CISA's Known Exploited Vulnerabilities catalog: flaws confirmed exploited in the wild, with the affected vendor and product and CISA's remediation due date.
Android Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an application to the Linux Kernel. This vulnerability was observed chained with CVE-2020-0041 and CVE-2020-0069 under exploit chain "AbstractEmu."
Amcrest cameras and NVR contain a stack-based buffer overflow vulnerability through port 37777 that allows an unauthenticated, remote attacker to crash the device and possibly execute code.
Adobe Flash Player contains a use-after-free vulnerability that could allow for code execution.
Adobe ColdFusion contains an unrestricted file upload vulnerability that could allow for code execution.
Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could allow for code execution.
Adobe Acrobat and Reader contains a use-after-free vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user.
Acrobat Acrobat and Reader contain a heap-based buffer overflow vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user.
Accellion FTA contains a server-side request forgery (SSRF) vulnerability exploited via a crafted POST request to wmProgressstat.html.
Accellion FTA contains a SQL injection vulnerability exploited via a crafted host header in a request to document_root.html.
Accellion FTA contains an OS command injection vulnerability exploited via a local web service call.
Accellion FTA contains an OS command injection vulnerability exploited via a crafted POST request to various admin endpoints.