Skip to content

December 2002 · Band 3

Likely to be exploited (10% or more)

7 CVEs

Each square is a CVE that EPSS gives a 10% or higher chance of exploitation in the next 30 days.

likely to be exploited
7

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

  1. Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or possibly execute arbitrary…CVE-2002-1359Fissh · 80% likely

    CWE-20

  2. The Load method in the Chart component of Office Web Components (OWC) 9 and 10 generates an exception when a specified file does not exist, which allows remote attackers to determ…CVE-2002-1338Microsoft · 23% likely

    Microsoft

  3. Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing negative argum…CVE-2002-1368Easy Software Products · 15% likely

    Easy Software Products

  4. Two vulnerabilities in Microsoft Virtual Machine (VM) up to and including build 5.0.3805, as used in Internet Explorer and other applications, allow remote attackers to read files…CVE-2002-1258Microsoft · 15% likely

    Microsoft

  5. Internet Explorer 5.5 and 6.0 does not perform complete security checks on external caching, which allows remote attackers to read arbitrary files.CVE-2002-1262Microsoft · 12% likely

    Microsoft

  6. The "ConnectionFile" property in the DataSourceControl component in Office Web Components (OWC) 10 allows remote attackers to determine the existence of local files by detecting a…CVE-2002-1340Microsoft · 12% likely

    Microsoft

  7. The "XMLURL" property in the Spreadsheet component of Office Web Components (OWC) 10 follows redirections, which allows remote attackers to determine the existence of local files…CVE-2002-1339Microsoft · 12% likely

    Microsoft

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.