auren-research/cyber-sec huggingface dataset:
cveID: CVE-2015-5119
vendorProject: Adobe
product: Flash Player
vulnerabilityName: Adobe Flash Player Use-After-Free Vulnerability
dateAdded: 2022-03-03
shortDescription: A use-after-free vulnerability exists within the ActionScript 3 ByteArray class in Adobe Flash Player that allows an attacker to perform remote code execution.
requiredAction: The impacted product is end-of-life and should be disconnected if still in use.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2015-5119
cwes: CWE-119
cveID: CVE-2015-4902
vendorProject: Oracle
product: Java SE
vulnerabilityName: Oracle Java SE Integrity Check Vulnerability
dateAdded: 2022-03-03
shortDescription: Unspecified vulnerability in Oracle Java SE allows remote attackers to affect integrity via Unknown vectors related to deployment.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2015-4902
cveID: CVE-2015-3043
vendorProject: Adobe
product: Flash Player
vulnerabilityName: Adobe Flash Player Memory Corruption Vulnerability
dateAdded: 2022-03-03
shortDescription: A memory corruption vulnerability exists in Adobe Flash Player that allows an attacker to perform remote code execution.
requiredAction: The impacted product is end-of-life and should be disconnected if still in use.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2015-3043
cwes: CWE-787
cveID: CVE-2015-2590
vendorProject: Oracle
product: Java SE
vulnerabilityName: Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability
dateAdded: 2022-03-03
shortDescription: An unspecified vulnerability exists within Oracle Java Runtime Environment that allows an attacker to perform remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2015-2590
cveID: CVE-2015-2545
vendorProject: Microsoft
product: Office
vulnerabilityName: Microsoft Office Malformed EPS File Vulnerability
dateAdded: 2022-03-03
shortDescription: Microsoft Office allows remote attackers to execute arbitrary code via a crafted EPS image.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2015-2545
cwes: CWE-20
cveID: CVE-2015-2424
vendorProject: Microsoft
product: PowerPoint
vulnerabilityName: Microsoft PowerPoint Memory Corruption Vulnerability
dateAdded: 2022-03-03
shortDescription: Microsoft PowerPoint allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2015-2424
cwes: CWE-119
cveID: CVE-2015-2387
vendorProject: Microsoft
product: ATM Font Driver
vulnerabilityName: Microsoft ATM Font Driver Privilege Escalation Vulnerability
dateAdded: 2022-03-03
shortDescription: ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server allows local users to gain privileges via a crafted application.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2015-2387
cwes: CWE-264
cveID: CVE-2015-1701
vendorProject: Microsoft
product: Win32k
vulnerabilityName: Microsoft Win32k Privilege Escalation Vulnerability
dateAdded: 2022-03-03
shortDescription: An unspecified vulnerability exists in the Win32k.sys kernel-mode driver in Microsoft Windows Server that allows a local attacker to execute arbitrary code with elevated privileges.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2015-1701
cwes: CWE-264
cveID: CVE-2015-1642
vendorProject: Microsoft
product: Office
vulnerabilityName: Microsoft Office Memory Corruption Vulnerability
dateAdded: 2022-03-03
shortDescription: Microsoft Office contains a memory corruption vulnerability that allows remote attackers to execute arbitrary code via a crafted document.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2015-1642
cwes: CWE-119
cveID: CVE-2014-4114
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability
dateAdded: 2022-03-03
shortDescription: A vulnerability exists in Windows Object Linking & Embedding (OLE) that could allow remote code execution if a user opens a file that contains a specially crafted OLE object.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2014-4114
cwes: CWE-20
cveID: CVE-2014-0496
vendorProject: Adobe
product: Reader and Acrobat
vulnerabilityName: Adobe Reader and Acrobat Use-After-Free Vulnerability
dateAdded: 2022-03-03
shortDescription: Adobe Reader and Acrobat contain a use-after-free vulnerability which can allow for code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2014-0496
cwes: CWE-399
cveID: CVE-2013-5065
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Kernel Privilege Escalation Vulnerability
dateAdded: 2022-03-03
shortDescription: Microsoft Windows NDProxy.sys in the kernel contains an improper input validation vulnerability which can allow a local attacker to escalate privileges.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2013-5065
cwes: CWE-20
cveID: CVE-2013-3897
vendorProject: Microsoft
product: Internet Explorer
vulnerabilityName: Microsoft Internet Explorer Use-After-Free Vulnerability
dateAdded: 2022-03-03
shortDescription: A use-after-free vulnerability exists within CDisplayPointer in Microsoft Internet Explorer that allows an attacker to remotely execute arbitrary code.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2013-3897
cwes: CWE-399
cveID: CVE-2013-3346
vendorProject: Adobe
product: Reader and Acrobat
vulnerabilityName: Adobe Reader and Acrobat Memory Corruption Vulnerability
dateAdded: 2022-03-03
shortDescription: Adobe Reader and Acrobat contain a memory corruption vulnerability which can allow attackers to execute arbitrary code or cause a denial of service.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2013-3346
cwes: CWE-119
cveID: CVE-2013-1675
vendorProject: Mozilla
product: Firefox
vulnerabilityName: Mozilla Firefox Information Disclosure Vulnerability
dateAdded: 2022-03-03
shortDescription: Mozilla Firefox does not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2013-1675
cwes: CWE-119
cveID: CVE-2013-1347
vendorProject: Microsoft
product: Internet Explorer
vulnerabilityName: Microsoft Internet Explorer Remote Code Execution Vulnerability
dateAdded: 2022-03-03
shortDescription: This vulnerability may corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user within Internet Explorer.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2013-1347
cwes: CWE-94
cveID: CVE-2013-0641
vendorProject: Adobe
product: Reader
vulnerabilityName: Adobe Reader Buffer Overflow Vulnerability
dateAdded: 2022-03-03
shortDescription: A buffer overflow vulnerability exists in Adobe Reader which allows an attacker to perform remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2013-0641
cwes: CWE-120
cveID: CVE-2013-0640
vendorProject: Adobe
product: Reader and Acrobat
vulnerabilityName: Adobe Reader and Acrobat Memory Corruption Vulnerability
dateAdded: 2022-03-03
shortDescription: An memory corruption vulnerability exists in the acroform.dll in Adobe Reader that allows an attacker to perform remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2013-0640
cwes: CWE-787
cveID: CVE-2013-0632
vendorProject: Adobe
product: ColdFusion
vulnerabilityName: Adobe ColdFusion Authentication Bypass Vulnerability
dateAdded: 2022-03-03
shortDescription: An authentication bypass vulnerability exists in Adobe ColdFusion which could result in an unauthorized user gaining administrative access.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2013-0632
cwes: CWE-200
cveID: CVE-2012-4681
vendorProject: Oracle
product: Java SE
vulnerabilityName: Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
dateAdded: 2022-03-03
shortDescription: The Java Runtime Environment (JRE) component in Oracle Java SE allow for remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2012-4681
cveID: CVE-2012-1856
vendorProject: Microsoft
product: Office
vulnerabilityName: Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability
dateAdded: 2022-03-03
shortDescription: The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office allows remote attackers to execute arbitrary code via a crafted (1) document or (2) web page that triggers system-state corruption.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2012-1856
cwes: CWE-94
cveID: CVE-2012-1723
vendorProject: Oracle
product: Java SE
vulnerabilityName: Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
dateAdded: 2022-03-03
shortDescription: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to Hotspot.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2012-1723
cveID: CVE-2012-1535
vendorProject: Adobe
product: Flash Player
vulnerabilityName: Adobe Flash Player Arbitrary Code Execution Vulnerability
dateAdded: 2022-03-03
shortDescription: Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute arbitrary code or cause a denial of service via crafted SWF content.
requiredAction: The impacted product is end-of-life and should be disconnected if still in use.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2012-1535
cveID: CVE-2012-0507
vendorProject: Oracle
product: Java SE
vulnerabilityName: Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
dateAdded: 2022-03-03
shortDescription: An incorrect type vulnerability exists in the Concurrency component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2012-0507
cveID: CVE-2011-3544
vendorProject: Oracle
product: Java SE JDK and JRE
vulnerabilityName: Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
dateAdded: 2022-03-03
shortDescription: An access control vulnerability exists in the Applet Rhino Script Engine component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2011-3544
cveID: CVE-2011-1889
vendorProject: Microsoft
product: Forefront Threat Management Gateway (TMG)
vulnerabilityName: Microsoft Forefront TMG Remote Code Execution Vulnerability
dateAdded: 2022-03-03
shortDescription: A remote code execution vulnerability exists in the Forefront Threat Management Gateway (TMG) Firewall Client Winsock provider that could allow code execution in the security context of the client application.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2011-1889
cwes: CWE-119
cveID: CVE-2011-0611
vendorProject: Adobe
product: Flash Player
vulnerabilityName: Adobe Flash Player Remote Code Execution Vulnerability
dateAdded: 2022-03-03
shortDescription: Adobe Flash Player contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content.
requiredAction: The impacted product is end-of-life and should be disconnected if still in use.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2011-0611
cwes: CWE-843
cveID: CVE-2010-3333
vendorProject: Microsoft
product: Office
vulnerabilityName: Microsoft Office Stack-based Buffer Overflow Vulnerability
dateAdded: 2022-03-03
shortDescription: A stack-based buffer overflow vulnerability exists in the parsing of RTF data in Microsoft Office and earlier allows an attacker to perform remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2010-3333
cwes: CWE-119
cveID: CVE-2010-0232
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Kernel Exception Handler Vulnerability
dateAdded: 2022-03-03
shortDescription: The kernel in Microsoft Windows, when access to 16-bit applications is enabled on a 32-bit x86 platform, does not properly validate certain BIOS calls, which allows local users to gain privileges.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2010-0232
cwes: CWE-264
cveID: CVE-2010-0188
vendorProject: Adobe
product: Reader and Acrobat
vulnerabilityName: Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability
dateAdded: 2022-03-03
shortDescription: Unspecified vulnerability in Adobe Reader and Acrobat allows attackers to cause a denial of service or possibly execute arbitrary code.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2010-0188
cwes: CWE-94
cveID: CVE-2009-3129
vendorProject: Microsoft
product: Excel
vulnerabilityName: Microsoft Excel Featheader Record Memory Corruption Vulnerability
dateAdded: 2022-03-03
shortDescription: Microsoft Office Excel allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2009-3129
cwes: CWE-94
cveID: CVE-2009-1123
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Improper Input Validation Vulnerability
dateAdded: 2022-03-03
shortDescription: The kernel in Microsoft Windows does not properly validate changes to unspecified kernel objects, which allows local users to gain privileges via a crafted application.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2009-1123
cwes: CWE-20
cveID: CVE-2008-3431
vendorProject: Oracle
product: VirtualBox
vulnerabilityName: Oracle VirtualBox Insufficient Input Validation Vulnerability
dateAdded: 2022-03-03
shortDescription: An input validation vulnerability exists in the VBoxDrv.sys driver of Sun xVM VirtualBox which allows attackers to locally execute arbitrary code.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2008-3431
cwes: CWE-264
cveID: CVE-2008-2992
vendorProject: Adobe
product: Acrobat and Reader
vulnerabilityName: Adobe Reader and Acrobat Input Validation Vulnerability
dateAdded: 2022-03-03
shortDescription: Adobe Acrobat and Reader contain an input validation issue in a JavaScript method that could potentially lead to remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2008-2992
cwes: CWE-119
cveID: CVE-2004-0210
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Privilege Escalation Vulnerability
dateAdded: 2022-03-03
shortDescription: A privilege elevation vulnerability exists in the POSIX subsystem. This vulnerability could allow a logged on user to take complete control of the system.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2004-0210
cwes: CWE-120
cveID: CVE-2002-0367
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Privilege Escalation Vulnerability
dateAdded: 2022-03-03
shortDescription: smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2002-0367
cveID: CVE-2022-24682
vendorProject: Synacor
product: Zimbra Collaborate Suite (ZCS)
vulnerabilityName: Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability
dateAdded: 2022-02-25
shortDescription: Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) vulnerability in the Calendar feature that allows an attacker to execute arbitrary code.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-11
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2022-24682
cwes: CWE-79
CWE-116
cveID: CVE-2017-8570
vendorProject: Microsoft
product: Office
vulnerabilityName: Microsoft Office Remote Code Execution Vulnerability
dateAdded: 2022-02-25
shortDescription: A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-08-25
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-8570
cveID: CVE-2017-0222
vendorProject: Microsoft
product: Internet Explorer
vulnerabilityName: Microsoft Internet Explorer Remote Code Execution Vulnerability
dateAdded: 2022-02-25
shortDescription: A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-08-25
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-0222
cwes: CWE-119
cveID: CVE-2014-6352
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Code Injection Vulnerability
dateAdded: 2022-02-25
shortDescription: Microsoft Windows allow remote attackers to execute arbitrary code via a crafted OLE object.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-08-25
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2014-6352
cwes: CWE-94
cveID: CVE-2022-23131
vendorProject: Zabbix
product: Frontend
vulnerabilityName: Zabbix Frontend Authentication Bypass Vulnerability
dateAdded: 2022-02-22
shortDescription: Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-08
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2022-23131
cwes: CWE-290
cveID: CVE-2022-23134
vendorProject: Zabbix
product: Frontend
vulnerabilityName: Zabbix Frontend Improper Access Control Vulnerability
dateAdded: 2022-02-22
shortDescription: Malicious actors can pass step checks and potentially change the configuration of Zabbix Frontend.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-08
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2022-23134
cwes: CWE-284
cveID: CVE-2022-24086
vendorProject: Adobe
product: Commerce and Magento Open Source
vulnerabilityName: Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability
dateAdded: 2022-02-15
shortDescription: Adobe Commerce and Magento Open Source contain an improper input validation vulnerability which can allow for arbitrary code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-01
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2022-24086
cwes: CWE-20
cveID: CVE-2022-0609
vendorProject: Google
product: Chromium Animation
vulnerabilityName: Google Chromium Animation Use-After-Free Vulnerability
dateAdded: 2022-02-15
shortDescription: Google Chromium Animation contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-01
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2022-0609
cwes: CWE-416
cveID: CVE-2019-0752
vendorProject: Microsoft
product: Internet Explorer
vulnerabilityName: Microsoft Internet Explorer Type Confusion Vulnerability
dateAdded: 2022-02-15
shortDescription: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-08-15
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2019-0752
cwes: CWE-843
cveID: CVE-2018-8174
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability
dateAdded: 2022-02-15
shortDescription: A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution"
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-08-15
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2018-8174
cwes: CWE-787
cveID: CVE-2018-20250
vendorProject: RARLAB
product: WinRAR
vulnerabilityName: WinRAR Absolute Path Traversal Vulnerability
dateAdded: 2022-02-15
shortDescription: WinRAR Absolute Path Traversal vulnerability leads to Remote Code Execution
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-08-15
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2018-20250
cwes: CWE-36