Vulnerabilityhigh
You can’t be invulnerable, but you can be well protected
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2012-0158 | Remote Code Execution in Microsoft MSCOMCTL.OCX (Windows Common Controls) | — | 100% | KEVRansomware | — KEV |
| CVE-2014-6332 | Remote Code Execution via Array Bounds Flaw in Microsoft Windows OLE Automation | — | 95% | KEV | — KEV |
| CVE-2015-0310 | ASLR Protection-Mechanism Bypass in Adobe Flash Player | — | 15% | KEV | — KEV |
| CVE-2015-0311 | Use-After-Free Remote Code Execution in Adobe Flash Player | — | 86% | KEV | — KEV |
| CVE-2015-0313 | Use-After-Free Remote Code Execution in Adobe Flash Player | — | 95% | KEV | — KEV |
| CVE-2015-1701 | Local Privilege Escalation in Microsoft Windows Win32k.sys Kernel-Mode Driver | — | 56% | KEVRansomware | — KEV |
| CVE-2015-2419 | Memory Corruption RCE in Microsoft Internet Explorer JScript Engine | — | 53% | KEV | — KEV |
| CVE-2015-3113 | Heap-Based Buffer Overflow RCE in Adobe Flash Player | — | 100% | KEV | — KEV |
| CVE-2015-5119 | Use-After-Free RCE in Adobe Flash Player (ActionScript 3 ByteArray) | — | 99% | KEV | — KEV |
| CVE-2015-5122 | Use-After-Free RCE in Adobe Flash Player AS3 DisplayObject | — | 87% | KEV | — KEV |
| CVE-2015-7645 | Arbitrary Code Execution in Adobe Flash Player via Crafted SWF Files | — | 65% | KEVRansomware | — KEV |
From the original article
9 min read at securelist.com
Software vulnerabilities are one of those problems that potentially affect all users. A vulnerability is a fault in a program’s implementation that can be used by attackers to gain unauthorized access to data, inject malicious code or put a system out of operation. In most cases, vulnerabilities arise from a lack of attention to fine details at the design stage rather than programming errors.
By @Securelist · securelist.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.