THE INTERNET IS THINKING
Earlier sources: Security
Digital security protects systems, software, accounts, and information from misuse. Explore cybersecurity, vulnerabilities, threat intelligence, cryptography, privacy, and identity, with links to the underlying advisories and research.
SYMTRI organizes observations from public sources into a living map. Connections reflect shared subject matter; they do not establish causation or endorse a source.
Open in the map ↗758 classified signals in the fourteen-day window. Recent momentum: steady. These counts include signals awaiting readable evidence.
Earlier sources
Up to ten sources with readable evidence, ordered by their feed timestamp. These archive sources can be older than the live fourteen-day window. This list is a sample, not a measure of total activity. Dates distinguish paper publication, repository creation, model/dataset activity, Hacker News posts, and KEV catalog additions. “First archived” records when SYMTRI first stored the signal.
- CISA · Added to KEV · First archived
CVE-2010-0232: Microsoft Windows Kernel Exception Handler Vulnerability ↗
The kernel in Microsoft Windows, when access to 16-bit applications is enabled on a 32-bit x86 platform, does not properly validate certain BIOS calls, which allows local users to gain privileges. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-03-03 (not the first disclosure date). Action due date: 2022-03-24.
- CISA · Added to KEV · First archived
CVE-2010-0188: Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability ↗
Unspecified vulnerability in Adobe Reader and Acrobat allows attackers to cause a denial of service or possibly execute arbitrary code. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Known. Added to the KEV catalog: 2022-03-03 (not the first disclosure date). Action due date: 2022-03-24.
- CISA · Added to KEV · First archived
CVE-2009-3129: Microsoft Excel Featheader Record Memory Corruption Vulnerability ↗
Microsoft Office Excel allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-03-03 (not the first disclosure date). Action due date: 2022-03-24.
- CISA · Added to KEV · First archived
CVE-2009-1123: Microsoft Windows Improper Input Validation Vulnerability ↗
The kernel in Microsoft Windows does not properly validate changes to unspecified kernel objects, which allows local users to gain privileges via a crafted application. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-03-03 (not the first disclosure date). Action due date: 2022-03-24.
- CISA · Added to KEV · First archived
CVE-2008-3431: Oracle VirtualBox Insufficient Input Validation Vulnerability ↗
An input validation vulnerability exists in the VBoxDrv.sys driver of Sun xVM VirtualBox which allows attackers to locally execute arbitrary code. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-03-03 (not the first disclosure date). Action due date: 2022-03-24.
- CISA · Added to KEV · First archived
CVE-2008-2992: Adobe Reader and Acrobat Input Validation Vulnerability ↗
Adobe Acrobat and Reader contain an input validation issue in a JavaScript method that could potentially lead to remote code execution. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Known. Added to the KEV catalog: 2022-03-03 (not the first disclosure date). Action due date: 2022-03-24.
- CISA · Added to KEV · First archived
CVE-2004-0210: Microsoft Windows Privilege Escalation Vulnerability ↗
A privilege elevation vulnerability exists in the POSIX subsystem. This vulnerability could allow a logged on user to take complete control of the system. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-03-03 (not the first disclosure date). Action due date: 2022-03-24.
- CISA · Added to KEV · First archived
CVE-2002-0367: Microsoft Windows Privilege Escalation Vulnerability ↗
smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-03-03 (not the first disclosure date). Action due date: 2022-03-24.
- CISA · Added to KEV · First archived
CVE-2022-24682: Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability ↗
Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) vulnerability in the Calendar feature that allows an attacker to execute arbitrary code. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Known. Added to the KEV catalog: 2022-02-25 (not the first disclosure date). Action due date: 2022-03-11.
- CISA · Added to KEV · First archived
CVE-2017-8570: Microsoft Office Remote Code Execution Vulnerability ↗
A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-02-25 (not the first disclosure date). Action due date: 2022-08-25.
Live window recorded . This is the ingestion observation time, not the publication or discovery date of each source.
How to assess evidence about Security
Check each original source for its methods, release status, limitations, and supporting data. A repository announcement, a preprint, and a published study provide different kinds of evidence. SYMTRI’s subject classification helps discovery; it does not independently validate the source’s claims.
See the collection and counting methodology ↗ · Read the weekly synthesis ↗
Follow a thread
Explore related regions
These navigation suggestions are part of the map’s editorial structure, rather than measured evidence of a connection.