T1204Execution
User Execution
An adversary may rely upon specific actions by a user in order to gain execution. Users may be subjected to social engineering to get them to execute malicious code by, for example, opening a malicious document file or link. These user actions will typically be observed as follow-on behavior from forms of Phishing. While User Execution frequently occurs shortly after Initial Access it may occur…
CVEs2
In CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it.2
Reports0
Detections
10 Sigma rules tagged T1204User ExecutionT120410 general rules
- DarkSide Ransomware Patterncriticaltest
- PrinterNightmare Mimikatz Driver Namecriticaltest
- Antivirus - Hacktool Signaturehighstable
- Potential Snatch Ransomware Activityhighstable
- Suspicious Binaries and Scripts in Public Folderhighexperimental
- Arbitrary Shell Command Execution Via Settingcontent-Msmediumtest
- Payload Decoded and Decrypted via Built-in Utilitiesmediumtest
- Potentially Suspicious WebDAV LNK Executionmediumtest
Sigma rules © SigmaHQ, Detection Rule License 1.1; linked, not reproduced.
CVEs linked to User Execution
2 CVEs, by priority. Each link shows its badge.- CVE-2023-38831RARLAB WinRAR Code Execution VulnerabilityRARLAB · WinRARKEVRansomwarePublic exploitHigh · 7.8T1204User ExecutionT1053Scheduled Task/Job+5 more · 1 reportMITRE CTID mapping of the KEV entry · how it is exploited99.8%Top 0.04%82.3priority
- CVE-2025-24993Microsoft Windows NTFS Heap-Based Buffer Overflow VulnerabilityMITRE CTID mapping of the KEV entry · how it is exploited2.2%Top 17%60.0priority
Linked through a sub-technique
Top 150- CVE-2017-0199Microsoft Office and WordPad Remote Code Execution VulnerabilityMicrosoft · Office and WordPadKEVRansomwarePublic exploitHigh · 7.8T1204.002Malicious FileT1203Exploitation for Client Execution12 reports99.5%Top 0.06%88.4priority
- CVE-2018-0802Microsoft Office Memory Corruption VulnerabilityMicrosoft · OfficeKEVRansomwarePublic exploitHigh · 7.8T1204.002Malicious FileT1203Exploitation for Client Execution8 reports93.3%Top 0.17%88.4priority
- CVE-2015-1641Microsoft Office Memory Corruption VulnerabilityMicrosoft · OfficeKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1203Exploitation for Client Execution4 reports97.2%Top 0.1%87.4priority
- CVE-2022-30190Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution VulnerabilityMicrosoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1204.002Malicious FileT1105Ingress Tool Transfer4 reports99.2%Top 0.07%87.4priority
- CVE-2021-40444Microsoft MSHTML Remote Code Execution VulnerabilityMicrosoft · MSHTMLKEVRansomwarePublic exploitHigh · 8.8T1204.002Malicious FileT1203Exploitation for Client Execution3 reports97.8%Top 0.09%86.9priority
- CVE-2018-20250WinRAR Absolute Path Traversal VulnerabilityRARLAB · WinRARKEVRansomwarePublic exploitHigh · 7.8T1204.002Malicious FileT1036Masquerading3 reports96.0%Top 0.12%86.2priority
- CVE-2021-1675Microsoft Windows Print Spooler Remote Code Execution VulnerabilityMicrosoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1204.002Malicious FileT1059Command and Scripting Interpreter3 reports85.3%Top 0.28%86.1priority
- CVE-2024-21412Microsoft Windows Internet Shortcut Files Security Feature Bypass VulnerabilityMicrosoft · WindowsKEVRansomwarePublic exploitHigh · 8.1T1204.001Malicious LinkT1553.005Mark-of-the-Web Bypass1 report99.4%Top 0.06%82.5priority
- CVE-2015-2546Microsoft Win32k Memory Corruption VulnerabilityMicrosoft · Win32kKEVRansomwarePublic exploitHigh · 8.2T1204.002Malicious FileT1068Exploitation for Privilege Escalation1 report10.1%Top 4.4%81.7priority
- CVE-2013-3900Microsoft WinVerifyTrust function Remote Code ExecutionMicrosoft · WinVerifyTrust functionKEVPublic exploitMedium · 5.5T1204.002Malicious FileT1553.002Code Signing1 report44.6%Top 1.2%80.5priority
- CVE-2023-36025Microsoft Windows SmartScreen Security Feature Bypass Vulnerability88.1%Top 0.23%79.1priority
- CVE-2011-3402Microsoft Windows Remote Code Execution VulnerabilityMicrosoft · WindowsKEVPublic exploitHigh · 8.8T1204.002Malicious FileT1203Exploitation for Client Execution78.1%Top 0.42%79.1priority
- CVE-2018-0798Microsoft Office Memory Corruption VulnerabilityMicrosoft · OfficeKEVPublic exploitHigh · 8.8T1204.002Malicious FileT1203Exploitation for Client Execution5 reports95.1%Top 0.14%79.1priority
- CVE-2025-8088RARLAB WinRAR Path Traversal VulnerabilityRARLAB · WinRARKEVRansomwarePublic exploitHigh · 8.8T1204.002Malicious FileT1059Command and Scripting Interpreter94.0%Top 0.15%79.1priority
- CVE-2026-86950Apple Multiple Products Out-of-Bounds Write VulnerabilityApple · Multiple ProductsKEVPublic exploitHigh · 8.8T1204.002Malicious FileT1059Command and Scripting Interpreter26.2%Top 2%78.8priority
- CVE-2019-18426WhatsApp Cross-Site Scripting VulnerabilityMeta Platforms · WhatsAppKEVPublic exploitHigh · 8.2T1204.001Malicious LinkT1059.007JavaScript+1 more67.9%Top 0.68%78.6priority
- CVE-2008-2992Adobe Reader and Acrobat Input Validation Vulnerability99.8%Top 0.04%78.5priority
- CVE-2010-3333Microsoft Office Stack-based Buffer Overflow VulnerabilityMicrosoft · OfficeKEVPublic exploitHigh · 7.8T1203Exploitation for Client ExecutionT1204.002Malicious File5 reports89.4%Top 0.22%78.4priority
- CVE-2017-8570Microsoft Office Remote Code Execution VulnerabilityMicrosoft · OfficeKEVPublic exploitHigh · 7.8T1203Exploitation for Client ExecutionT1204.002Malicious File5 reports89.9%Top 0.21%78.4priority
- CVE-2020-28949PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability84.6%Top 0.3%78.4priority
- CVE-2016-0151Microsoft Windows CSRSS Security Feature Bypass VulnerabilityMicrosoft · Client-Server Run-time Subsystem (CSRSS)KEVRansomwarePublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege Escalation62.8%Top 0.81%78.3priority
- CVE-2023-36884Microsoft Windows Search Remote Code Execution Vulnerability99.4%Top 0.06%78.2priority
- CVE-2016-3309Microsoft Windows Kernel Privilege Escalation VulnerabilityMicrosoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege Escalation20.5%Top 2.5%78.0priority
- CVE-2016-4656Apple iOS Memory Corruption VulnerabilityApple · iOSKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege Escalation23.6%Top 2.2%78.0priority
- CVE-2010-2568Microsoft Windows Remote Code Execution VulnerabilityMicrosoft · WindowsKEVPublic exploitHigh · 7.8T1204.001Malicious LinkT1059Command and Scripting Interpreter4 reports89.6%Top 0.21%77.4priority
- CVE-2014-4114Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution VulnerabilityMicrosoft · WindowsKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1059Command and Scripting Interpreter4 reports81.6%Top 0.36%77.4priority
- CVE-2017-8759Microsoft .NET Framework Remote Code Execution VulnerabilityMicrosoft · .NET FrameworkKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1059Command and Scripting Interpreter4 reports88.7%Top 0.23%77.4priority
- CVE-2020-3580Cisco ASA and FTD Cross-Site Scripting (XSS) VulnerabilityCisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)KEVRansomwarePublic exploitMedium · 6.1T1204.001Malicious LinkT1059Command and Scripting Interpreter+1 more85.6%Top 0.28%77.2priority
- CVE-2021-43890Microsoft Windows AppX Installer Spoofing Vulnerability11.3%Top 4%77.2priority
- CVE-2015-1671Microsoft Windows Remote Code Execution VulnerabilityMicrosoft · WindowsKEVHigh · 7.8T1204.002Malicious FileT1059Command and Scripting Interpreter1 report48.8%Top 1.1%77.1priority
- CVE-2022-24682Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting VulnerabilitySynacor · Zimbra Collaborate Suite (ZCS)KEVRansomwarePublic exploitMedium · 6.1T1204.001Malicious LinkT1059.007JavaScript+1 more30.9%Top 1.7%76.9priority
- CVE-2011-0611Adobe Flash Player Remote Code Execution VulnerabilityAdobe · Flash PlayerKEVPublic exploitHigh · 8.8T1204.002Malicious FileT1105Ingress Tool Transfer3 reports99.4%Top 0.06%76.9priority
- CVE-2016-4655Apple iOS Information Disclosure Vulnerability33.4%Top 1.6%76.5priority
- CVE-2022-44698Microsoft Defender SmartScreen Security Feature Bypass VulnerabilityMicrosoft · DefenderKEVRansomwareMedium · 5.4T1204.002Malicious FileT1211Exploitation for Stealth1 report76.3%Top 0.46%75.6priority
- CVE-2014-6352Microsoft Windows Code Injection VulnerabilityMicrosoft · WindowsKEVPublic exploitHigh · 7.8T1203Exploitation for Client ExecutionT1204.002Malicious File2 reports77.5%Top 0.44%74.5priority
- CVE-2015-2545Microsoft Office Malformed EPS File VulnerabilityMicrosoft · OfficeKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1203Exploitation for Client Execution2 reports85.9%Top 0.27%74.5priority
- CVE-2017-11774Microsoft Office Outlook Security Feature Bypass VulnerabilityMicrosoft · OfficeKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1059Command and Scripting Interpreter2 reports59.6%Top 0.88%74.4priority
- CVE-2008-4128Cisco IOS Cross-Site Request Forgery Vulnerability33.9%Top 1.6%73.3priority
- CVE-2026-96951Microsoft Windows Command Injection Vulnerability9.8%Top 4.5%73.3priority
- CVE-2026-21509Microsoft Office Security Feature Bypass Vulnerability70.8%Top 0.6%73.3priority
- CVE-2020-9715Adobe Acrobat Use-After-Free VulnerabilityAdobe · AcrobatKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1203Exploitation for Client Execution33.5%Top 1.6%73.1priority
- CVE-2026-34621Adobe Acrobat and Reader Prototype Pollution VulnerabilityAdobe · Acrobat and ReaderKEVPublic exploitHigh · 8.6T1204.002Malicious FileT1203Exploitation for Client Execution7.2%Top 5.7%72.9priority
- CVE-2021-38646Microsoft Office Access Connectivity Engine Remote Code Execution VulnerabilityMicrosoft · OfficeKEVRansomwareHigh · 7.8T1204.002Malicious FileT1059Command and Scripting Interpreter8.0%Top 5.2%72.4priority
- CVE-2009-3129Microsoft Excel Featheader Record Memory Corruption VulnerabilityMicrosoft · ExcelKEVPublic exploitHigh · 7.8T1059Command and Scripting InterpreterT1204.002Malicious File1 report84.0%Top 0.31%72.3priority
- CVE-2010-1297Adobe Flash Player Memory Corruption VulnerabilityAdobe · Flash PlayerKEVPublic exploitHigh · 7.8T1189Drive-by CompromiseT1204.002Malicious File+1 more · 1 report82.5%Top 0.34%72.3priority
- CVE-2014-4113Microsoft Win32k Privilege Escalation VulnerabilityMicrosoft · Win32kKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege Escalation1 report86.6%Top 0.26%72.3priority
- CVE-2014-1761Microsoft Word Memory Corruption VulnerabilityMicrosoft · WordKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1203Exploitation for Client Execution1 report77.7%Top 0.43%72.2priority
- CVE-2025-68461RoundCube Webmail Cross-site Scripting Vulnerability27.4%Top 1.9%71.9priority
- CVE-2012-1856Microsoft Office MSCOMCTL.OCX Remote Code Execution VulnerabilityMicrosoft · OfficeKEVHigh · 8.8T1204.002Malicious FileT1203Exploitation for Client Execution3 reports72.0%Top 0.57%71.8priority
- CVE-2023-24880Microsoft Windows SmartScreen Security Feature Bypass Vulnerability78.0%Top 0.43%71.0priority
- CVE-2026-32202Microsoft Windows Protection Mechanism Failure Vulnerability70.9%Top 0.6%70.9priority
- CVE-2021-30657Apple macOS Unspecified Vulnerability68.5%Top 0.66%70.6priority
- CVE-2015-1770Microsoft Office Uninitialized Memory Use VulnerabilityMicrosoft · OfficeKEVHigh · 8.8T1204.002Malicious FileT1059Command and Scripting Interpreter2 reports35.0%Top 1.6%70.0priority
- CVE-2023-41974Apple iOS and iPadOS Use-After-Free VulnerabilityApple · iOS and iPadOSKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege Escalation2.0%Top 20%69.5priority
- CVE-2015-7645Adobe Flash Player Arbitrary Code Execution VulnerabilityAdobe · Flash PlayerKEVRansomwarePublic exploitEnd of lifeHigh · 7.8T1204.002Malicious File2 reports65.3%Top 0.74%69.4priority
- CVE-2017-8464Microsoft Windows Shell (.lnk) Remote Code Execution VulnerabilityMicrosoft · WindowsKEVPublic exploitHigh · 8.8T1204.001Malicious LinkT1203Exploitation for Client Execution90.0%Top 0.21%69.1priority
- CVE-2009-3459Adobe Acrobat and Reader Heap-Based Buffer Overflow VulnerabilityAdobe · Acrobat and ReaderKEVPublic exploitHigh · 8.8T1203Exploitation for Client ExecutionT1204.002Malicious File86.6%Top 0.26%69.1priority
- CVE-2015-2426Microsoft Windows Adobe Type Manager Library Remote Code Execution VulnerabilityMicrosoft · WindowsKEVPublic exploitHigh · 8.8T1204.002Malicious FileT1059Command and Scripting Interpreter86.6%Top 0.26%69.1priority
- CVE-2021-21017Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability86.3%Top 0.27%69.1priority
- CVE-2018-8414Microsoft Windows Shell Remote Code Execution VulnerabilityMicrosoft · WindowsKEVPublic exploitHigh · 8.8T1204.001Malicious LinkT1059Command and Scripting Interpreter72.6%Top 0.56%69.0priority
- CVE-2019-0541Microsoft MSHTML Remote Code Execution VulnerabilityMicrosoft · MSHTMLKEVPublic exploitHigh · 8.8T1204.001Malicious LinkT1059Command and Scripting Interpreter53.2%Top 1%69.0priority
- CVE-2016-0984Adobe Flash Player and AIR Use-After-Free VulnerabilityAdobe · Flash Player and AIRKEVPublic exploitHigh · 8.8T1204.002Malicious FileT1105Ingress Tool Transfer54.5%Top 0.99%69.0priority
- CVE-2020-1020Microsoft Windows Adobe Font Manager Library Remote Code Execution VulnerabilityMicrosoft · WindowsKEVPublic exploitHigh · 8.8T1204.002Malicious FileT1059Command and Scripting Interpreter65.0%Top 0.75%69.0priority
- CVE-2023-5217Google Chromium libvpx Heap Buffer Overflow VulnerabilityGoogle · Chromium libvpxKEVPublic exploitHigh · 8.8T1204.001Malicious LinkT1574Hijack Execution Flow49.0%Top 1.1%68.9priority
- CVE-2006-2492Microsoft Word Malformed Object Pointer VulnerabilityMicrosoft · WordKEVPublic exploitHigh · 8.8T1204.002Malicious FileT1059Command and Scripting Interpreter48.1%Top 1.1%68.9priority
- CVE-2008-0655Adobe Acrobat and Reader Unspecified Vulnerability37.9%Top 1.5%68.9priority
- CVE-2016-3714ImageMagick Improper Input Validation VulnerabilityImageMagick · ImageMagickKEVPublic exploitHigh · 8.4T1204.002Malicious FileT1059Command and Scripting Interpreter97.5%Top 0.1%68.9priority
- CVE-2024-29988Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability45.2%Top 1.2%68.9priority
- CVE-2025-15556Notepad++ Download of Code Without Integrity Check Vulnerability1.7%Top 22%68.8priority
- CVE-2022-3038Google Chromium Network Service Use-After-Free VulnerabilityGoogle · Chromium Network ServiceKEVPublic exploitHigh · 8.8T1204.001Malicious LinkT1574Hijack Execution Flow24.9%Top 2.1%68.7priority
- CVE-2026-21514Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability1.6%Top 24%68.6priority
- CVE-2025-6218RARLAB WinRAR Path Traversal Vulnerability90.5%Top 0.2%68.4priority
- CVE-2007-5659Adobe Acrobat and Reader Buffer Overflow Vulnerability87.4%Top 0.24%68.4priority
- CVE-2013-3906Microsoft Graphics Component Memory Corruption VulnerabilityMicrosoft · Graphics ComponentKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1059Command and Scripting Interpreter84.9%Top 0.29%68.4priority
- CVE-2017-0261Microsoft Office Use-After-Free VulnerabilityMicrosoft · OfficeKEVPublic exploitHigh · 7.8T1203Exploitation for Client ExecutionT1204.002Malicious File78.1%Top 0.42%68.4priority
- CVE-2017-11826Microsoft Office Remote Code Execution VulnerabilityMicrosoft · OfficeKEVPublic exploitHigh · 7.8T1059Command and Scripting InterpreterT1204.002Malicious File81.3%Top 0.36%68.4priority
- CVE-2017-8291Artifex Ghostscript Type Confusion VulnerabilityArtifex · GhostscriptKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1059Command and Scripting Interpreter97.0%Top 0.11%68.4priority
- CVE-2020-1147Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution VulnerabilityMicrosoft · .NET Framework, SharePoint, Visual StudioKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1059Command and Scripting Interpreter95.8%Top 0.13%68.4priority
- CVE-2021-30860Apple Multiple Products Integer Overflow VulnerabilityApple · Multiple ProductsKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1059Command and Scripting Interpreter76.0%Top 0.47%68.4priority
- CVE-2014-100005D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) VulnerabilityD-Link · DIR-600 RouterKEVPublic exploitHigh · 8.0T1204.001Malicious LinkT1059Command and Scripting Interpreter+1 more43.5%Top 1.3%68.3priority
- CVE-2016-0185Microsoft Windows Media Center Remote Code Execution VulnerabilityMicrosoft · WindowsKEVPublic exploitHigh · 7.8T1204.001Malicious LinkT1203Exploitation for Client Execution69.8%Top 0.63%68.3priority
- CVE-2022-21971Microsoft Windows Runtime Remote Code Execution VulnerabilityMicrosoft · WindowsKEVPublic exploitHigh · 7.8T1204.001Malicious LinkT1059Command and Scripting Interpreter53.8%Top 1%68.3priority
- CVE-2017-8540Microsoft Malware Protection Engine Improper Restriction of Operations VulnerabilityMicrosoft · Malware Protection EngineKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1059Command and Scripting Interpreter+1 more71.9%Top 0.57%68.3priority
- CVE-2019-2215Android Kernel Use-After-Free VulnerabilityAndroid · Android KernelKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege Escalation72.1%Top 0.57%68.3priority
- CVE-2020-0938Microsoft Windows Adobe Font Manager Library Remote Code Execution VulnerabilityMicrosoft · WindowsKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1059Command and Scripting Interpreter69.0%Top 0.65%68.3priority
- CVE-2023-21608Adobe Acrobat and Reader Use-After-Free VulnerabilityAdobe · Acrobat and ReaderKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1203Exploitation for Client Execution59.4%Top 0.88%68.3priority
- CVE-2023-41064Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow VulnerabilityApple · iOS, iPadOS, and macOSKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1059Command and Scripting Interpreter53.4%Top 1%68.3priority
- CVE-2024-38112Microsoft Windows MSHTML Platform Spoofing Vulnerability84.2%Top 0.3%68.2priority
- CVE-2014-4404Apple OS X Heap-Based Buffer Overflow VulnerabilityApple · OS XKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege Escalation48.9%Top 1.1%68.2priority
- CVE-2016-3235Microsoft Office OLE DLL Side Loading Vulnerability43.3%Top 1.3%68.2priority
- CVE-2021-42292Microsoft Excel Security Feature Bypass43.0%Top 1.3%68.2priority
- CVE-2016-0040Microsoft Windows Kernel Privilege Escalation VulnerabilityMicrosoft · WindowsKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege Escalation24.3%Top 2.1%68.0priority
- CVE-2020-27930Apple Multiple Products Memory Corruption VulnerabilityApple · Multiple ProductsKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1059Command and Scripting Interpreter22.0%Top 2.3%68.0priority
- CVE-2019-8605Apple Multiple Products Use-After-Free VulnerabilityApple · Multiple ProductsKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege Escalation17.6%Top 2.9%67.9priority
- CVE-2015-2424Microsoft PowerPoint Memory Corruption VulnerabilityMicrosoft · PowerPointKEVHigh · 8.8T1204.002Malicious FileT1203Exploitation for Client Execution+1 more · 1 report40.1%Top 1.4%67.8priority
- CVE-2019-7286Apple Multiple Products Memory Corruption VulnerabilityApple · Multiple ProductsKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege Escalation15.9%Top 3.1%67.8priority
- CVE-2022-41091Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability1.9%Top 20%67.7priority
- CVE-2017-0263Microsoft Win32k Privilege Escalation VulnerabilityMicrosoft · Win32kKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege Escalation10.0%Top 4.4%67.6priority
- CVE-2020-27932Apple Multiple Products Type Confusion VulnerabilityApple · Multiple ProductsKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege Escalation10.3%Top 4.3%67.6priority
- CVE-2026-21385Qualcomm Multiple Chipsets Memory Corruption VulnerabilityQualcomm · Multiple ChipsetsKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege Escalation1.3%Top 29%67.6priority
- CVE-2013-1331Microsoft Office Buffer Overflow VulnerabilityMicrosoft · OfficeKEVHigh · 7.8T1059Command and Scripting InterpreterT1204.002Malicious File1 report79.8%Top 0.39%67.3priority
- CVE-2018-4878Adobe Flash Player Use-After-Free VulnerabilityAdobe · Flash PlayerKEVRansomwarePublic exploitEnd of lifeHigh · 7.8T1204.002Malicious FileT1219Remote Access Tools+1 more · 1 report90.3%Top 0.2%67.3priority
- CVE-2024-38080Microsoft Windows Hyper-V Privilege Escalation VulnerabilityMicrosoft · Windows KEVPublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege Escalation7.1%Top 5.8%67.3priority
- CVE-2020-11023JQuery Cross-Site Scripting (XSS) Vulnerability84.9%Top 0.29%67.2priority
- CVE-2024-37383RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability74.0%Top 0.52%67.2priority
- CVE-2010-2572Microsoft PowerPoint Buffer Overflow VulnerabilityMicrosoft · PowerPointKEVHigh · 7.8T1204.002Malicious FileT1059Command and Scripting Interpreter1 report58.6%Top 0.9%67.1priority
- CVE-2023-37580Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilitySynacor · Zimbra Collaboration Suite (ZCS)KEVPublic exploitMedium · 6.1T1204.001Malicious LinkT1059.007JavaScript49.1%Top 1.1%67.0priority
- CVE-2023-21823Microsoft Windows Graphic Component Privilege Escalation VulnerabilityMicrosoft · WindowsKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1059Command and Scripting Interpreter5.6%Top 7.2%67.0priority
- CVE-2025-48384Git Link Following Vulnerability4.4%Top 8.7%66.9priority
- CVE-2016-3715ImageMagick Arbitrary File Deletion Vulnerability75.3%Top 0.49%66.8priority
- CVE-2023-5631Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability76.3%Top 0.46%66.7priority
- CVE-2020-27950Apple Multiple Products Memory Initialization VulnerabilityApple · Multiple ProductsKEVPublic exploitMedium · 5.5T1204.002Malicious FileT1005Data from Local System16.5%Top 3%66.2priority
- CVE-2023-41991Apple Multiple Products Improper Certificate Validation Vulnerability13.4%Top 3.6%66.1priority
- CVE-2021-38000Google Chromium Intents Improper Input Validation VulnerabilityGoogle · Chromium IntentsKEVPublic exploitMedium · 6.1T1189Drive-by CompromiseT1204.001Malicious Link4.9%Top 7.9%65.7priority
- CVE-2021-30869Apple iOS, iPadOS, and macOS Type Confusion VulnerabilityApple · iOS, iPadOS, and macOSKEVHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege Escalation1 report4.1%Top 9.2%65.5priority
- CVE-2021-25337Samsung Mobile Devices Improper Access Control VulnerabilitySamsung · Mobile DevicesKEVPublic exploitHigh · 7.1T1204.002Malicious FileT1005Data from Local System2.8%Top 14%65.3priority
- CVE-2021-1782Apple Multiple Products Race Condition VulnerabilityApple · Multiple ProductsKEVPublic exploitHigh · 7.0T1204.002Malicious FileT1068Exploitation for Privilege Escalation2.2%Top 17%64.4priority
- CVE-2024-43461Microsoft Windows MSHTML Platform Spoofing Vulnerability54.5%Top 0.99%64.0priority
- CVE-2009-0556Microsoft Office PowerPoint Code Injection Vulnerability67.3%Top 0.7%64.0priority
- CVE-2007-0671Microsoft Office Excel Remote Code Execution Vulnerability43.2%Top 1.3%63.9priority
- CVE-2009-0238Microsoft Office Remote Code Execution42.9%Top 1.3%63.9priority
- CVE-2018-4990Adobe Acrobat and Reader Double Free Vulnerability35.9%Top 1.5%63.9priority
- CVE-2021-28550Adobe Acrobat and Reader Use-After-Free Vulnerability51.9%Top 1.1%63.9priority
- CVE-2019-1297Microsoft Excel Remote Code Execution Vulnerability21.8%Top 2.4%63.7priority
- CVE-2023-35311Microsoft Outlook Security Feature Bypass Vulnerability15.5%Top 3.2%63.5priority
- CVE-2022-3075Google Chromium Mojo Insufficient Data Validation Vulnerability5.8%Top 6.8%63.4priority
- CVE-2012-0151Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability87.7%Top 0.24%63.4priority
- CVE-2017-0262Microsoft Office Remote Code Execution Vulnerability81.0%Top 0.37%63.4priority
- CVE-2018-15982Adobe Flash Player Use-After-Free VulnerabilityAdobe · Flash PlayerKEVRansomwarePublic exploitEnd of lifeHigh · 7.8T1204.002Malicious FileT1105Ingress Tool Transfer89.6%Top 0.21%63.4priority
- CVE-2021-38406Delta Electronics DOPSoft 2 Improper Input Validation VulnerabilityDelta Electronics · DOPSoft 2KEVHigh · 7.8T1204.002Malicious FileT1203Exploitation for Client Execution76.4%Top 0.46%63.4priority
- CVE-2024-43573Microsoft Windows MSHTML Platform Spoofing Vulnerability46.1%Top 1.2%63.4priority
- CVE-2023-2136Google Chrome Skia Integer Overflow Vulnerability5.8%Top 6.9%63.3priority
- CVE-2009-0557Microsoft Office Object Record Corruption Vulnerability52.8%Top 1%63.3priority
- CVE-2009-0563Microsoft Office Buffer Overflow Vulnerability59.6%Top 0.88%63.3priority
- CVE-2012-2539Microsoft Word Remote Code Execution Vulnerability53.0%Top 1%63.3priority
- CVE-2014-4077Microsoft IME Japanese Privilege Escalation VulnerabilityMicrosoft · Input Method Editor (IME) JapaneseKEVHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege Escalation54.6%Top 0.98%63.3priority
- CVE-2015-1642Microsoft Office Memory Corruption Vulnerability53.1%Top 1%63.3priority
- CVE-2016-7193Microsoft Office Memory Corruption Vulnerability57.6%Top 0.92%63.3priority
- CVE-2016-7262Microsoft Office Security Feature Bypass Vulnerability57.7%Top 0.92%63.3priority
- CVE-2022-34713Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability67.8%Top 0.69%63.3priority
- CVE-2024-43572Microsoft Windows Management Console Remote Code Execution Vulnerability66.7%Top 0.71%63.3priority
- CVE-2024-38189Microsoft Project Remote Code Execution Vulnerability8.2%Top 5.1%63.1priority
- CVE-2012-1854Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability20.9%Top 2.5%63.0priority
- CVE-2024-21351Microsoft Windows SmartScreen Security Feature Bypass Vulnerability27.8%Top 1.9%62.9priority
- CVE-2022-22675Apple macOS Out-of-Bounds Write Vulnerability12.5%Top 3.8%62.7priority
- CVE-2023-32046Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability10.0%Top 4.4%62.6priority
- CVE-2023-21715Microsoft Office Publisher Security Feature Bypass Vulnerability12.0%Top 3.9%62.3priority
- CVE-2023-26369Adobe Acrobat and Reader Out-of-Bounds Write VulnerabilityAdobe · Acrobat and ReaderKEVHigh · 7.8T1204.002Malicious FileT1203Exploitation for Client Execution6.7%Top 6%62.3priority
- CVE-2023-32049Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability4.2%Top 9.1%62.3priority
- CVE-2024-30040Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability3.9%Top 9.6%62.2priority