Kythos AI vulnerability intelligence
Zero-Day Exploits / Vulnerabilities
A server-rendered, source-attributed view of confirmed CISA KEV entries and all NVD CVEs published in the rolling 48-hour UTC window.
Important distinction: CISA KEV means exploitation has been observed; it does not mean every entry was a zero-day. An NVD publication in the past 48 hours does not mean exploitation has occurred. Source records describe third-party products and do not identify Kythos AI customers, contracts, affiliations, or work history.
Confirmed exploitation intelligence
Zero-Day Exploits / Vulnerabilities
Complete CISA Known Exploited Vulnerabilities catalog, ordered by the date CISA added each entry. Every result is known to be exploited; entries are not necessarily zero-days.
Entries 1,273–1,296 of 1,768
CVE-2019-1064: Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
Microsoft · Windows
A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
Required action: Apply updates per vendor instructions.
CVE-2019-0841: Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
Microsoft · Windows
A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
Required action: Apply updates per vendor instructions.
CVE-2019-0543: Microsoft Windows Privilege Escalation Vulnerability
Microsoft · Windows
A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
Required action: Apply updates per vendor instructions.
CVE-2018-8120: Microsoft Win32k Privilege Escalation Vulnerability
Microsoft · Win32k
A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.
Required action: Apply updates per vendor instructions.
CVE-2017-0101: Microsoft Windows Transaction Manager Privilege Escalation Vulnerability
Microsoft · Windows
A privilege escalation vulnerability exists when the Windows Transaction Manager improperly handles objects in memory.
Required action: Apply updates per vendor instructions.
CVE-2016-3309: Microsoft Windows Kernel Privilege Escalation Vulnerability
Microsoft · Windows
A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.
Required action: Apply updates per vendor instructions.
CVE-2015-2546: Microsoft Win32k Memory Corruption Vulnerability
Microsoft · Win32k
The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application.
Required action: Apply updates per vendor instructions.
CVE-2022-26486: Mozilla Firefox Use-After-Free Vulnerability
Mozilla · Firefox
Mozilla Firefox contains a use-after-free vulnerability in WebGPU IPC Framework which can be exploited to perform arbitrary code execution.
Required action: Apply updates per vendor instructions.
CVE-2022-26485: Mozilla Firefox Use-After-Free Vulnerability
Mozilla · Firefox
Mozilla Firefox contains a use-after-free vulnerability in XSLT parameter processing which can be exploited to perform arbitrary code execution.
Required action: Apply updates per vendor instructions.
CVE-2021-21973: VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability
VMware · vCenter Server and Cloud Foundation
VMware vCenter Server and Cloud Foundation Server contain a SSRF vulnerability due to improper validation of URLs in a vCenter Server plugin. This allows for information disclosure.
Required action: Apply updates per vendor instructions.
CVE-2020-8218: Pulse Connect Secure Code Injection Vulnerability
Pulse Secure · Pulse Connect Secure
A code injection vulnerability exists in Pulse Connect Secure that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.
Required action: Apply updates per vendor instructions.
CVE-2019-11581: Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability
Atlassian · Jira Server and Data Center
Atlassian Jira Server and Data Center contain a server-side template injection vulnerability which can allow for remote code execution.
Required action: Apply updates per vendor instructions.
CVE-2017-6077: NETGEAR DGN2200 Remote Code Execution Vulnerability
NETGEAR · Wireless Router DGN2200
NETGEAR DGN2200 wireless routers contain a vulnerability that allows for remote code execution.
Required action: Apply updates per vendor instructions.
CVE-2016-6277: NETGEAR Multiple Routers Remote Code Execution Vulnerability
NETGEAR · Multiple Routers
NETGEAR confirmed multiple routers allow unauthenticated web pages to pass form input directly to the command-line interface, permitting remote code execution.
Required action: Apply updates per vendor instructions.
CVE-2013-0631: Adobe ColdFusion Information Disclosure Vulnerability
Adobe · ColdFusion
Adobe Coldfusion contains an unspecified vulnerability, which could result in information disclosure from a compromised server.
Required action: Apply updates per vendor instructions.
CVE-2013-0629: Adobe ColdFusion Directory Traversal Vulnerability
Adobe · ColdFusion
Adobe Coldfusion contains a directory traversal vulnerability, which could permit an unauthorized user access to restricted directories.
Required action: Apply updates per vendor instructions.
CVE-2013-0625: Adobe ColdFusion Authentication Bypass Vulnerability
Adobe · ColdFusion
Adobe Coldfusion contains an authentication bypass vulnerability, which could result in an unauthorized user gaining administrative access.
Required action: Apply updates per vendor instructions.
CVE-2009-3960: Adobe BlazeDS Information Disclosure Vulnerability
Adobe · BlazeDS
Adobe BlazeDS, which is utilized in LifeCycle and Coldfusion, contains a vulnerability that allows for information disclosure.
Required action: Apply updates per vendor instructions.
CVE-2022-20708: Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers
A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or…
Required action: Apply updates per vendor instructions.
CVE-2022-20703: Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers
A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or…
Required action: Apply updates per vendor instructions.
CVE-2022-20701: Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers
A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or…
Required action: Apply updates per vendor instructions.
CVE-2022-20700: Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers
A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or…
Required action: Apply updates per vendor instructions.
CVE-2022-20699: Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers
A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or…
Required action: Apply updates per vendor instructions.
CVE-2021-41379: Microsoft Windows Installer Privilege Escalation Vulnerability
Microsoft · Windows
Microsoft Windows Installer contains an unspecified vulnerability that allows for privilege escalation.
Required action: Apply updates per vendor instructions.
Complete fixed-window snapshot
CVEs — Past 48 Hours
All unique CVEs returned by NVD for the displayed UTC publication window. The snapshot is accepted only when its normalized unique-item count exactly equals the API totalResults value.
Entries 313–336 of 1,033
CVE-2022-44495
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44494
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44493
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44492
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44491
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44490
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44489
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44487
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44486
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44485
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44484
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44483
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44482
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44481
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44480
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44479
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44478
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44477
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44476
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44475
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44472
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-44464
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-42368
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05
CVE-2022-42363
Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05