Skip to content

August 2015 · Band 1

Exploited in the wild

5 CVEs · 5 exploited

Each square is a CVE listed by CISA as exploited. The named ones are the most likely to be exploited again.

exploited in the wild
5

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

  1. The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbit…CVE-2015-4495Mozilla · CVSS 8.8 · 69% likely

    CWE-346Mozilla

  2. Microsoft Office 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."CVE-2015-1642Microsoft · CVSS 7.8 · 53% likely

    CWE-787Microsoft

  3. Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Cor…CVE-2015-2502Microsoft · CVSS 8.8 · 51% likely

    CWE-787Microsoft

  4. libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a deni…CVE-2015-3246Red Hat · CVSS 7.4 · 8.5% likelycovered by CyberSIXT

    CWE-367Red Hat5 articles

  5. Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1,…CVE-2015-1769Microsoft · CVSS 6.6 · 4.1% likely

    CWE-264Microsoft

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.