Authoritative signal
The current CISA KEV catalog, bound to the active generation and ordered by catalog date and CASCA priority.
As known Jul 19, 2026, 5:00 AM UTCgen-56ccdaf9Microsoft Windows Runtime contains an unspecified vulnerability that allows for remote code execution.
MicrosoftWindows
Required actionApply updates per vendor instructions.
Apple iOS and macOS contain an out-of-bounds write vulnerability that could allow for remote code execution when processing malicious crafted web content.
AppleiOS and macOS
Required actionApply updates per vendor instructions.
Apple iOS and macOS contain an out-of-bounds write vulnerability that could allow an application to execute code with kernel privileges.
AppleiOS and macOS
Required actionApply updates per vendor instructions.
Google Chromium Intents contains an insufficient validation of untrusted input vulnerability that allows a remote attacker to browse to a malicious website via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
GoogleChromium Intents
Required actionApply updates per vendor instructions.
Synacor Zimbra Collaboration Suite (ZCS) contains an authentication bypass vulnerability in MailboxImportServlet. This vulnerability was chained with CVE-2022-27925 which allows for unauthenticated remote code execution.
SynacorZimbra Collaboration Suite (ZCS)
Required actionApply updates per vendor instructions.
Synacor Zimbra Collaboration Suite (ZCS) contains flaw in the mboximport functionality, allowing an authenticated attacker to upload arbitrary files to perform remote code execution. This vulnerability was chained with CVE-2022-37042 which allows for unauthenticated remote code execution.
SynacorZimbra Collaboration Suite (ZCS)
Required actionApply updates per vendor instructions.
RARLAB UnRAR on Linux and UNIX contains a directory traversal vulnerability, allowing an attacker to write to files during an extract (unpack) operation.
RARLABUnRAR
Required actionApply updates per vendor instructions.
A remote code execution vulnerability exists when Microsoft Windows MSDT is called using the URL protocol from a calling application.
MicrosoftWindows
Required actionApply updates per vendor instructions.
Synacor Zimbra Collaboration Suite (ZCS) allows an attacker to inject memcache commands into a targeted instance which causes an overwrite of arbitrary cached entries.
SynacorZimbra Collaboration Suite (ZCS)
Required actionApply updates per vendor instructions.
Atlassian Questions For Confluence App has hard-coded credentials, exposing the username and password in plaintext. A remote unauthenticated attacker can use these credentials to log into Confluence and access all content accessible to users in the confluence-users group.
AtlassianConfluence
Required actionApply updates per vendor instructions.
Microsoft Windows CSRSS contains an unspecified vulnerability that allows for privilege escalation to SYSTEM privileges.
MicrosoftWindows
Required actionApply updates per vendor instructions.
Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability where an attacker can coerce the domain controller to authenticate to the attacker using NTLM.
MicrosoftWindows
Required actionApply remediation actions outlined in CISA guidance [https://www.cisa.gov/guidance-applying-june-microsoft-patch].
The Service Appliance component in Mitel MiVoice Connect allows remote code execution due to incorrect data validation.
MitelMiVoice Connect
Required actionApply updates per vendor instructions.
The Red Hat polkit pkexec utility contains an out-of-bounds read and write vulnerability that allows for privilege escalation with administrative rights.
Red HatPolkit
Required actionApply updates per vendor instructions.
A use-after-free vulnerability in Apple iOS, macOS, tvOS, and watchOS could allow a malicious application to execute code with system privileges.
AppleMultiple Products
Required actionApply updates per vendor instructions.
Apple iOS, iPadOS, macOS, tvOS, and watchOS contain a memory corruption vulnerability that could allow an application to execute code with kernel privileges.
AppleMultiple Products
Required actionApply updates per vendor instructions.
Apple iOS, iPadOS, and tvOS contain a memory corruption vulnerability that could allow an application to execute code with kernel privileges.
AppleMultiple Products
Required actionApply updates per vendor instructions.
Apple iOS, macOS, tvOS, and watchOS contain a memory corruption vulnerability which can allow for code execution.
AppleMultiple Products
Required actionApply updates per vendor instructions.
Apple iOS and iPadOS contain a buffer overflow vulnerability that could allow an application to execute code with kernel privileges.
AppleiOS and iPadOS
Required actionApply updates per vendor instructions.
Google Chromium PopupBlocker contains an insufficient policy enforcement vulnerability that allows a remote attacker to bypass navigation restrictions via a crafted iframe. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
GoogleChromium PopupBlocker
Required actionApply updates per vendor instructions.
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run code with the privileges of the calling application.
MicrosoftWindows
Required actionApply updates per vendor instructions.
SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
SAPNetWeaver
Required actionApply updates per vendor instructions.
SAP NetWeaver contains a vulnerability that allows unrestricted file upload.
SAPNetWeaver
Required actionApply updates per vendor instructions.
The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request.
SAPNetWeaver
Required actionApply updates per vendor instructions.
The Universal 3D (U3D) component in Adobe Reader and Acrobat contains a memory corruption vulnerability which could allow remote attackers to execute code or cause denial-of-service (DoS).
AdobeReader and Acrobat
Required actionApply updates per vendor instructions.
QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files.
QNAPPhoto Station
Required actionApply updates per vendor instructions.
Adobe Acrobat and Reader contains an array boundary issue in Universal 3D (U3D) support that could lead to remote code execution.
AdobeAcrobat and Reader
Required actionApply updates per vendor instructions.
QNAP NAS devices running Photo Station contain an improper access control vulnerability allowing remote attackers to gain unauthorized access to the system.
QNAPPhoto Station
Required actionApply updates per vendor instructions.
QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files.
QNAPPhoto Station
Required actionApply updates per vendor instructions.
Adobe Acrobat and Reader contain a buffer overflow vulnerability that allows remote attackers to execute code via a PDF file with long arguments to unspecified JavaScript methods.
AdobeAcrobat and Reader
Required actionApply updates per vendor instructions.
Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
AdobeFlash Player
Required actionThe impacted product is end-of-life and should be disconnected if still in use.
The Authenticode Signature Verification function in Microsoft Windows (WinVerifyTrust) does not properly validate the digest of a signed portable executable (PE) file, which allows user-assisted remote attackers to execute code.
MicrosoftWindows
Required actionApply updates per vendor instructions.
Microsoft XML Core Services contains a memory corruption vulnerability which could allow for remote code execution.
MicrosoftXML Core Services
Required actionApply updates per vendor instructions.
Adobe Acrobat and Reader contain a stack-based buffer overflow vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
AdobeAcrobat and Reader
Required actionApply updates per vendor instructions.
Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
AdobeFlash Player
Required actionThe impacted product is end-of-life and should be disconnected if still in use.
Use-after-free vulnerability in Adobe Acrobat and Reader allows remote attackers to execute code via a crafted PDF file.
AdobeAcrobat and Reader
Required actionApply updates per vendor instructions.
Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via crafted PNG data in an Office document.
MicrosoftOffice
Required actionApply updates per vendor instructions.
Microsoft Internet Explorer contains a use-after-free vulnerability that allows remote attackers to execute code via a crafted web site.
MicrosoftInternet Explorer
Required actionApply updates per vendor instructions.
Google Chromium V8 Engine contains an unspecified vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
GoogleChromium V8
Required actionApply updates per vendor instructions.
Adobe Flash Player contains an unspecified vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
AdobeFlash Player
Required actionThe impacted product is end-of-life and should be disconnected if still in use.
Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via a Word document with a crafted tag containing an invalid length field.
MicrosoftOffice
Required actionApply updates per vendor instructions.
Microsoft PowerPoint contains a buffer overflow vulnerability that alllows for remote code execution.
MicrosoftPowerPoint
Required actionApply updates per vendor instructions.
Microsoft Office contains an object record corruption vulnerability that allows remote attackers to execute code via a crafted Excel file with a malformed record object.
MicrosoftOffice
Required actionApply updates per vendor instructions.
Multiple NETGEAR devices contain a buffer overflow vulnerability that allows for authentication bypass and remote code execution.
NETGEARMultiple Devices
Required actionApply updates per vendor instructions.
Google Chromium V8 Engine contains an integer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
GoogleChromium V8
Required actionApply updates per vendor instructions.
Google Chromium V8 Engine contains an out-of-bounds read vulnerability that allows a remote attacker to cause a denial of service or possibly have another unspecified impact via crafted JavaScript code. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
GoogleChromium V8
Required actionApply updates per vendor instructions.
Microsoft Word and Microsoft Works Suites contain a malformed object pointer which allows attackers to execute code.
MicrosoftWord
Required actionApply updates per vendor instructions.
Adobe Acrobat and Reader contains an unespecified vulnerability described as a design flaw which could allow a specially crafted file to be printed silently an arbitrary number of times.
AdobeAcrobat and Reader
Required actionApply updates per vendor instructions.
Google Chromium V8 Engine contains a memory corruption vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
GoogleChromium V8
Required actionApply updates per vendor instructions.
Adobe Acrobat and Reader have a double free vulnerability that could lead to remote code execution.
AdobeAcrobat and Reader
Required actionApply updates per vendor instructions.