Kythos AI vulnerability intelligence

Zero-Day Exploits / Vulnerabilities

A server-rendered, source-attributed view of confirmed CISA KEV entries and all NVD CVEs published in the rolling 48-hour UTC window.

Important distinction: CISA KEV means exploitation has been observed; it does not mean every entry was a zero-day. An NVD publication in the past 48 hours does not mean exploitation has occurred. Source records describe third-party products and do not identify Kythos AI customers, contracts, affiliations, or work history.

CISA KEV catalog NVD 48-hour CVEs Kythos AI RSS feed

Confirmed exploitation intelligence

Zero-Day Exploits / Vulnerabilities

Complete CISA Known Exploited Vulnerabilities catalog, ordered by the date CISA added each entry. Every result is known to be exploited; entries are not necessarily zero-days.

Current snapshot

Entries 1,369–1,392 of 1,768

CISA KEVAdded Mar 3, 2022

CVE-2012-4681: Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

Oracle · Java SE

The Java Runtime Environment (JRE) component in Oracle Java SE allow for remote code execution.

Federal remediation due Mar 24, 2022Ransomware use: Known

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2012-1856: Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability

Microsoft · Office

The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office allows remote attackers to execute arbitrary code via a crafted (1) document or (2) web page that triggers system-state corruption.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2012-1723: Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

Oracle · Java SE

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to Hotspot.

Federal remediation due Mar 24, 2022Ransomware use: Known

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2012-1535: Adobe Flash Player Arbitrary Code Execution Vulnerability

Adobe · Flash Player

Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute arbitrary code or cause a denial of service via crafted SWF content.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: The impacted product is end-of-life and should be disconnected if still in use.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2012-0507: Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

Oracle · Java SE

An incorrect type vulnerability exists in the Concurrency component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code.

Federal remediation due Mar 24, 2022Ransomware use: Known

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2011-3544: Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

Oracle · Java SE JDK and JRE

An access control vulnerability exists in the Applet Rhino Script Engine component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2011-1889: Microsoft Forefront TMG Remote Code Execution Vulnerability

Microsoft · Forefront Threat Management Gateway (TMG)

A remote code execution vulnerability exists in the Forefront Threat Management Gateway (TMG) Firewall Client Winsock provider that could allow code execution in the security context of the client application.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2011-0611: Adobe Flash Player Remote Code Execution Vulnerability

Adobe · Flash Player

Adobe Flash Player contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: The impacted product is end-of-life and should be disconnected if still in use.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2010-3333: Microsoft Office Stack-based Buffer Overflow Vulnerability

Microsoft · Office

A stack-based buffer overflow vulnerability exists in the parsing of RTF data in Microsoft Office and earlier allows an attacker to perform remote code execution.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2010-0232: Microsoft Windows Kernel Exception Handler Vulnerability

Microsoft · Windows

The kernel in Microsoft Windows, when access to 16-bit applications is enabled on a 32-bit x86 platform, does not properly validate certain BIOS calls, which allows local users to gain privileges.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2010-0188: Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability

Adobe · Reader and Acrobat

Unspecified vulnerability in Adobe Reader and Acrobat allows attackers to cause a denial of service or possibly execute arbitrary code.

Federal remediation due Mar 24, 2022Ransomware use: Known

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2009-3129: Microsoft Excel Featheader Record Memory Corruption Vulnerability

Microsoft · Excel

Microsoft Office Excel allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2009-1123: Microsoft Windows Improper Input Validation Vulnerability

Microsoft · Windows

The kernel in Microsoft Windows does not properly validate changes to unspecified kernel objects, which allows local users to gain privileges via a crafted application.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2008-3431: Oracle VirtualBox Insufficient Input Validation Vulnerability

Oracle · VirtualBox

An input validation vulnerability exists in the VBoxDrv.sys driver of Sun xVM VirtualBox which allows attackers to locally execute arbitrary code.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2008-2992: Adobe Reader and Acrobat Input Validation Vulnerability

Adobe · Acrobat and Reader

Adobe Acrobat and Reader contain an input validation issue in a JavaScript method that could potentially lead to remote code execution.

Federal remediation due Mar 24, 2022Ransomware use: Known

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2004-0210: Microsoft Windows Privilege Escalation Vulnerability

Microsoft · Windows

A privilege elevation vulnerability exists in the POSIX subsystem. This vulnerability could allow a logged on user to take complete control of the system.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2002-0367: Microsoft Windows Privilege Escalation Vulnerability

Microsoft · Windows

smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Feb 25, 2022

CVE-2022-24682: Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability

Synacor · Zimbra Collaborate Suite (ZCS)

Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) vulnerability in the Calendar feature that allows an attacker to execute arbitrary code.

Federal remediation due Mar 11, 2022Ransomware use: Known

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Feb 25, 2022

CVE-2017-8570: Microsoft Office Remote Code Execution Vulnerability

Microsoft · Office

A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory.

Federal remediation due Aug 25, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Feb 25, 2022

CVE-2017-0222: Microsoft Internet Explorer Remote Code Execution Vulnerability

Microsoft · Internet Explorer

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory.

Federal remediation due Aug 25, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Feb 25, 2022

CVE-2014-6352: Microsoft Windows Code Injection Vulnerability

Microsoft · Windows

Microsoft Windows allow remote attackers to execute arbitrary code via a crafted OLE object.

Federal remediation due Aug 25, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Feb 22, 2022

CVE-2022-23134: Zabbix Frontend Improper Access Control Vulnerability

Zabbix · Frontend

Malicious actors can pass step checks and potentially change the configuration of Zabbix Frontend.

Federal remediation due Mar 8, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Feb 22, 2022

CVE-2022-23131: Zabbix Frontend Authentication Bypass Vulnerability

Zabbix · Frontend

Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML.

Federal remediation due Mar 8, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Feb 15, 2022

CVE-2022-24086: Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability

Adobe · Commerce and Magento Open Source

Adobe Commerce and Magento Open Source contain an improper input validation vulnerability which can allow for arbitrary code execution.

Federal remediation due Mar 1, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

Source: Official CISA KEV JSONCatalog released Nov 4, 2026, 8:00 PM GMT+0000Site snapshot: Nov 6, 2026, 1:05 PM GMT+0000Showing 24 of 1,768Source text normalized: network addresses and restricted context omittedRefresh interval: 30 minutes

Complete fixed-window snapshot

CVEs — Past 48 Hours

All unique CVEs returned by NVD for the displayed UTC publication window. The snapshot is accepted only when its normalized unique-item count exactly equals the API totalResults value.

Current snapshot

Entries 625–648 of 1,091