CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Adobe Reader and Acrobat Use-After-Free Remote Code Execution Vulnerability (CVE-2014-0496) Technical Advisory
[Affected Scope] Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X
[Impact] Successful exploitation allows remote attackers to execute arbitrary code and gain full control of the target system via crafted PDF files
[Mitigation] Immediately upgrade Adobe Reader and Acrobat to version 10.1.9, 11.0.06, or later to mitigate the vulnerability
Microsoft Internet Explorer 6/7/8 CDwnBindInfo Use-After-Free Remote Code Execution Vulnerability (CVE-2012-4792)
[Affected Scope] Microsoft Internet Explorer versions 6, 7, and 8
[Impact] Remote attackers can execute arbitrary code with user privileges via a crafted malicious website
[Mitigation] Apply the official MS13-008 security update, transition to a modern browser, or apply EMET mitigations
Microsoft Internet Explorer mshtml.dll Use-After-Free Remote Code Execution Vulnerability (CVE-2012-4969)
[Affected Scope] Microsoft Internet Explorer versions 6, 7, 8, and 9
[Impact] Remote attackers can execute arbitrary code with the privileges of the current user by enticing a user to visit a specially crafted website
[Mitigation] Apply the official cumulative security update (MS12-063), transition to a modern supported browser, or apply the official Fix it solution