T1499.004Impact
Application or System Exploitation
Adversaries may exploit software vulnerabilities that can cause an application or system to crash and deny availability to users. Some systems may automatically restart critical applications and services when crashes occur, but they can likely be re-exploited to cause a persistent denial of service (DoS) condition. Adversaries may exploit known or zero-day vulnerabilities to crash applications…
CVEs146
In CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it.84
Reports1
Detections
3 Sigma rules tagged T1499.004Application or System ExploitationT1499.0043 general rules
- Audit CVE Eventcriticaltest
- Apache Segmentation Faulthightest
- Nginx Core Dumphightest
Sigma rules © SigmaHQ, Detection Rule License 1.1; linked, not reproduced.
CVEs linked to Application or System Exploitation
146 CVEs, by priority. Each link shows its badge.- CVE-2012-0507Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityOracle · Java SEKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1211Exploitation for Stealth+1 more · 2 reportsAI mapping from the description · primary impact98.2%Top 0.09%86.0priority
- CVE-2017-10271Oracle Corporation WebLogic Server Remote Code Execution VulnerabilityOracle · WebLogic ServerKEVRansomwarePublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation2 reportsAI mapping from the description · primary impact>99.9%Top 0.01%84.4priority
- CVE-2015-2291Intel Ethernet Diagnostics Driver for Windows Denial-of-Service VulnerabilityIntel · Ethernet Diagnostics Driver for WindowsKEVRansomwarePublic exploitHigh · 7.8T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation+1 more · 1 reportAI mapping from the description · primary impact15.7%Top 3.1%81.7priority
- CVE-2021-45105Apache Log4j2 does not always protect from infinite recursion in lookup evaluationApache Software Foundation · Apache Log4j2Public exploitMedium · 5.9T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation1 reportAI mapping from the description · primary impact>99.9%Top 0.01%81.0priority
- CVE-2019-5544VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow VulnerabilityVMware · VMware ESXi and Horizon DaaSKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1499.004Application or System ExploitationAI mapping from the description · primary impact98.1%Top 0.09%79.8priority
- CVE-2026-111497Google Brotli Unchecked Return Value VulnerabilityGoogle · BrotliKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+2 moreAI mapping from the description · primary impact82.6%Top 0.33%79.8priority
- CVE-2016-7200Microsoft Edge Memory Corruption VulnerabilityMicrosoft · EdgeKEVPublic exploitHigh · 8.8T1059Command and Scripting InterpreterT1499.004Application or System ExploitationAI mapping from the description · primary impact82.8%Top 0.33%79.1priority
- CVE-2016-7201Microsoft Edge Memory Corruption VulnerabilityMicrosoft · EdgeKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution+1 moreAI mapping from the description · primary impact80.0%Top 0.39%79.1priority
- CVE-2025-20362Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization…Cisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat DefenseKEVPublic exploitHigh · 8.6T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation5 reportsAI mapping from the description · primary impact87.1%Top 0.25%79.0priority
- CVE-2023-29552Service Location Protocol (SLP) Denial-of-Service VulnerabilityIETF · Service Location Protocol (SLP)KEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System ExploitationAI mapping from the description · primary impact64.0%Top 0.78%78.1priority
- CVE-2015-3105Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before…AI mapping from the description · primary impact90.1%Top 0.2%77.9priority
- CVE-2012-1889Microsoft XML Core Services Memory Corruption VulnerabilityMicrosoft · XML Core ServicesKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter+1 more · 3 reportsAI mapping from the description · primary impact83.5%Top 0.32%76.8priority
- CVE-2018-0171Cisco IOS and IOS XE Software Smart Install Remote Code Execution VulnerabilityCisco · IOS and IOS XEKEVPublic exploitCritical · 9.8T1059Command and Scripting InterpreterT1210Exploitation of Remote Services+1 more · 2 reportsAI mapping from the description · primary impact99.5%Top 0.06%76.0priority
- CVE-2020-5135SonicWall SonicOS Buffer Overflow VulnerabilitySonicWall · SonicOSKEVRansomwareCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 moreAI mapping from the description · primary impact26.9%Top 2%74.5priority
- CVE-2024-40766SonicWall SonicOS Improper Access Control VulnerabilitySonicWall · SonicOSKEVRansomwareCritical · 9.8T1190Exploit Public-Facing ApplicationT1005Data from Local System+1 moreAI mapping from the description · primary impact18.4%Top 2.8%74.3priority
- CVE-2026-67277MikroTik RouterOS Missing Authentication for Critical Function VulnerabilityMikroTik · RouterOSKEVPublic exploitHigh · 8.2T1190Exploit Public-Facing ApplicationT1005Data from Local System+1 moreAI mapping from the description · primary impact1.6%Top 25%73.8priority
- CVE-2017-3881Cisco IOS and IOS XE Remote Code Execution VulnerabilityCisco · IOS and IOS XEKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more · 1 reportAI mapping from the description · primary impact99.0%Top 0.07%73.7priority
- CVE-2017-6736Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityCisco · IOS and IOS XE SoftwareKEVPublic exploitHigh · 8.8T1078Valid AccountsT1059Command and Scripting Interpreter+1 more · 1 reportAI mapping from the description · primary impact70.4%Top 0.62%72.9priority
- CVE-2026-8452Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer…Citrix · NetScaler ADC and NetScaler GatewayKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1499.004Application or System ExploitationAI mapping from the description · primary impact1.0%Top 37%72.5priority
- CVE-2018-13383Fortinet FortiOS and FortiProxy Out-of-bounds WriteFortinet · FortiOS and FortiProxyKEVRansomwareMedium · 6.5T1499.004Application or System ExploitationAI mapping from the description · primary impact32.5%Top 1.7%72.2priority
- CVE-2025-39964Linux Kernel Race Condition VulnerabilityLinux · KernelKEVPublic exploitMedium · 5.5T1068Exploitation for Privilege EscalationT1499.004Application or System ExploitationAI mapping from the description · primary impact1.6%Top 25%71.9priority
- CVE-2026-20349Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection…Cisco · Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) KEVPublic exploitHigh · 8.6T1190Exploit Public-Facing ApplicationT1499.004Application or System ExploitationAI mapping from the description · primary impact1.0%Top 37%71.6priority
- CVE-2020-14871Oracle Solaris and Zettabyte File System (ZFS) Unspecified VulnerabilityOracle · Solaris and Zettabyte File System (ZFS)KEVPublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1068Exploitation for Privilege Escalation+1 moreAI mapping from the description · primary impact80.2%Top 0.38%69.9priority
- CVE-2020-3161Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service VulnerabilityCisco · Cisco IP PhonesKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 moreAI mapping from the description · primary impact83.9%Top 0.31%69.8priority
- CVE-2014-3931Multi-Router Looking Glass (MRLG) Buffer Overflow VulnerabilityLooking Glass · Multi-Router Looking Glass (MRLG)KEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1499.004Application or System ExploitationAI mapping from the description · primary impact29.0%Top 1.8%69.5priority
- CVE-2016-1646Google Chromium V8 Out-of-Bounds Read VulnerabilityGoogle · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1499.004Application or System ExploitationAI mapping from the description · primary impact48.1%Top 1.1%68.9priority
- CVE-2015-5122Adobe Flash Player Use-After-Free VulnerabilityAdobe · Flash PlayerKEVPublic exploitEnd of lifeCritical · 9.8T1059Command and Scripting InterpreterT1499.004Application or System Exploitation1 reportAI mapping from the description · primary impact87.0%Top 0.25%68.7priority
- CVE-2021-21551Dell dbutil Driver Insufficient Access Control VulnerabilityDell · dbutil DriverKEVPublic exploitHigh · 7.8T1068Exploitation for Privilege EscalationT1005Data from Local System+1 moreAI mapping from the description · primary impact79.6%Top 0.4%68.4priority
- CVE-2021-22555Linux Kernel Heap Out-of-Bounds Write VulnerabilityLinux · KernelKEVPublic exploitHigh · 7.8T1068Exploitation for Privilege EscalationT1499.004Application or System ExploitationAI mapping from the description · primary impact78.7%Top 0.41%68.4priority
- CVE-2011-0609Adobe Flash Player Unspecified VulnerabilityAdobe · Flash PlayerKEVPublic exploitHigh · 7.8T1189Drive-by CompromiseT1203Exploitation for Client Execution+1 moreAI mapping from the description · primary impact63.5%Top 0.79%68.3priority
- CVE-2025-27363FreeType Out-of-Bounds Write VulnerabilityFreeType · FreeTypeKEVPublic exploitHigh · 8.1T1574Hijack Execution FlowT1499.004Application or System ExploitationMITRE CTID mapping of the KEV entry · follow-on activity27.8%Top 1.9%68.3priority
- CVE-2015-5477ISC BIND Data Processing Errors VulnerabilityISC · BINDKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System ExploitationAI mapping from the description · primary impact99.6%Top 0.05%68.2priority
- CVE-2006-1547Apache Struts 1 ActionForm Denial-of-Service VulnerabilityApache · Struts 1KEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System ExploitationAI mapping from the description · primary impact54.6%Top 0.98%68.1priority
- CVE-2015-2424Microsoft PowerPoint Memory Corruption VulnerabilityMicrosoft · PowerPointKEVHigh · 8.8T1204.002Malicious FileT1203Exploitation for Client Execution+1 more · 1 reportAI mapping from the description · primary impact40.1%Top 1.4%67.8priority
- CVE-2019-5786Google Chrome Blink Use-After-Free VulnerabilityGoogle · Chrome BlinkKEVPublic exploitMedium · 6.5T1189Drive-by CompromiseT1499.004Application or System ExploitationAI mapping from the description · primary impact61.1%Top 0.84%67.4priority
- CVE-2019-5825Google Chromium V8 Out-of-Bounds Write VulnerabilityGoogle · Chromium V8KEVPublic exploitMedium · 6.5T1189Drive-by CompromiseT1499.004Application or System ExploitationAI mapping from the description · primary impact55.9%Top 0.95%67.4priority
- CVE-2016-0034Microsoft Silverlight Runtime Remote Code Execution VulnerabilityMicrosoft · SilverlightKEVRansomwareEnd of lifeHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter+1 more · 3 reportsMITRE CTID mapping of the CVE · uncategorised69.4%Top 0.64%66.8priority
- CVE-2020-11899Treck TCP/IP stack Out-of-Bounds Read VulnerabilityTreck TCP/IP stack · IPv6KEVPublic exploitMedium · 5.4T1190Exploit Public-Facing ApplicationT1499.004Application or System ExploitationAI mapping from the description · primary impact18.4%Top 2.8%66.2priority
- CVE-2026-21525Microsoft Windows NULL Pointer Dereference VulnerabilityMicrosoft · WindowsKEVMedium · 6.2T1068Exploitation for Privilege EscalationT1499.004Application or System ExploitationAI mapping from the description · primary impact4.9%Top 8%65.7priority
- CVE-2015-3090Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before…AI mapping from the description · primary impact83.2%Top 0.32%65.4priority
- CVE-2015-5374A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions <…Public exploitT1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation1 reportAI mapping from the description · primary impact74.5%Top 0.51%65.4priority
- CVE-2018-0125Cisco VPN Routers Remote Code Execution VulnerabilityCisco · VPN RoutersKEVCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 moreAI mapping from the description · primary impact55.2%Top 0.97%64.7priority
- CVE-2021-22991F5 BIG-IP Traffic Management Microkernel Buffer OverflowF5 · BIG-IP Traffic Management MicrokernelKEVCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 moreAI mapping from the description · primary impact62.4%Top 0.82%64.7priority
- CVE-2023-33009Zyxel Multiple Firewalls Buffer Overflow VulnerabilityZyxel · Multiple FirewallsKEVCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 moreAI mapping from the description · primary impact28.1%Top 1.9%64.5priority
- CVE-2023-33010Zyxel Multiple Firewalls Buffer Overflow VulnerabilityZyxel · Multiple FirewallsKEVCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 moreAI mapping from the description · primary impact29.0%Top 1.8%64.5priority
- CVE-2026-76418Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference…Cisco · Secure Firewall ASA Software and Cisco Secure FTD SoftwareKEVHigh · 8.6T1190Exploit Public-Facing ApplicationT1499.004Application or System ExploitationAI mapping from the description · primary impact0.9%Top 40%64.4priority
- CVE-2015-4068Arcserve Unified Data Protection (UDP) Directory Traversal VulnerabilityArcserve · Unified Data Protection (UDP)KEVCritical · 9.1T1190Exploit Public-Facing ApplicationT1005Data from Local System+1 moreAI mapping from the description · primary impact63.6%Top 0.79%64.2priority
- CVE-2017-12240Cisco IOS and IOS XE Software DHCP Remote Code Execution VulnerabilityCisco · IOS and IOS XE SoftwareKEVCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 moreAI mapping from the description · primary impact13.8%Top 3.5%64.2priority
- CVE-2017-6737Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityCisco · IOS and IOS XE SoftwareKEVHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 moreAI mapping from the description · primary impact45.0%Top 1.2%63.9priority
- CVE-2017-6739Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityCisco · IOS and IOS XE SoftwareKEVHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 moreAI mapping from the description · primary impact10.9%Top 4.1%63.3priority
- CVE-2017-6740Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityCisco · IOS and IOS XE SoftwareKEVHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 moreAI mapping from the description · primary impact11.1%Top 4.1%63.3priority
- CVE-2017-6743Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityCisco · IOS and IOS XE SoftwareKEVHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 moreAI mapping from the description · primary impact10.9%Top 4.1%63.3priority
- CVE-2017-6744Cisco IOS Software SNMP Remote Code Execution VulnerabilityCisco · IOS softwareKEVHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 moreAI mapping from the description · primary impact7.3%Top 5.6%63.0priority
- CVE-2018-0172Cisco IOS and IOS XE Software Improper Input Validation VulnerabilityCisco · IOS and IOS XE SoftwareKEVHigh · 8.6T1190Exploit Public-Facing ApplicationT1499.004Application or System ExploitationAI mapping from the description · primary impact7.8%Top 5.3%63.0priority
- CVE-2016-4523Trihedral VTScada (formerly VTS) Denial-of-Service VulnerabilityTrihedral · VTScada (formerly VTS)KEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System ExploitationAI mapping from the description · primary impact31.2%Top 1.7%62.9priority
- CVE-2018-0155Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service VulnerabilityCisco · Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series SwitchesKEVHigh · 8.6T1190Exploit Public-Facing ApplicationT1499.004Application or System ExploitationAI mapping from the description · primary impact7.7%Top 5.4%62.9priority
- CVE-2018-0173Cisco IOS and IOS XE Software Improper Input Validation VulnerabilityCisco · IOS and IOS XE SoftwareKEVHigh · 8.6T1190Exploit Public-Facing ApplicationT1499.004Application or System ExploitationAI mapping from the description · primary impact7.6%Top 5.5%62.9priority
- CVE-2018-0174Cisco IOS Software and Cisco IOS XE Software Improper Input Validation VulnerabilityCisco · IOS XE SoftwareKEVHigh · 8.6T1190Exploit Public-Facing ApplicationT1499.004Application or System ExploitationAI mapping from the description · primary impact7.6%Top 5.5%62.9priority
- CVE-2024-3393Palo Alto Networks PAN-OS Malicious DNS Packet VulnerabilityPalo Alto Networks · PAN-OSKEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System ExploitationAI mapping from the description · primary impact29.1%Top 1.8%62.9priority
- CVE-2023-4346KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism…KNX Association · KNX Protocol Connection Authorization Option 1KEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System ExploitationAI mapping from the description · primary impact1.4%Top 28%62.6priority
- CVE-2018-0156Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service VulnerabilityCisco · IOS Software and Cisco IOS XE SoftwareKEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System ExploitationAI mapping from the description · primary impact9.4%Top 4.6%62.3priority
- CVE-2017-12231Cisco IOS Software Network Address Translation Denial-of-Service VulnerabilityCisco · IOS softwareKEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System ExploitationAI mapping from the description · primary impact7.1%Top 5.8%62.1priority
- CVE-2017-12233Cisco IOS Software Common Industrial Protocol Request Denial-of-Service VulnerabilityCisco · IOS softwareKEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System ExploitationAI mapping from the description · primary impact7.1%Top 5.8%62.1priority
- CVE-2017-12234Cisco IOS Software Common Industrial Protocol Request Denial-of-Service VulnerabilityCisco · IOS softwareKEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System ExploitationAI mapping from the description · primary impact7.1%Top 5.8%62.1priority
- CVE-2017-12235Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service VulnerabilityCisco · IOS softwareKEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System ExploitationAI mapping from the description · primary impact7.1%Top 5.8%62.1priority
- CVE-2018-0159Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service VulnerabilityCisco · IOS Software and Cisco IOS XE SoftwareKEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System ExploitationAI mapping from the description · primary impact6.9%Top 6%62.1priority
- CVE-2020-3566Cisco IOS XR Software DVMRP Memory Exhaustion VulnerabilityCisco · IOS XRKEVHigh · 8.6T1190Exploit Public-Facing ApplicationT1499.004Application or System ExploitationAI mapping from the description · primary impact3.7%Top 10%62.0priority
- CVE-2018-0167Cisco IOS, XR, and XE Software Buffer Overflow VulnerabilityCisco · IOS, XR, and XE SoftwareKEVHigh · 8.8T1059Command and Scripting InterpreterT1210Exploitation of Remote Services+1 moreAI mapping from the description · primary impact3.4%Top 11%61.9priority
- CVE-2010-3035Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service VulnerabilityCisco · IOS XRKEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System ExploitationAI mapping from the description · primary impact5.7%Top 7%61.8priority
- CVE-2024-20481Cisco ASA and FTD Denial-of-Service VulnerabilityCisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)KEVMedium · 5.8T1190Exploit Public-Facing ApplicationT1499.004Application or System ExploitationAI mapping from the description · primary impact15.9%Top 3.1%61.4priority
- CVE-2016-8562Siemens SIMATIC CP 1543-1 Improper Privilege Management VulnerabilitySiemens · SIMATIC CPKEVHigh · 7.5T1210Exploitation of Remote ServicesT1499.004Application or System ExploitationAI mapping from the description · primary impact3.6%Top 11%61.1priority
- CVE-2014-1776Microsoft Internet Explorer Memory Corruption VulnerabilityMicrosoft · Internet ExplorerKEVPublic exploitEnd of lifeCritical · 9.8T1059Command and Scripting InterpreterT1499.004Application or System Exploitation2 reportsAI mapping from the description · primary impact82.7%Top 0.33%60.9priority
- CVE-2015-3043Adobe Flash Player Memory Corruption VulnerabilityAdobe · Flash PlayerKEVPublic exploitEnd of lifeCritical · 9.8T1499.004Application or System Exploitation2 reportsMITRE CTID mapping of the KEV entry · primary impact73.9%Top 0.52%60.9priority
- CVE-2020-9818Apple iOS, iPadOS, and watchOS Out-of-Bounds Write VulnerabilityApple · iOS, iPadOS, and watchOSKEVHigh · 8.8T1204.001Malicious LinkT1499.004Application or System ExploitationAI mapping from the description · primary impact2.3%Top 16%60.9priority
- CVE-2017-12319Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service VulnerabilityCisco · IOS XE SoftwareKEVMedium · 5.9T1190Exploit Public-Facing ApplicationT1499.004Application or System ExploitationAI mapping from the description · primary impact5.2%Top 7.5%60.6priority
- CVE-2018-0161Cisco IOS Software Resource Management Errors VulnerabilityCisco · IOS SoftwareKEVMedium · 6.3T1190Exploit Public-Facing ApplicationT1499.004Application or System ExploitationAI mapping from the description · primary impact4.1%Top 9.2%60.6priority
- CVE-2018-0180Cisco IOS Software Denial-of-Service VulnerabilityCisco · IOS SoftwareKEVMedium · 5.9T1190Exploit Public-Facing ApplicationT1499.004Application or System ExploitationAI mapping from the description · primary impact4.9%Top 7.9%60.6priority
- CVE-2009-2055Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service VulnerabilityCisco · IOS XRKEVMedium · 5.9T1190Exploit Public-Facing ApplicationT1499.004Application or System ExploitationAI mapping from the description · primary impact3.3%Top 11%59.8priority
- CVE-2021-27562Arm Trusted Firmware Out-of-Bounds Write VulnerabilityArm · Trusted FirmwareKEVMedium · 5.5T1068Exploitation for Privilege EscalationT1499.004Application or System ExploitationAI mapping from the description · primary impact3.1%Top 12%59.4priority
- CVE-2025-43520Apple Multiple Products Classic Buffer Overflow VulnerabilityApple · Multiple ProductsKEVPublic exploitMedium · 5.5T1204.002Malicious FileT1068Exploitation for Privilege Escalation+1 moreAI mapping from the description · primary impact0.4%Top 63%59.2priority
- CVE-2017-12232Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service VulnerabilityCisco · IOS softwareKEVMedium · 6.5T1190Exploit Public-Facing ApplicationT1499.004Application or System ExploitationAI mapping from the description · primary impact2.2%Top 18%59.0priority
- CVE-2017-6663Cisco IOS Software and Cisco IOS XE Software Denial-of-Service VulnerabilityCisco · IOS and IOS XE SoftwareKEVMedium · 6.5T1210Exploitation of Remote ServicesT1499.004Application or System ExploitationAI mapping from the description · primary impact2.1%Top 18%58.9priority
- CVE-2013-3897Microsoft Internet Explorer Use-After-Free VulnerabilityMicrosoft · Internet ExplorerKEVPublic exploitEnd of lifeHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter+1 moreAI mapping from the description · primary impact77.3%Top 0.44%54.1priority
- CVE-2015-2502Microsoft Internet Explorer Memory Corruption VulnerabilityMicrosoft · Internet ExplorerKEVPublic exploitEnd of lifeHigh · 8.8T1203Exploitation for Client ExecutionT1499.004Application or System ExploitationAI mapping from the description · primary impact51.0%Top 1.1%53.9priority
- CVE-2021-25370Samsung Mobile Devices Memory Corruption VulnerabilitySamsung · Mobile DevicesKEVMedium · 4.4T1068Exploitation for Privilege EscalationT1499.004Application or System ExploitationAI mapping from the description · primary impact0.9%Top 41%52.9priority
- CVE-2021-25489Samsung Mobile Devices Improper Input Validation VulnerabilitySamsung · Mobile DevicesKEVMedium · 5.5T1068Exploitation for Privilege EscalationT1499.004Application or System ExploitationAI mapping from the description · primary impact0.5%Top 55%50.8priority
- CVE-2015-5123Adobe Flash Player Use-After-Free VulnerabilityAdobe · Flash PlayerKEVEnd of lifeCritical · 9.8T1059Command and Scripting InterpreterT1499.004Application or System ExploitationAI mapping from the description · primary impact18.8%Top 2.7%49.3priority
- CVE-2017-0149Microsoft Internet Explorer Memory Corruption VulnerabilityMicrosoft · Internet ExplorerKEVEnd of lifeHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution+1 moreAI mapping from the description · primary impact29.2%Top 1.8%48.8priority
- CVE-2019-15276Cisco Wireless LAN Controller HTTP Parsing Engine Denial of Service VulnerabilityCisco · Cisco Wireless LAN Controller (WLC)Public exploitHigh · 7.7T1190Exploit Public-Facing ApplicationT1566Phishing+1 moreMITRE CTID mapping of the CVE · primary impact46.3%Top 1.2%30.2priority
- CVE-2020-3198Cisco IOS Software for Cisco Industrial Routers Arbitrary Code Execution VulnerabilitiesCisco · Cisco IOS 12.2(60)EZ16Critical · 9.8T1133External Remote ServicesT1190Exploit Public-Facing Application+3 moreMITRE CTID mapping of the CVE · primary impact4.6%Top 8.4%25.2priority
- CVE-2018-8353A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in…MITRE CTID mapping of the CVE · primary impact67.3%Top 0.7%24.9priority
- CVE-2018-8355A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft…MITRE CTID mapping of the CVE · primary impact67.9%Top 0.68%24.9priority
- CVE-2022-22719mod_lua Use of uninitialized value of in r:parsebodyApache Software Foundation · Apache HTTP ServerT1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation1 reportAI mapping from the description · primary impact69.1%Top 0.65%24.8priority
- CVE-2019-1118A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite…MITRE CTID mapping of the CVE · primary impact23.6%Top 2.2%24.6priority
- CVE-2020-11019Out of bound read in update_recv in FreeRDPFreeRDP · FreeRDPPublic exploitMedium · 4.3T1211Exploitation for StealthT1005Data from Local System+1 moreMITRE CTID mapping of the CVE · primary impact2.3%Top 17%24.6priority
- CVE-2020-16874Visual Studio Remote Code Execution VulnerabilityMicrosoft · Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)High · 7.8T1204.002Malicious FileT1574Hijack Execution Flow+5 moreMITRE CTID mapping of the CVE · primary impact4.3%Top 8.9%24.4priority
- CVE-2020-1569Microsoft Edge Memory Corruption VulnerabilityMITRE CTID mapping of the CVE · primary impact3.0%Top 13%23.6priority
- CVE-2020-3292Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution VulnerabilitiesCisco · Cisco Small Business RV Series Router FirmwareHigh · 7.2T1078Valid AccountsT1190Exploit Public-Facing Application+2 moreMITRE CTID mapping of the CVE · primary impact3.2%Top 12%22.7priority
- CVE-2020-11090Uncontrolled Resource Consumption in Indy NodeMITRE CTID mapping of the CVE · primary impact2.2%Top 18%21.7priority
- CVE-2020-3397Cisco NX-OS Software Border Gateway Protocol Multicast VPN Denial of Service VulnerabilityCisco · Cisco NX-OS SoftwareHigh · 8.6T1190Exploit Public-Facing ApplicationT1499.004Application or System ExploitationMITRE CTID mapping of the CVE · primary impact1.8%Top 21%21.7priority
- CVE-2020-3407Cisco IOS XE Software RESTCONF and NETCONF-YANG Access Control List Denial of Service VulnerabilityCisco · Cisco IOS XE SoftwareHigh · 8.6T1190Exploit Public-Facing ApplicationT1499.004Application or System ExploitationMITRE CTID mapping of the CVE · primary impact1.5%Top 26%20.9priority
- CVE-2020-3510Cisco IOS XE Software for Catalyst 9200 Series Switches Umbrella Connector Denial of Service VulnerabilityCisco · Cisco IOS XE SoftwareHigh · 8.6T1190Exploit Public-Facing ApplicationT1499.004Application or System ExploitationMITRE CTID mapping of the CVE · primary impact1.4%Top 28%20.4priority
- CVE-2019-0609A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft…MITRE CTID mapping of the CVE · primary impact9.8%Top 4.4%19.8priority
- CVE-2019-6538Medtronic Conexus Radio Frequency Telemetry Protocol Improper Access ControlMedtronic · Conexus Radio Frequency Telemetry ProtocolCritical · 9.3T1574Hijack Execution FlowT1557Adversary-in-the-Middle+2 moreMITRE CTID mapping of the CVE · primary impact0.9%Top 40%19.8priority
- CVE-2020-1425A remoted code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in…Microsoft · Windows 10 Version 2004 for x64-based SystemsT1574Hijack Execution FlowT1499.004Application or System ExploitationMITRE CTID mapping of the CVE · primary impact9.3%Top 4.6%19.8priority
- CVE-2019-1052Chakra Scripting Engine Memory Corruption VulnerabilityMicrosoft · Microsoft Edge (EdgeHTML-based)Medium · 4.2T1189Drive-by CompromiseT1203Exploitation for Client Execution+2 moreMITRE CTID mapping of the CVE · primary impact2.4%Top 16%19.7priority
- CVE-2019-15289Cisco TelePresence Collaboration Endpoint and RoomOS Software Denial of Service VulnerabilitiesCisco · Cisco TelePresence TC SoftwareHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System ExploitationMITRE CTID mapping of the CVE · primary impact1.4%Top 28%19.6priority
- CVE-2018-8248A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle…MITRE CTID mapping of the CVE · primary impact21.4%Top 2.4%19.5priority
- CVE-2018-8110A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft…MITRE CTID mapping of the CVE · primary impact16.9%Top 2.9%19.4priority
- CVE-2018-8111A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft…MITRE CTID mapping of the CVE · primary impact16.9%Top 2.9%19.4priority
- CVE-2019-0576A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in…MITRE CTID mapping of the CVE · primary impact17.0%Top 2.9%19.4priority
- CVE-2019-1035Microsoft Word Remote Code Execution VulnerabilityMicrosoft · Microsoft SharePoint Server 2019T1203Exploitation for Client ExecutionT1204.002Malicious File+2 moreMITRE CTID mapping of the CVE · primary impact6.6%Top 6.2%19.4priority
- CVE-2018-10636CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has multiple stack-based buffer overflow…ICS-CERT · CNCSoft with ScreenEditorT1574Hijack Execution FlowT1068Exploitation for Privilege Escalation+1 moreMITRE CTID mapping of the CVE · primary impact9.4%Top 4.6%19.1priority
- CVE-2019-0911A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft…MITRE CTID mapping of the CVE · primary impact9.1%Top 4.7%19.1priority
- CVE-2019-1106A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in…MITRE CTID mapping of the CVE · primary impact9.2%Top 4.7%19.1priority
- CVE-2019-0926A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft…MITRE CTID mapping of the CVE · primary impact8.1%Top 5.2%19.0priority
- CVE-2020-11039Integer Overflow in FreeRDPMITRE CTID mapping of the CVE · primary impact1.1%Top 34%18.9priority
- CVE-2020-1495Microsoft Excel Remote Code Execution VulnerabilityMicrosoft · Microsoft SharePoint Server 2010 Service Pack 2T1566PhishingT1204.002Malicious File+6 moreMITRE CTID mapping of the CVE · primary impact4.2%Top 9%18.9priority
- CVE-2020-4068Heap-based Buffer Overflow in APNSwiftkylebrowning · APNSwiftMedium · 6.3T1091Replication Through Removable MediaT1133External Remote Services+4 moreMITRE CTID mapping of the CVE · primary impact1.3%Top 29%18.6priority
- CVE-2018-7499In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard…MITRE CTID mapping of the CVE · primary impact3.7%Top 10%18.0priority
- CVE-2020-1109Windows Update Stack Elevation of Privilege VulnerabilityMITRE CTID mapping of the CVE · primary impact1.0%Top 37%18.0priority
- CVE-2019-1594Cisco NX-OS Software 802.1X Extensible Authentication Protocol over LAN Denial of Service VulnerabilityCisco · Nexus 1000V Switch for VMware vSphereHigh · 7.4T1190Exploit Public-Facing ApplicationT1499.004Application or System ExploitationMITRE CTID mapping of the CVE · primary impact0.8%Top 43%17.9priority
- CVE-2018-18987VT-Designer Version 2.1.7.31 is vulnerable by the program populating objects with user supplied input via a file…MITRE CTID mapping of the CVE · follow-on activity3.2%Top 12%17.6priority
- CVE-2018-7494WPLSoft in Delta Electronics versions 2.45.0 and prior utilizes a fixed length stack buffer where a value larger than…ICS-CERT · Delta Electronics WPLSoftT1574Hijack Execution FlowT1499.004Application or System ExploitationMITRE CTID mapping of the CVE · primary impact2.7%Top 14%17.2priority
- CVE-2018-14809Fuji Electric V-Server 4.0.3.0 and prior, A use after free vulnerability has been identified, which may allow remote…MITRE CTID mapping of the CVE · primary impact2.7%Top 14%17.1priority
- CVE-2020-15208Data corruption in tensorflow-litetensorflow · tensorflowHigh · 7.4T1574Hijack Execution FlowT1499.004Application or System ExploitationMITRE CTID mapping of the CVE · primary impact0.9%Top 40%17.1priority
- CVE-2019-6522Moxa IKS and EDS fails to properly check array bounds which may allow an attacker to read device memory on arbitrary…MITRE CTID mapping of the CVE · primary impact2.5%Top 15%17.0priority
- CVE-2020-12038Products that use EDS Subsystem: Version 28.0.1 and prior (FactoryTalk Linx software (Previously called RSLinx…MITRE CTID mapping of the CVE · primary impact2.6%Top 15%17.0priority
- CVE-2020-11044Double Free in FreeRDPMITRE CTID mapping of the CVE · primary impact1.7%Top 23%16.9priority
- CVE-2018-11048Dell EMC Data Protection Advisor, versions 6.2, 6,3, 6.4, 6.5 and Dell EMC Integrated Data Protection Appliance (IDPA)…Dell EMC · Data Protection AdvisorT1133External Remote ServicesT1059Command and Scripting Interpreter+2 moreMITRE CTID mapping of the CVE · follow-on activity2.1%Top 19%16.3priority
- CVE-2020-11068Potential Buffer Overflow in LoRaMac-nodeLoRa · LoRaMac-nodeMedium · 5.0T1574Hijack Execution FlowT1499.004Application or System ExploitationMITRE CTID mapping of the CVE · primary impact0.9%Top 40%15.5priority
- CVE-2020-15199Denial of Service in Tensorflowtensorflow · tensorflowMedium · 5.9T1574Hijack Execution FlowT1499.004Application or System ExploitationMITRE CTID mapping of the CVE · primary impact0.8%Top 43%15.5priority
- CVE-2019-1746Cisco IOS and IOS XE Software Cluster Management Protocol Denial of Service VulnerabilityCisco · Cisco IOS and IOS XE SoftwareHigh · 7.4T1190Exploit Public-Facing ApplicationT1499.004Application or System ExploitationMITRE CTID mapping of the CVE · primary impact0.6%Top 49%15.3priority
- CVE-2020-0671An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka…MITRE CTID mapping of the CVE · primary impact1.4%Top 28%15.0priority
- CVE-2020-5210NetHack command line -w option parsing is subject to a buffer overflowMITRE CTID mapping of the CVE · primary impact0.8%Top 43%14.8priority
- CVE-2020-3409Cisco IOS and IOS XE Software PROFINET Denial of Service VulnerabilityCisco · Cisco IOSHigh · 7.4T1190Exploit Public-Facing ApplicationT1499.004Application or System ExploitationMITRE CTID mapping of the CVE · primary impact0.5%Top 55%14.2priority
- CVE-2018-10610An out-of-bounds vulnerability in LeviStudioU, Versions 1.8.29 and 1.8.44 can be exploited when the application…WECON Technology Co., Ltd · LeviStudioUT1574Hijack Execution FlowT1557Adversary-in-the-Middle+2 moreMITRE CTID mapping of the CVE · primary impact1.1%Top 34%13.2priority
- CVE-2019-10980A type confusion vulnerability may be exploited when LAquis SCADA 4.3.1.71 processes a specially crafted project fileMITRE CTID mapping of the CVE · primary impact1.0%Top 37%12.6priority
- CVE-2020-3322Cisco Webex Network Recording Player and Cisco Webex Player Denial of Service VulnerabilityMITRE CTID mapping of the CVE · primary impact0.7%Top 49%12.6priority
- CVE-2020-0898An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in…MITRE CTID mapping of the CVE · primary impact0.9%Top 41%11.8priority
- CVE-2020-10602In OSIsoft PI System multiple products and versions, an authenticated remote attacker could crash PI Network Manager…MITRE CTID mapping of the CVE · primary impact0.9%Top 41%11.8priority
- CVE-2020-5253Privilege escalation in NetHackMITRE CTID mapping of the CVE · primary impact0.5%Top 54%11.8priority
- CVE-2018-15392Cisco Industrial Network Director DHCP Request Processing Denial of Service VulnerabilityCisco · Cisco Industrial Network DirectorT1190Exploit Public-Facing ApplicationT1499.004Application or System ExploitationMITRE CTID mapping of the CVE · primary impact0.4%Top 61%7.8priority
- CVE-2020-15137Integer overflow in HoRNDISMITRE CTID mapping of the CVE · primary impact0.3%Top 81%7.7priority
- CVE-2020-15100Uncontrolled Resource Consumption in freewvsMITRE CTID mapping of the CVE · primary impact0.3%Top 73%7.4priority
- CVE-2018-15376Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers Arbitrary Memory Write VulnerabilitiesMITRE CTID mapping of the CVE · primary impact0.3%Top 74%5.2priority