The KEV catalog lists vulnerabilities that are known to be actively exploited in the wild. Federal agencies are required to remediate these on defined deadlines.
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2018-0180 | UNKNOWN | — | A vulnerability in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition. | Mar 3, 2022 |
| CVE-2013-1675 | UNKNOWN | — | Mozilla Firefox does not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site. | Mar 3, 2022 |
| CVE-2015-2387 | UNKNOWN | — | ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server allows local users to gain privileges via a crafted application. | Mar 3, 2022 |
| CVE-2013-0641 | UNKNOWN | — | A buffer overflow vulnerability exists in Adobe Reader which allows an attacker to perform remote code execution. | Mar 3, 2022 |
| CVE-2016-0099 | UNKNOWN | — | A privilege escalation vulnerability exists in Microsoft Windows if the Windows Secondary Logon Service fails to properly manage request handles in memory. An attacker who successfully exploited this vulnerability could run arbitrary code as an administrator. | Mar 3, 2022 |
| CVE-2017-11826 | UNKNOWN | — | A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. | Mar 3, 2022 |
| CVE-2017-12232 | UNKNOWN | — | A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in a denial of service. | Mar 3, 2022 |
| CVE-2018-0155 | UNKNOWN | — | A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches could allow an unauthenticated, remote attacker to cause a crash of the iosd process, causing a denial-of-service (DoS) condition. | Mar 3, 2022 |
| CVE-2017-12234 | UNKNOWN | — | There is a vulnerability in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service. | Mar 3, 2022 |
| CVE-2017-12238 | UNKNOWN | — | A vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS for Cisco Catalyst 6800 Series Switches could allow an unauthenticated, adjacent attacker to cause a denial of service. | Mar 3, 2022 |
| CVE-2017-6627 | UNKNOWN | — | A vulnerability in the UDP processing code of Cisco IOS and IOS XE could allow an unauthenticated, remote attacker to cause the input queue of an affected system to hold UDP packets, causing an interface queue wedge and denial of service. | Mar 3, 2022 |
| CVE-2017-0261 | UNKNOWN | — | Microsoft Office contains a use-after-free vulnerability which can allow for remote code execution. | Mar 3, 2022 |
| CVE-2017-6743 | UNKNOWN | — | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code. | Mar 3, 2022 |
| CVE-2022-20701 | UNKNOWN | — | A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS). | Mar 3, 2022 |
| CVE-2002-0367 | UNKNOWN | — | smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges. | Mar 3, 2022 |
| CVE-2017-11292 | UNKNOWN | — | Adobe Flash Player contains a type confusion vulnerability which can allow for remote code execution. | Mar 3, 2022 |
| CVE-2018-0159 | UNKNOWN | — | A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial-of-service (DoS) condition. | Mar 3, 2022 |
| CVE-2017-12233 | UNKNOWN | — | There is a vulnerability in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service. | Mar 3, 2022 |
| CVE-2017-12237 | UNKNOWN | — | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS and Cisco IOS XE could allow an unauthenticated, remote attacker to cause high CPU utilization, traceback messages, or a reload of an affected device that leads to a denial of service. | Mar 3, 2022 |
| CVE-2018-0179 | UNKNOWN | — | A vulnerability in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition. | Mar 3, 2022 |
| CVE-2022-20703 | UNKNOWN | — | A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS). | Mar 3, 2022 |
| CVE-2008-2992 | UNKNOWN | — | Adobe Acrobat and Reader contain an input validation issue in a JavaScript method that could potentially lead to remote code execution. | Mar 3, 2022 |
| CVE-2009-1123 | UNKNOWN | — | The kernel in Microsoft Windows does not properly validate changes to unspecified kernel objects, which allows local users to gain privileges via a crafted application. | Mar 3, 2022 |
| CVE-2009-3129 | UNKNOWN | — | Microsoft Office Excel allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset. | Mar 3, 2022 |
| CVE-2010-0232 | UNKNOWN | — | The kernel in Microsoft Windows, when access to 16-bit applications is enabled on a 32-bit x86 platform, does not properly validate certain BIOS calls, which allows local users to gain privileges. | Mar 3, 2022 |