Mar 3, 2022 |
| CVE-2015-2545 | UNKNOWN | — | Microsoft Office allows remote attackers to execute arbitrary code via a crafted EPS image. | Mar 3, 2022 |
| CVE-2015-2590 | UNKNOWN | — | An unspecified vulnerability exists within Oracle Java Runtime Environment that allows an attacker to perform remote code execution. | Mar 3, 2022 |
| CVE-2015-3043 | UNKNOWN | — | A memory corruption vulnerability exists in Adobe Flash Player that allows an attacker to perform remote code execution. | Mar 3, 2022 |
| CVE-2015-4902 | UNKNOWN | — | Unspecified vulnerability in Oracle Java SE allows remote attackers to affect integrity via Unknown vectors related to deployment. | Mar 3, 2022 |
| CVE-2015-5119 | UNKNOWN | — | A use-after-free vulnerability exists within the ActionScript 3 ByteArray class in Adobe Flash Player that allows an attacker to perform remote code execution. | Mar 3, 2022 |
| CVE-2015-7645 | UNKNOWN | — | Adobe Flash Player allows remote attackers to execute arbitrary code via a crafted SWF file. | Mar 3, 2022 |
| CVE-2016-4117 | UNKNOWN | — | An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution. | Mar 3, 2022 |
| CVE-2016-5195 | UNKNOWN | — | Race condition in mm/gup.c in the Linux kernel allows local users to escalate privileges. | Mar 3, 2022 |
| CVE-2016-7193 | UNKNOWN | — | Microsoft Office contains a memory corruption vulnerability which can allow for remote code execution. | Mar 3, 2022 |
| CVE-2016-8562 | UNKNOWN | — | An improper privilege management vulnerability exists within the Siemens SIMATIC Communication Processor (CP) that allows a privileged attacker to remotely cause a denial of service. | Mar 3, 2022 |
| CVE-2017-12231 | UNKNOWN | — | A vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS could allow an unauthenticated, remote attacker to cause a denial of service. | Mar 3, 2022 |