Kythos AI vulnerability intelligence
Zero-Day Exploits / Vulnerabilities
A server-rendered, source-attributed view of confirmed CISA KEV entries and all NVD CVEs published in the rolling 48-hour UTC window.
Important distinction: CISA KEV means exploitation has been observed; it does not mean every entry was a zero-day. An NVD publication in the past 48 hours does not mean exploitation has occurred. Source records describe third-party products and do not identify Kythos AI customers, contracts, affiliations, or work history.
Confirmed exploitation intelligence
Zero-Day Exploits / Vulnerabilities
Complete CISA Known Exploited Vulnerabilities catalog, ordered by the date CISA added each entry. Every result is known to be exploited; entries are not necessarily zero-days.
Entries 1,393–1,416 of 1,769
CVE-2022-24086: Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability
Adobe · Commerce and Magento Open Source
Adobe Commerce and Magento Open Source contain an improper input validation vulnerability which can allow for arbitrary code execution.
Required action: Apply updates per vendor instructions.
CVE-2022-0609: Google Chromium Animation Use-After-Free Vulnerability
Google · Chromium Animation
Google Chromium Animation contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and…
Required action: Apply updates per vendor instructions.
CVE-2019-0752: Microsoft Internet Explorer Type Confusion Vulnerability
Microsoft · Internet Explorer
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer
Required action: Apply updates per vendor instructions.
CVE-2018-8174: Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability
Microsoft · Windows
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution"
Required action: Apply updates per vendor instructions.
CVE-2018-20250: WinRAR Absolute Path Traversal Vulnerability
RARLAB · WinRAR
WinRAR Absolute Path Traversal vulnerability leads to Remote Code Execution
Required action: Apply updates per vendor instructions.
CVE-2018-15982: Adobe Flash Player Use-After-Free Vulnerability
Adobe · Flash Player
Adobe Flash Player com.adobe.tvsdk.mediacore.metadata Use After Free Vulnerability
Required action: The impacted product is end-of-life and should be disconnected if still in use.
CVE-2017-9841: PHPUnit Command Injection Vulnerability
PHPUnit · PHPUnit
PHPUnit allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "
Required action: Apply updates per vendor instructions.
CVE-2014-1761: Microsoft Word Memory Corruption Vulnerability
Microsoft · Word
Microsoft Word contains a memory corruption vulnerability which when exploited could allow for remote code execution.
Required action: Apply updates per vendor instructions.
CVE-2013-3906: Microsoft Graphics Component Memory Corruption Vulnerability
Microsoft · Graphics Component
Microsoft Graphics Component contains a memory corruption vulnerability which can allow for remote code execution.
Required action: Apply updates per vendor instructions.
CVE-2022-22620: Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability
Apple · iOS, iPadOS, and macOS
Apple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely…
Required action: Apply updates per vendor instructions.
CVE-2021-36934: Microsoft Windows SAM Local Privilege Escalation Vulnerability
Microsoft · Windows
If a Volume Shadow Copy (VSS) shadow copy of the system drive is available, users can read the SAM file which would allow any user to escalate privileges to SYSTEM level.
Required action: Apply updates per vendor instructions.
CVE-2020-0796: Microsoft SMBv3 Remote Code Execution Vulnerability
Microsoft · SMBv3
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server or client.
Required action: Apply updates per vendor instructions.
CVE-2018-1000861: Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability
Jenkins · Jenkins Stapler Web Framework
A code execution vulnerability exists in the Stapler web framework used by Jenkins
Required action: Apply updates per vendor instructions.
CVE-2017-9791: Apache Struts 1 Improper Input Validation Vulnerability
Apache · Struts 1
The Struts 1 plugin in Apache Struts might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage.
Required action: Apply updates per vendor instructions.
CVE-2017-8464: Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability
Microsoft · Windows
Windows Shell in multiple versions of Microsoft Windows allows local users or remote attackers to execute arbitrary code via a crafted .LNK file
Required action: Apply updates per vendor instructions.
CVE-2017-10271: Oracle Corporation WebLogic Server Remote Code Execution Vulnerability
Oracle · WebLogic Server
Oracle Corporation WebLogic Server contains a vulnerability that allows for remote code execution.
Required action: Apply updates per vendor instructions.
CVE-2017-0263: Microsoft Win32k Privilege Escalation Vulnerability
Microsoft · Win32k
Microsoft Win32k contains a privilege escalation vulnerability due to the Windows kernel-mode driver failing to properly handle objects in memory.
Required action: Apply updates per vendor instructions.
CVE-2017-0262: Microsoft Office Remote Code Execution Vulnerability
Microsoft · Office
A remote code execution vulnerability exists in Microsoft Office.
Required action: Apply updates per vendor instructions.
CVE-2017-0145: Microsoft SMBv1 Remote Code Execution Vulnerability
Microsoft · SMBv1
The SMBv1 server in multiple Microsoft Windows versions allows remote attackers to execute arbitrary code via crafted packets.
Required action: Apply updates per vendor instructions.
CVE-2017-0144: Microsoft SMBv1 Remote Code Execution Vulnerability
Microsoft · SMBv1
The SMBv1 server in multiple Microsoft Windows versions allows remote attackers to execute arbitrary code via crafted packets.
Required action: Apply updates per vendor instructions.
CVE-2016-3088: Apache ActiveMQ Improper Input Validation Vulnerability
Apache · ActiveMQ
The Fileserver web application in Apache ActiveMQ allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request
Required action: Apply updates per vendor instructions.
CVE-2015-2051: D-Link DIR-645 Router Remote Code Execution Vulnerability
D-Link · DIR-645 Router
D-Link DIR-645 Wired/Wireless Router allows remote attackers to execute arbitrary commands via a GetDeviceSettings action to the HNAP interface.
Required action: The impacted product is end-of-life and should be disconnected if still in use.
CVE-2015-1635: Microsoft HTTP.sys Remote Code Execution Vulnerability
Microsoft · HTTP.sys
Microsoft HTTP protocol stack (HTTP.sys) contains a vulnerability that allows for remote code execution.
Required action: Apply updates per vendor instructions.
CVE-2015-1130: Apple OS X Authentication Bypass Vulnerability
Apple · OS X
The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges.
Required action: Apply updates per vendor instructions.
Complete fixed-window snapshot
CVEs — Past 48 Hours
All unique CVEs returned by NVD for the displayed UTC publication window. The snapshot is accepted only when its normalized unique-item count exactly equals the API totalResults value.
Entries 937–960 of 1,041
CVE-2026-123324
In JetBrains YouTrack before 2026.2.19562 information disclosure via shared mailbox message history was possible
CVE-2026-123323
In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 improper URL validation in the app widget host allowed apps to send REST requests without user confirmation
CVE-2026-123322
In JetBrains WebStorm before 2026.3, 2026.2.4 code execution was possible in untrusted projects via the Angular CLI schematics loader
CVE-2026-123321
In JetBrains WebStorm before 2026.3, 2026.2.3 code execution via Grunt and Gulp task loading was possible in untrusted projects
CVE-2026-123320
In JetBrains Toolbox App before 3.9 insufficient warning in the login dialog allowed connecting to a malicious server
CVE-2026-123319
In JetBrains Ktor before 3.6.1 missing Domain attribute validation in client cookie storage allowed cookie injection
CVE-2026-123318
In JetBrains Ktor before 3.6.1 hTTP request smuggling was possible in the CIO engine
CVE-2026-123317
In JetBrains Ktor before 3.6.1 session forgery was possible via tampered encrypted session cookies
CVE-2026-123316
In JetBrains Junie CLI before 26.6.29 sensitive environment variables were exposed in session event logs
CVE-2026-123315
In JetBrains Junie CLI before 26.8.24 command execution was possible via the Allow Similar Commands option
CVE-2026-123314
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 xXE attack was possible via an XML response to an HTTP Client request
CVE-2026-123313
In JetBrains IntelliJ IDEA before 2026.3 improper checks could enable disabled plugins via external dependency settings
CVE-2026-123312
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 sSRF was possible via annotations.xml files during indexing
CVE-2026-123311
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 command execution via a hidden run control in the Markdown preview was possible
CVE-2026-123310
In JetBrains IntelliJ IDEA before 2026.3 kotlin scripts could trigger dependency downloads from arbitrary repositories in untrusted projects
CVE-2026-123309
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 stored XSS was possible on the built-in web server via Markdown preview
CVE-2026-123308
In JetBrains IntelliJ IDEA before 2026.3 code execution via the document import was possible in untrusted projects
CVE-2026-123307
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 unauthenticated connection to an arbitrary host via run configurations was possible
CVE-2026-123306
In JetBrains IntelliJ IDEA before 2026.3 improper checks allowed server certificates to be added to the trust store during headless runs
CVE-2026-123305
In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via unpacking Dev Container archives from a remote host
CVE-2026-123304
In JetBrains IntelliJ IDEA before 2026.3 code execution in untrusted projects via a configured ShellCheck path
CVE-2026-123302
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4, 2026.1.5.1, 2025.3.6.2 code execution was possible in untrusted projects via script engine discovery
CVE-2026-123301
In JetBrains IntelliJ IDEA before 2026.3 dOM-based XSS in the OpenAPI preview error view was possible
CVE-2026-123300
In JetBrains Hub before 2026.2.52519 missing authorisation allowed users with read-only access to modify auth module group mappings