Kythos AI vulnerability intelligence
Zero-Day Exploits / Vulnerabilities
A server-rendered, source-attributed view of confirmed CISA KEV entries and all NVD CVEs published in the rolling 48-hour UTC window.
Important distinction: CISA KEV means exploitation has been observed; it does not mean every entry was a zero-day. An NVD publication in the past 48 hours does not mean exploitation has occurred. Source records describe third-party products and do not identify Kythos AI customers, contracts, affiliations, or work history.
Confirmed exploitation intelligence
Zero-Day Exploits / Vulnerabilities
Complete CISA Known Exploited Vulnerabilities catalog, ordered by the date CISA added each entry. Every result is known to be exploited; entries are not necessarily zero-days.
Entries 1,009–1,032 of 1,769
CVE-2017-5030: Google Chromium V8 Memory Corruption Vulnerability
Google · Chromium V8
Google Chromium V8 Engine contains a memory corruption vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and…
Required action: Apply updates per vendor instructions.
CVE-2016-5198: Google Chromium V8 Out-of-Bounds Memory Vulnerability
Google · Chromium V8
Google Chromium V8 Engine contains an out-of-bounds memory access vulnerability that allows a remote attacker to perform read/write operations, leading to code execution, via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited…
Required action: Apply updates per vendor instructions.
CVE-2016-1646: Google Chromium V8 Out-of-Bounds Read Vulnerability
Google · Chromium V8
Google Chromium V8 Engine contains an out-of-bounds read vulnerability that allows a remote attacker to cause a denial of service or possibly have another unspecified impact via crafted JavaScript code. This vulnerability could affect multiple web browsers that utilize Chromium, including, but…
Required action: Apply updates per vendor instructions.
CVE-2013-1331: Microsoft Office Buffer Overflow Vulnerability
Microsoft · Office
Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via crafted PNG data in an Office document.
Required action: Apply updates per vendor instructions.
CVE-2012-5054: Adobe Flash Player Integer Overflow Vulnerability
Adobe · Flash Player
Adobe Flash Player contains an integer overflow vulnerability that allows remote attackers to execute code via malformed arguments.
Required action: The impacted product is end-of-life and should be disconnected if still in use.
CVE-2012-4969: Microsoft Internet Explorer Use-After-Free Vulnerability
Microsoft · Internet Explorer
Microsoft Internet Explorer contains a use-after-free vulnerability that allows remote attackers to execute code via a crafted web site.
Required action: Apply updates per vendor instructions.
CVE-2012-1889: Microsoft XML Core Services Memory Corruption Vulnerability
Microsoft · XML Core Services
Microsoft XML Core Services contains a memory corruption vulnerability which could allow for remote code execution.
Required action: Apply updates per vendor instructions.
CVE-2012-0767: Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability
Adobe · Flash Player
Adobe Flash Player contains a XSS vulnerability that allows remote attackers to inject web script or HTML.
Required action: The impacted product is end-of-life and should be disconnected if still in use.
CVE-2012-0754: Adobe Flash Player Memory Corruption Vulnerability
Adobe · Flash Player
Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
Required action: The impacted product is end-of-life and should be disconnected if still in use.
CVE-2012-0151: Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability
Microsoft · Windows
The Authenticode Signature Verification function in Microsoft Windows (WinVerifyTrust) does not properly validate the digest of a signed portable executable (PE) file, which allows user-assisted remote attackers to execute code.
Required action: Apply updates per vendor instructions.
CVE-2011-2462: Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability
Adobe · Reader and Acrobat
The Universal 3D (U3D) component in Adobe Reader and Acrobat contains a memory corruption vulnerability which could allow remote attackers to execute code or cause denial-of-service (DoS).
Required action: Apply updates per vendor instructions.
CVE-2011-0609: Adobe Flash Player Unspecified Vulnerability
Adobe · Flash Player
Adobe Flash Player contains an unspecified vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
Required action: The impacted product is end-of-life and should be disconnected if still in use.
CVE-2010-2883: Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability
Adobe · Acrobat and Reader
Adobe Acrobat and Reader contain a stack-based buffer overflow vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
Required action: Apply updates per vendor instructions.
CVE-2010-2572: Microsoft PowerPoint Buffer Overflow Vulnerability
Microsoft · PowerPoint
Microsoft PowerPoint contains a buffer overflow vulnerability that alllows for remote code execution.
Required action: Apply updates per vendor instructions.
CVE-2010-1297: Adobe Flash Player Memory Corruption Vulnerability
Adobe · Flash Player
Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
Required action: The impacted product is end-of-life and should be disconnected if still in use.
CVE-2009-4324: Adobe Acrobat and Reader Use-After-Free Vulnerability
Adobe · Acrobat and Reader
Use-after-free vulnerability in Adobe Acrobat and Reader allows remote attackers to execute code via a crafted PDF file.
Required action: Apply updates per vendor instructions.
CVE-2009-3953: Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability
Adobe · Acrobat and Reader
Adobe Acrobat and Reader contains an array boundary issue in Universal 3D (U3D) support that could lead to remote code execution.
Required action: Apply updates per vendor instructions.
CVE-2009-1862: Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability
Adobe · Acrobat and Reader, Flash Player
Adobe Acrobat and Reader and Adobe Flash Player allows remote attackers to execute code or cause denial-of-service (DoS).
Required action: For Adobe Acrobat and Reader, apply updates per vendor instructions. For Adobe Flash Player, the impacted product is end-of-life and should be disconnected if still in use.
CVE-2009-0563: Microsoft Office Buffer Overflow Vulnerability
Microsoft · Office
Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via a Word document with a crafted tag containing an invalid length field.
Required action: Apply updates per vendor instructions.
CVE-2009-0557: Microsoft Office Object Record Corruption Vulnerability
Microsoft · Office
Microsoft Office contains an object record corruption vulnerability that allows remote attackers to execute code via a crafted Excel file with a malformed record object.
Required action: Apply updates per vendor instructions.
CVE-2008-0655: Adobe Acrobat and Reader Unspecified Vulnerability
Adobe · Acrobat and Reader
Adobe Acrobat and Reader contains an unespecified vulnerability described as a design flaw which could allow a specially crafted file to be printed silently an arbitrary number of times.
Required action: Apply updates per vendor instructions.
CVE-2007-5659: Adobe Acrobat and Reader Buffer Overflow Vulnerability
Adobe · Acrobat and Reader
Adobe Acrobat and Reader contain a buffer overflow vulnerability that allows remote attackers to execute code via a PDF file with long arguments to unspecified JavaScript methods.
Required action: Apply updates per vendor instructions.
CVE-2006-2492: Microsoft Word Malformed Object Pointer Vulnerability
Microsoft · Word
Microsoft Word and Microsoft Works Suites contain a malformed object pointer which allows attackers to execute code.
Required action: Apply updates per vendor instructions.
CVE-2022-26134: Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability
Atlassian · Confluence Server/Data Center
Atlassian Confluence Server and Data Center contain a remote code execution vulnerability that allows for an unauthenticated attacker to perform remote code execution.
Required action: Immediately block all internet traffic to and from affected products AND apply the update per vendor instructions [https://confluence.atlassian.com/doc/confluence-security-advisory-2022-06-02-1130377146.html] OR remove the affected products by the due date on the right. Note: Once the update is…
Complete fixed-window snapshot
CVEs — Past 48 Hours
All unique CVEs returned by NVD for the displayed UTC publication window. The snapshot is accepted only when its normalized unique-item count exactly equals the API totalResults value.
Entries 361–384 of 1,013
CVE-2026-121491
The Fiber Admin WordPress plugin before 4.0.1 does not validate or escape a request header before writing it into a PHP file it regenerates on an unprotected admin hook, allowing unauthenticated attackers to execute arbitrary code when its custom database error page is enabled and they…
CVE-2026-121380
The Tournamatch WordPress plugin before 4.7.1 does not restrict access to its team invitation listing, allowing unauthenticated users to retrieve the email addresses of people invited to join teams.
CVE-2026-121379
The Tournamatch WordPress plugin before 4.7.1 does not validate or restrict the path of a previously stored profile or team image before deleting it when a new image is uploaded, allowing users with a role as low as Subscriber to delete arbitrary files on the server,…
CVE-2026-119073
The Live Composer WordPress plugin before 2.1.23 does not escape a pagination setting supplied through its post-listing module shortcodes before outputting it in an HTML attribute, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks.
CVE-2026-118534
The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.11 does not verify that the order targeted by its checkout payment-retry REST action belongs to the requesting user, allowing any authenticated user, such as a subscriber, to create payment-attempt records against other users'…
CVE-2026-118533
The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.11 does not verify that the user requesting an order's payment receipt owns that order, allowing any authenticated user, such as a subscriber, to disclose other users' order and payment information, including amounts, payment…
CVE-2026-118532
The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.11 does not verify ownership of attachment IDs supplied when updating a listing's images, allowing authenticated users with Subscriber-level access and above to permanently delete arbitrary media library attachments, including those uploaded by administrators,…
CVE-2026-118530
The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.11 does not check that the acting user may edit each targeted user when handling an email-verification bulk action on multisite, allowing an Administrator of one site on the network to lock out users…
CVE-2026-118529
The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.11 does not verify that a user owns a listing before processing a featured-listing checkout for it, allowing any authenticated user, such as a subscriber, to publish and feature another user's pending listing when…
CVE-2026-118528
The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.11 does not validate that the requesting user owns the referenced listing before returning its metadata via an AJAX action, allowing authenticated attackers with Subscriber-level access and above to disclose another user's private and…
CVE-2026-117588
The WP Google Review Slider WordPress plugin before 18.11 does not perform nonce validation when updating its active Google Places configuration, allowing attackers to alter or destroy that configuration via a forged request, provided they can trick a site administrator into following a crafted link.
CVE-2026-117525
The FV Flowplayer Video Player WordPress plugin before 7.5.57.7212 does not escape shortcode attribute values embedded in comments before rendering them into the media player markup, allowing an unauthenticated visitor to store a script payload in a comment that executes in the session of any visitor,…
CVE-2025-15708
The Live Composer WordPress plugin before 2.1.23 does not sanitise and escape some of its custom post type slug settings before using them in front-end links, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability…
CVE-2026-9601
The Stackable – Page Builder Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'update_block_style' endpoint in all versions up to, and including, 3.19.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access…
CVE-2026-93902
The Soledad theme for WordPress is vulnerable to Stored Cross-Site Scripting via Social Profile Fields in all versions up to, and including, 8.7.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary…
CVE-2026-93779
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.1.2 via the init_routes due to missing validation on a user controlled key. This makes it possible for authenticated attackers,…
CVE-2026-75590
IBM API Connect [network address omitted] through [network address omitted] could allow a remote attacker to access internal network resources and obtain sensitive information due to server-side request forgery. A protection that blocks requests to internal addresses can be bypassed, so the server could be made…
CVE-2026-19131
IBM API Connect [network address omitted] through [network address omitted] could allow low-privileged users to query arbitrary indices and read sensitive data due to missing authorization.
CVE-2026-19129
IBM API Connect [network address omitted] through [network address omitted] and [network address omitted] through [network address omitted] could allow a network-positioned attacker to intercept backup data due to improper verification of the backup server's identity. The identity of the backup server is not verified when…
CVE-2026-19128
IBM API Connect [network address omitted] through [network address omitted] could allow an authenticated attacker to send unauthorized requests from the system due to server-side request forgery. This could be used to enumerate network resources or to support further attacks.
CVE-2026-19126
IBM API Connect [network address omitted] through [network address omitted] and [network address omitted] through [network address omitted] uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
CVE-2026-19124
IBM API Connect [network address omitted] through [network address omitted] could allow an attacker with access to stored data to decrypt sensitive credentials due to the use of a hard-coded cryptographic key. The key protecting stored credentials is built into the product, so credentials could be…
CVE-2026-19122
IBM API Connect [network address omitted] through [network address omitted] could allow an authenticated privileged attacker to send unauthorized requests from the system due to server-side request forgery. This could be used to enumerate network resources or to support further attacks.
CVE-2026-19121
IBM API Connect [network address omitted] through [network address omitted] could allow an authenticated attacker to gain unauthorized access due to improper authorization. Tenant context is not sufficiently verified against the authenticated user, which could allow access to another tenant's resources.