Skip to content
COOEY
LIVE FEED
1602 events · 13 sources · newest first
Events in view
1602
all sources
Critical
0
severity
Active sources
13
collectors
Last sync
2026-08-29 12:00
UTC
All data Vulns · 3632Regulatory · 145News · 486 LIVE · UPDATES ON COLLECT
All sources NVD CVE · 1803CISA KEV · 1686News · 444CISA advisory · 124eCFR · 98DoD CIO CMMC · 21DC3 DCISE · 19DOJ FCA · 16NIST · 15Fed. Register · 14DCSA · 11Cyber AB docs · 10OIRA · 2
Any severity Critical High ⊙ SUBSCRIBE (RSS)
2022-05-23 CISA KEV
Microsoft Windows Kernel Privilege Escalation Vulnerability HIGH
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.
2022-05-23 CISA KEV
Microsoft Internet Explorer Information Disclosure Vulnerability HIGH
An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory. An attacker who successfully exploited this vulnerability could test for the presence of files on disk.
2022-05-23 CISA KEV
Google Chrome Blink Use-After-Free Vulnerability HIGH
Google Chrome Blink contains a heap use-after-free vulnerability that allows an attacker to potentially perform out of bounds memory access via a crafted HTML page.
2022-05-23 CISA KEV
Microsoft Windows SMB Information Disclosure Vulnerability HIGH
An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, which could lead to information disclosure from the server.
2022-05-23 CISA KEV
Microsoft Windows Privilege Escalation Vulnerability HIGH
A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited the vulnerability could elevate privileges on an affected system from...
2022-05-23 CISA KEV
Google Chrome WebAudio Use-After-Free Vulnerability HIGH
Google Chrome WebAudio contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.
2022-05-23 CISA KEV
Mozilla Firefox and Thunderbird Type Confusion Vulnerability HIGH
Mozilla Firefox and Thunderbird contain a type confusion vulnerability that can occur when manipulating JavaScript objects due to issues in Array.pop, allowing for an exploitable crash.
2022-05-23 CISA KEV
Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability HIGH
Mozilla Firefox and Thunderbird contain a sandbox escape vulnerability that could result in remote code execution.
2022-05-23 CISA KEV
WebKitGTK Memory Corruption Vulnerability HIGH
WebKitGTK contains a memory corruption vulnerability which can allow an attacker to perform remote code execution.
2022-05-23 CISA KEV
WhatsApp Cross-Site Scripting Vulnerability HIGH
A vulnerability in WhatsApp Desktop when paired with WhatsApp for iPhone allows cross-site scripting and local file reading.
2022-05-23 CISA KEV
Adobe Flash Player Stack-based Buffer Overflow Vulnerability HIGH
Adobe Flash Player have a stack-based buffer overflow vulnerability that could lead to remote code execution.
2022-05-16 CISA KEV
Zyxel Multiple Firewalls OS Command Injection Vulnerability HIGH
A command injection vulnerability in the CGI program of some Zyxel firewall versions could allow an attacker to modify specific files and then execute some OS commands on a vulnerable device.
2022-05-16 CISA KEV
VMware Spring Cloud Gateway Code Injection Vulnerability HIGH
Spring Cloud Gateway applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured.
2022-05-04 CISA KEV
Apple Multiple Products Type Confusion Vulnerability HIGH
A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code execution.
2022-05-04 CISA KEV
Microsoft Internet Explorer Use-After-Free Vulnerability HIGH
Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute code.
2022-05-04 CISA KEV
Microsoft Win32k Privilege Escalation Vulnerability HIGH
Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.
2022-05-04 CISA KEV
OpenSSL Information Disclosure Vulnerability HIGH
The TLS and DTLS implementations in OpenSSL do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information.
2022-05-04 CISA KEV
Apple Multiple Products Type Confusion Vulnerability HIGH
A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code execution.
2022-04-25 CISA KEV
Microsoft Win32k Privilege Escalation Vulnerability HIGH
Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.
2022-04-25 CISA KEV
Microsoft Win32k Privilege Escalation Vulnerability HIGH
Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.
2022-04-25 CISA KEV
Linux Kernel Privilege Escalation Vulnerability HIGH
Linux kernel contains an improper initialization vulnerability where an unprivileged local user could escalate their privileges on the system. This vulnerability has the moniker of "Dirty Pipe."
2022-04-25 CISA KEV
Microsoft Windows User Profile Service Privilege Escalation Vulnerability HIGH
Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.
2022-04-25 CISA KEV
Microsoft Windows User Profile Service Privilege Escalation Vulnerability HIGH
Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.
2022-04-25 CISA KEV
Jenkins Script Security Plugin Sandbox Bypass Vulnerability HIGH
Jenkins Script Security Plugin contains a protection mechanism failure, allowing an attacker to bypass the sandbox.
2022-04-19 CISA KEV
Microsoft Windows Print Spooler Privilege Escalation Vulnerability HIGH
Microsoft Windows Print Spooler contains an unspecified vulnerability which allow for privilege escalation.
2022-04-19 CISA KEV
WhatsApp VOIP Stack Buffer Overflow Vulnerability HIGH
A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number.
2022-04-15 CISA KEV
Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability HIGH
masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server allows remote attackers to execute arbitrary commands.
2022-04-15 CISA KEV
Google Chromium V8 Type Confusion Vulnerability HIGH
Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers...
2022-04-15 CISA KEV
VMware Multiple Products Privilege Escalation Vulnerability HIGH
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts.
2022-04-15 CISA KEV
Ubiquiti AirOS Command Injection Vulnerability HIGH
Certain Ubiquiti devices contain a command injection vulnerability via a GET request to stainfo.cgi.
2022-04-15 CISA KEV
InduSoft Web Studio NTWebServer Directory Traversal Vulnerability HIGH
InduSoft Web Studio NTWebServer contains a directory traversal vulnerability that allows remote attackers to read administrative passwords in APP files, allowing for remote code execution.
2022-04-15 CISA KEV
Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability HIGH
The WAP interface in Trihedral VTScada (formerly VTS) allows remote attackers to cause a denial-of-service (DoS).
2022-04-15 CISA KEV
Schneider Electric U.motion Builder SQL Injection Vulnerability HIGH
A SQL Injection vulnerability exists in U.motion Builder software which could cause unwanted code execution when an improper set of characters is entered.
2022-04-15 CISA KEV
Crestron Multiple Products Command Injection Vulnerability HIGH
Multiple Crestron products are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.
2022-04-13 CISA KEV
Adobe Flash Player Remote Code Execution Vulnerability HIGH
Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute code.
2022-04-13 CISA KEV
Adobe Flash Player Stack-Based Buffer Overflow Vulnerability HIGH
Stack-based buffer overflow in Adobe Flash Player allows attackers to execute code remotely.
2022-04-13 CISA KEV
Adobe Flash Player Heap-Based Buffer Overflow Vulnerability HIGH
Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code.
2022-04-13 CISA KEV
Adobe Flash Player Use-After-Free Vulnerability HIGH
Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).
2022-04-13 CISA KEV
Adobe Flash Player Use-After-Free Vulnerability HIGH
Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).
2022-04-13 CISA KEV
Adobe Flash Player Use-After-Free Vulnerability HIGH
Use-after-free vulnerability in Adobe Flash Player allows remote attackers to execute code.
◀ PREV PAGE 28 / 41 NEXT ▶