KEV 2017

SAP NetWeaver — SAP NetWeaver Directory Traversal Vulnerability

Linux Kernel — Linux Kernel PIE Stack Buffer Corruption Vulnerability

Oracle WebLogic Server — Oracle WebLogic Server OS Command Injection Vulnerability

Zyxel EMG2926 Routers — Zyxel EMG2926 Routers Command Injection Vulnerability

Cisco IOS and IOS XE Software — Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

NETGEAR Multiple Devices — NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability

Google Chromium V8 — Google Chromium V8 Memory Corruption Vulnerability

Google Chromium V8 — Google Chromium V8 Type Confusion Vulnerability

Microsoft Internet Explorer — Microsoft Internet Explorer Memory Corruption Vulnerability

Microsoft Internet Explorer — Microsoft Internet Explorer Privilege Escalation Vulnerability

Microsoft Windows — Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability

Artifex Ghostscript — Artifex Ghostscript Type Confusion Vulnerability

Microsoft SMBv1 server — Microsoft Windows SMBv1 Information Disclosure Vulnerability

Microsoft SMBv1 server — Microsoft SMBv1 Server Remote Code Execution Vulnerability

Microsoft Windows — Microsoft Windows SMB Remote Code Execution Vulnerability

NETGEAR DGN2200 Devices — NETGEAR DGN2200 Devices OS Command Injection Vulnerability

Adobe Flash Player — Adobe Flash Player Type Confusion Vulnerability

Cisco IOS and IOS XE Software — Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

Cisco IOS and IOS XE Software — Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

Cisco IOS and IOS XE Software — Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

Cisco IOS and IOS XE Software — Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

Cisco IOS and IOS XE Software — Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

Cisco IOS and IOS XE Software — Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

Cisco IOS software — Cisco IOS Software SNMP Remote Code Execution Vulnerability

Microsoft Edge and Internet Explorer — Microsoft Edge and Internet Explorer Type Confusion Vulnerability

Apache Tomcat — Apache Tomcat on Windows Remote Code Execution Vulnerability

Apache Tomcat — Apache Tomcat Remote Code Execution Vulnerability

Microsoft Windows — Microsoft Windows Transaction Manager Privilege Escalation Vulnerability

Microsoft Graphics Device Interface (GDI) — Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability

Microsoft Office — Microsoft Office Use-After-Free Vulnerability

Microsoft Office — Microsoft Office Remote Code Execution Vulnerability

Microsoft Malware Protection Engine — Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability

Cisco IOS software — Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability

Cisco IOS software — Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability

Cisco IOS software — Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability

Cisco IOS software — Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability

Cisco IOS and IOS XE Software — Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability

Cisco IOS and IOS XE Software — Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability

Microsoft Windows — Microsoft Windows Privilege Escalation Vulnerability

Microsoft Internet Explorer — Microsoft Internet Explorer Remote Code Execution Vulnerability

Microsoft SMBv1 'EternalBlue' — NSA-Developed SMBv1 Buffer Overflow Used in WannaCry and NotPetya

Microsoft SMBv1 — Microsoft SMBv1 Remote Code Execution Vulnerability

Microsoft Windows — Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability

Microsoft Office — Microsoft Office Remote Code Execution Vulnerability

Microsoft Office — Microsoft Office Remote Code Execution Vulnerability

Microsoft Win32k — Microsoft Win32k Privilege Escalation Vulnerability

Oracle WebLogic Server — Oracle Corporation WebLogic Server Remote Code Execution Vulnerability

Embedthis GoAhead — Embedthis GoAhead Remote Code Execution Vulnerability

Microsoft Windows — Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability

Symantec Symantec Messaging Gateway — Symantec Messaging Gateway Remote Code Execution Vulnerability

DotNetNuke (DNN) DotNetNuke (DNN) — DotNetNuke (DNN) Remote Code Execution Vulnerability

Apache Struts — Apache Struts Deserialization of Untrusted Data Vulnerability

Microsoft Office and WordPad — Microsoft Office and WordPad Remote Code Execution Vulnerability

Microsoft Office — Microsoft Office Outlook Security Feature Bypass Vulnerability

Microsoft Office — Microsoft Office Memory Corruption Vulnerability

Roundcube Roundcube Webmail — Roundcube Webmail File Disclosure Vulnerability

Microsoft .NET Framework — Microsoft .NET Framework Remote Code Execution Vulnerability