ByteOS

cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2008:-:gold:itanium:*:*:*:*:*

>>windows_server_2008>>-

cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*

>>windows_server_2008>>-

cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*

cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-94	Primary	nvd@nist.gov

CWE ID: CWE-94

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.us-cert.gov/cas/techalerts/TA10-040A.html	secure@microsoft.com	US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-009	secure@microsoft.com	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8478	secure@microsoft.com	N/A
http://www.us-cert.gov/cas/techalerts/TA10-040A.html	af854a3a-2127-422b-91ae-364da2661108	US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-009	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8478	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA10-040A.html

Source: secure@microsoft.com

Resource:

US Government Resource

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-009

Source: secure@microsoft.com

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8478

Source: secure@microsoft.com

Resource: N/A

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA10-040A.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

US Government Resource

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-009

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8478

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

1941Records found

CVE-2015-7636

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-7.37% / 91.90%

7 Day CHG~0.00%

Published-18 Oct, 2015 | 10:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7637, CVE-2015-7638, CVE-2015-7639, CVE-2015-7640, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air_sdk_\&_compiler windows flash_player air_sdk android air linux_kernel n/a

CVE-2015-7640

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-7.37% / 91.90%

7 Day CHG~0.00%

Published-18 Oct, 2015 | 10:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7637, CVE-2015-7638, CVE-2015-7639, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air_sdk_\&_compiler windows flash_player air_sdk android air linux_kernel n/a

CVE-2015-7648

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-56.76% / 98.17%

7 Day CHG~0.00%

Published-18 Oct, 2015 | 10:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.255 and 19.x before 19.0.0.226 on Windows and OS X and before 11.2.202.540 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-7647.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel windows flash_player mac_os_x n/a

CVE-2015-7627

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-11.15% / 93.65%

7 Day CHG~0.00%

Published-14 Oct, 2015 | 23:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7625, CVE-2015-7626, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air_sdk_\&_compiler windows flash_player air_sdk android air linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-7635

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-7.37% / 91.90%

7 Day CHG~0.00%

Published-18 Oct, 2015 | 10:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7636, CVE-2015-7637, CVE-2015-7638, CVE-2015-7639, CVE-2015-7640, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel mac_os_x windows flash_player air_sdk android air air_sdk_\&_compiler n/a

CVE-2015-7633

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-12.41% / 94.05%

7 Day CHG~0.00%

Published-14 Oct, 2015 | 23:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel mac_os_x windows flash_player air_sdk android air air_sdk_\&_compiler n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-7626

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-11.15% / 93.65%

7 Day CHG~0.00%

Published-14 Oct, 2015 | 23:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7625, CVE-2015-7627, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air_sdk_\&_compiler windows flash_player air_sdk android air linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-7647

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-56.76% / 98.17%

7 Day CHG~0.00%

Published-18 Oct, 2015 | 10:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel windows flash_player mac_os_x n/a

CVE-2001-0147

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-13.93% / 94.48%

7 Day CHG~0.00%

Published-07 May, 2001 | 04:00

Updated-16 Apr, 2026 | 00:27

Buffer overflow in Windows 2000 event viewer snap-in allows attackers to execute arbitrary commands via a malformed field that is improperly handled during the detailed view of event records.

Product-windows_2000 n/a

CVE-2015-6682

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-1.66% / 82.46%

7 Day CHG~0.00%

Published-22 Sep, 2015 | 10:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5570, CVE-2015-5574, CVE-2015-5581, and CVE-2015-5584.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel mac_os_x windows flash_player air_sdk android air air_sdk_\&_compiler n/a

CVE-2015-5581

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-1.66% / 82.46%

7 Day CHG~0.00%

Published-22 Sep, 2015 | 10:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air_sdk_\&_compiler windows flash_player air_sdk android air linux_kernel n/a

CVE-2015-6691

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-2.52% / 85.73%

7 Day CHG~0.00%

Published-14 Oct, 2015 | 23:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5586, CVE-2015-6683, CVE-2015-6684, CVE-2015-6687, CVE-2015-6688, CVE-2015-6689, CVE-2015-6690, CVE-2015-7615, CVE-2015-7617, and CVE-2015-7621.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader acrobat_reader_dc windows macos acrobat_dc n/a

CWE ID-CWE-416

Use After Free

CVE-2015-5103

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-3.66% / 88.14%

7 Day CHG~0.00%

Published-15 Jul, 2015 | 14:00

Updated-06 May, 2026 | 22:30

Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3095, CVE-2015-5087, CVE-2015-5094, CVE-2015-5100, CVE-2015-5102, CVE-2015-5104, and CVE-2015-5115.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader acrobat_reader_dc windows macos acrobat_dc n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2001-0241

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-85.78% / 99.40%

7 Day CHG~0.00%

Published-18 Sep, 2001 | 04:00

Updated-16 Apr, 2026 | 00:27

Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges via a long print request that is passed to the extension through IIS 5.0.

Product-windows_2000 n/a

CVE-2015-5569

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.01% / 90.90%

7 Day CHG~0.00%

Published-14 Oct, 2015 | 23:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 improperly implement the Flash broker API, which has unspecified impact and attack vectors.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air_sdk_\&_compiler windows flash_player air_sdk android air linux_kernel n/a

CVE-2015-5565

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-4.80% / 89.73%

7 Day CHG~0.00%

Published-14 Aug, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, and CVE-2015-5564.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air windows flash_player air_sdk linux_kernel air_sdk_\&_compiler n/a

CVE-2015-5570

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-1.69% / 82.66%

7 Day CHG~0.00%

Published-22 Sep, 2015 | 10:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5574, CVE-2015-5581, CVE-2015-5584, and CVE-2015-6682.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel mac_os_x windows flash_player air_sdk android air air_sdk_\&_compiler n/a

CVE-2015-5539

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-51.16% / 97.94%

7 Day CHG~0.00%

Published-14 Aug, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air_sdk_\&_compiler windows flash_player air_sdk air linux_kernel n/a

CVE-2015-5555

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-47.02% / 97.75%

7 Day CHG~0.00%

Published-14 Aug, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-5554, CVE-2015-5558, and CVE-2015-5562.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air windows flash_player air_sdk linux_kernel air_sdk_\&_compiler n/a

CVE-2015-5557

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-47.02% / 97.75%

7 Day CHG~0.00%

Published-14 Aug, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel mac_os_x windows flash_player air_sdk air air_sdk_\&_compiler n/a

CVE-2015-5562

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-58.18% / 98.22%

7 Day CHG~0.00%

Published-14 Aug, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air windows flash_player air_sdk linux_kernel air_sdk_\&_compiler n/a

CVE-2015-5577

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-4.30% / 89.11%

7 Day CHG~0.00%

Published-22 Sep, 2015 | 10:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5575, CVE-2015-5578, CVE-2015-5580, CVE-2015-5582, CVE-2015-5588, and CVE-2015-6677.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel mac_os_x windows flash_player air_sdk android air air_sdk_\&_compiler n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5548

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-46.08% / 97.71%

7 Day CHG~0.00%

Published-14 Aug, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5549, CVE-2015-5552, and CVE-2015-5553.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air_sdk_\&_compiler windows flash_player air_sdk air linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5568

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-31.84% / 96.92%

7 Day CHG~0.00%

Published-22 Sep, 2015 | 10:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to cause a denial of service (vector-length corruption) or possibly have unspecified other impact via unknown vectors.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air_sdk_\&_compiler windows flash_player air_sdk android air linux_kernel n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2015-5567

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-3.27% / 87.44%

7 Day CHG~0.00%

Published-22 Sep, 2015 | 10:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5579.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air windows flash_player air_sdk android linux_kernel air_sdk_\&_compiler n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5100

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-3.66% / 88.14%

7 Day CHG~0.00%

Published-15 Jul, 2015 | 14:00

Updated-06 May, 2026 | 22:30

Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3095, CVE-2015-5087, CVE-2015-5094, CVE-2015-5102, CVE-2015-5103, CVE-2015-5104, and CVE-2015-5115.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader acrobat_reader_dc windows macos acrobat_dc n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5101

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-2.88% / 86.59%

7 Day CHG~0.00%

Published-15 Jul, 2015 | 14:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-4448, CVE-2015-5095, CVE-2015-5099, CVE-2015-5111, CVE-2015-5113, and CVE-2015-5114.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader acrobat_reader_dc windows macos acrobat_dc n/a

CWE ID-CWE-416

Use After Free

CVE-2015-5117

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-10.49% / 93.41%

7 Day CHG~0.00%

Published-09 Jul, 2015 | 16:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, and CVE-2015-4430.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air windows flash_player air_sdk linux_kernel air_sdk_\&_compiler n/a

CVE-2015-5133

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-71.45% / 98.74%

7 Day CHG~0.00%

Published-14 Aug, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5131 and CVE-2015-5132.

Vendor-n/a Apple Inc.openSUSE Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel evergreen mac_os_x windows flash_player air_sdk air air_sdk_\&_compiler n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5099

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-2.52% / 85.72%

7 Day CHG~0.00%

Published-15 Jul, 2015 | 14:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-4448, CVE-2015-5095, CVE-2015-5101, CVE-2015-5111, CVE-2015-5113, and CVE-2015-5114.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader acrobat_reader_dc windows macos acrobat_dc n/a

CWE ID-CWE-416

Use After Free

CVE-2015-4433

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.67% / 91.42%

7 Day CHG~0.00%

Published-09 Jul, 2015 | 16:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-3119, CVE-2015-3120, CVE-2015-3121, and CVE-2015-3122.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air windows flash_player air_sdk linux_kernel air_sdk_\&_compiler n/a

CVE-2015-4438

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-4.14% / 88.90%

7 Day CHG~0.00%

Published-15 Jul, 2015 | 14:00

Updated-06 May, 2026 | 22:30

Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-4435, CVE-2015-4441, CVE-2015-4445, CVE-2015-4447, CVE-2015-4451, CVE-2015-4452, CVE-2015-5085, and CVE-2015-5086.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader acrobat_reader_dc windows macos acrobat_dc n/a

CVE-2015-5129

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-2.82% / 86.47%

7 Day CHG~0.00%

Published-14 Aug, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Heap-based buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5541.

Vendor-n/a Apple Inc.openSUSE Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel evergreen mac_os_x windows flash_player air_sdk air air_sdk_\&_compiler n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-4430

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-62.73% / 98.41%

7 Day CHG~0.00%

Published-09 Jul, 2015 | 16:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air windows flash_player air_sdk linux_kernel air_sdk_\&_compiler n/a

CVE-2015-5105

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-4.54% / 89.42%

7 Day CHG~0.00%

Published-15 Jul, 2015 | 14:00

Updated-06 May, 2026 | 22:30

Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5096 and CVE-2015-5098.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader acrobat_reader_dc windows macos acrobat_dc n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2015-5115

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-3.66% / 88.14%

7 Day CHG~0.00%

Published-15 Jul, 2015 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader acrobat_reader_dc windows macos acrobat_dc n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5132

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-71.45% / 98.74%

7 Day CHG~0.00%

Published-14 Aug, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-evergreen linux_kernel mac_os_x windows flash_player air_sdk air air_sdk_\&_compiler n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2008-6820

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.75% / 73.61%

7 Day CHG~0.00%

Published-03 Jun, 2009 | 20:35

Updated-23 Apr, 2026 | 00:35

The db2fmp process in IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP2 on Windows runs with "OS privilege," which has unknown impact and attack vectors, a different vulnerability than CVE-2008-3856.

Vendor-n/a Microsoft Corporation IBM Corporation

Product-windows db2 n/a

CVE-2015-4435

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-4.14% / 88.90%

7 Day CHG~0.00%

Published-15 Jul, 2015 | 14:00

Updated-06 May, 2026 | 22:30

Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-4438, CVE-2015-4441, CVE-2015-4445, CVE-2015-4447, CVE-2015-4451, CVE-2015-4452, CVE-2015-5085, and CVE-2015-5086.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader acrobat_reader_dc windows macos acrobat_dc n/a

CVE-2008-4834

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-73.95% / 98.84%

7 Day CHG~0.00%

Published-14 Jan, 2009 | 22:00

Updated-23 Apr, 2026 | 00:35

Buffer overflow in SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via malformed values of unspecified "fields inside the SMB packets" in an NT Trans request, aka "SMB Buffer Overflow Remote Code Execution Vulnerability."

Product-windows_server_2008 windows_vista windows_xp windows_2000 windows_server_2003 n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2008-5415

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-15.63% / 94.85%

7 Day CHG~0.00%

Published-11 Dec, 2008 | 15:00

Updated-23 Apr, 2026 | 00:35

The LDBserver service in the server in CA ARCserve Backup 11.1 through 12.0 on Windows allows remote attackers to execute arbitrary code via a handle_t argument to an RPC endpoint in which the argument refers to an incompatible procedure.

Vendor-n/a CA Technologies (Broadcom Inc.)Broadcom Inc.Microsoft Corporation

Product-windows arcserve_backup n/a

CVE-2000-1209

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-88.44% / 99.52%

7 Day CHG~0.00%

Published-10 Aug, 2002 | 04:00

Updated-16 Apr, 2026 | 00:27

The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages that use these products such as (4) Tumbleweed Secure Mail (MMS) (5) Compaq Insight Manager, and (6) Visio 2000, which allows remote attackers to gain privileges, as exploited by worms such as Voyager Alpha Force and Spida.

Vendor-compaq n/a Microsoft Corporation

Product-insight_manager_xe msde insight_manager data_engine n/a

CVE-2015-5098

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-4.54% / 89.42%

7 Day CHG~0.00%

Published-15 Jul, 2015 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader acrobat_reader_dc windows macos acrobat_dc n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2001-0045

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-1.24% / 79.69%

7 Day CHG~0.00%

Published-02 Feb, 2001 | 05:00

Updated-16 Apr, 2026 | 00:27

The default permissions for the RAS Administration key in Windows NT 4.0 allows local users to execute arbitrary commands by changing the value to point to a malicious DLL, aka one of the "Registry Permissions" vulnerabilities.

Product-windows_nt n/a

CVE-2008-5100

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-27.76% / 96.56%

7 Day CHG~0.00%

Published-17 Nov, 2008 | 18:00

Updated-23 Apr, 2026 | 00:35

The strong name (SN) implementation in Microsoft .NET Framework 2.0.50727 relies on the digital signature Public Key Token embedded in the pathname of a DLL file instead of the digital signature of this file itself, which makes it easier for attackers to bypass Global Assembly Cache (GAC) and Code Access Security (CAS) protection mechanisms, aka MSRC ticket MSRC8566gs.

Product-.net_framework n/a

CVE-2011-1966

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-57.19% / 98.19%

7 Day CHG~0.00%

Published-10 Aug, 2011 | 21:16

Updated-29 Apr, 2026 | 01:13

The DNS server in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 does not properly handle NAPTR queries that trigger recursive processing, which allows remote attackers to execute arbitrary code via a crafted query, aka "DNS NAPTR Query Vulnerability."

Product-windows_server_2008 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2008-5412

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-1.35% / 80.49%

7 Day CHG~0.00%

Published-10 Dec, 2008 | 00:00

Updated-23 Apr, 2026 | 00:35

Unspecified vulnerability in IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 on Windows has unknown impact and attack vectors related to JSPs. NOTE: this is probably a duplicate of CVE-2009-0438.

Vendor-n/a Microsoft Corporation IBM Corporation

Product-windows websphere_application_server n/a

CVE-2019-1372

Matching Score-8

Matching Score-8

CVSS Score-10||CRITICAL

EPSS-3.27% / 87.45%

7 Day CHG~0.00%

Published-10 Oct, 2019 | 13:28

Updated-04 Aug, 2024 | 18:13

An remote code execution vulnerability exists when Azure App Service/ Antares on Azure Stack fails to check the length of a buffer prior to copying memory to it.An attacker who successfully exploited this vulnerability could allow an unprivileged function run by the user to execute code in the context of NT AUTHORITY\system thereby escaping the Sandbox.The security update addresses the vulnerability by ensuring that Azure App Service sanitizes user inputs., aka 'Azure App Service Remote Code Execution Vulnerability'.

Vendor-Microsoft Corporation

Product-azure_app_service_on_azure_stack Azure App Service on Azure Stack

CVE-2008-4023

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-60.16% / 98.31%

7 Day CHG~0.00%

Published-15 Oct, 2008 | 00:00

Updated-23 Apr, 2026 | 00:35

Active Directory in Microsoft Windows 2000 SP4 does not properly allocate memory for (1) LDAP and (2) LDAPS requests, which allows remote attackers to execute arbitrary code via a crafted request, aka "Active Directory Overflow Vulnerability."

Product-windows_2000 n/a

CVE-2000-0081

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-29.29% / 96.70%

7 Day CHG~0.00%

Published-04 Feb, 2000 | 05:00

Updated-16 Apr, 2026 | 00:27

Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute the code by using hexadecimal codes to specify the javascript: protocol, e.g. jAvascript.