T1204.002Execution
Malicious File
An adversary may rely upon a user opening a malicious file in order to gain execution. Users may be subjected to social engineering to get them to open a file that will lead to code execution. This user action will typically be observed as follow-on behavior from Spearphishing Attachment. Adversaries may use several types of files that require a user to execute them…
CVEs174
In CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it.144
Reports1
Detections
39 Sigma rules tagged T1204.002Malicious FileT1204.00239 general rules
- Droppers Exploiting CVE-2017-11882criticalstable
- Ursnif Malware C2 URL Patterncriticalstable
- Exploit for CVE-2017-8759criticaltest
- Potential Maze Ransomware Activitycriticaltest
- File With Uncommon Extension Created By An Office Applicationhightest
- Flash Player Update from Suspicious Locationhightest
- GAC DLL Loaded Via Office Applicationshightest
- HackTool - LittleCorporal Generated Maldoc Injectionhightest
Sigma rules © SigmaHQ, Detection Rule License 1.1; linked, not reproduced.
CVEs linked to Malicious File
Top 150 of 174 by priority. Each link shows its badge.- CVE-2017-0199Microsoft Office and WordPad Remote Code Execution VulnerabilityMicrosoft · Office and WordPadKEVRansomwarePublic exploitHigh · 7.8T1204.002Malicious FileT1203Exploitation for Client Execution12 reportsAI mapping from the description · how it is exploited99.5%Top 0.06%88.4priority
- CVE-2018-0802Microsoft Office Memory Corruption VulnerabilityMicrosoft · OfficeKEVRansomwarePublic exploitHigh · 7.8T1204.002Malicious FileT1203Exploitation for Client Execution8 reportsAI mapping from the description · how it is exploited93.3%Top 0.17%88.4priority
- CVE-2015-1641Microsoft Office Memory Corruption VulnerabilityMicrosoft · OfficeKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1203Exploitation for Client Execution4 reportsAI mapping from the description · how it is exploited97.2%Top 0.1%87.4priority
- CVE-2022-30190Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution VulnerabilityMicrosoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1204.002Malicious FileT1105Ingress Tool Transfer4 reportsMITRE CTID mapping of the KEV entry · how it is exploited99.2%Top 0.07%87.4priority
- CVE-2021-40444Microsoft MSHTML Remote Code Execution VulnerabilityMicrosoft · MSHTMLKEVRansomwarePublic exploitHigh · 8.8T1204.002Malicious FileT1203Exploitation for Client Execution3 reportsAI mapping from the description · how it is exploited97.8%Top 0.09%86.9priority
- CVE-2018-20250WinRAR Absolute Path Traversal VulnerabilityRARLAB · WinRARKEVRansomwarePublic exploitHigh · 7.8T1204.002Malicious FileT1036Masquerading3 reportsMITRE CTID mapping of the CVE · uncategorised96.0%Top 0.12%86.2priority
- CVE-2021-1675Microsoft Windows Print Spooler Remote Code Execution VulnerabilityMicrosoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1204.002Malicious FileT1059Command and Scripting Interpreter3 reportsAI mapping from the description · how it is exploited85.3%Top 0.28%86.1priority
- CVE-2015-2546Microsoft Win32k Memory Corruption VulnerabilityMicrosoft · Win32kKEVRansomwarePublic exploitHigh · 8.2T1204.002Malicious FileT1068Exploitation for Privilege Escalation1 reportAI mapping from the description · how it is exploited10.1%Top 4.4%81.7priority
- CVE-2013-3900Microsoft WinVerifyTrust function Remote Code ExecutionMicrosoft · WinVerifyTrust functionKEVPublic exploitMedium · 5.5T1204.002Malicious FileT1553.002Code Signing1 reportAI mapping from the description · how it is exploited44.6%Top 1.2%80.5priority
- CVE-2011-3402Microsoft Windows Remote Code Execution VulnerabilityMicrosoft · WindowsKEVPublic exploitHigh · 8.8T1204.002Malicious FileT1203Exploitation for Client ExecutionAI mapping from the description · how it is exploited78.1%Top 0.42%79.1priority
- CVE-2018-0798Microsoft Office Memory Corruption VulnerabilityMicrosoft · OfficeKEVPublic exploitHigh · 8.8T1204.002Malicious FileT1203Exploitation for Client Execution5 reportsAI mapping from the description · how it is exploited95.1%Top 0.14%79.1priority
- CVE-2025-8088RARLAB WinRAR Path Traversal VulnerabilityRARLAB · WinRARKEVRansomwarePublic exploitHigh · 8.8T1204.002Malicious FileT1059Command and Scripting InterpreterAI mapping from the description · how it is exploited94.0%Top 0.15%79.1priority
- CVE-2026-86950Apple Multiple Products Out-of-Bounds Write VulnerabilityApple · Multiple ProductsKEVPublic exploitHigh · 8.8T1204.002Malicious FileT1059Command and Scripting InterpreterAI mapping from the description · how it is exploited26.2%Top 2%78.8priority
- CVE-2008-2992Adobe Reader and Acrobat Input Validation VulnerabilityMITRE CTID mapping of the KEV entry · how it is exploited99.8%Top 0.04%78.5priority
- CVE-2010-3333Microsoft Office Stack-based Buffer Overflow VulnerabilityMicrosoft · OfficeKEVPublic exploitHigh · 7.8T1203Exploitation for Client ExecutionT1204.002Malicious File5 reportsMITRE CTID mapping of the CVE · uncategorised89.4%Top 0.22%78.4priority
- CVE-2017-8570Microsoft Office Remote Code Execution VulnerabilityMicrosoft · OfficeKEVPublic exploitHigh · 7.8T1203Exploitation for Client ExecutionT1204.002Malicious File5 reportsMITRE CTID mapping of the CVE · uncategorised89.9%Top 0.21%78.4priority
- CVE-2020-28949PEAR Archive_Tar Deserialization of Untrusted Data VulnerabilityAI mapping from the description · how it is exploited84.6%Top 0.3%78.4priority
- CVE-2016-0151Microsoft Windows CSRSS Security Feature Bypass VulnerabilityMicrosoft · Client-Server Run-time Subsystem (CSRSS)KEVRansomwarePublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege EscalationAI mapping from the description · how it is exploited62.8%Top 0.81%78.3priority
- CVE-2023-36884Microsoft Windows Search Remote Code Execution VulnerabilityMITRE CTID mapping of the KEV entry · primary impact99.4%Top 0.06%78.2priority
- CVE-2016-3309Microsoft Windows Kernel Privilege Escalation VulnerabilityMicrosoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege EscalationAI mapping from the description · how it is exploited20.5%Top 2.5%78.0priority
- CVE-2016-4656Apple iOS Memory Corruption VulnerabilityApple · iOSKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege EscalationAI mapping from the description · how it is exploited23.6%Top 2.2%78.0priority
- CVE-2014-4114Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution VulnerabilityMicrosoft · WindowsKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1059Command and Scripting Interpreter4 reportsAI mapping from the description · how it is exploited81.6%Top 0.36%77.4priority
- CVE-2017-8759Microsoft .NET Framework Remote Code Execution VulnerabilityMicrosoft · .NET FrameworkKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1059Command and Scripting Interpreter4 reportsAI mapping from the description · how it is exploited88.7%Top 0.23%77.4priority
- CVE-2021-43890Microsoft Windows AppX Installer Spoofing VulnerabilityAI mapping from the description · how it is exploited11.3%Top 4%77.2priority
- CVE-2015-1671Microsoft Windows Remote Code Execution VulnerabilityMicrosoft · WindowsKEVHigh · 7.8T1204.002Malicious FileT1059Command and Scripting Interpreter1 reportAI mapping from the description · how it is exploited48.8%Top 1.1%77.1priority
- CVE-2011-0611Adobe Flash Player Remote Code Execution VulnerabilityAdobe · Flash PlayerKEVPublic exploitHigh · 8.8T1204.002Malicious FileT1105Ingress Tool Transfer3 reportsMITRE CTID mapping of the KEV entry · how it is exploited99.4%Top 0.06%76.9priority
- CVE-2016-4655Apple iOS Information Disclosure VulnerabilityAI mapping from the description · how it is exploited33.4%Top 1.6%76.5priority
- CVE-2022-44698Microsoft Defender SmartScreen Security Feature Bypass VulnerabilityMicrosoft · DefenderKEVRansomwareMedium · 5.4T1204.002Malicious FileT1211Exploitation for Stealth1 reportAI mapping from the description · how it is exploited76.3%Top 0.46%75.6priority
- CVE-2014-6352Microsoft Windows Code Injection VulnerabilityMicrosoft · WindowsKEVPublic exploitHigh · 7.8T1203Exploitation for Client ExecutionT1204.002Malicious File2 reportsMITRE CTID mapping of the CVE · uncategorised77.5%Top 0.44%74.5priority
- CVE-2015-2545Microsoft Office Malformed EPS File VulnerabilityMicrosoft · OfficeKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1203Exploitation for Client Execution2 reportsAI mapping from the description · how it is exploited85.9%Top 0.27%74.5priority
- CVE-2017-11774Microsoft Office Outlook Security Feature Bypass VulnerabilityMicrosoft · OfficeKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1059Command and Scripting Interpreter2 reportsAI mapping from the description · how it is exploited59.6%Top 0.88%74.4priority
- CVE-2026-21509Microsoft Office Security Feature Bypass VulnerabilityAI mapping from the description · how it is exploited70.8%Top 0.6%73.3priority
- CVE-2020-9715Adobe Acrobat Use-After-Free VulnerabilityAdobe · AcrobatKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1203Exploitation for Client ExecutionAI mapping from the description · how it is exploited33.5%Top 1.6%73.1priority
- CVE-2026-34621Adobe Acrobat and Reader Prototype Pollution VulnerabilityAdobe · Acrobat and ReaderKEVPublic exploitHigh · 8.6T1204.002Malicious FileT1203Exploitation for Client ExecutionAI mapping from the description · how it is exploited7.2%Top 5.7%72.9priority
- CVE-2021-38646Microsoft Office Access Connectivity Engine Remote Code Execution VulnerabilityMicrosoft · OfficeKEVRansomwareHigh · 7.8T1204.002Malicious FileT1059Command and Scripting InterpreterAI mapping from the description · how it is exploited8.0%Top 5.2%72.4priority
- CVE-2009-3129Microsoft Excel Featheader Record Memory Corruption VulnerabilityMicrosoft · ExcelKEVPublic exploitHigh · 7.8T1059Command and Scripting InterpreterT1204.002Malicious File1 reportMITRE CTID mapping of the CVE · uncategorised84.0%Top 0.31%72.3priority
- CVE-2010-1297Adobe Flash Player Memory Corruption VulnerabilityAdobe · Flash PlayerKEVPublic exploitHigh · 7.8T1189Drive-by CompromiseT1204.002Malicious File+1 more · 1 reportMITRE CTID mapping of the KEV entry · how it is exploited82.5%Top 0.34%72.3priority
- CVE-2014-4113Microsoft Win32k Privilege Escalation VulnerabilityMicrosoft · Win32kKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege Escalation1 reportAI mapping from the description · how it is exploited86.6%Top 0.26%72.3priority
- CVE-2014-1761Microsoft Word Memory Corruption VulnerabilityMicrosoft · WordKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1203Exploitation for Client Execution1 reportAI mapping from the description · how it is exploited77.7%Top 0.43%72.2priority
- CVE-2012-1856Microsoft Office MSCOMCTL.OCX Remote Code Execution VulnerabilityMicrosoft · OfficeKEVHigh · 8.8T1204.002Malicious FileT1203Exploitation for Client Execution3 reportsAI mapping from the description · how it is exploited72.0%Top 0.57%71.8priority
- CVE-2026-32202Microsoft Windows Protection Mechanism Failure VulnerabilityAI mapping from the description · how it is exploited70.9%Top 0.6%70.9priority
- CVE-2021-30657Apple macOS Unspecified VulnerabilityAI mapping from the description · how it is exploited68.5%Top 0.66%70.6priority
- CVE-2015-1770Microsoft Office Uninitialized Memory Use VulnerabilityMicrosoft · OfficeKEVHigh · 8.8T1204.002Malicious FileT1059Command and Scripting Interpreter2 reportsAI mapping from the description · how it is exploited35.0%Top 1.6%70.0priority
- CVE-2023-41974Apple iOS and iPadOS Use-After-Free VulnerabilityApple · iOS and iPadOSKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege EscalationAI mapping from the description · how it is exploited2.0%Top 20%69.5priority
- CVE-2015-7645Adobe Flash Player Arbitrary Code Execution VulnerabilityAdobe · Flash PlayerKEVRansomwarePublic exploitEnd of lifeHigh · 7.8T1204.002Malicious File2 reportsMITRE CTID mapping of the KEV entry · how it is exploited65.3%Top 0.74%69.4priority
- CVE-2009-3459Adobe Acrobat and Reader Heap-Based Buffer Overflow VulnerabilityAdobe · Acrobat and ReaderKEVPublic exploitHigh · 8.8T1203Exploitation for Client ExecutionT1204.002Malicious FileMITRE CTID mapping of the CVE · uncategorised86.6%Top 0.26%69.1priority
- CVE-2015-2426Microsoft Windows Adobe Type Manager Library Remote Code Execution VulnerabilityMicrosoft · WindowsKEVPublic exploitHigh · 8.8T1204.002Malicious FileT1059Command and Scripting InterpreterAI mapping from the description · how it is exploited86.6%Top 0.26%69.1priority
- CVE-2021-21017Adobe Acrobat and Reader Heap-based Buffer Overflow VulnerabilityMITRE CTID mapping of the KEV entry · how it is exploited86.3%Top 0.27%69.1priority
- CVE-2016-0984Adobe Flash Player and AIR Use-After-Free VulnerabilityAdobe · Flash Player and AIRKEVPublic exploitHigh · 8.8T1204.002Malicious FileT1105Ingress Tool TransferMITRE CTID mapping of the KEV entry · how it is exploited54.5%Top 0.99%69.0priority
- CVE-2020-1020Microsoft Windows Adobe Font Manager Library Remote Code Execution VulnerabilityMicrosoft · WindowsKEVPublic exploitHigh · 8.8T1204.002Malicious FileT1059Command and Scripting InterpreterAI mapping from the description · how it is exploited65.0%Top 0.75%69.0priority
- CVE-2006-2492Microsoft Word Malformed Object Pointer VulnerabilityMicrosoft · WordKEVPublic exploitHigh · 8.8T1204.002Malicious FileT1059Command and Scripting InterpreterAI mapping from the description · how it is exploited48.1%Top 1.1%68.9priority
- CVE-2008-0655Adobe Acrobat and Reader Unspecified VulnerabilityMITRE CTID mapping of the KEV entry · how it is exploited37.9%Top 1.5%68.9priority
- CVE-2016-3714ImageMagick Improper Input Validation VulnerabilityImageMagick · ImageMagickKEVPublic exploitHigh · 8.4T1204.002Malicious FileT1059Command and Scripting InterpreterAI mapping from the description · how it is exploited97.5%Top 0.1%68.9priority
- CVE-2024-29988Microsoft SmartScreen Prompt Security Feature Bypass VulnerabilityAI mapping from the description · how it is exploited45.2%Top 1.2%68.9priority
- CVE-2025-15556Notepad++ Download of Code Without Integrity Check VulnerabilityAI mapping from the description · primary impact1.7%Top 22%68.8priority
- CVE-2026-21514Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision VulnerabilityAI mapping from the description · how it is exploited1.6%Top 24%68.6priority
- CVE-2007-5659Adobe Acrobat and Reader Buffer Overflow VulnerabilityMITRE CTID mapping of the KEV entry · how it is exploited87.4%Top 0.24%68.4priority
- CVE-2013-3906Microsoft Graphics Component Memory Corruption VulnerabilityMicrosoft · Graphics ComponentKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1059Command and Scripting InterpreterAI mapping from the description · how it is exploited84.9%Top 0.29%68.4priority
- CVE-2017-0261Microsoft Office Use-After-Free VulnerabilityMicrosoft · OfficeKEVPublic exploitHigh · 7.8T1203Exploitation for Client ExecutionT1204.002Malicious FileMITRE CTID mapping of the CVE · uncategorised78.1%Top 0.42%68.4priority
- CVE-2017-11826Microsoft Office Remote Code Execution VulnerabilityMicrosoft · OfficeKEVPublic exploitHigh · 7.8T1059Command and Scripting InterpreterT1204.002Malicious FileMITRE CTID mapping of the CVE · uncategorised81.3%Top 0.36%68.4priority
- CVE-2017-8291Artifex Ghostscript Type Confusion VulnerabilityArtifex · GhostscriptKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1059Command and Scripting InterpreterAI mapping from the description · how it is exploited97.0%Top 0.11%68.4priority
- CVE-2020-1147Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution VulnerabilityMicrosoft · .NET Framework, SharePoint, Visual StudioKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1059Command and Scripting InterpreterAI mapping from the description · how it is exploited95.8%Top 0.13%68.4priority
- CVE-2021-30860Apple Multiple Products Integer Overflow VulnerabilityApple · Multiple ProductsKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1059Command and Scripting InterpreterAI mapping from the description · how it is exploited76.0%Top 0.47%68.4priority
- CVE-2017-8540Microsoft Malware Protection Engine Improper Restriction of Operations VulnerabilityMicrosoft · Malware Protection EngineKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1059Command and Scripting Interpreter+1 moreAI mapping from the description · how it is exploited71.9%Top 0.57%68.3priority
- CVE-2019-2215Android Kernel Use-After-Free VulnerabilityAndroid · Android KernelKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege EscalationAI mapping from the description · how it is exploited72.1%Top 0.57%68.3priority
- CVE-2020-0938Microsoft Windows Adobe Font Manager Library Remote Code Execution VulnerabilityMicrosoft · WindowsKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1059Command and Scripting InterpreterAI mapping from the description · how it is exploited69.0%Top 0.65%68.3priority
- CVE-2023-21608Adobe Acrobat and Reader Use-After-Free VulnerabilityAdobe · Acrobat and ReaderKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1203Exploitation for Client ExecutionMITRE CTID mapping of the KEV entry · how it is exploited59.4%Top 0.88%68.3priority
- CVE-2023-41064Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow VulnerabilityApple · iOS, iPadOS, and macOSKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1059Command and Scripting InterpreterAI mapping from the description · how it is exploited53.4%Top 1%68.3priority
- CVE-2014-4404Apple OS X Heap-Based Buffer Overflow VulnerabilityApple · OS XKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege EscalationAI mapping from the description · how it is exploited48.9%Top 1.1%68.2priority
- CVE-2016-3235Microsoft Office OLE DLL Side Loading VulnerabilityAI mapping from the description · how it is exploited43.3%Top 1.3%68.2priority
- CVE-2021-42292Microsoft Excel Security Feature BypassAI mapping from the description · how it is exploited43.0%Top 1.3%68.2priority
- CVE-2016-0040Microsoft Windows Kernel Privilege Escalation VulnerabilityMicrosoft · WindowsKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege EscalationAI mapping from the description · how it is exploited24.3%Top 2.1%68.0priority
- CVE-2020-27930Apple Multiple Products Memory Corruption VulnerabilityApple · Multiple ProductsKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1059Command and Scripting InterpreterAI mapping from the description · how it is exploited22.0%Top 2.3%68.0priority
- CVE-2019-8605Apple Multiple Products Use-After-Free VulnerabilityApple · Multiple ProductsKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege EscalationAI mapping from the description · how it is exploited17.6%Top 2.9%67.9priority
- CVE-2015-2424Microsoft PowerPoint Memory Corruption VulnerabilityMicrosoft · PowerPointKEVHigh · 8.8T1204.002Malicious FileT1203Exploitation for Client Execution+1 more · 1 reportAI mapping from the description · how it is exploited40.1%Top 1.4%67.8priority
- CVE-2019-7286Apple Multiple Products Memory Corruption VulnerabilityApple · Multiple ProductsKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege EscalationAI mapping from the description · how it is exploited15.9%Top 3.1%67.8priority
- CVE-2022-41091Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass VulnerabilityAI mapping from the description · how it is exploited1.9%Top 20%67.7priority
- CVE-2017-0263Microsoft Win32k Privilege Escalation VulnerabilityMicrosoft · Win32kKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege EscalationAI mapping from the description · how it is exploited10.0%Top 4.4%67.6priority
- CVE-2020-27932Apple Multiple Products Type Confusion VulnerabilityApple · Multiple ProductsKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege EscalationAI mapping from the description · how it is exploited10.3%Top 4.3%67.6priority
- CVE-2026-21385Qualcomm Multiple Chipsets Memory Corruption VulnerabilityQualcomm · Multiple ChipsetsKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege EscalationAI mapping from the description · how it is exploited1.3%Top 29%67.6priority
- CVE-2013-1331Microsoft Office Buffer Overflow VulnerabilityMicrosoft · OfficeKEVHigh · 7.8T1059Command and Scripting InterpreterT1204.002Malicious File1 reportMITRE CTID mapping of the CVE · uncategorised79.8%Top 0.39%67.3priority
- CVE-2018-4878Adobe Flash Player Use-After-Free VulnerabilityAdobe · Flash PlayerKEVRansomwarePublic exploitEnd of lifeHigh · 7.8T1204.002Malicious FileT1219Remote Access Tools+1 more · 1 reportMITRE CTID mapping of the KEV entry · how it is exploited90.3%Top 0.2%67.3priority
- CVE-2024-38080Microsoft Windows Hyper-V Privilege Escalation VulnerabilityMicrosoft · Windows KEVPublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege EscalationMITRE CTID mapping of the KEV entry · how it is exploited7.1%Top 5.8%67.3priority
- CVE-2010-2572Microsoft PowerPoint Buffer Overflow VulnerabilityMicrosoft · PowerPointKEVHigh · 7.8T1204.002Malicious FileT1059Command and Scripting Interpreter1 reportAI mapping from the description · how it is exploited58.6%Top 0.9%67.1priority
- CVE-2023-21823Microsoft Windows Graphic Component Privilege Escalation VulnerabilityMicrosoft · WindowsKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1059Command and Scripting InterpreterAI mapping from the description · how it is exploited5.6%Top 7.2%67.0priority
- CVE-2025-48384Git Link Following VulnerabilityAI mapping from the description · how it is exploited4.4%Top 8.7%66.9priority
- CVE-2016-3715ImageMagick Arbitrary File Deletion VulnerabilityAI mapping from the description · how it is exploited75.3%Top 0.49%66.8priority
- CVE-2020-27950Apple Multiple Products Memory Initialization VulnerabilityApple · Multiple ProductsKEVPublic exploitMedium · 5.5T1204.002Malicious FileT1005Data from Local SystemAI mapping from the description · how it is exploited16.5%Top 3%66.2priority
- CVE-2023-41991Apple Multiple Products Improper Certificate Validation VulnerabilityAI mapping from the description · how it is exploited13.4%Top 3.6%66.1priority
- CVE-2021-30869Apple iOS, iPadOS, and macOS Type Confusion VulnerabilityApple · iOS, iPadOS, and macOSKEVHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege Escalation1 reportAI mapping from the description · how it is exploited4.1%Top 9.2%65.5priority
- CVE-2021-25337Samsung Mobile Devices Improper Access Control VulnerabilitySamsung · Mobile DevicesKEVPublic exploitHigh · 7.1T1204.002Malicious FileT1005Data from Local SystemAI mapping from the description · how it is exploited2.8%Top 14%65.3priority
- CVE-2021-1782Apple Multiple Products Race Condition VulnerabilityApple · Multiple ProductsKEVPublic exploitHigh · 7.0T1204.002Malicious FileT1068Exploitation for Privilege EscalationAI mapping from the description · how it is exploited2.2%Top 17%64.4priority
- CVE-2009-0556Microsoft Office PowerPoint Code Injection VulnerabilityMITRE CTID mapping of the CVE · uncategorised67.3%Top 0.7%64.0priority
- CVE-2007-0671Microsoft Office Excel Remote Code Execution VulnerabilityAI mapping from the description · how it is exploited43.2%Top 1.3%63.9priority
- CVE-2009-0238Microsoft Office Remote Code ExecutionAI mapping from the description · how it is exploited42.9%Top 1.3%63.9priority
- CVE-2018-4990Adobe Acrobat and Reader Double Free VulnerabilityMITRE CTID mapping of the KEV entry · how it is exploited35.9%Top 1.5%63.9priority
- CVE-2021-28550Adobe Acrobat and Reader Use-After-Free VulnerabilityMITRE CTID mapping of the KEV entry · how it is exploited51.9%Top 1.1%63.9priority
- CVE-2019-1297Microsoft Excel Remote Code Execution VulnerabilityAI mapping from the description · how it is exploited21.8%Top 2.4%63.7priority
- CVE-2012-0151Microsoft Windows Authenticode Signature Verification Remote Code Execution VulnerabilityAI mapping from the description · how it is exploited87.7%Top 0.24%63.4priority
- CVE-2017-0262Microsoft Office Remote Code Execution VulnerabilityMITRE CTID mapping of the CVE · uncategorised81.0%Top 0.37%63.4priority
- CVE-2018-15982Adobe Flash Player Use-After-Free VulnerabilityAdobe · Flash PlayerKEVRansomwarePublic exploitEnd of lifeHigh · 7.8T1204.002Malicious FileT1105Ingress Tool TransferMITRE CTID mapping of the KEV entry · how it is exploited89.6%Top 0.21%63.4priority
- CVE-2021-38406Delta Electronics DOPSoft 2 Improper Input Validation VulnerabilityDelta Electronics · DOPSoft 2KEVHigh · 7.8T1204.002Malicious FileT1203Exploitation for Client ExecutionAI mapping from the description · how it is exploited76.4%Top 0.46%63.4priority
- CVE-2024-43573Microsoft Windows MSHTML Platform Spoofing VulnerabilityAI mapping from the description · how it is exploited46.1%Top 1.2%63.4priority
- CVE-2009-0557Microsoft Office Object Record Corruption VulnerabilityAI mapping from the description · how it is exploited52.8%Top 1%63.3priority
- CVE-2009-0563Microsoft Office Buffer Overflow VulnerabilityAI mapping from the description · how it is exploited59.6%Top 0.88%63.3priority
- CVE-2012-2539Microsoft Word Remote Code Execution VulnerabilityAI mapping from the description · how it is exploited53.0%Top 1%63.3priority
- CVE-2014-4077Microsoft IME Japanese Privilege Escalation VulnerabilityMicrosoft · Input Method Editor (IME) JapaneseKEVHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege EscalationAI mapping from the description · how it is exploited54.6%Top 0.98%63.3priority
- CVE-2015-1642Microsoft Office Memory Corruption VulnerabilityMITRE CTID mapping of the CVE · uncategorised53.1%Top 1%63.3priority
- CVE-2016-7193Microsoft Office Memory Corruption VulnerabilityMITRE CTID mapping of the CVE · uncategorised57.6%Top 0.92%63.3priority
- CVE-2016-7262Microsoft Office Security Feature Bypass VulnerabilityAI mapping from the description · how it is exploited57.7%Top 0.92%63.3priority
- CVE-2022-34713Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution VulnerabilityMITRE CTID mapping of the KEV entry · primary impact67.8%Top 0.69%63.3priority
- CVE-2024-43572Microsoft Windows Management Console Remote Code Execution VulnerabilityAI mapping from the description · how it is exploited66.7%Top 0.71%63.3priority
- CVE-2024-38189Microsoft Project Remote Code Execution VulnerabilityAI mapping from the description · how it is exploited8.2%Top 5.1%63.1priority
- CVE-2012-1854Microsoft Visual Basic for Applications Insecure Library Loading VulnerabilityAI mapping from the description · how it is exploited20.9%Top 2.5%63.0priority
- CVE-2024-21351Microsoft Windows SmartScreen Security Feature Bypass VulnerabilityAI mapping from the description · how it is exploited27.8%Top 1.9%62.9priority
- CVE-2022-22675Apple macOS Out-of-Bounds Write VulnerabilityAI mapping from the description · how it is exploited12.5%Top 3.8%62.7priority
- CVE-2023-21715Microsoft Office Publisher Security Feature Bypass VulnerabilityMITRE CTID mapping of the KEV entry · how it is exploited12.0%Top 3.9%62.3priority
- CVE-2023-26369Adobe Acrobat and Reader Out-of-Bounds Write VulnerabilityAdobe · Acrobat and ReaderKEVHigh · 7.8T1204.002Malicious FileT1203Exploitation for Client ExecutionMITRE CTID mapping of the KEV entry · how it is exploited6.7%Top 6%62.3priority
- CVE-2023-32049Microsoft Windows Defender SmartScreen Security Feature Bypass VulnerabilityAI mapping from the description · how it is exploited4.2%Top 9.1%62.3priority
- CVE-2021-30900Apple iOS, iPadOS, and macOS Out-of-Bounds Write VulnerabilityApple · iOS, iPadOS, and macOSKEVHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege EscalationAI mapping from the description · how it is exploited5.2%Top 7.5%62.0priority
- CVE-2023-36761Microsoft Word Information Disclosure VulnerabilityAI mapping from the description · how it is exploited19.6%Top 2.6%62.0priority
- CVE-2019-7287Apple iOS Memory Corruption VulnerabilityAI mapping from the description · how it is exploited4.6%Top 8.4%61.8priority
- CVE-2023-36563Microsoft WordPad Information Disclosure VulnerabilityAI mapping from the description · how it is exploited20.3%Top 2.5%61.3priority
- CVE-2020-9907Apple Multiple Products Memory Corruption VulnerabilityApple · Multiple ProductsKEVHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege EscalationAI mapping from the description · how it is exploited3.2%Top 12%61.1priority
- CVE-2017-0001Microsoft Graphics Device Interface (GDI) Privilege Escalation VulnerabilityMicrosoft · Graphics Device Interface (GDI)KEVHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege EscalationAI mapping from the description · how it is exploited3.1%Top 12%61.0priority
- CVE-2024-7262Kingsoft WPS Office Path Traversal VulnerabilityAI mapping from the description · how it is exploited3.1%Top 12%61.0priority
- CVE-2024-38226Microsoft Publisher Protection Mechanism Failure VulnerabilityAI mapping from the description · how it is exploited2.7%Top 14%60.3priority
- CVE-2018-4344Apple Multiple Products Memory Corruption VulnerabilityAI mapping from the description · how it is exploited2.4%Top 16%60.2priority
- CVE-2025-21479Qualcomm Multiple Chipsets Incorrect Authorization VulnerabilityQualcomm · Multiple ChipsetsKEVPublic exploitHigh · 8.6T1204.002Malicious FileT1068Exploitation for Privilege EscalationAI mapping from the description · how it is exploited0.8%Top 44%60.2priority
- CVE-2025-43520Apple Multiple Products Classic Buffer Overflow VulnerabilityApple · Multiple ProductsKEVPublic exploitMedium · 5.5T1204.002Malicious FileT1068Exploitation for Privilege Escalation+1 moreAI mapping from the description · how it is exploited0.4%Top 63%59.2priority
- CVE-2023-41990Apple Multiple Products Code Execution VulnerabilityAI mapping from the description · how it is exploited1.4%Top 28%57.9priority
- CVE-2010-2883Adobe Acrobat and Reader Stack-Based Buffer Overflow VulnerabilityAdobe · Acrobat and ReaderKEVPublic exploitEnd of lifeHigh · 7.3T1204.002Malicious FileT1059Command and Scripting Interpreter+1 more · 1 reportMITRE CTID mapping of the KEV entry · how it is exploited81.4%Top 0.36%56.9priority
- CVE-2022-42827Apple iOS and iPadOS Out-of-Bounds Write VulnerabilityApple · iOS and iPadOSKEVHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege EscalationAI mapping from the description · how it is exploited1.1%Top 35%56.4priority
- CVE-2025-43510Apple Multiple Products Improper Locking VulnerabilityApple · Multiple ProductsKEVHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege EscalationAI mapping from the description · how it is exploited0.4%Top 71%54.3priority
- CVE-2009-0927Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow VulnerabilityAdobe · Reader and AcrobatKEVPublic exploitEnd of lifeHigh · 8.8T1203Exploitation for Client ExecutionT1204.002Malicious FileMITRE CTID mapping of the CVE · uncategorised96.6%Top 0.12%54.1priority
- CVE-2009-3953Adobe Acrobat and Reader Universal 3D Remote Code Execution VulnerabilityMITRE CTID mapping of the KEV entry · how it is exploited83.2%Top 0.32%54.1priority
- CVE-2024-29748Android Pixel Privilege Escalation VulnerabilityAI mapping from the description · how it is exploited0.7%Top 48%53.9priority
- CVE-2009-4324Adobe Acrobat and Reader Use-After-Free VulnerabilityAdobe · Acrobat and ReaderKEVPublic exploitEnd of lifeHigh · 7.8T1204.002Malicious FileT1071.001Web ProtocolsMITRE CTID mapping of the KEV entry · how it is exploited81.9%Top 0.35%53.4priority
- CVE-2012-1535Adobe Flash Player Arbitrary Code Execution VulnerabilityAdobe · Flash PlayerKEVPublic exploitEnd of lifeHigh · 7.8T1204.002Malicious FileT1105Ingress Tool TransferMITRE CTID mapping of the KEV entry · how it is exploited70.4%Top 0.61%53.3priority
- CVE-2013-0641Adobe Reader Buffer Overflow VulnerabilityAdobe · ReaderKEVEnd of lifeHigh · 7.8T1204.002Malicious FileT1105Ingress Tool Transfer+1 more · 1 reportMITRE CTID mapping of the KEV entry · how it is exploited32.3%Top 1.7%52.0priority
- CVE-2014-0496Adobe Reader and Acrobat Use-After-Free VulnerabilityMITRE CTID mapping of the KEV entry · how it is exploited40.0%Top 1.4%48.9priority
- CVE-2017-11292Adobe Flash Player Type Confusion VulnerabilityAdobe · Flash PlayerKEVEnd of lifeHigh · 8.8T1566.001Spearphishing AttachmentT1204.002Malicious File+2 moreMITRE CTID mapping of the KEV entry · how it is exploited11.9%Top 3.9%48.4priority
- CVE-2009-1862Adobe Acrobat and Reader, Flash Player Unspecified VulnerabilityMITRE CTID mapping of the KEV entry · how it is exploited21.2%Top 2.4%48.0priority
- CVE-2018-5002Adobe Flash Player Stack-based Buffer Overflow VulnerabilityAdobe · Flash PlayerKEVEnd of lifeHigh · 7.8T1204.002Malicious FileT1059Command and Scripting InterpreterAI mapping from the description · how it is exploited24.4%Top 2.1%48.0priority
- CVE-2019-3719Dell SupportAssist Client versions prior to 3.2.0.90 contain a remote code execution vulnerabilityDell · SupportAssist ClientPublic exploitHigh · 7.1T1204.002Malicious FileT1059Command and Scripting InterpreterMITRE CTID mapping of the CVE · how it is exploited16.3%Top 3.1%29.4priority
- CVE-2018-8353A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in…MITRE CTID mapping of the CVE · how it is exploited67.3%Top 0.7%24.9priority
- CVE-2018-8355A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft…MITRE CTID mapping of the CVE · how it is exploited67.9%Top 0.68%24.9priority
- CVE-2019-1118A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite…MITRE CTID mapping of the CVE · how it is exploited23.6%Top 2.2%24.6priority
- CVE-2020-16874Visual Studio Remote Code Execution VulnerabilityMicrosoft · Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)High · 7.8T1204.002Malicious FileT1574Hijack Execution Flow+5 moreMITRE CTID mapping of the CVE · how it is exploited4.3%Top 8.9%24.4priority
- CVE-2020-1569Microsoft Edge Memory Corruption VulnerabilityMITRE CTID mapping of the CVE · how it is exploited3.0%Top 13%23.6priority