Patchfirst
Patchfirst
T1189Initial Access

Drive-by Compromise

Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. Multiple ways of delivering exploit code to a browser exist (i.e., Drive-by Target), including: * A legitimate website is compromised, allowing adversaries to inject malicious code * Script files served to a legitimate website from a publicly writeable cloud storage bucket are modified…

attack.mitre.org ↗
CVEs206
In 180
Reports1

Detections

3 Sigma rules tagged T1189
Drive-by CompromiseT11893 general rules

Sigma rules © SigmaHQ, Detection Rule License 1.1; linked, not reproduced.

CVEs linked to Drive-by Compromise

Top 150 of 206 by priority. Each link shows its badge.
  1. CVE-2012-0158Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability
    Microsoft · MSCOMCTL.OCXKEVRansomwarePublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution15 reports
    MITRE CTID mapping of the CVE · uncategorised
    >99.9%Top 0.02%
    89.2priority
  2. CVE-2014-6332Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability
    Microsoft · WindowsKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution5 reports
    MITRE CTID mapping of the CVE · uncategorised
    94.9%Top 0.14%
    89.1priority
  3. CVE-2010-0188Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability
    Adobe · Reader and AcrobatKEVRansomwarePublic exploitHigh · 7.8T1189Drive-by CompromiseT1105Ingress Tool Transfer2 reports
    MITRE CTID mapping of the KEV entry · how it is exploited
    88.2%Top 0.23%
    84.5priority
  4. CVE-2018-8174Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.5T1189Drive-by CompromiseT1059Command and Scripting Interpreter2 reports
    MITRE CTID mapping of the CVE · uncategorised
    88.2%Top 0.23%
    84.3priority
  5. CVE-2021-26411Microsoft Internet Explorer Memory Corruption Vulnerability
    Microsoft · Internet ExplorerKEVRansomwarePublic exploitHigh · 8.8T1189Drive-by Compromise1 report
    AI mapping from the description · how it is exploited
    81.7%Top 0.36%
    83.0priority
  6. CVE-2016-0189Microsoft Internet Explorer Memory Corruption Vulnerability
    Microsoft · Internet ExplorerKEVRansomwarePublic exploitHigh · 7.5T1189Drive-by CompromiseT1059.007JavaScript1 report
    AI mapping from the description · how it is exploited
    94.1%Top 0.15%
    82.1priority
  7. CVE-2015-8651Adobe Flash Player Integer Overflow Vulnerability
    Adobe · Flash PlayerKEVHigh · 8.8T1189Drive-by CompromiseT1105Ingress Tool Transfer+1 more · 3 reports
    MITRE CTID mapping of the KEV entry · how it is exploited
    67.7%Top 0.69%
    81.8priority
  8. CVE-2014-8439Adobe Flash Player Dereferenced Pointer Vulnerability
    Adobe · Flash PlayerKEVHigh · 8.8T1189Drive-by Compromise2 reports
    MITRE CTID mapping of the KEV entry · how it is exploited
    20.4%Top 2.5%
    79.8priority
  9. CVE-2016-7201Microsoft Edge Memory Corruption Vulnerability
    Microsoft · EdgeKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution+1 more
    AI mapping from the description · how it is exploited
    80.0%Top 0.39%
    79.1priority
  10. CVE-2016-4657Apple iOS Webkit Memory Corruption Vulnerability
    Apple · iOSKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    66.8%Top 0.71%
    79.0priority
  11. CVE-2026-48356Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
    Adobe · Commerce and MagentoKEVPublic exploitCritical · 9.3T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    44.6%Top 1.2%
    78.3priority
  12. CVE-2014-0515Buffer overflow in Adobe Flash Player before 11.7.700.279 and 11.8.x through 13.0.x before 13.0.0.206 on Windows and…
    Public exploitT1189Drive-by CompromiseT1203Exploitation for Client Execution2 reports
    AI mapping from the description · how it is exploited
    94.5%Top 0.15%
    78.2priority
  13. CVE-2019-1367Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
    Microsoft · Internet ExplorerKEVRansomwarePublic exploitHigh · 7.5T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    52.4%Top 1%
    78.0priority
  14. CVE-2015-3105Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before…
    Public exploitT1189Drive-by CompromiseT1203Exploitation for Client Execution+1 more · 2 reports
    AI mapping from the description · how it is exploited
    90.1%Top 0.2%
    77.9priority
  15. CVE-2016-3351Microsoft Internet Explorer and Edge Information Disclosure Vulnerability
    Microsoft · Internet Explorer and EdgeKEVRansomwarePublic exploitMedium · 6.5T1189Drive-by CompromiseT1005Data from Local System
    AI mapping from the description · how it is exploited
    26.5%Top 2%
    77.2priority
  16. CVE-2026-87491Google Chromium V8 Out of Bounds Write Vulnerability
    Google · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    3.5%Top 11%
    77.0priority
  17. CVE-2012-1889Microsoft XML Core Services Memory Corruption Vulnerability
    Microsoft · XML Core ServicesKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter+1 more · 3 reports
    AI mapping from the description · how it is exploited
    83.5%Top 0.32%
    76.8priority
  18. CVE-2026-85046Google Chromium V8 Type Confusion Vulnerability
    Google · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution
    AI mapping from the description · how it is exploited
    1.8%Top 21%
    74.9priority
  19. CVE-2022-2294WebRTC Heap Buffer Overflow Vulnerability
    WebRTC · WebRTCKEVRansomwareHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution
    AI mapping from the description · how it is exploited
    70.8%Top 0.6%
    74.0priority
  20. CVE-2025-14174Google Chromium Out of Bounds Memory Access Vulnerability
    Google · ChromiumKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution
    AI mapping from the description · how it is exploited
    55.3%Top 0.97%
    74.0priority
  21. CVE-2025-62593Ray-Project Ray Code Injection Vulnerability
    Ray-Project · RayKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    60.2%Top 0.87%
    74.0priority
  22. CVE-2026-2441Google Chromium CSS Use-After-Free Vulnerability
    Google · ChromiumKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    55.0%Top 0.98%
    74.0priority
  23. CVE-2025-43529Apple Multiple Products Use-After-Free WebKit Vulnerability
    Apple · Multiple ProductsKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    25.7%Top 2%
    73.8priority
  24. CVE-2022-0609Google Chromium Animation Use-After-Free Vulnerability
    Google · Chromium AnimationKEVHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution
    AI mapping from the description · how it is exploited
    22.4%Top 2.3%
    73.7priority
  25. CVE-2026-5281Google Dawn Use-After-Free Vulnerability
    Google · DawnKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution
    AI mapping from the description · how it is exploited
    13.7%Top 3.5%
    73.5priority
  26. CVE-2013-3918Microsoft Windows Out-of-Bounds Write Vulnerability
    Microsoft · WindowsKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution+1 more · 1 report
    MITRE CTID mapping of the CVE · uncategorised
    73.7%Top 0.53%
    72.9priority
  27. CVE-2020-0968Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
    Microsoft · Internet ExplorerKEVRansomwareHigh · 7.5T1189Drive-by CompromiseT1203Exploitation for Client Execution
    AI mapping from the description · how it is exploited
    30.7%Top 1.8%
    72.9priority
  28. CVE-2019-13720Google Chrome WebAudio Use-After-Free Vulnerability
    Google · Chrome WebAudioKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution1 report
    MITRE CTID mapping of the CVE · uncategorised
    49.4%Top 1.1%
    72.8priority
  29. CVE-2010-1297Adobe Flash Player Memory Corruption Vulnerability
    Adobe · Flash PlayerKEVPublic exploitHigh · 7.8T1189Drive-by CompromiseT1204.002Malicious File+1 more · 1 report
    MITRE CTID mapping of the KEV entry · how it is exploited
    82.5%Top 0.34%
    72.3priority
  30. CVE-2021-30952Apple Multiple Products Integer Overflow or Wraparound Vulnerability
    Apple · Multiple ProductsKEVPublic exploitHigh · 7.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    7.0%Top 5.9%
    72.3priority
  31. CVE-2023-43000Apple Multiple products Use-After-Free Vulnerability
    Apple · Multiple ProductsKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution
    AI mapping from the description · how it is exploited
    4.0%Top 9.4%
    72.3priority
  32. CVE-2026-42897Microsoft Exchange Server Cross-Site Scripting Vulnerability
    Microsoft · MicrosoftKEVPublic exploitMedium · 6.1T1189Drive-by CompromiseT1059.007JavaScript
    AI mapping from the description · how it is exploited
    70.7%Top 0.61%
    72.1priority
  33. CVE-2018-19953QNAP NAS File Station Cross-Site Scripting Vulnerability
    QNAP · Network Attached Storage (NAS)KEVRansomwareMedium · 6.1T1189Drive-by CompromiseT1059.007JavaScript
    AI mapping from the description · how it is exploited
    30.5%Top 1.8%
    71.9priority
  34. CVE-2018-19943QNAP NAS File Station Cross-Site Scripting Vulnerability
    QNAP · Network Attached Storage (NAS)KEVRansomwareMedium · 5.4T1189Drive-by CompromiseT1059.007JavaScript
    AI mapping from the description · how it is exploited
    22.7%Top 2.3%
    71.3priority
  35. CVE-2026-11645Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
    Google · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution
    AI mapping from the description · how it is exploited
    2.4%Top 16%
    71.0priority
  36. CVE-2026-3909Google Skia Out-of-Bounds Write Vulnerability
    Google · SkiaKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution
    AI mapping from the description · how it is exploited
    2.3%Top 16%
    70.9priority
  37. CVE-2022-27926Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
    Synacor · Zimbra Collaboration Suite (ZCS)KEVPublic exploitMedium · 6.1T1189Drive-by CompromiseT1059.007JavaScript1 report
    AI mapping from the description · how it is exploited
    17.6%Top 2.9%
    70.6priority
  38. CVE-2013-2551Microsoft Internet Explorer Use-After-Free Vulnerability
    Microsoft · Internet ExplorerKEVRansomwarePublic exploitEnd of lifeHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution2 reports
    AI mapping from the description · how it is exploited
    73.9%Top 0.52%
    70.2priority
  39. CVE-2020-15999Google Chrome FreeType Heap Buffer Overflow Vulnerability
    Google · Chrome FreeTypeKEVPublic exploitCritical · 9.6T1189Drive-by CompromiseT1203Exploitation for Client Execution
    AI mapping from the description · how it is exploited
    63.9%Top 0.78%
    69.6priority
  40. CVE-2013-0074Microsoft Silverlight Double Dereference Vulnerability
    Microsoft · SilverlightKEVRansomwarePublic exploitEnd of lifeHigh · 7.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter2 reports
    AI mapping from the description · how it is exploited
    78.9%Top 0.41%
    69.5priority
  41. CVE-2025-31277Apple Multiple Products Buffer Overflow Vulnerability
    Apple · Multiple ProductsKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution
    AI mapping from the description · how it is exploited
    1.7%Top 23%
    69.5priority
  42. CVE-2022-4135Google Chromium GPU Heap Buffer Overflow Vulnerability
    Google · Chromium GPUKEVPublic exploitCritical · 9.6T1189Drive-by CompromiseT1211Exploitation for Stealth
    AI mapping from the description · how it is exploited
    31.9%Top 1.7%
    69.4priority
  43. CVE-2023-4863Google Chromium WebP Heap-Based Buffer Overflow Vulnerability
    Google · Chromium WebPKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    >99.9%Top 0.02%
    69.2priority
  44. CVE-2024-7971Google Chromium V8 Type Confusion Vulnerability
    Google · Chromium V8KEVPublic exploitCritical · 9.6T1189Drive-by CompromiseT1203Exploitation for Client Execution
    AI mapping from the description · how it is exploited
    21.0%Top 2.4%
    69.2priority
  45. CVE-2008-0015Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability
    Microsoft · WindowsKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution
    AI mapping from the description · how it is exploited
    76.6%Top 0.46%
    69.1priority
  46. CVE-2012-4792Microsoft Internet Explorer Use-After-Free Vulnerability
    Microsoft · Internet ExplorerKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    78.8%Top 0.41%
    69.1priority
  47. CVE-2018-17463Google Chromium V8 Remote Code Execution Vulnerability
    Google · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    84.6%Top 0.3%
    69.1priority
  48. CVE-2020-6418Google Chromium V8 Type Confusion Vulnerability
    Google · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution
    MITRE CTID mapping of the CVE · uncategorised
    78.8%Top 0.41%
    69.1priority
  49. CVE-2021-21224Google Chromium V8 Type Confusion Vulnerability
    Google · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution
    AI mapping from the description · how it is exploited
    84.2%Top 0.31%
    69.1priority
  50. CVE-2024-4947Google Chromium V8 Type Confusion Vulnerability
    Google · Chromium V8KEVPublic exploitCritical · 9.6T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    MITRE CTID mapping of the KEV entry · how it is exploited
    15.2%Top 3.2%
    69.1priority
  51. CVE-2013-1690Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability
    Mozilla · Firefox and ThunderbirdKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter+1 more
    AI mapping from the description · how it is exploited
    69.0%Top 0.65%
    69.0priority
  52. CVE-2015-4495Mozilla Firefox Security Feature Bypass Vulnerability
    Mozilla · FirefoxKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1005Data from Local System
    AI mapping from the description · how it is exploited
    68.6%Top 0.66%
    69.0priority
  53. CVE-2018-6065Google Chromium V8 Integer Overflow Vulnerability
    Google · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    60.3%Top 0.86%
    69.0priority
  54. CVE-2021-21220Google Chromium V8 Improper Input Validation Vulnerability
    Google · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution
    AI mapping from the description · how it is exploited
    70.4%Top 0.61%
    69.0priority
  55. CVE-2021-30551Google Chromium V8 Type Confusion Vulnerability
    Google · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution
    AI mapping from the description · how it is exploited
    64.7%Top 0.76%
    69.0priority
  56. CVE-2021-30632Google Chromium V8 Out-of-Bounds Write Vulnerability
    Google · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution
    AI mapping from the description · how it is exploited
    63.2%Top 0.8%
    69.0priority
  57. CVE-2016-1646Google Chromium V8 Out-of-Bounds Read Vulnerability
    Google · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1499.004Application or System Exploitation
    AI mapping from the description · how it is exploited
    48.1%Top 1.1%
    68.9priority
  58. CVE-2017-5030Google Chromium V8 Memory Corruption Vulnerability
    Google · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution
    AI mapping from the description · how it is exploited
    40.6%Top 1.4%
    68.9priority
  59. CVE-2018-17480Google Chromium V8 Out-of-Bounds Write Vulnerability
    Google · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    35.6%Top 1.5%
    68.9priority
  60. CVE-2019-11707Mozilla Firefox and Thunderbird Type Confusion Vulnerability
    Mozilla · Firefox and ThunderbirdKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution
    AI mapping from the description · how it is exploited
    38.0%Top 1.5%
    68.9priority
  61. CVE-2019-17026Mozilla Firefox And Thunderbird Type Confusion Vulnerability
    Mozilla · Firefox and ThunderbirdKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter+1 more
    MITRE CTID mapping of the CVE · uncategorised
    46.3%Top 1.2%
    68.9priority
  62. CVE-2020-16009Google Chromium V8 Type Confusion Vulnerability
    Google · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution
    AI mapping from the description · how it is exploited
    48.3%Top 1.1%
    68.9priority
  63. CVE-2021-38003Google Chromium V8 Memory Corruption Vulnerability
    Google · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution
    AI mapping from the description · how it is exploited
    38.6%Top 1.4%
    68.9priority
  64. CVE-2023-2033Google Chromium V8 Type Confusion Vulnerability
    Google · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    40.8%Top 1.3%
    68.9priority
  65. CVE-2023-3079Google Chromium V8 Type Confusion Vulnerability
    Google · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    37.9%Top 1.5%
    68.9priority
  66. CVE-2016-5198Google Chromium V8 Out-of-Bounds Memory Vulnerability
    Google · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution
    AI mapping from the description · how it is exploited
    34.2%Top 1.6%
    68.8priority
  67. CVE-2017-5070Google Chromium V8 Type Confusion Vulnerability
    Google · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution
    AI mapping from the description · how it is exploited
    32.1%Top 1.7%
    68.8priority
  68. CVE-2023-28205Apple Multiple Products WebKit Use-After-Free Vulnerability
    Apple · Multiple ProductsKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    27.1%Top 2%
    68.8priority
  69. CVE-2014-0502Adobe Flash Player Double Free Vulnerablity
    Adobe · Flash PlayerKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution
    AI mapping from the description · how it is exploited
    24.8%Top 2.1%
    68.7priority
  70. CVE-2022-1096Google Chromium V8 Type Confusion Vulnerability
    Google · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution
    AI mapping from the description · how it is exploited
    24.7%Top 2.1%
    68.7priority
  71. CVE-2022-4262Google Chromium V8 Type Confusion Vulnerability
    Google · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    23.5%Top 2.2%
    68.7priority
  72. CVE-2023-41993Apple Multiple Products WebKit Code Execution Vulnerability
    Apple · Multiple ProductsKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    24.3%Top 2.1%
    68.7priority
  73. CVE-2022-22620Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability
    Apple · iOS, iPadOS, and macOSKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    16.3%Top 3%
    68.6priority
  74. CVE-2024-5274Google Chromium V8 Type Confusion Vulnerability
    Google · Chromium V8KEVPublic exploitCritical · 9.6T1189Drive-by CompromiseT1203Exploitation for Client Execution
    MITRE CTID mapping of the KEV entry · how it is exploited
    7.7%Top 5.4%
    68.6priority
  75. CVE-2024-7965Google Chromium V8 Inappropriate Implementation Vulnerability
    Google · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution
    AI mapping from the description · how it is exploited
    18.5%Top 2.8%
    68.6priority
  76. CVE-2019-8506Apple Multiple Products Type Confusion Vulnerability
    Apple · Multiple ProductsKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    16.2%Top 3.1%
    68.5priority
  77. CVE-2022-1364Google Chromium V8 Type Confusion Vulnerability
    Google · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution
    AI mapping from the description · how it is exploited
    13.9%Top 3.5%
    68.5priority
  78. CVE-2022-26485Mozilla Firefox Use-After-Free Vulnerability
    Mozilla · FirefoxKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution
    AI mapping from the description · how it is exploited
    14.3%Top 3.4%
    68.5priority
  79. CVE-2026-21513Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability
    Microsoft · WindowsKEVHigh · 8.8T1189Drive-by CompromiseT1553Subvert Trust Controls
    AI mapping from the description · how it is exploited
    15.9%Top 3.1%
    68.5priority
  80. CVE-2021-30858Apple iOS, iPadOS, macOS Use-After-Free Vulnerability
    Apple · iOS, iPadOS, and macOSKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    13.4%Top 3.6%
    68.4priority
  81. CVE-2011-0609Adobe Flash Player Unspecified Vulnerability
    Adobe · Flash PlayerKEVPublic exploitHigh · 7.8T1189Drive-by CompromiseT1203Exploitation for Client Execution+1 more
    AI mapping from the description · how it is exploited
    63.5%Top 0.79%
    68.3priority
  82. CVE-2021-21193Google Chromium Blink Use-After-Free Vulnerability
    Google · Chromium BlinkKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    10.0%Top 4.4%
    68.3priority
  83. CVE-2024-23222Apple Multiple Products WebKit Type Confusion Vulnerability
    Apple · Multiple ProductsKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    10.6%Top 4.2%
    68.3priority
  84. CVE-2024-44308Apple Multiple Products Code Execution Vulnerability
    Apple · Multiple ProductsKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution
    AI mapping from the description · how it is exploited
    9.9%Top 4.4%
    68.3priority
  85. CVE-2025-6558Google Chromium ANGLE and GPU Improper Input Validation Vulnerability
    Google · ChromiumKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution+1 more
    MITRE CTID mapping of the KEV entry · how it is exploited
    10.9%Top 4.1%
    68.3priority
  86. CVE-2018-8298ChakraCore Scripting Engine Type Confusion Vulnerability
    ChakraCore · ChakraCore scripting engineKEVPublic exploitHigh · 7.5T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    74.7%Top 0.5%
    68.2priority
  87. CVE-2019-1429Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
    Microsoft · Internet ExplorerKEVPublic exploitHigh · 7.5T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    77.3%Top 0.44%
    68.2priority
  88. CVE-2020-0674Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
    Microsoft · Internet ExplorerKEVPublic exploitHigh · 7.5T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    86.9%Top 0.26%
    68.2priority
  89. CVE-2024-38112Microsoft Windows MSHTML Platform Spoofing Vulnerability
    Microsoft · WindowsKEVPublic exploitHigh · 7.5T1189Drive-by CompromiseT1204.001Malicious Link
    MITRE CTID mapping of the KEV entry · how it is exploited
    84.2%Top 0.3%
    68.2priority
  90. CVE-2020-0878Microsoft Edge and Internet Explorer Memory Corruption Vulnerability
    Microsoft · Edge and Internet ExplorerKEVRansomwareMedium · 4.2T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    2.7%Top 14%
    68.1priority
  91. CVE-2025-5419Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
    Google · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution
    MITRE CTID mapping of the KEV entry · how it is exploited
    7.5%Top 5.5%
    68.1priority
  92. CVE-2025-6554Google Chromium V8 Type Confusion Vulnerability
    Google · Chromium V8KEVPublic exploitHigh · 8.1T1189Drive-by CompromiseT1203Exploitation for Client Execution+1 more
    MITRE CTID mapping of the KEV entry · how it is exploited
    14.1%Top 3.4%
    68.0priority
  93. CVE-2023-7024Google Chromium WebRTC Heap Buffer Overflow Vulnerability
    Google · Chromium WebRTCKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1574Hijack Execution Flow
    MITRE CTID mapping of the KEV entry · how it is exploited
    6.7%Top 6.1%
    67.9priority
  94. CVE-2015-2419Microsoft Internet Explorer Memory Corruption Vulnerability
    Microsoft · Internet ExplorerKEVPublic exploitEnd of lifeHigh · 8.8T1189Drive-by CompromiseT1059.007JavaScript1 report
    MITRE CTID mapping of the CVE · uncategorised
    53.0%Top 1%
    67.8priority
  95. CVE-2025-13223Google Chromium V8 Type Confusion Vulnerability
    Google · Chromium V8KEVHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    4.9%Top 7.9%
    67.6priority
  96. CVE-2019-5786Google Chrome Blink Use-After-Free Vulnerability
    Google · Chrome BlinkKEVPublic exploitMedium · 6.5T1189Drive-by CompromiseT1499.004Application or System Exploitation
    AI mapping from the description · how it is exploited
    61.1%Top 0.84%
    67.4priority
  97. CVE-2019-5825Google Chromium V8 Out-of-Bounds Write Vulnerability
    Google · Chromium V8KEVPublic exploitMedium · 6.5T1189Drive-by CompromiseT1499.004Application or System Exploitation
    AI mapping from the description · how it is exploited
    55.9%Top 0.95%
    67.4priority
  98. CVE-2021-1789Apple Multiple Products Type Confusion Vulnerability
    Apple · Multiple ProductsKEVHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter1 report
    AI mapping from the description · how it is exploited
    14.0%Top 3.5%
    67.3priority
  99. CVE-2019-9978WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability
    WordPress · Social Warfare PluginKEVPublic exploitMedium · 6.1T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    MITRE CTID mapping of the CVE · uncategorised
    72.9%Top 0.55%
    67.2priority
  100. CVE-2020-13965Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability
    Roundcube · WebmailKEVPublic exploitMedium · 6.1T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    76.6%Top 0.46%
    67.2priority
  101. CVE-2024-0519Google Chromium V8 Out-of-Bounds Memory Access Vulnerability
    Google · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution
    AI mapping from the description · how it is exploited
    3.8%Top 10%
    67.2priority
  102. CVE-2023-43770Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability
    Roundcube · WebmailKEVPublic exploitMedium · 6.1T1189Drive-by CompromiseT1059Command and Scripting Interpreter+1 more
    MITRE CTID mapping of the KEV entry · how it is exploited
    63.7%Top 0.79%
    67.1priority
  103. CVE-2017-0022Microsoft XML Core Services Information Disclosure Vulnerability
    Microsoft · XML Core ServicesKEVPublic exploitMedium · 6.5T1189Drive-by CompromiseT1005Data from Local System
    MITRE CTID mapping of the CVE · uncategorised
    18.1%Top 2.8%
    67.0priority
  104. CVE-2021-30533Google Chromium PopupBlocker Security Bypass Vulnerability
    Google · Chromium PopupBlockerKEVPublic exploitMedium · 6.5T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    16.7%Top 3%
    67.0priority
  105. CVE-2021-37976Google Chromium Information Disclosure Vulnerability
    Google · ChromiumKEVPublic exploitMedium · 6.5T1189Drive-by CompromiseT1005Data from Local System
    AI mapping from the description · how it is exploited
    19.9%Top 2.6%
    67.0priority
  106. CVE-2020-35730Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability
    Roundcube · Roundcube WebmailKEVPublic exploitMedium · 6.1T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    32.9%Top 1.6%
    66.9priority
  107. CVE-2016-0034Microsoft Silverlight Runtime Remote Code Execution Vulnerability
    Microsoft · SilverlightKEVRansomwareEnd of lifeHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter+1 more · 3 reports
    MITRE CTID mapping of the CVE · uncategorised
    69.4%Top 0.64%
    66.8priority
  108. CVE-2022-26486Mozilla Firefox Use-After-Free Vulnerability
    Mozilla · FirefoxKEVPublic exploitCritical · 9.6T1189Drive-by CompromiseT1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    2.4%Top 16%
    66.5priority
  109. CVE-2015-0359Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows…
    Public exploitT1189Drive-by CompromiseT1203Exploitation for Client Execution1 report
    AI mapping from the description · how it is exploited
    92.1%Top 0.18%
    66.4priority
  110. CVE-2013-1675Mozilla Firefox Information Disclosure Vulnerability
    Mozilla · FirefoxKEVPublic exploitMedium · 6.5T1189Drive-by CompromiseT1005Data from Local System
    AI mapping from the description · how it is exploited
    6.7%Top 6.1%
    66.3priority
  111. CVE-2026-3910Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability
    Google · Chromium V8KEVHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    2.7%Top 14%
    66.3priority
  112. CVE-2022-2856Google Chromium Intents Insufficient Input Validation Vulnerability
    Google · Chromium IntentsKEVPublic exploitMedium · 6.5T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    4.6%Top 8.4%
    65.9priority
  113. CVE-2015-0336Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before…
    Public exploitT1189Drive-by CompromiseT1203Exploitation for Client Execution1 report
    AI mapping from the description · how it is exploited
    70.4%Top 0.61%
    65.7priority
  114. CVE-2021-38000Google Chromium Intents Improper Input Validation Vulnerability
    Google · Chromium IntentsKEVPublic exploitMedium · 6.1T1189Drive-by CompromiseT1204.001Malicious Link
    AI mapping from the description · how it is exploited
    4.9%Top 7.9%
    65.7priority
  115. CVE-2013-3896Microsoft Silverlight Information Disclosure Vulnerability
    Microsoft · SilverlightKEVPublic exploitEnd of lifeMedium · 5.5T1189Drive-by CompromiseT1005Data from Local System1 report
    AI mapping from the description · how it is exploited
    68.0%Top 0.68%
    65.6priority
  116. CVE-2015-3090Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before…
    Public exploitT1189Drive-by CompromiseT1203Exploitation for Client Execution+1 more · 1 report
    AI mapping from the description · how it is exploited
    83.2%Top 0.32%
    65.4priority
  117. CVE-2009-0075Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows…
    Public exploitT1189Drive-by CompromiseT1203Exploitation for Client Execution1 report
    AI mapping from the description · how it is exploited
    84.6%Top 0.3%
    64.9priority
  118. CVE-2021-30633Google Chromium Indexed DB API Use-After-Free Vulnerability
    Google · Chromium Indexed DB APIKEVCritical · 9.6T1189Drive-by CompromiseT1211Exploitation for Stealth
    AI mapping from the description · how it is exploited
    33.2%Top 1.6%
    64.4priority
  119. CVE-2014-4148Microsoft Windows Remote Code Execution Vulnerability
    Microsoft · WindowsKEVHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    59.9%Top 0.87%
    64.0priority
  120. CVE-2016-7256Microsoft Windows Open Type Font Remote Code Execution Vulnerability
    Microsoft · WindowsKEVHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution
    MITRE CTID mapping of the CVE · uncategorised
    64.6%Top 0.76%
    64.0priority
  121. CVE-2009-1537Microsoft DirectX NULL Byte Overwrite Vulnerability
    Microsoft · DirectXKEVHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    51.4%Top 1.1%
    63.9priority
  122. CVE-2015-0310Adobe Flash Player ASLR Bypass Vulnerability
    Adobe · Flash PlayerKEVEnd of lifeHigh · 7.8T1189Drive-by Compromise2 reports
    MITRE CTID mapping of the KEV entry · how it is exploited
    15.1%Top 3.3%
    63.9priority
  123. CVE-2021-37973Google Chromium Portals Use-After-Free Vulnerability
    Google · Chromium PortalsKEVCritical · 9.6T1189Drive-by CompromiseT1211Exploitation for Stealth
    AI mapping from the description · how it is exploited
    11.7%Top 3.9%
    63.9priority
  124. CVE-2023-4762Google Chromium V8 Type Confusion Vulnerability
    Google · Chromium V8KEVHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    41.4%Top 1.3%
    63.9priority
  125. CVE-2023-32435Apple Multiple Products WebKit Memory Corruption Vulnerability
    Apple · Multiple ProductsKEVHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    23.0%Top 2.3%
    63.7priority
  126. CVE-2023-32439Apple Multiple Products WebKit Type Confusion Vulnerability
    Apple · Multiple ProductsKEVHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    24.0%Top 2.2%
    63.7priority
  127. CVE-2024-4671Google Chromium Visuals Use-After-Free Vulnerability
    Google · ChromiumKEVCritical · 9.6T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    MITRE CTID mapping of the KEV entry · how it is exploited
    8.3%Top 5.1%
    63.7priority
  128. CVE-2023-37450Apple Multiple Products WebKit Code Execution Vulnerability
    Apple · Multiple ProductsKEVHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    18.9%Top 2.7%
    63.6priority
  129. CVE-2020-16010Google Chrome for Android UI Heap Buffer Overflow Vulnerability
    Google · Chrome for Android UIKEVCritical · 9.6T1189Drive-by CompromiseT1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    6.4%Top 6.4%
    63.4priority
  130. CVE-2023-32373Apple Multiple Products WebKit Use-After-Free Vulnerability
    Apple · Multiple ProductsKEVHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    12.2%Top 3.8%
    63.4priority
  131. CVE-2016-3393Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability
    Microsoft · WindowsKEVHigh · 7.8T1189Drive-by CompromiseT1203Exploitation for Client Execution
    MITRE CTID mapping of the CVE · uncategorised
    68.5%Top 0.67%
    63.3priority
  132. CVE-2020-6572Google Chrome Media Use-After-Free Vulnerability
    Google · Chrome MediaKEVHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution
    AI mapping from the description · how it is exploited
    10.6%Top 4.2%
    63.3priority
  133. CVE-2021-30761Apple iOS WebKit Memory Corruption Vulnerability
    Apple · iOSKEVHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution
    AI mapping from the description · how it is exploited
    10.5%Top 4.2%
    63.3priority
  134. CVE-2021-30762Apple iOS WebKit Use-After-Free Vulnerability
    Apple · iOSKEVHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    11.0%Top 4.1%
    63.3priority
  135. CVE-2022-32893Apple iOS and macOS Out-of-Bounds Write Vulnerability
    Apple · iOS and macOSKEVHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution
    AI mapping from the description · how it is exploited
    9.9%Top 4.4%
    63.3priority
  136. CVE-2019-0752Microsoft Internet Explorer Type Confusion Vulnerability
    Microsoft · Internet ExplorerKEVRansomwarePublic exploitEnd of lifeHigh · 7.5T1189Drive-by CompromiseT1203Exploitation for Client Execution
    AI mapping from the description · how it is exploited
    81.7%Top 0.36%
    63.2priority
  137. CVE-2021-30563Google Chromium V8 Type Confusion Vulnerability
    Google · Chromium V8KEVHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution
    AI mapping from the description · how it is exploited
    9.0%Top 4.7%
    63.2priority
  138. CVE-2022-42856Apple iOS Type Confusion Vulnerability
    Apple · iOSKEVHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    8.5%Top 5%
    63.2priority
  139. CVE-2023-23529Apple Multiple Products WebKit Type Confusion Vulnerability
    Apple · Multiple ProductsKEVHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution
    AI mapping from the description · how it is exploited
    9.4%Top 4.6%
    63.2priority
  140. CVE-2023-42917Apple Multiple Products WebKit Memory Corruption Vulnerability
    Apple · Multiple ProductsKEVHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    9.3%Top 4.6%
    63.2priority
  141. CVE-2021-33742Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability
    Microsoft · WindowsKEVHigh · 7.5T1189Drive-by CompromiseT1203Exploitation for Client Execution
    AI mapping from the description · how it is exploited
    59.4%Top 0.88%
    63.1priority
  142. CVE-2021-4102Google Chromium V8 Use-After-Free Vulnerability
    Google · Chromium V8KEVHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    7.8%Top 5.3%
    63.1priority
  143. CVE-2022-3723Google Chromium V8 Type Confusion Vulnerability
    Google · Chromium V8KEVHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    7.9%Top 5.3%
    63.1priority
  144. CVE-2024-38178Microsoft Windows Scripting Engine Memory Corruption Vulnerability
    Microsoft · WindowsKEVHigh · 7.5T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    41.4%Top 1.3%
    63.0priority
  145. CVE-2021-30661Apple Multiple Products WebKit Storage Use-After-Free Vulnerability
    Apple · Multiple ProductsKEVHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    4.5%Top 8.5%
    62.5priority
  146. CVE-2021-34448Microsoft Windows Scripting Engine Memory Corruption Vulnerability
    Microsoft · WindowsKEVMedium · 6.8T1189Drive-by CompromiseT1203Exploitation for Client Execution
    AI mapping from the description · how it is exploited
    40.1%Top 1.4%
    62.5priority
  147. CVE-2012-2034Adobe Flash Player Memory Corruption Vulnerability
    Adobe · Flash PlayerKEVHigh · 7.5T1189Drive-by Compromise
    MITRE CTID mapping of the KEV entry · how it is exploited
    7.7%Top 5.4%
    62.2priority
  148. CVE-2021-30665Apple Multiple Products WebKit Memory Corruption Vulnerability
    Apple · Multiple ProductsKEVHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution
    AI mapping from the description · how it is exploited
    3.7%Top 10%
    62.1priority
  149. CVE-2021-30663Apple Multiple Products WebKit Integer Overflow Vulnerability
    Apple · Multiple ProductsKEVHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    3.5%Top 11%
    62.0priority
  150. CVE-2023-42916Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability
    Apple · Multiple ProductsKEVMedium · 6.5T1189Drive-by CompromiseT1005Data from Local System
    AI mapping from the description · how it is exploited
    17.8%Top 2.8%
    62.0priority

Passages that support these links

First 40, from the highest-priority CVEs
↑ ↓ chooseEnter openEsc close