Lucene search
+L
KasperskyMost viewed

4267 matches found

Kaspersky
Kaspersky
•added 2018/07/10 12:00 a.m.•18 views

KLA12553 Security advisory for Adobe Flash Player

Microsoft released update to address vulnerabilities in Adobe Flash Player. For details look at KLA11284. Original advisories ADV180017 Exploitation Related products Microsoft-Windows CVE list KB list 4338832 Solution Install necessary updates from the KB section, that are listed in your Windows...

7.3AI score
SaveExploits0References5
Kaspersky
Kaspersky
•added 2026/09/17 12:00 a.m.•17 views

KLA91296 Multiple vulnerability in Microsoft Other

Multiple vulnerability was found in Microsoft Other. Malicious users can exploit this vulnerability to bypass security restrictions, obtain sensitive information. Original advisories CVE-2026-55946 Exploitation Related products Microsoft-Copilot-Studio CVE list CVE-2026-55946 unknown Solution...

6.1CVSS5.7AI score0.0039EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2025/09/19 12:00 a.m.•17 views

KLA88313 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Type confusion vulnerability in V8 can be exploited to to cause denial of service. 2. Use...

9.8CVSS8.2AI score0.05391EPSS
SaveExploits1References7
Kaspersky
Kaspersky
•added 2025/09/16 12:00 a.m.•17 views

KLA88015 Multiple vulnerabilities in Mozilla Thunderbird ESR

Multiple vulnerabilities were found in Mozilla Thunderbird ESR. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Use-after-free vulnerability in Graphics: Canvas...

8.8CVSS8.3AI score0.00754EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2025/09/16 12:00 a.m.•17 views

KLA88012 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Use-after-free vulnerability in Graphics: Canvas2D...

8.8CVSS8.3AI score0.00754EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2025/05/13 12:00 a.m.•18 views

KLA90915 SB vulnerability in Microsoft Visual Studio Code

A security feature bypass vulnerability was found in Microsoft Visual Studio Code. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2025-21264 Exploitation Related products Microsoft-Visual-Studio Visual-Studio-Code Microsoft-Visual-Studio-Co...

7.1CVSS5.8AI score0.00787EPSS
SaveExploits0References5
Kaspersky
Kaspersky
•added 2023/03/27 12:00 a.m.•17 views

KLA90886 DoS vulnerability in Microsoft Mariner

Denial of service vulnerability was found in Microsoft Mariner. Malicious users can exploit this vulnerability to cause denial of service, bypass security restrictions. Original advisories CVE-2023-0464 Exploitation Public exploits exist for this vulnerability. CVE list CVE-2023-0464 critical KB...

7.5CVSS5.7AI score0.03985EPSS
SaveExploits0References2
Kaspersky
Kaspersky
•added 2026/10/02 12:00 a.m.•16 views

KLA91314 PE vulnerability in Microsoft Products (ESU)

Privilege escalation vulnerability was found in Microsoft Products ESU. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2026-96940 Exploitation Public exploits exist for this vulnerability. Malware exists for this vulnerability. Usually such malware is...

8.8CVSS6.2AI score0.00485EPSS
SaveExploits1References7
Kaspersky
Kaspersky
•added 2026/09/25 12:00 a.m.•16 views

KLA91307 ACE vulnerability in Microsoft Office

A remote code execution vulnerability was found in Microsoft Office. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2026-100208 Exploitation Related products Microsoft-Outlook CVE list CVE-2026-100208 unknown Solution Install necessary updates fr...

7.5CVSS6.9AI score0.00348EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2026/09/15 12:00 a.m.•16 views

KLA91282 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. A...

9.6CVSS7.1AI score0.00357EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2026/09/09 12:00 a.m.•16 views

KLA91275 DoS vulnerability in Microsoft Browser

Denial of service vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to cause denial of service. Original advisories CVE-2026-85046 Exploitation Public exploits exist for this vulnerability. Malware exists for this vulnerability. Usually such malware is...

8.8CVSS8AI score0.48881EPSS
SaveExploits6References4
Kaspersky
Kaspersky
•added 2026/09/03 12:00 a.m.•16 views

KLA91260 PE vulnerabilities in Microsoft Office

Privilege escalation vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Fabric can be exploited remotely to gain privileges. 2. A...

10CVSS7.7AI score0.00632EPSS
SaveExploits0References4
Kaspersky
Kaspersky
•added 2026/09/01 12:00 a.m.•16 views

KLA91248 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1...

9.8CVSS7.1AI score0.0057EPSS
SaveExploits1References3
Kaspersky
Kaspersky
•added 2026/08/18 12:00 a.m.•16 views

KLA91232 Multiple vulnerabilities in Mozilla Thunderbird ESR

Multiple vulnerabilities were found in Mozilla Thunderbird ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Security vulnerability...

9.8CVSS7.1AI score0.00606EPSS
SaveExploits4References3
Kaspersky
Kaspersky
•added 2026/06/09 12:00 a.m.•16 views

KLA91088 Multiple vulnerabilities in Microsoft Apps

Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of...

7.8CVSS7AI score0.00704EPSS
SaveExploits0References10
Kaspersky
Kaspersky
•added 2026/04/18 12:00 a.m.•16 views

KLA91274 Multiple vulnerability in Microsoft Developer Tools

Multiple vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to gain privileges, obtain sensitive information. Original advisories CVE-2025-70873 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Visual-Studio CV...

7.5CVSS7.2AI score0.00332EPSS
SaveExploits1References3
Kaspersky
Kaspersky
•added 2025/12/04 12:00 a.m.•16 views

KLA90806 Multiple vulnerabilities in Apache HTTP Server

Multiple vulnerabilities were found in Apache HTTP Server. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Out of bounds memory read vulnerability can be exploited t...

8.3CVSS7.8AI score0.01424EPSS
SaveExploits0References4
Kaspersky
Kaspersky
•added 2025/10/13 12:00 a.m.•16 views

KLA89229 ACE vulnerability in Microsoft Azure

Remote code execution vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2025-0033 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Azure CVE list CVE-2025-0033 high...

6CVSS6.8AI score0.00211EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2025/10/09 12:00 a.m.•16 views

KLA89199 Multiple vulnerabilities in Microsoft Apps

Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to spoof user interface. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Copilot can be exploited remotely to spoof user interface. 2. A spoofing vulnerability in...

9.3CVSS5.8AI score0.00572EPSS
SaveExploits0References5
Kaspersky
Kaspersky
•added 2025/09/09 12:00 a.m.•16 views

KLA87442 Multiple vulnerabilities in Microsoft SQL Server

Multiple vulnerabilities were found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, obtain sensitive information, gain privileges. Below is a complete list of vulnerabilities: 1. Improper Handling of Exceptional...

8.8CVSS7.6AI score0.32908EPSS
SaveExploits2References12
Kaspersky
Kaspersky
•added 2025/08/28 12:00 a.m.•16 views

KLA87209 ACE vulnerability in Microsoft Browser

Use after free vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2025-9478 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Edge CVE list CVE-2025-9478 critical KB li...

8.8CVSS8.5AI score0.07273EPSS
SaveExploits1References3
Kaspersky
Kaspersky
•added 2025/08/15 12:00 a.m.•16 views

KLA86735 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Aura can be exploited to cause denial of service or execu...

8.8CVSS8.1AI score0.00325EPSS
SaveExploits0References7
Kaspersky
Kaspersky
•added 2025/07/23 12:00 a.m.•16 views

KLA86161 SB vulnerability in Apache HTTP Server

Security vulnerability was found in Apache HTTP Server. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories Fixed in Apache HTTP Server 2.4.65 Exploitation Public exploits exist for this vulnerability. Related products Apache-HTTP-Server CVE list...

6.3CVSS6.3AI score0.00819EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2025/05/08 12:00 a.m.•16 views

KLA83530 DoS vulnerability in Microsoft Browser

Denial of service vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to cause denial of service. Original advisories CVE-2025-4372 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Edge CVE list CVE-2025-4372 critical K...

8.8CVSS8.2AI score0.0047EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2025/01/14 12:00 a.m.•16 views

KLA79449 OSI vulnerability in Git LFS

Information disclosure vulnerability was found in Git LFS. Malicious users can exploit this vulnerability via special crafted URL to obtain sensitive information. Original advisories Git LFS 3.6.1 Exploitation Related products Git-LFS CVE list CVE-2024-53263 critical Solution Update to the latest...

8.5CVSS6.9AI score0.0107EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2025/01/07 12:00 a.m.•16 views

KLA78811 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, spoof user interface, bypass security restrictions, gain privileges, perform cross-site scripting attack. Below is a complete list of...

9.8CVSS8.9AI score0.14716EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2024/12/19 12:00 a.m.•16 views

KLA78355 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Type confusion vulnerability in V8 can be exploited to cause denial of service. 2. A remo...

8.8CVSS8.3AI score0.07147EPSS
SaveExploits1References6
Kaspersky
Kaspersky
•added 2026/09/30 12:00 a.m.•15 views

KLA91310 Multiple vulnerabilities in Mozilla Thunderbird ESR

Multiple vulnerabilities were found in Mozilla Thunderbird ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. A...

9.6CVSS7AI score0.00328EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2026/08/20 12:00 a.m.•15 views

KLA91245 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in V8 can be exploited remotely to execute arbitrary code. 2. A...

8.8CVSS8.6AI score0.00413EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2025/10/09 12:00 a.m.•15 views

KLA89198 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Storage can be exploited to cause denial of service or...

8.8CVSS8.5AI score0.00335EPSS
SaveExploits1References3
Kaspersky
Kaspersky
•added 2025/08/19 12:00 a.m.•15 views

KLA86790 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, cause denial of service, spoof user interface. Below is a complete list of vulnerabilities: 1. Memory corruption vulnerability in...

9.8CVSS9AI score0.00588EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2025/07/31 12:00 a.m.•15 views

KLA86284 ACE vulnerability in Microsoft Browser

A remote code execution vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to execute arbitrary code, cause denial of service. Original advisories CVE-2025-8292 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Edge CVE...

8.8CVSS7.9AI score0.00412EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2025/07/25 12:00 a.m.•15 views

KLA86162 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit this vulnerability to cause denial of service. Original advisories CVE-2025-8010 CVE-2025-8011 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Edge CVE list CVE-2025-8010...

8.8CVSS6.3AI score0.00332EPSS
SaveExploits0References4
Kaspersky
Kaspersky
•added 2025/02/21 12:00 a.m.•15 views

KLA80285 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Type confusion vulnerability in GPU can be exploited to cause denial of service. 2. Type...

8.8CVSS9.3AI score0.00634EPSS
SaveExploits0References5
Kaspersky
Kaspersky
•added 2026/10/01 12:00 a.m.•14 views

KLA91312 Multiple vulnerabilities in Apache HTTP Server

Multiple vulnerabilities were found in Apache HTTP Server. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Security vulnerability can b...

9.8CVSS8.2AI score0.00876EPSS
SaveExploits2References3
Kaspersky
Kaspersky
•added 2026/09/03 12:00 a.m.•14 views

KLA91258 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Security vulnerability can be...

9.8CVSS7.4AI score0.00523EPSS
SaveExploits0References25
Kaspersky
Kaspersky
•added 2026/08/18 12:00 a.m.•14 views

KLA91228 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Security vulnerability can ...

9.8CVSS7.1AI score0.00606EPSS
SaveExploits4References3
Kaspersky
Kaspersky
•added 2026/01/22 12:00 a.m.•14 views

KLA90855 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to perform cross-site scripting attack, spoof user interface, obtain sensitive information, gain privileges. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in...

9.9CVSS5AI score0.00862EPSS
SaveExploits0References7
Kaspersky
Kaspersky
•added 2026/01/16 12:00 a.m.•14 views

KLA90852 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, spoof user interface, execute arbitrary code, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Out of bounds memory read vulnerabili...

9.8CVSS7.5AI score0.08815EPSS
SaveExploits0References13
Kaspersky
Kaspersky
•added 2025/09/18 12:00 a.m.•14 views

KLA88207 DoS vulnerability in Opera

Type confusion vulnerability was found in Opera. Malicious users can exploit this vulnerability to cause denial of service. Original advisories Opera 122.0.5643.51 Stable update Exploitation Public exploits exist for this vulnerability. Malware exists for this vulnerability. Usually such malware ...

9.8CVSS7.5AI score0.05391EPSS
SaveExploits1References4
Kaspersky
Kaspersky
•added 2025/07/22 12:00 a.m.•14 views

KLA86013 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1...

9.8CVSS9.1AI score0.0054EPSS
SaveExploits0References2
Kaspersky
Kaspersky
•added 2025/06/10 12:00 a.m.•14 views

KLA84757 SB vulnerability in Mozilla Thunderbird

Security vulnerability was found in Mozilla Thunderbird. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories mfsa2025-50 Exploitation Public exploits exist for this vulnerability. Related products Mozilla-Thunderbird CVE list CVE-2025-5986 high...

6.5CVSS6.4AI score0.0058EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2026/09/30 12:00 a.m.•13 views

KLA91311 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. A...

9.6CVSS7AI score0.00375EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2026/09/15 12:00 a.m.•13 views

KLA91323 Multiple vulnerabilities in Oracle VirtualBox

Multiple vulnerabilities were found in Oracle VirtualBox. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. Memory safety vulnerability can be exploit...

8.6CVSS7.2AI score0.0047EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2026/08/28 12:00 a.m.•13 views

KLA91246 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. An...

6.8AI score
SaveExploits0References307
Kaspersky
Kaspersky
•added 2026/06/16 12:00 a.m.•13 views

KLA91273 SB vulnerability in Microsoft Developer Tools

Security bypass vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2026-34182 Exploitation Related products Microsoft-Visual-Studio CVE list CVE-2026-34182 unknown Solution Install necessary...

9.1CVSS6.5AI score0.01057EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2026/06/09 12:00 a.m.•13 views

KLA91089 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Azure...

9.8CVSS8.7AI score0.00974EPSS
SaveExploits0References6
Kaspersky
Kaspersky
•added 2026/06/04 12:00 a.m.•13 views

KLA91081 Multiple vulnerabilities in Microsoft Apps

Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in M365 Copilot c...

8.8CVSS6.9AI score0.00922EPSS
SaveExploits0References4
Kaspersky
Kaspersky
•added 2026/02/10 12:00 a.m.•13 views

KLA90871 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, spoof user interface, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of...

9.8CVSS7AI score0.0258EPSS
SaveExploits0References9
Kaspersky
Kaspersky
•added 2026/01/20 12:00 a.m.•13 views

KLA90846 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, spoof user interface, bypass security restrictions, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Out of bounds memory read vulnerabili...

9.8CVSS7.5AI score0.08815EPSS
SaveExploits0References13
Total number of security vulnerabilities4267