Lucene search
+L
KasperskyRecent

4267 matches found

Kaspersky
Kaspersky
•added 2025/10/14 12:00 a.m.•24 views

KLA89271 Multiple vulnerabilities in Microsoft Server Software

Multiple vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Exchange Server can be exploited...

8.8CVSS7.3AI score0.01019EPSS
SaveExploits0References6
Kaspersky
Kaspersky
•added 2025/10/14 12:00 a.m.•27 views

KLA89275 SUI vulnerability in Microsoft Open Source Software

A spoofing vulnerability was found in Microsoft Open Source Software. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2025-59288 Exploitation Public exploits exist for this vulnerability. Related products Playwright CVE list CVE-2025-59288 high KB...

5.3CVSS5.9AI score0.00234EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2025/10/14 12:00 a.m.•18 views

KLA89244 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information, bypass security restrictions, perform cross-site scripting attack. Below is a complete list of...

9.8CVSS7.5AI score0.00422EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2025/10/14 12:00 a.m.•100 views

KLA89245 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information, bypass security restrictions, perform cross-site scripting attack, spoof user interface. Below is a complete...

9.8CVSS7.7AI score0.00509EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2025/10/14 12:00 a.m.•21 views

KLA89241 Multiple vulnerabilities in Mozilla Thunderbird ESR

Multiple vulnerabilities were found in Mozilla Thunderbird ESR. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information, bypass security restrictions, perform cross-site scripting attack. Below is a complete list of...

9.8CVSS7.5AI score0.00422EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2025/10/14 12:00 a.m.•103 views

KLA89242 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information, bypass security restrictions, perform cross-site scripting attack. Below is a complete list of...

9.8CVSS7.8AI score0.00509EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2025/10/13 12:00 a.m.•93 views

KLA90145 Multiple vulnerabilities in PostgreSQL

Multiple vulnerabilities were found in PostgreSQL. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. Missing authorization vulnerability in PostgreSQL CREATE STATISTICS command can be exploited to cause denial of service...

5.9CVSS6.2AI score0.00364EPSS
SaveExploits0References4
Kaspersky
Kaspersky
•added 2025/10/13 12:00 a.m.•16 views

KLA89229 ACE vulnerability in Microsoft Azure

Remote code execution vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2025-0033 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Azure CVE list CVE-2025-0033 high...

6CVSS6.8AI score0.00211EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2025/10/09 12:00 a.m.•15 views

KLA89198 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Storage can be exploited to cause denial of service or...

8.8CVSS8.5AI score0.00335EPSS
SaveExploits1References3
Kaspersky
Kaspersky
•added 2025/10/09 12:00 a.m.•28 views

KLA89197 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Entra ID can be exploited remotely to gain privilege...

9.8CVSS7.8AI score0.07662EPSS
SaveExploits0References11
Kaspersky
Kaspersky
•added 2025/10/09 12:00 a.m.•16 views

KLA89199 Multiple vulnerabilities in Microsoft Apps

Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to spoof user interface. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Copilot can be exploited remotely to spoof user interface. 2. A spoofing vulnerability in...

9.3CVSS5.8AI score0.00572EPSS
SaveExploits0References5
Kaspersky
Kaspersky
•added 2025/10/08 12:00 a.m.•96 views

KLA90350 DoS vulnerability in Wireshark

Denial of Service vulnerability was found in Wireshark. Malicious users can exploit this vulnerability to cause denial of service. Original advisories wnpa-sec-2025-04 · MONGO dissector infinite loop Exploitation Public exploits exist for this vulnerability. CVE list CVE-2025-11626 high Solution...

5.5CVSS5.9AI score0.0012EPSS
SaveExploits0References2
Kaspersky
Kaspersky
•added 2025/10/07 12:00 a.m.•96 views

KLA88984 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Heap buffer overflow vulnerability in Sync an be exploited to cause denial of service. 2. Use...

8.8CVSS8.5AI score0.00335EPSS
SaveExploits1References2
Kaspersky
Kaspersky
•added 2025/10/07 12:00 a.m.•95 views

KLA89372 Multiple vulnerabilities in 7-Zip

Multiple vulnerabilities were found in 7-Zip. Malicious users can exploit these vulnerabilities to . Below is a complete list of vulnerabilities: 1. File Parsing Directory Traversal Remote Code Execution vulnerability in 7-zip can be exploited remotely to execute arbitrary code 2. File Parsing...

7.8CVSS7.9AI score0.26999EPSS
SaveExploits11References7
Kaspersky
Kaspersky
•added 2025/10/06 12:00 a.m.•90 views

KLA89720 DoS vulnerability in Apache Tomcat

Denial of service vulnerability was found in Apache Tomcat. Malicious users can exploit this vulnerability to cause denial of service. Original advisories Fixed in Apache Tomcat 9.0.110 Exploitation Related products Apache-Tomcat CVE list CVE-2025-61795 high Solution Update to the latest version...

5.3CVSS7AI score0.01249EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2025/10/03 12:00 a.m.•23 views

KLA88954 PE vulnerability in Microsoft Apps

An elevation of privilege vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to cause denial of service, gain privileges. Original advisories CVE-2025-59489 Exploitation Public exploits exist for this vulnerability. Malware exists for this vulnerability...

8.4CVSS8.1AI score0.00644EPSS
SaveExploits4References4
Kaspersky
Kaspersky
•added 2025/10/02 12:00 a.m.•18 views

KLA88955 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Inappropriate implementation vulnerability in Omnibox can b...

8.8CVSS7.3AI score0.00376EPSS
SaveExploits0References14
Kaspersky
Kaspersky
•added 2025/09/30 12:00 a.m.•100 views

KLA88689 OSI vulnerability in TeamViewer

Improper handling of symbolic links vulnerability was found in TeamViewer. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions. Original advisories TV-2025-1004: Privilege Escalation via Symbolic Link Spoofing in TeamViewer Service...

4.7CVSS5.6AI score0.00138EPSS
SaveExploits0References4
Kaspersky
Kaspersky
•added 2025/09/30 12:00 a.m.•94 views

KLA88688 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrom. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Inappropriate implementation vulnerability in Omnibox can be...

8.8CVSS7.3AI score0.00376EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2025/09/30 12:00 a.m.•94 views

KLA88567 DoS vulnerabilities in Mozilla Firefox

Denial of service vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. Out of bounds memory read vulnerability in JIT Codegen Extensions can be exploited to cause denial of...

8.6CVSS6.8AI score0.0027EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2025/09/29 12:00 a.m.•23 views

KLA89352 OAF vulnerability in Git LFS

Path traversal vulnerability was found in Git LFS. Malicious users can exploit this vulnerability to overwrite arbitrary files. Original advisories Fixed in Git LFS 3.7.1 Exploitation Public exploits exist for this vulnerability. CVE list CVE-2025-26625 critical Solution Update to the latest...

8.6CVSS7.3AI score0.01031EPSS
SaveExploits0References2
Kaspersky
Kaspersky
•added 2025/09/25 12:00 a.m.•105 views

KLA88513 Multiple vulnerabilities in Foxit Reader

Multiple vulnerabilities were found in Foxit Reader. Malicious users can exploit these vulnerabilities to bypass security restrictions. Below is a complete list of vulnerabilities: 1. Signature-Based Trust Bypass vulnerability can be exploited to bypass security restrictions. 2. Improper...

5.3CVSS5.8AI score0.00172EPSS
SaveExploits1References4
Kaspersky
Kaspersky
•added 2025/09/25 12:00 a.m.•23 views

KLA88448 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Edge Chromium-based can be...

9.1CVSS8.4AI score0.0721EPSS
SaveExploits0References7
Kaspersky
Kaspersky
•added 2025/09/24 12:00 a.m.•21 views

KLA88413 RCE vulnerability in OmniParser

A remote code execution vulnerability was found in OmniParser. Malicious users can exploit this vulnerability to execute arbitrary code, bypass security restrictions. Original advisories CVE-2025-55322 Exploitation Public exploits exist for this vulnerability. Related products OmniParser CVE list...

7.3CVSS8.2AI score0.00368EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2025/09/19 12:00 a.m.•17 views

KLA88313 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Type confusion vulnerability in V8 can be exploited to to cause denial of service. 2. Use...

9.8CVSS8.2AI score0.05391EPSS
SaveExploits1References7
Kaspersky
Kaspersky
•added 2025/09/18 12:00 a.m.•101 views

KLA88208 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Windows Bluetooth Service can be exploited remotely to gain privileges. 2. An...

7CVSS6.9AI score0.00327EPSS
SaveExploits0References16
Kaspersky
Kaspersky
•added 2025/09/18 12:00 a.m.•14 views

KLA88207 DoS vulnerability in Opera

Type confusion vulnerability was found in Opera. Malicious users can exploit this vulnerability to cause denial of service. Original advisories Opera 122.0.5643.51 Stable update Exploitation Public exploits exist for this vulnerability. Malware exists for this vulnerability. Usually such malware ...

9.8CVSS7.5AI score0.05391EPSS
SaveExploits1References4
Kaspersky
Kaspersky
•added 2025/09/18 12:00 a.m.•102 views

KLA90884 PE vulnerability in Microsoft Products (ESU)

An elevation of privilege vulnerability was found in Microsoft Products Extended Security Update. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2025-59220 Exploitation Malware exists for this vulnerability. Usually such malware is classified as Exploit...

7CVSS6.8AI score0.00254EPSS
SaveExploits0References11
Kaspersky
Kaspersky
•added 2025/09/17 12:00 a.m.•93 views

KLA88206 Mutltiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Heap buffer overflow vulnerability in ANGLE can be exploited to to cause denial of service. 2...

9.8CVSS8.2AI score0.05391EPSS
SaveExploits1References4
Kaspersky
Kaspersky
•added 2025/09/16 12:00 a.m.•5 views

KLA88017 SB vulnerability in Microsoft Apps

Unspecified vulnerability was found in Microsoft PC Manager. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2025-49728 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-PC-Manager CVE list CVE-2025-49728...

4CVSS5.8AI score0.0024EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2025/09/16 12:00 a.m.•10 views

KLA88016 SUI vulnerability in Microsoft Browser

Unspecified vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2025-47967 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Edge CVE list CVE-2025-47967 warning Solution...

4.7CVSS5.8AI score0.00366EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2025/09/16 12:00 a.m.•94 views

KLA88011 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, bypass security restrictions, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Use-after-free vulnerability i...

8.8CVSS8.2AI score0.00754EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2025/09/16 12:00 a.m.•17 views

KLA88015 Multiple vulnerabilities in Mozilla Thunderbird ESR

Multiple vulnerabilities were found in Mozilla Thunderbird ESR. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Use-after-free vulnerability in Graphics: Canvas...

8.8CVSS8.3AI score0.00754EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2025/09/16 12:00 a.m.•92 views

KLA88014 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, bypass security restrictions, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Use-after-free vulnerability in...

8.8CVSS8.1AI score0.00754EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2025/09/16 12:00 a.m.•21 views

KLA88013 ACE vulnerability in Mozilla Firefox ESR

ACE vulnerability was found in Mozilla Firefox ESR. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories MFSA2025-74 Exploitation Public exploits exist for this vulnerability. Related products Mozilla-Firefox-ESR CVE list CVE-2025-10533 critical Solution...

8.8CVSS6.7AI score0.00754EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2025/09/16 12:00 a.m.•17 views

KLA88012 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Use-after-free vulnerability in Graphics: Canvas2D...

8.8CVSS8.3AI score0.00754EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2025/09/11 12:00 a.m.•18 views

KLA87520 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Inappropriate implementation vulnerability in Mojo can be exploited to cause denial of...

8.8CVSS8.1AI score0.00574EPSS
SaveExploits0References4
Kaspersky
Kaspersky
•added 2025/09/11 12:00 a.m.•26 views

KLA87522 ACE vulnerability in Microsoft Developer Tools

A remote code execution vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to execute arbitrary code, bypass security restrictions. Original advisories CVE-2025-55319 Exploitation Public exploits exist for this vulnerability. CVE list CVE-2025-553...

9.8CVSS8.8AI score0.00918EPSS
SaveExploits1References2
Kaspersky
Kaspersky
•added 2025/09/09 12:00 a.m.•23 views

KLA87443 PE vulnerabuility in Microsoft Apps

An elevation of privilege vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2025-55245 Exploitation Public exploits exist for this vulnerability. Related products Xbox-Gaming-Services CVE list CVE-2025-55245...

7.8CVSS7.2AI score0.00424EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2025/09/09 12:00 a.m.•16 views

KLA87442 Multiple vulnerabilities in Microsoft SQL Server

Multiple vulnerabilities were found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, obtain sensitive information, gain privileges. Below is a complete list of vulnerabilities: 1. Improper Handling of Exceptional...

8.8CVSS7.6AI score0.32908EPSS
SaveExploits2References12
Kaspersky
Kaspersky
•added 2025/09/09 12:00 a.m.•107 views

KLA87440 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, obtain sensitive information, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code...

8.8CVSS8.9AI score0.19561EPSS
SaveExploits0References37
Kaspersky
Kaspersky
•added 2025/09/09 12:00 a.m.•98 views

KLA87439 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Serviceworker can be exploited to cause denial of service or...

8.8CVSS8.1AI score0.00574EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2025/09/09 12:00 a.m.•27 views

KLA87401 Multiple vulnerabilities in Adobe Acrobat Reader

Multiple vulnerabilities were found in Adobe Acrobat Reader. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Security bypass vulnerability in Security Design Principles can be exploited to...

7.8CVSS6.6AI score0.00343EPSS
SaveExploits0References4
Kaspersky
Kaspersky
•added 2025/09/09 12:00 a.m.•33 views

KLA87441 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Connected Machine...

9.8CVSS9.2AI score0.02061EPSS
SaveExploits0References6
Kaspersky
Kaspersky
•added 2025/09/09 12:00 a.m.•18 views

KLA87521 PE vulnerability in Microsoft Developer Tools

An elevation of privilege vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2025-49734 Exploitation Related products PowerShell CVE list CVE-2025-49734 high Solution Install necessary updates from the K...

7CVSS7.1AI score0.00331EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2025/09/09 12:00 a.m.•107 views

KLA87444 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, bypass security restrictions, execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation...

8.8CVSS9.3AI score0.19771EPSS
SaveExploits3References75
Kaspersky
Kaspersky
•added 2025/09/09 12:00 a.m.•100 views

KLA87445 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, gain privileges, execute arbitrary code, cause denial of service. Below is a complete list of...

8.8CVSS9.2AI score0.19771EPSS
SaveExploits4References72
Kaspersky
Kaspersky
•added 2025/09/05 12:00 a.m.•96 views

KLA89721 Multiple vulnerabilities in Apache Tomcat

Multiple vulnerabilities were found in Apache Tomcat. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, inject malicious code. Original advisories Fixed in Apache Tomcat 9.0.109 Exploitation Public exploits exist for this vulnerability...

7.5CVSS9.4AI score0.64413EPSS
SaveExploits4References4
Kaspersky
Kaspersky
•added 2025/09/05 12:00 a.m.•22 views

KLA87339 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, spoof user interface. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in V8 can be exploited remotely t...

8.8CVSS8AI score0.0041EPSS
SaveExploits0References8
Kaspersky
Kaspersky
•added 2025/09/04 12:00 a.m.•19 views

KLA87340 OSI vulnerability in Microsoft Apps

OSI vulnerability was found in Microsoft Xbox Gaming Services. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2025-55242 Exploitation Related products Xbox-Gaming-Services CVE list CVE-2025-55242 critical Solution Install necessary updates...

7.5CVSS6.6AI score0.00783EPSS
SaveExploits0References3
Total number of security vulnerabilities4267