KEV 2009 — CISA Known Exploited Vulnerabilities

phpMyAdmin phpMyAdmin — phpMyAdmin Remote Code Execution Vulnerability

CVSS 9.8

Microsoft Excel — Remote Code Execution via Invalid Object Access (17-Year-Old Zero-Day)

CVSS 8.8

Microsoft Office — Microsoft Office PowerPoint Code Injection Vulnerability

CVSS 8.8

Adobe Acrobat and Reader — Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability

CVSS 8.8

Adobe Reader and Acrobat — Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability

CVSS 8.8

Microsoft Office — Microsoft Office Object Record Corruption Vulnerability

CVSS 7.8

Microsoft Office — Microsoft Office Buffer Overflow Vulnerability

CVSS 7.8

Adobe Acrobat and Reader, Flash Player — Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability

CVSS 7.8

Adobe Acrobat and Reader — Adobe Acrobat and Reader Use-After-Free Vulnerability

CVSS 7.8

Microsoft Windows — Microsoft Windows Improper Input Validation Vulnerability

CVSS 7.8

Microsoft Excel — Microsoft Excel Featheader Record Memory Corruption Vulnerability

CVSS 7.8

Adobe BlazeDS — Adobe BlazeDS Information Disclosure Vulnerability

CVSS 6.5

Cisco IOS XR — Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability

CVSS 5.9