CVE & Exploit Intelligence Database

Updated 28m ago

Search and track vulnerabilities with real-time exploit intelligence. Cross-reference CVEs against public exploits from ExploitDB, Metasploit, GitHub, and Nuclei — with CVSS and EPSS scoring, CISA KEV monitoring, and AI-powered exploit analysis.

337,123 CVEs tracked 53,223 with exploits 4,686 exploited in wild 1,539 CISA KEV 3,912 Nuclei templates 37,757 vendors 42,429 researchers

246 results Clear all

CVE-2017-2218 7.8 HIGH EPSS 0.00

QuickTime for Windows - Privilege Escalation

Untrusted search path vulnerability in Installer of QuickTime for Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

CWE-426 Jul 07, 2017

CVE-2011-3428 9.8 CRITICAL EPSS 0.03

QuickTime <7.7.1 - RCE

Buffer overflow in QuickTime before 7.7.1 for Windows allows remote attackers to execute arbitrary code.

CWE-119 Apr 24, 2017

CVE-2015-7117 6.6 MEDIUM EPSS 0.01

Apple Quicktime < 7.7.8 - Memory Corruption

Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a different vulnerability than CVE-2015-7085, CVE-2015-7086, CVE-2015-7087, CVE-2015-7088, CVE-2015-7089, CVE-2015-7090, CVE-2015-7091, and CVE-2015-7092.

CWE-119 Jan 09, 2016

CVE-2015-7092 6.6 MEDIUM EPSS 0.01

Apple Quicktime < 7.7.8 - Memory Corruption

Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and application crash) via a crafted TXXX frame within an ID3 tag in MP3 data in a movie file, a different vulnerability than CVE-2015-7085, CVE-2015-7086, CVE-2015-7087, CVE-2015-7088, CVE-2015-7089, CVE-2015-7090, CVE-2015-7091, and CVE-2015-7117.

CWE-119 Jan 09, 2016

CVE-2015-7091 6.6 MEDIUM EPSS 0.05

Apple Quicktime < 7.7.8 - Memory Corruption

Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a different vulnerability than CVE-2015-7085, CVE-2015-7086, CVE-2015-7087, CVE-2015-7088, CVE-2015-7089, CVE-2015-7090, CVE-2015-7092, and CVE-2015-7117.

CWE-119 Jan 09, 2016

CVE-2015-7090 6.6 MEDIUM EPSS 0.01

Apple Quicktime < 7.7.8 - Memory Corruption

Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a different vulnerability than CVE-2015-7085, CVE-2015-7086, CVE-2015-7087, CVE-2015-7088, CVE-2015-7089, CVE-2015-7091, CVE-2015-7092, and CVE-2015-7117.

CWE-119 Jan 09, 2016

CVE-2015-7089 6.6 MEDIUM EPSS 0.01

Apple Quicktime < 7.7.8 - Memory Corruption

Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a different vulnerability than CVE-2015-7085, CVE-2015-7086, CVE-2015-7087, CVE-2015-7088, CVE-2015-7090, CVE-2015-7091, CVE-2015-7092, and CVE-2015-7117.

CWE-119 Jan 09, 2016

CVE-2015-7088 6.6 MEDIUM EPSS 0.01

Apple Quicktime < 7.7.8 - Memory Corruption

Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a different vulnerability than CVE-2015-7085, CVE-2015-7086, CVE-2015-7087, CVE-2015-7089, CVE-2015-7090, CVE-2015-7091, CVE-2015-7092, and CVE-2015-7117.

CWE-119 Jan 09, 2016

CVE-2015-7087 6.6 MEDIUM EPSS 0.01

Apple Quicktime < 7.7.8 - Memory Corruption

Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a different vulnerability than CVE-2015-7085, CVE-2015-7086, CVE-2015-7088, CVE-2015-7089, CVE-2015-7090, CVE-2015-7091, CVE-2015-7092, and CVE-2015-7117.

CWE-119 Jan 09, 2016

CVE-2015-7086 6.6 MEDIUM EPSS 0.01

Apple Quicktime < 7.7.8 - Memory Corruption

Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a different vulnerability than CVE-2015-7085, CVE-2015-7087, CVE-2015-7088, CVE-2015-7089, CVE-2015-7090, CVE-2015-7091, CVE-2015-7092, and CVE-2015-7117.

CWE-119 Jan 09, 2016

CVE-2015-7085 6.6 MEDIUM EPSS 0.01

Apple Quicktime < 7.7.8 - Memory Corruption

Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a different vulnerability than CVE-2015-7086, CVE-2015-7087, CVE-2015-7088, CVE-2015-7089, CVE-2015-7090, CVE-2015-7091, CVE-2015-7092, and CVE-2015-7117.

CWE-119 Jan 09, 2016

CVE-2015-5786 EPSS 0.01

Apple QuickTime <7.7.8 - RCE

Apple QuickTime before 7.7.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-5785.

CWE-119 Aug 25, 2015

CVE-2015-5785 EPSS 0.01

Apple QuickTime <7.7.8 - RCE

Apple QuickTime before 7.7.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-5786.

CWE-119 Aug 25, 2015

CVE-2015-5779 EPSS 0.03

QuickTime 7 - Apple OS X <10.10.5 - RCE/DoS

QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3765, CVE-2015-3779, CVE-2015-3788, CVE-2015-3789, CVE-2015-3790, CVE-2015-3791, CVE-2015-3792, CVE-2015-5751, and CVE-2015-5753.

CWE-119 Aug 17, 2015

CVE-2015-5753 EPSS 0.02

QuickTime 7 in Apple OS X <10.10.5 - RCE/DoS

QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3765, CVE-2015-3779, CVE-2015-3788, CVE-2015-3789, CVE-2015-3790, CVE-2015-3791, CVE-2015-3792, CVE-2015-5751, and CVE-2015-5779.

CWE-119 Aug 17, 2015

CVE-2015-5751 EPSS 0.03

QuickTime 7 - RCE

QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3765, CVE-2015-3779, CVE-2015-3788, CVE-2015-3789, CVE-2015-3790, CVE-2015-3791, CVE-2015-3792, CVE-2015-5753, and CVE-2015-5779.

CWE-119 Aug 17, 2015

CVE-2015-3792 EPSS 0.03

QuickTime 7 in Apple OS X <10.10.5 - RCE/DoS

QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3765, CVE-2015-3779, CVE-2015-3788, CVE-2015-3789, CVE-2015-3790, CVE-2015-3791, CVE-2015-5751, CVE-2015-5753, and CVE-2015-5779.

CWE-119 Aug 17, 2015

CVE-2015-3791 EPSS 0.03

QuickTime 7 in Apple OS X <10.10.5 - RCE/DoS

QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3765, CVE-2015-3779, CVE-2015-3788, CVE-2015-3789, CVE-2015-3790, CVE-2015-3792, CVE-2015-5751, CVE-2015-5753, and CVE-2015-5779.

CWE-119 Aug 17, 2015

CVE-2015-3790 EPSS 0.03

QuickTime 7 - Memory Corruption

QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3765, CVE-2015-3779, CVE-2015-3788, CVE-2015-3789, CVE-2015-3791, CVE-2015-3792, CVE-2015-5751, CVE-2015-5753, and CVE-2015-5779.

CWE-119 Aug 17, 2015

CVE-2015-3789 EPSS 0.03

QuickTime 7 in Apple OS X <10.10.5 - RCE/DoS

QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3765, CVE-2015-3779, CVE-2015-3788, CVE-2015-3790, CVE-2015-3791, CVE-2015-3792, CVE-2015-5751, CVE-2015-5753, and CVE-2015-5779.

CWE-119 Aug 17, 2015