Kythos AI vulnerability intelligence

Zero-Day Exploits / Vulnerabilities

A server-rendered, source-attributed view of confirmed CISA KEV entries and all NVD CVEs published in the rolling 48-hour UTC window.

Important distinction: CISA KEV means exploitation has been observed; it does not mean every entry was a zero-day. An NVD publication in the past 48 hours does not mean exploitation has occurred. Source records describe third-party products and do not identify Kythos AI customers, contracts, affiliations, or work history.

CISA KEV catalog NVD 48-hour CVEs Kythos AI RSS feed

Confirmed exploitation intelligence

Zero-Day Exploits / Vulnerabilities

Complete CISA Known Exploited Vulnerabilities catalog, ordered by the date CISA added each entry. Every result is known to be exploited; entries are not necessarily zero-days.

Current snapshot

Entries 1,345–1,368 of 1,768

CISA KEVAdded Mar 3, 2022

CVE-2016-5195: Linux Kernel Race Condition Vulnerability

Linux · Kernel

Race condition in mm/gup.c in the Linux kernel allows local users to escalate privileges.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2016-4117: Adobe Flash Player Arbitrary Code Execution Vulnerability

Adobe · Flash Player

An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution.

Federal remediation due Mar 24, 2022Ransomware use: Known

Required action: The impacted product is end-of-life and should be disconnected if still in use.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2016-1019: Adobe Flash Player Arbitrary Code Execution Vulnerability

Adobe · Flash Player

Adobe Flash Player allows remote attackers to cause a denial of service or possibly execute arbitrary code.

Federal remediation due Mar 24, 2022Ransomware use: Known

Required action: The impacted product is end-of-life and should be disconnected if still in use.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2016-0099: Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability

Microsoft · Windows

A privilege escalation vulnerability exists in Microsoft Windows if the Windows Secondary Logon Service fails to properly manage request handles in memory. An attacker who successfully exploited this vulnerability could run arbitrary code as an administrator.

Federal remediation due Mar 24, 2022Ransomware use: Known

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2015-7645: Adobe Flash Player Arbitrary Code Execution Vulnerability

Adobe · Flash Player

Adobe Flash Player allows remote attackers to execute arbitrary code via a crafted SWF file.

Federal remediation due Mar 24, 2022Ransomware use: Known

Required action: The impacted product is end-of-life and should be disconnected if still in use.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2015-5119: Adobe Flash Player Use-After-Free Vulnerability

Adobe · Flash Player

A use-after-free vulnerability exists within the ActionScript 3 ByteArray class in Adobe Flash Player that allows an attacker to perform remote code execution.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: The impacted product is end-of-life and should be disconnected if still in use.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2015-4902: Oracle Java SE Integrity Check Vulnerability

Oracle · Java SE

Unspecified vulnerability in Oracle Java SE allows remote attackers to affect integrity via Unknown vectors related to deployment.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2015-3043: Adobe Flash Player Memory Corruption Vulnerability

Adobe · Flash Player

A memory corruption vulnerability exists in Adobe Flash Player that allows an attacker to perform remote code execution.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: The impacted product is end-of-life and should be disconnected if still in use.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2015-2590: Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability

Oracle · Java SE

An unspecified vulnerability exists within Oracle Java Runtime Environment that allows an attacker to perform remote code execution.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2015-2545: Microsoft Office Malformed EPS File Vulnerability

Microsoft · Office

Microsoft Office allows remote attackers to execute arbitrary code via a crafted EPS image.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2015-2424: Microsoft PowerPoint Memory Corruption Vulnerability

Microsoft · PowerPoint

Microsoft PowerPoint allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2015-2387: Microsoft ATM Font Driver Privilege Escalation Vulnerability

Microsoft · ATM Font Driver

ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server allows local users to gain privileges via a crafted application.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2015-1701: Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32k

An unspecified vulnerability exists in the Win32k.sys kernel-mode driver in Microsoft Windows Server that allows a local attacker to execute arbitrary code with elevated privileges.

Federal remediation due Mar 24, 2022Ransomware use: Known

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2015-1642: Microsoft Office Memory Corruption Vulnerability

Microsoft · Office

Microsoft Office contains a memory corruption vulnerability that allows remote attackers to execute arbitrary code via a crafted document.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2014-4114: Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability

Microsoft · Windows

A vulnerability exists in Windows Object Linking & Embedding (OLE) that could allow remote code execution if a user opens a file that contains a specially crafted OLE object.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2014-0496: Adobe Reader and Acrobat Use-After-Free Vulnerability

Adobe · Reader and Acrobat

Adobe Reader and Acrobat contain a use-after-free vulnerability which can allow for code execution.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2013-5065: Microsoft Windows Kernel Privilege Escalation Vulnerability

Microsoft · Windows

Microsoft Windows NDProxy.sys in the kernel contains an improper input validation vulnerability which can allow a local attacker to escalate privileges.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2013-3897: Microsoft Internet Explorer Use-After-Free Vulnerability

Microsoft · Internet Explorer

A use-after-free vulnerability exists within CDisplayPointer in Microsoft Internet Explorer that allows an attacker to remotely execute arbitrary code.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2013-3346: Adobe Reader and Acrobat Memory Corruption Vulnerability

Adobe · Reader and Acrobat

Adobe Reader and Acrobat contain a memory corruption vulnerability which can allow attackers to execute arbitrary code or cause a denial of service.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2013-1675: Mozilla Firefox Information Disclosure Vulnerability

Mozilla · Firefox

Mozilla Firefox does not properly initialize data structures for the nsDOMSVGZoomEvent[network address omitted]mPreviousScale and nsDOMSVGZoomEvent[network address omitted]mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2013-1347: Microsoft Internet Explorer Remote Code Execution Vulnerability

Microsoft · Internet Explorer

This vulnerability may corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user within Internet Explorer.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2013-0641: Adobe Reader Buffer Overflow Vulnerability

Adobe · Reader

A buffer overflow vulnerability exists in Adobe Reader which allows an attacker to perform remote code execution.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2013-0640: Adobe Reader and Acrobat Memory Corruption Vulnerability

Adobe · Reader and Acrobat

An memory corruption vulnerability exists in the acroform.dll in Adobe Reader that allows an attacker to perform remote code execution.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2013-0632: Adobe ColdFusion Authentication Bypass Vulnerability

Adobe · ColdFusion

An authentication bypass vulnerability exists in Adobe ColdFusion which could result in an unauthorized user gaining administrative access.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

Source: Official CISA KEV JSONCatalog released Nov 4, 2026, 8:00 PM GMT+0000Site snapshot: Nov 6, 2026, 3:08 PM GMT+0000Showing 24 of 1,768Source text normalized: network addresses and restricted context omittedRefresh interval: 30 minutes

Complete fixed-window snapshot

CVEs — Past 48 Hours

All unique CVEs returned by NVD for the displayed UTC publication window. The snapshot is accepted only when its normalized unique-item count exactly equals the API totalResults value.

Current snapshot

Entries 553–576 of 1,091