CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Showing 1–2 of 2 advisories (Page 1/1)

CVE-2026-1199778.1/HIGHEPSS 1.2%CISA KEV

2026-10-31

WordPress Core Remote Code Execution (RCE) Vulnerability Alert (CVE-2026-119977)

[Affected Scope] WordPress Core versions 4.7 through 7.1.3

[Impact] Unauthenticated attackers can execute arbitrary code on the server by exploiting predictable staging paths during the core upgrade process

[Mitigation] Immediately upgrade to WordPress 7.1.4 or later and restrict web access to the upgrade staging directories

CVE-2024-300887.0/HIGHEPSS 68.2%CISA KEV

2024-06-11

[Affected Scope] Windows 10, Windows 11, and Windows Server operating systems

[Impact] Local attackers can exploit a TOCTOU race condition in the kernel to execute arbitrary code with SYSTEM privileges

[Mitigation] Immediately apply the latest Microsoft Cumulative Updates and restrict local access on unpatched systems