{ "query": { "kev": "1", "page": "81" }, "count": 20, "total": 1739, "page": 81, "limit": 20, "updated": { "cves": "2026-10-10T10:53:02.847Z", "kev": "2026-10-10T10:53:02.361Z", "epss": "2026-10-10T07:02:53.632Z", "breaches": "2026-10-10T06:52:53.471Z", "posts": "2026-10-10T10:53:02.847Z" }, "links": { "web": "https://spydr.io/threats?kev=1&page=81", "next": "https://spydr.io/threats.json?kev=1&page=82" }, "coverage": { "cves_published_since": "2026-06-12", "days": 120, "also": "every CVE in CISA KEV" }, "unscored_hidden": 0, "warnings": [], "results": [ { "id": "CVE-2020-6287", "url": "https://spydr.io/cve/CVE-2020-6287", "published": "2020-07-14T13:15:13.000Z", "modified": "2026-06-17T03:23:00.330Z", "score": 10, "severity": "critical", "cvss_version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "score_source": "NVD", "epss": 0.94719, "epss_percentile": 0.99858, "exploited": true, "kev": { "added": "2021-11-03", "due": "2022-05-03", "action": "Apply updates per vendor instructions.", "ransomware": "Unknown" }, "ssvc_exploitation": "active", "vendors": [ "SAP SE" ], "products": [ "SAP SE SAP NetWeaver AS JAVA (LM Configuration Wizard)" ], "cwes": [ "CWE-306" ], "description": "SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an attacker without prior authentication to execute configuration tasks to perform critical actions against the SAP Java system, including the ability to create an administrative user, and therefore compromising Confidentiality, Integrity and Availability of the system, leading to Missing Authentication Check." }, { "id": "CVE-2020-10987", "url": "https://spydr.io/cve/CVE-2020-10987", "published": "2020-07-13T19:15:12.207Z", "modified": "2026-06-17T02:48:48.630Z", "score": 9.8, "severity": "critical", "cvss_version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "score_source": "NVD", "epss": 0.7981, "epss_percentile": 0.99605, "exploited": true, "kev": { "added": "2021-11-03", "due": "2022-05-03", "action": "Apply updates per vendor instructions.", "ransomware": "Unknown" }, "ssvc_exploitation": "active", "vendors": [ "tenda" ], "products": [ "tenda ac15 firmware" ], "cwes": [ "CWE-78" ], "description": "The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the deviceName POST parameter." }, { "id": "CVE-2020-8196", "url": "https://spydr.io/cve/CVE-2020-8196", "published": "2020-07-10T16:15:12.407Z", "modified": "2026-06-17T03:26:02.043Z", "score": 4.3, "severity": "medium", "cvss_version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "score_source": "NVD", "epss": 0.26333, "epss_percentile": 0.97962, "exploited": true, "kev": { "added": "2021-11-03", "due": "2022-05-03", "action": "Apply updates per vendor instructions.", "ransomware": "Unknown" }, "ssvc_exploitation": "active", "vendors": [ "citrix" ], "products": [ "Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP" ], "cwes": [ "CWE-284", "CWE-287" ], "description": "Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in limited information disclosure to low privileged users." }, { "id": "CVE-2020-8195", "url": "https://spydr.io/cve/CVE-2020-8195", "published": "2020-07-10T16:15:12.327Z", "modified": "2026-06-17T03:26:01.840Z", "score": 6.5, "severity": "medium", "cvss_version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "score_source": "NVD", "epss": 0.33029, "epss_percentile": 0.98327, "exploited": true, "kev": { "added": "2021-11-03", "due": "2022-05-03", "action": "Apply updates per vendor instructions.", "ransomware": "Unknown" }, "ssvc_exploitation": "active", "vendors": [ "citrix" ], "products": [ "Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP" ], "cwes": [ "CWE-20", "CWE-22" ], "description": "Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in limited information disclosure to low privileged users." }, { "id": "CVE-2020-8193", "url": "https://spydr.io/cve/CVE-2020-8193", "published": "2020-07-10T16:15:12.157Z", "modified": "2026-06-17T03:26:01.560Z", "score": 6.5, "severity": "medium", "cvss_version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "score_source": "NVD", "epss": 0.88411, "epss_percentile": 0.9977, "exploited": true, "kev": { "added": "2021-11-03", "due": "2022-05-03", "action": "Apply updates per vendor instructions.", "ransomware": "Unknown" }, "ssvc_exploitation": "active", "vendors": [ "citrix" ], "products": [ "Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP" ], "cwes": [ "CWE-284", "CWE-287" ], "description": "Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows unauthenticated access to certain URL endpoints." }, { "id": "CVE-2020-15505", "url": "https://spydr.io/cve/CVE-2020-15505", "published": "2020-07-07T02:15:10.613Z", "modified": "2026-06-17T02:56:45.497Z", "score": 9.8, "severity": "critical", "cvss_version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "score_source": "NVD", "epss": 0.99737, "epss_percentile": 0.99953, "exploited": true, "kev": { "added": "2021-11-03", "due": "2022-05-03", "action": "Apply updates per vendor instructions.", "ransomware": "Unknown" }, "ssvc_exploitation": "active", "vendors": [ "mobileiron" ], "products": [ "mobileiron core", "mobileiron enterprise connector", "mobileiron monitor and reporting database", "mobileiron sentry" ], "cwes": [ "CWE-706" ], "description": "A remote code execution vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0; and Sentry versions 9.7.2 and earlier, and 9.8.0; and Monitor and Reporting Database (RDB) version 2.0.0.1 and earlier that allows remote attackers to execute arbitrary code via unspecified vectors." }, { "id": "CVE-2020-5902", "url": "https://spydr.io/cve/CVE-2020-5902", "published": "2020-07-01T15:15:15.360Z", "modified": "2026-06-17T03:22:25.473Z", "score": 9.8, "severity": "critical", "cvss_version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "score_source": "NVD", "epss": 0.99999, "epss_percentile": 1, "exploited": true, "kev": { "added": "2021-11-03", "due": "2022-05-03", "action": "Apply updates per vendor instructions.", "ransomware": "Known" }, "ssvc_exploitation": "active", "vendors": [ "f5" ], "products": [ "BIG-IP" ], "cwes": [ "CWE-22" ], "description": "In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface (TMUI), also referred to as the Configuration utility, has a Remote Code Execution (RCE) vulnerability in undisclosed pages." }, { "id": "CVE-2020-0986", "url": "https://spydr.io/cve/CVE-2020-0986", "published": "2020-06-09T20:15:12.177Z", "modified": "2026-06-17T02:47:08.520Z", "score": 7.8, "severity": "high", "cvss_version": "3.1", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "score_source": "NVD", "epss": 0.16405, "epss_percentile": 0.9691, "exploited": true, "kev": { "added": "2021-11-03", "due": "2022-05-03", "action": "Apply updates per vendor instructions.", "ransomware": "Unknown" }, "ssvc_exploitation": "active", "vendors": [ "Microsoft" ], "products": [ "Microsoft Windows", "Microsoft Windows Server", "Microsoft Windows 10 Version 1909 for 32-bit Systems", "Microsoft Windows 10 Version 1909 for x64-based Systems", "Microsoft Windows 10 Version 1909 for ARM64-based Systems", "Microsoft Windows Server, version 1909 (Server Core installation)", "Microsoft Windows 10 Version 1903 for 32-bit Systems", "Microsoft Windows 10 Version 1903 for x64-based Systems", "Microsoft Windows 10 Version 1903 for ARM64-based Systems", "Microsoft Windows Server, version 1903 (Server Core installation)", "Microsoft Windows 10 Version 2004 for 32-bit Systems", "Microsoft Windows Server, version 2004 (Server Core installation)", "Microsoft Windows 10 Version 2004 for ARM64-based Systems", "Microsoft Windows 10 Version 2004 for x64-based Systems" ], "cwes": [ "CWE-787" ], "description": "An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020-1269, CVE-2020-1273, CVE-2020-1274, CVE-2020-1275, CVE-2020-1276, CVE-2020-1307, CVE-2020-1316." }, { "id": "CVE-2020-9819", "url": "https://spydr.io/cve/CVE-2020-9819", "published": "2020-06-09T17:15:13.377Z", "modified": "2026-06-17T03:28:37.767Z", "score": 4.3, "severity": "medium", "cvss_version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "score_source": "NVD", "epss": 0.02178, "epss_percentile": 0.81805, "exploited": true, "kev": { "added": "2021-11-03", "due": "2022-05-03", "action": "Apply updates per vendor instructions.", "ransomware": "Unknown" }, "ssvc_exploitation": "active", "vendors": [ "Apple" ], "products": [ "Apple iOS", "Apple iOS-1", "Apple watchOS", "Apple watchOS-1" ], "cwes": [ "CWE-787" ], "description": "A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5, watchOS 5.3.7. Processing a maliciously crafted mail message may lead to heap corruption." }, { "id": "CVE-2020-9818", "url": "https://spydr.io/cve/CVE-2020-9818", "published": "2020-06-09T17:15:13.317Z", "modified": "2026-06-17T03:28:37.607Z", "score": 8.8, "severity": "high", "cvss_version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "score_source": "NVD", "epss": 0.02286, "epss_percentile": 0.82676, "exploited": true, "kev": { "added": "2021-11-03", "due": "2022-05-03", "action": "Apply updates per vendor instructions.", "ransomware": "Unknown" }, "ssvc_exploitation": "active", "vendors": [ "Apple" ], "products": [ "Apple iOS", "Apple iOS-1", "Apple watchOS" ], "cwes": [ "CWE-787" ], "description": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5. Processing a maliciously crafted mail message may lead to unexpected memory modification or application termination." }, { "id": "CVE-2020-9859", "url": "https://spydr.io/cve/CVE-2020-9859", "published": "2020-06-05T15:15:11.097Z", "modified": "2026-06-17T03:28:41.790Z", "score": 7.8, "severity": "high", "cvss_version": "3.1", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "score_source": "NVD", "epss": 0.00829, "epss_percentile": 0.56271, "exploited": true, "kev": { "added": "2021-11-03", "due": "2022-05-03", "action": "Apply updates per vendor instructions.", "ransomware": "Unknown" }, "ssvc_exploitation": "active", "vendors": [ "Apple" ], "products": [ "Apple iOS", "Apple macOS", "Apple tvOS", "Apple watchOS" ], "cwes": [ "CWE-415" ], "description": "A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5.1 and iPadOS 13.5.1, macOS Catalina 10.15.5 Supplemental Update, tvOS 13.4.6, watchOS 6.2.6. An application may be able to execute arbitrary code with kernel privileges." }, { "id": "CVE-2020-1054", "url": "https://spydr.io/cve/CVE-2020-1054", "published": "2020-05-21T23:15:12.070Z", "modified": "2026-10-08T10:36:00.860Z", "score": 7, "severity": "high", "cvss_version": "3.1", "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "score_source": "microsoft.com", "epss": 0.54158, "epss_percentile": 0.98986, "exploited": true, "kev": { "added": "2021-11-03", "due": "2022-05-03", "action": "Apply updates per vendor instructions.", "ransomware": "Unknown" }, "ssvc_exploitation": "active", "vendors": [ "Microsoft" ], "products": [ "Microsoft Windows 10 Version 1507", "Microsoft Windows 10 Version 1607", "Microsoft Windows 10 Version 1709", "Microsoft Windows 10 Version 1709 for 32-bit Systems", "Microsoft Windows 10 Version 1803", "Microsoft Windows 10 Version 1809", "Microsoft Windows 10 Version 1903 for 32-bit Systems", "Microsoft Windows 10 Version 1903 for ARM64-based Systems", "Microsoft Windows 10 Version 1903 for x64-based Systems", "Microsoft Windows 10 Version 1909", "Microsoft Windows 7", "Microsoft Windows 7 Service Pack 1", "Microsoft Windows 8.1", "Microsoft Windows Server 2008 R2 Service Pack 1", "Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)", "Microsoft Windows Server 2008 Service Pack 2", "Microsoft Windows Server 2008 Service Pack 2 (Server Core installation)", "Microsoft Windows Server 2012", "Microsoft Windows Server 2012 (Server Core installation)", "Microsoft Windows Server 2012 R2" ], "cwes": [ "CWE-787" ], "description": "An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system. The update addresses this vulnerability by correcting how the Windows kernel-mode driver handles objects in memory." }, { "id": "CVE-2020-4430", "url": "https://spydr.io/cve/CVE-2020-4430", "published": "2020-05-07T20:15:12.783Z", "modified": "2026-06-17T03:19:58.813Z", "score": 4.3, "severity": "medium", "cvss_version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "score_source": "NVD", "epss": 0.68544, "epss_percentile": 0.99325, "exploited": true, "kev": { "added": "2021-11-03", "due": "2022-05-03", "action": "Apply updates per vendor instructions.", "ransomware": "Unknown" }, "ssvc_exploitation": "active", "vendors": [ "IBM" ], "products": [ "IBM Data Risk Manager" ], "cwes": [ "CWE-22" ], "description": "IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to download arbitrary files from the system. IBM X-Force ID: 180535." }, { "id": "CVE-2020-4428", "url": "https://spydr.io/cve/CVE-2020-4428", "published": "2020-05-07T20:15:12.673Z", "modified": "2026-06-17T03:19:58.553Z", "score": 9.1, "severity": "critical", "cvss_version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "score_source": "NVD", "epss": 0.61692, "epss_percentile": 0.99154, "exploited": true, "kev": { "added": "2021-11-03", "due": "2022-05-03", "action": "Apply updates per vendor instructions.", "ransomware": "Unknown" }, "ssvc_exploitation": "active", "vendors": [ "IBM" ], "products": [ "IBM Data Risk Manager" ], "cwes": [ "CWE-78" ], "description": "IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to execute arbitrary commands on the system. IBM X-Force ID: 180533." }, { "id": "CVE-2020-4427", "url": "https://spydr.io/cve/CVE-2020-4427", "published": "2020-05-07T20:15:12.627Z", "modified": "2026-06-17T03:19:58.397Z", "score": 9.8, "severity": "critical", "cvss_version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "score_source": "NVD", "epss": 0.70031, "epss_percentile": 0.99364, "exploited": true, "kev": { "added": "2021-11-03", "due": "2022-05-03", "action": "Apply updates per vendor instructions.", "ransomware": "Unknown" }, "ssvc_exploitation": "active", "vendors": [ "IBM" ], "products": [ "IBM Data Risk Manager" ], "cwes": [ "CWE-287" ], "description": "IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to bypass the authentication process and gain full administrative access to the system. IBM X-Force ID: 180532." }, { "id": "CVE-2020-11652", "url": "https://spydr.io/cve/CVE-2020-11652", "published": "2020-04-30T17:15:12.190Z", "modified": "2026-06-17T02:50:33.547Z", "score": 6.5, "severity": "medium", "cvss_version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "score_source": "NVD", "epss": 0.86178, "epss_percentile": 0.99729, "exploited": true, "kev": { "added": "2021-11-03", "due": "2022-05-03", "action": "Apply updates per vendor instructions.", "ransomware": "Unknown" }, "ssvc_exploitation": "active", "vendors": [ "saltstack", "opensuse", "debian", "canonical", "blackberry", "vmware" ], "products": [ "saltstack salt", "opensuse leap", "debian linux", "canonical ubuntu linux", "blackberry workspaces server", "vmware application remote collector" ], "cwes": [ "CWE-22" ], "description": "An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users." }, { "id": "CVE-2020-11651", "url": "https://spydr.io/cve/CVE-2020-11651", "published": "2020-04-30T17:15:12.143Z", "modified": "2026-06-17T02:50:33.323Z", "score": 9.8, "severity": "critical", "cvss_version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "score_source": "NVD", "epss": 0.96614, "epss_percentile": 0.99884, "exploited": true, "kev": { "added": "2021-11-03", "due": "2022-05-03", "action": "Apply updates per vendor instructions.", "ransomware": "Unknown" }, "ssvc_exploitation": "active", "vendors": [ "saltstack", "opensuse", "debian", "canonical", "vmware" ], "products": [ "saltstack salt", "opensuse leap", "debian linux", "canonical ubuntu linux", "vmware application remote collector" ], "cwes": [], "description": "An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be used to retrieve user tokens from the salt master and/or run arbitrary commands on salt minions." }, { "id": "CVE-2020-12271", "url": "https://spydr.io/cve/CVE-2020-12271", "published": "2020-04-27T04:15:10.553Z", "modified": "2026-06-17T02:51:32.573Z", "score": 9.8, "severity": "critical", "cvss_version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "score_source": "NVD", "epss": 0.42434, "epss_percentile": 0.98674, "exploited": true, "kev": { "added": "2021-11-03", "due": "2022-05-03", "action": "Apply updates per vendor instructions.", "ransomware": "Known" }, "ssvc_exploitation": "active", "vendors": [ "sophos" ], "products": [ "sophos sfos" ], "cwes": [ "CWE-89" ], "description": "A SQL injection issue was found in SFOS 17.0, 17.1, 17.5, and 18.0 before 2020-04-25 on Sophos XG Firewall devices, as exploited in the wild in April 2020. This affected devices configured with either the administration (HTTPS) service or the User Portal exposed on the WAN zone. A successful attack may have caused remote code execution that exfiltrated usernames and hashed passwords for the local device admin(s), portal admins, and user accounts used for remote access (but not external Active Directory or LDAP passwords)" }, { "id": "CVE-2020-6820", "url": "https://spydr.io/cve/CVE-2020-6820", "published": "2020-04-24T16:15:13.463Z", "modified": "2026-06-17T03:23:51.990Z", "score": 8.1, "severity": "high", "cvss_version": "3.1", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "score_source": "NVD", "epss": 0.07063, "epss_percentile": 0.94055, "exploited": true, "kev": { "added": "2021-11-03", "due": "2022-05-03", "action": "Apply updates per vendor instructions.", "ransomware": "Unknown" }, "ssvc_exploitation": "active", "vendors": [ "Mozilla" ], "products": [ "Mozilla Thunderbird", "Mozilla Firefox", "Mozilla Firefox ESR" ], "cwes": [ "CWE-362" ], "description": "Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Thunderbird < 68.7.0, Firefox < 74.0.1, and Firefox ESR < 68.6.1." }, { "id": "CVE-2020-6819", "url": "https://spydr.io/cve/CVE-2020-6819", "published": "2020-04-24T16:15:13.370Z", "modified": "2026-06-17T03:23:51.823Z", "score": 8.1, "severity": "high", "cvss_version": "3.1", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "score_source": "NVD", "epss": 0.03039, "epss_percentile": 0.87136, "exploited": true, "kev": { "added": "2021-11-03", "due": "2022-05-03", "action": "Apply updates per vendor instructions.", "ransomware": "Unknown" }, "ssvc_exploitation": "active", "vendors": [ "Mozilla" ], "products": [ "Mozilla Thunderbird", "Mozilla Firefox", "Mozilla Firefox ESR" ], "cwes": [ "CWE-362", "CWE-416" ], "description": "Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Thunderbird < 68.7.0, Firefox < 74.0.1, and Firefox ESR < 68.6.1." } ], "attribution": [ { "source": "NVD", "url": "https://nvd.nist.gov", "notice": "This product uses data from the NVD API but is not endorsed or certified by the NVD." }, { "source": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "notice": "Known exploited vulnerabilities from the CISA KEV catalog." }, { "source": "FIRST EPSS", "url": "https://www.first.org/epss", "notice": "Exploit prediction scores from FIRST EPSS." } ] }