KEV 2018

Linux Kernel — Linux Kernel Integer Overflow Vulnerability

Sierra Wireless AirLink ALEOS — Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability

Microsoft Windows — Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability

Paessler PRTG Network Monitor — Paessler PRTG Network Monitor OS Command Injection Vulnerability

Microsoft Windows — Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability

Laravel Laravel Framework — Laravel Deserialization of Untrusted Data Vulnerability

TIBCO JasperReports — TIBCO JasperReports Server Information Disclosure Vulnerability

GIGABYTE Multiple Products — GIGABYTE Multiple Products Unspecified Vulnerability

GIGABYTE Multiple Products — GIGABYTE Multiple Products Privilege Escalation Vulnerability

GIGABYTE Multiple Products — GIGABYTE Multiple Products Code Execution Vulnerability

Google Chromium V8 — Google Chromium V8 Remote Code Execution Vulnerability

Google Chromium V8 — Google Chromium V8 Out-of-Bounds Write Vulnerability

Adobe Acrobat and Reader — Adobe Acrobat and Reader Double Free Vulnerability

Google Chromium V8 — Google Chromium V8 Integer Overflow Vulnerability

Apple Multiple Products — Apple Multiple Products Memory Corruption Vulnerability

QNAP Network Attached Storage (NAS) — QNAP NAS File Station Cross-Site Scripting Vulnerability

Microsoft Windows — Microsoft Windows Kernel Privilege Escalation Vulnerability

Adobe Flash Player — Adobe Flash Player Stack-based Buffer Overflow Vulnerability

Microsoft Win32k — Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Windows — Microsoft Windows Shell Remote Code Execution Vulnerability

Cisco IOS, XR, and XE Software — Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability

Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches — Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability

Cisco IOS Software and Cisco IOS XE Software — Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability

Cisco IOS and IOS XE Software — Cisco IOS and IOS XE Software Improper Input Validation Vulnerability

Cisco IOS and IOS XE Software — Cisco IOS and IOS XE Software Improper Input Validation Vulnerability

Cisco IOS XE Software — Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability

VMware SD-WAN Edge — VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability

Cisco IOS, XR, and XE Software — Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability

Microsoft DirectX Graphics Kernel (DXGKRNL) — Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability

Microsoft DirectX Graphics Kernel (DXGKRNL) — Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability

Microsoft Windows — Microsoft Windows Privilege Escalation Vulnerability

Microsoft Internet Explorer Scripting Engine — Microsoft Scripting Engine Memory Corruption Vulnerability

Cisco IOS Software — Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability

Cisco IOS Software and Cisco IOS XE Software — Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability

Cisco IOS Software and Cisco IOS XE Software — Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability

ChakraCore ChakraCore scripting engine — ChakraCore Scripting Engine Type Confusion Vulnerability

Microsoft Exchange Server — Microsoft Exchange Server Privilege Escalation Vulnerability

Microsoft Win32k — Microsoft Win32k Privilege Escalation Vulnerability

Adobe Flash Player — Adobe Flash Player Use-After-Free Vulnerability

RARLAB WinRAR — WinRAR Absolute Path Traversal Vulnerability

Microsoft Windows — Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability

Microsoft Win32k — Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Office — Microsoft Office Memory Corruption Vulnerability

Apache Struts — Apache Struts Remote Code Execution Vulnerability

Microsoft Office — Microsoft Office Memory Corruption Vulnerability

Adobe Flash Player — Adobe Flash Player Use-After-Free Vulnerability

Cisco Adaptive Security Appliance (ASA) — Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability

DotNetNuke (DNN) DotNetNuke (DNN) — DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability

DotNetNuke (DNN) DotNetNuke (DNN) — DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability

Microsoft Internet Explorer — Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability