Exploited vulnerabilities (CISA KEV)

CVE-2016-7193 High · 7.8 KEV High · 56 CWE-119 Oct 13, 2016

Microsoft Office Memory Corruption Vulnerability

Microsoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, Office Web Apps Server 2013 SP1, and Office Online Server allow remote attackers to execute arbitrary code via a crafted RTF document, aka "Microsoft Office Memory Corruption Vulnerability."

CVE-2016-3393 High · 7.8 KEV High · 56 Oct 13, 2016

Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability

Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows remote attackers to execute arbitrary code via a crafted web site, aka "Windows Graphics Component RCE Vulnerability."

CVE-2016-3298 Medium · 6.5 KEV High · 53 Oct 13, 2016

Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability

Microsoft Internet Explorer 9 through 11 and the Internet Messaging API in Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow remote attackers to determine the existence of arbitrary files via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability."

CVE-2016-6415 High · 7.5 KEV Urgent · 79 Public exploit CWE-200 Sep 18, 2016

Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability

The server IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.x and 5.0.x through 5.2.x, and PIX before 7.0 allows remote attackers to obtain sensitive information from device memory via a Security Association (SA) negotiation request, aka Bug IDs CSCvb29204 and CSCvb36055 or BENIGNCERTAIN.

CVE-2016-3351 Medium · 6.5 KEV High · 63 Ransomware Sep 14, 2016

Microsoft Internet Explorer and Edge Information Disclosure Vulnerability

Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."

CVE-2016-4657 High · 8.8 KEV Urgent · 76 Public exploit CWE-787 Aug 25, 2016

Apple iOS Webkit Memory Corruption Vulnerability

WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

CVE-2016-4656 High · 7.8 KEV Urgent · 76 Public exploit CWE-787 Aug 25, 2016

Apple iOS Memory Corruption Vulnerability

The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

CVE-2016-4655 Medium · 5.5 KEV Urgent · 73 Public exploit Aug 25, 2016

Apple iOS Information Disclosure Vulnerability

The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app.

CVE-2016-6367 High · 7.8 KEV High · 64 Public exploit CWE-77 Aug 18, 2016

Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability

Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges via invalid CLI commands, aka Bug ID CSCtu74257 or EPICBANANA.

CVE-2016-6366 High · 8.8 KEV Urgent · 76 Public exploit CWE-120 Aug 18, 2016

Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability

Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM devices allows remote authenticated users to execute arbitrary code via crafted IPv4 SNMP packets, aka Bug ID CSCva92151 or EXTRABACON.

CVE-2016-3309 High · 7.8 KEV Urgent · 80 Public exploit Ransomware Aug 9, 2016

Microsoft Windows Kernel Privilege Escalation Vulnerability

The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3308, CVE-2016-3310, and CVE-2016-3311.

CVE-2016-3643 High · 7.8 KEV High · 62 Public exploit CWE-264 Jun 17, 2016

SolarWinds Virtualization Manager Privilege Escalation Vulnerability

SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfiguration of sudo, as demonstrated by "sudo cat /etc/passwd."

CVE-2016-4171 Critical · 9.8 KEV High · 60 Jun 16, 2016

Adobe Flash Player Remote Code Execution Vulnerability

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.

CVE-2016-3235 High · 7.8 KEV Urgent · 76 Public exploit Jun 15, 2016

Microsoft Office OLE DLL Side Loading Vulnerability

Microsoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and Visio Viewer 2010 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Microsoft Office OLE DLL Side Loading Vulnerability."

CVE-2016-4523 High · 7.5 KEV High · 59 CWE-125 Jun 9, 2016

Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability

The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via unspecified vectors.

CVE-2016-4437 Critical · 9.8 KEV Urgent · 83 Public exploit CWE-321 Jun 7, 2016

Apache Shiro Code Execution Vulnerability

Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter.

CVE-2016-3088 Critical · 9.8 KEV Urgent · 83 Public exploit CWE-434 Jun 1, 2016

Apache ActiveMQ Improper Input Validation Vulnerability

The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request.

CVE-2010-5326 Critical · 10.0 KEV Urgent · 73 CWE-306 May 13, 2016

SAP NetWeaver Remote Code Execution Vulnerability

The Invoker Servlet on SAP NetWeaver Application Server Java platforms, possibly before 7.3, does not require authentication, which allows remote attackers to execute arbitrary code via an HTTP or HTTPS request, as exploited in the wild in 2013 through 2016, aka a "Detour" attack.

CVE-2016-4117 Critical · 9.8 KEV Urgent · 100 Public exploit Ransomware May 10, 2016

Adobe Flash Player Arbitrary Code Execution Vulnerability

Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016.

CVE-2016-0189 High · 7.5 KEV Urgent · 86 Public exploit Ransomware CWE-787 May 10, 2016

Microsoft Internet Explorer Memory Corruption Vulnerability

The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0187.

CVE-2016-0185 High · 7.8 KEV High · 64 Public exploit May 10, 2016

Microsoft Windows Media Center Remote Code Execution Vulnerability

Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, and Windows 8.1 allows remote attackers to execute arbitrary code via a crafted Media Center link (aka .mcl) file, aka "Windows Media Center Remote Code Execution Vulnerability."

CVE-2016-3718 Medium · 5.5 KEV High · 61 Public exploit CWE-918 May 5, 2016

ImageMagick Server-Side Request Forgery (SSRF) Vulnerability

The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.

CVE-2016-3715 Medium · 5.5 KEV High · 61 Public exploit CWE-552 May 5, 2016

ImageMagick Arbitrary File Deletion Vulnerability

The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.

CVE-2016-3714 High · 8.4 KEV Urgent · 79 Public exploit CWE-20 May 5, 2016

ImageMagick Improper Input Validation Vulnerability

The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to execute arbitrary code via shell metacharacters in a crafted image, aka "ImageTragick."

CVE-2016-3081 High · 8.1 KEV Urgent · 76 Public exploit CWE-77 Apr 26, 2016

Apache Struts Command Injection Vulnerability

Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to chained expressions.