This dashboard displays the latest vulnerabilities published by the Cybersecurity & Infrastructure Security Agency (CISA).
CVE-2012-1856
Vendor: Microsoft
Product: Office
Added: 2022-03-03
Due Date: 2022-03-24
Description:
The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office allows remote attackers to execute arbitrary code via a crafted (1) document or (2) web page that triggers system-state corruption.
Required Action:
Apply updates per vendor instructions.
CWEs:
CVE-2012-1723
Vendor: Oracle
Product: Java SE
Added: 2022-03-03
Due Date: 2022-03-24
Description:
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to Hotspot.
Required Action:
Apply updates per vendor instructions.
CVE-2012-1535
Vendor: Adobe
Product: Flash Player
Added: 2022-03-03
Due Date: 2022-03-24
Description:
Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute arbitrary code or cause a denial of service via crafted SWF content.
Required Action:
The impacted product is end-of-life and should be disconnected if still in use.
CVE-2012-0507
Vendor: Oracle
Product: Java SE
Added: 2022-03-03
Due Date: 2022-03-24
Description:
An incorrect type vulnerability exists in the Concurrency component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code.
Required Action:
Apply updates per vendor instructions.
CVE-2011-3544
Vendor: Oracle
Product: Java SE JDK and JRE
Added: 2022-03-03
Due Date: 2022-03-24
Description:
An access control vulnerability exists in the Applet Rhino Script Engine component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code.
Required Action:
Apply updates per vendor instructions.
CVE-2011-1889
Vendor: Microsoft
Product: Forefront Threat Management Gateway (TMG)
Added: 2022-03-03
Due Date: 2022-03-24
Description:
A remote code execution vulnerability exists in the Forefront Threat Management Gateway (TMG) Firewall Client Winsock provider that could allow code execution in the security context of the client application.
Required Action:
Apply updates per vendor instructions.
CWEs:
CVE-2011-0611
Vendor: Adobe
Product: Flash Player
Added: 2022-03-03
Due Date: 2022-03-24
Description:
Adobe Flash Player contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content.
Required Action:
The impacted product is end-of-life and should be disconnected if still in use.
CWEs:
CVE-2010-3333
Vendor: Microsoft
Product: Office
Added: 2022-03-03
Due Date: 2022-03-24
Description:
A stack-based buffer overflow vulnerability exists in the parsing of RTF data in Microsoft Office and earlier allows an attacker to perform remote code execution.
Required Action:
Apply updates per vendor instructions.
CWEs:
CVE-2010-0232
Vendor: Microsoft
Product: Windows
Added: 2022-03-03
Due Date: 2022-03-24
Description:
The kernel in Microsoft Windows, when access to 16-bit applications is enabled on a 32-bit x86 platform, does not properly validate certain BIOS calls, which allows local users to gain privileges.
Required Action:
Apply updates per vendor instructions.
CWEs:
CVE-2010-0188
Vendor: Adobe
Product: Reader and Acrobat
Added: 2022-03-03
Due Date: 2022-03-24
Description:
Unspecified vulnerability in Adobe Reader and Acrobat allows attackers to cause a denial of service or possibly execute arbitrary code.
Required Action:
Apply updates per vendor instructions.
CWEs:
CVE-2009-3129
Vendor: Microsoft
Product: Excel
Added: 2022-03-03
Due Date: 2022-03-24
Description:
Microsoft Office Excel allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset.
Required Action:
Apply updates per vendor instructions.
CWEs:
CVE-2009-1123
Vendor: Microsoft
Product: Windows
Added: 2022-03-03
Due Date: 2022-03-24
Description:
The kernel in Microsoft Windows does not properly validate changes to unspecified kernel objects, which allows local users to gain privileges via a crafted application.
Required Action:
Apply updates per vendor instructions.
CWEs:
CVE-2008-3431
Vendor: Oracle
Product: VirtualBox
Added: 2022-03-03
Due Date: 2022-03-24
Description:
An input validation vulnerability exists in the VBoxDrv.sys driver of Sun xVM VirtualBox which allows attackers to locally execute arbitrary code.
Required Action:
Apply updates per vendor instructions.
CWEs:
CVE-2008-2992
Vendor: Adobe
Product: Acrobat and Reader
Added: 2022-03-03
Due Date: 2022-03-24
Description:
Adobe Acrobat and Reader contain an input validation issue in a JavaScript method that could potentially lead to remote code execution.
Required Action:
Apply updates per vendor instructions.
CWEs:
CVE-2004-0210
Vendor: Microsoft
Product: Windows
Added: 2022-03-03
Due Date: 2022-03-24
Description:
A privilege elevation vulnerability exists in the POSIX subsystem. This vulnerability could allow a logged on user to take complete control of the system.
Required Action:
Apply updates per vendor instructions.
CWEs: