Kythos AI vulnerability intelligence
Zero-Day Exploits / Vulnerabilities
A server-rendered, source-attributed view of confirmed CISA KEV entries and all NVD CVEs published in the rolling 48-hour UTC window.
Important distinction: CISA KEV means exploitation has been observed; it does not mean every entry was a zero-day. An NVD publication in the past 48 hours does not mean exploitation has occurred. Source records describe third-party products and do not identify Kythos AI customers, contracts, affiliations, or work history.
Confirmed exploitation intelligence
Zero-Day Exploits / Vulnerabilities
Complete CISA Known Exploited Vulnerabilities catalog, ordered by the date CISA added each entry. Every result is known to be exploited; entries are not necessarily zero-days.
Entries 1,009–1,032 of 1,769
CVE-2017-5030: Google Chromium V8 Memory Corruption Vulnerability
Google · Chromium V8
Google Chromium V8 Engine contains a memory corruption vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and…
Required action: Apply updates per vendor instructions.
CVE-2016-5198: Google Chromium V8 Out-of-Bounds Memory Vulnerability
Google · Chromium V8
Google Chromium V8 Engine contains an out-of-bounds memory access vulnerability that allows a remote attacker to perform read/write operations, leading to code execution, via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited…
Required action: Apply updates per vendor instructions.
CVE-2016-1646: Google Chromium V8 Out-of-Bounds Read Vulnerability
Google · Chromium V8
Google Chromium V8 Engine contains an out-of-bounds read vulnerability that allows a remote attacker to cause a denial of service or possibly have another unspecified impact via crafted JavaScript code. This vulnerability could affect multiple web browsers that utilize Chromium, including, but…
Required action: Apply updates per vendor instructions.
CVE-2013-1331: Microsoft Office Buffer Overflow Vulnerability
Microsoft · Office
Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via crafted PNG data in an Office document.
Required action: Apply updates per vendor instructions.
CVE-2012-5054: Adobe Flash Player Integer Overflow Vulnerability
Adobe · Flash Player
Adobe Flash Player contains an integer overflow vulnerability that allows remote attackers to execute code via malformed arguments.
Required action: The impacted product is end-of-life and should be disconnected if still in use.
CVE-2012-4969: Microsoft Internet Explorer Use-After-Free Vulnerability
Microsoft · Internet Explorer
Microsoft Internet Explorer contains a use-after-free vulnerability that allows remote attackers to execute code via a crafted web site.
Required action: Apply updates per vendor instructions.
CVE-2012-1889: Microsoft XML Core Services Memory Corruption Vulnerability
Microsoft · XML Core Services
Microsoft XML Core Services contains a memory corruption vulnerability which could allow for remote code execution.
Required action: Apply updates per vendor instructions.
CVE-2012-0767: Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability
Adobe · Flash Player
Adobe Flash Player contains a XSS vulnerability that allows remote attackers to inject web script or HTML.
Required action: The impacted product is end-of-life and should be disconnected if still in use.
CVE-2012-0754: Adobe Flash Player Memory Corruption Vulnerability
Adobe · Flash Player
Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
Required action: The impacted product is end-of-life and should be disconnected if still in use.
CVE-2012-0151: Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability
Microsoft · Windows
The Authenticode Signature Verification function in Microsoft Windows (WinVerifyTrust) does not properly validate the digest of a signed portable executable (PE) file, which allows user-assisted remote attackers to execute code.
Required action: Apply updates per vendor instructions.
CVE-2011-2462: Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability
Adobe · Reader and Acrobat
The Universal 3D (U3D) component in Adobe Reader and Acrobat contains a memory corruption vulnerability which could allow remote attackers to execute code or cause denial-of-service (DoS).
Required action: Apply updates per vendor instructions.
CVE-2011-0609: Adobe Flash Player Unspecified Vulnerability
Adobe · Flash Player
Adobe Flash Player contains an unspecified vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
Required action: The impacted product is end-of-life and should be disconnected if still in use.
CVE-2010-2883: Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability
Adobe · Acrobat and Reader
Adobe Acrobat and Reader contain a stack-based buffer overflow vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
Required action: Apply updates per vendor instructions.
CVE-2010-2572: Microsoft PowerPoint Buffer Overflow Vulnerability
Microsoft · PowerPoint
Microsoft PowerPoint contains a buffer overflow vulnerability that alllows for remote code execution.
Required action: Apply updates per vendor instructions.
CVE-2010-1297: Adobe Flash Player Memory Corruption Vulnerability
Adobe · Flash Player
Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
Required action: The impacted product is end-of-life and should be disconnected if still in use.
CVE-2009-4324: Adobe Acrobat and Reader Use-After-Free Vulnerability
Adobe · Acrobat and Reader
Use-after-free vulnerability in Adobe Acrobat and Reader allows remote attackers to execute code via a crafted PDF file.
Required action: Apply updates per vendor instructions.
CVE-2009-3953: Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability
Adobe · Acrobat and Reader
Adobe Acrobat and Reader contains an array boundary issue in Universal 3D (U3D) support that could lead to remote code execution.
Required action: Apply updates per vendor instructions.
CVE-2009-1862: Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability
Adobe · Acrobat and Reader, Flash Player
Adobe Acrobat and Reader and Adobe Flash Player allows remote attackers to execute code or cause denial-of-service (DoS).
Required action: For Adobe Acrobat and Reader, apply updates per vendor instructions. For Adobe Flash Player, the impacted product is end-of-life and should be disconnected if still in use.
CVE-2009-0563: Microsoft Office Buffer Overflow Vulnerability
Microsoft · Office
Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via a Word document with a crafted tag containing an invalid length field.
Required action: Apply updates per vendor instructions.
CVE-2009-0557: Microsoft Office Object Record Corruption Vulnerability
Microsoft · Office
Microsoft Office contains an object record corruption vulnerability that allows remote attackers to execute code via a crafted Excel file with a malformed record object.
Required action: Apply updates per vendor instructions.
CVE-2008-0655: Adobe Acrobat and Reader Unspecified Vulnerability
Adobe · Acrobat and Reader
Adobe Acrobat and Reader contains an unespecified vulnerability described as a design flaw which could allow a specially crafted file to be printed silently an arbitrary number of times.
Required action: Apply updates per vendor instructions.
CVE-2007-5659: Adobe Acrobat and Reader Buffer Overflow Vulnerability
Adobe · Acrobat and Reader
Adobe Acrobat and Reader contain a buffer overflow vulnerability that allows remote attackers to execute code via a PDF file with long arguments to unspecified JavaScript methods.
Required action: Apply updates per vendor instructions.
CVE-2006-2492: Microsoft Word Malformed Object Pointer Vulnerability
Microsoft · Word
Microsoft Word and Microsoft Works Suites contain a malformed object pointer which allows attackers to execute code.
Required action: Apply updates per vendor instructions.
CVE-2022-26134: Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability
Atlassian · Confluence Server/Data Center
Atlassian Confluence Server and Data Center contain a remote code execution vulnerability that allows for an unauthenticated attacker to perform remote code execution.
Required action: Immediately block all internet traffic to and from affected products AND apply the update per vendor instructions [https://confluence.atlassian.com/doc/confluence-security-advisory-2022-06-02-1130377146.html] OR remove the affected products by the due date on the right. Note: Once the update is…
Complete fixed-window snapshot
CVEs — Past 48 Hours
All unique CVEs returned by NVD for the displayed UTC publication window. The snapshot is accepted only when its normalized unique-item count exactly equals the API totalResults value.
Entries 1–24 of 1,041
CVE-2026-97195
The Secure Custom Fields WordPress plugin before 6.9.8 does not sanitize a persisted field definition before emitting part of it as an HTML attribute name, allowing a user able to configure its fields to store a payload that executes as JavaScript in the browser of any…
CVE-2026-97194
The Secure Custom Fields WordPress plugin before 6.9.8 does not perform a read-permission check when it renders and formats the values of its relational fields, allowing users with post-editing access (Contributor and above) to disclose the titles and non-public statuses of other users' unpublished posts.
CVE-2026-97193
The Secure Custom Fields WordPress plugin before 6.9.8 does not verify that a user is allowed to edit the target object before writing to it during bidirectional relationship synchronization, allowing users with contributor-level access and above to add or remove a reference to their own object…
CVE-2026-97192
The Secure Custom Fields WordPress plugin before 6.9.8 does not re-apply its field-group location rules when persisting values submitted through the post editor save path, allowing users with contributor-level access and above to write custom fields the site restricted to administrators onto their own posts.
CVE-2026-96963
The Pie Register WordPress plugin through [network address omitted] does not perform an authorisation check in one of its AJAX actions, allowing users with a role as low as contributor to modify existing administrator-created invitation-code records.
CVE-2026-96961
The Pie Register WordPress plugin through [network address omitted] does not perform any capability, nonce or authentication check on one of its request handlers, allowing unauthenticated attackers to reset the Pie Register WordPress plugin through [network address omitted]'s settings to their defaults (disabling registration security controls…
CVE-2026-85344
The FV Flowplayer Video Player WordPress plugin before 7.5.57.7212 does not perform any authorization check on an AJAX action that carries out a site-wide content rewrite, so any authenticated user, including subscriber-level, can trigger a bulk modification of posts they should not be able to edit.
CVE-2026-122085
The Event Tickets Manager for WooCommerce WordPress plugin before 1.6.0 does not perform authorisation or a valid nonce check on its ticket-transfer feature, which is available to unauthenticated users, allowing them to transfer other attendees' guest-checkout tickets to an email address of their choosing, invalidating the…
CVE-2026-122062
The Pronamic Pay WordPress plugin before 11.1.0, Pronamic Pay doneren met Mollie WordPress plugin before 1.7.1 do not restrict access to stored form submissions through the REST API, allowing unauthenticated users to read the messages that visitors submitted through the bundled forms.
CVE-2026-122060
The WP Recipe Maker WordPress plugin before 10.9.2 does not check whether the post a recipe is embedded in is password protected before returning the recipe through its REST API and structured data output, allowing unauthenticated users to read the full content of recipes in password-protected…
CVE-2026-114432
The Contact Form 7 WordPress plugin before 6.2.4 does not validate the type or extension of files uploaded through a form file field, and a flaw in its temporary-file cleanup leaves the uploaded file on disk, allowing unauthenticated users to upload arbitrary files to the site.…
CVE-2026-110963
The Userplace WordPress plugin through 1.2.0 does not perform authorization checks on an AJAX action available to unauthenticated users and publicly exposes the nonce that protects it, allowing unauthenticated attackers to create an administrator account or write arbitrary site options, leading to full site takeover.
CVE-2026-110132
The Sync Post With Other Site WordPress plugin before 1.9.4 does not properly authorize a content-management action for post types other than pages, allowing users with Contributor-level access or above to create and modify arbitrary custom post types, including reassigning content authorship.
CVE-2026-109925
The Productive Commerce WordPress plugin before 1.1.54 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks.
CVE-2026-106015
The Ecommerce Affiliate WordPress plugin through 1.0.0 does not restrict one-time password issuance and verification to the legitimate account owner, nor limit verification attempts, allowing unauthenticated attackers to take over any account, including administrators.
CVE-2026-105970
The Thanh Toán Quét Mã QR Code Tự Động WordPress plugin through 2.0.1 does not properly verify the authenticity of incoming bank-transfer payment notifications on a default installation, allowing unauthenticated attackers to mark arbitrary WooCommerce orders as paid.
CVE-2026-104639
The Razorpay for WooCommerce WordPress plugin before 4.8.9 does not sanitize and escape a value derived from an incoming webhook request before using it in a SQL query, allowing users able to obtain the webhook secret (administrators) to perform SQL injection attacks.
CVE-2026-104338
The Razorpay for WooCommerce WordPress plugin before 4.8.9 does not perform an authorization check on one of its REST routes and derives the acting user's identity from an unauthenticated request parameter, allowing an unauthenticated attacker to cause the request to execute as an arbitrary user account…
CVE-2026-104337
The Razorpay for WooCommerce WordPress plugin before 4.8.9 does not verify ownership of an order before returning a coupon discount computed against that order, allowing unauthenticated attackers to disclose the monetary value of arbitrary customer orders by enumerating order IDs.
CVE-2026-104307
The BackUpWordPress plugin before 3.15 does not perform a capability or nonce check on an AJAX action that cleans up its backup directory, allowing any authenticated user (Subscriber and above) to delete the BackUpWordPress plugin before 3.15's backup protection and working files, removing download protection from…
CVE-2026-103375
The Antom Payments WordPress plugin through 2.0.11 does not perform any ownership or authorisation check before returning an order's confirmation link, which contains its secret key, to unauthenticated visitors, allowing attackers to view any customer's order details, including name, address, phone number and email.
CVE-2026-103303
The Turisbook Booking System WordPress plugin through 1.3.8 does not have authorisation and CSRF checks when saving its settings, and does not sanitise and escape one of them before outputting it in an admin page, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against administrators.
CVE-2026-114713
The labeled-response module in UnrealIRCd 6.0.0 before [network address omitted] does not escape the IRCv3 "label" message tag when echoing it into replies, which allows any user on a network with two or more linked servers to inject server-to-server commands that are executed with server authority.
CVE-2026-124422
SunEditor from 3.0.0 before 3.4.0 contains a stored cross-site scripting vulnerability in html.clean() that rebuilds iframes from data-se-iframe-holder-attrs JSON without filtering srcdoc or uppercase SRC keys. Attackers can inject crafted HTML through paste, html.set, or html.insert to execute script in the host page origin when victims…