CVEs
Every published CVE. Without a filter the list holds those exploited, with a public check, or likely to be exploited; pick a year and month or a vendor for the rest.
| CVE | Vendor · product | Exploitation | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2010-2861Adobe ColdFusion 8.0/8.0.1/9.0/9.0.1 LFI | Adobe · ColdFusion | Exploited | 7.5 | 100% | 2010-08-11 |
| CVE-2010-3962Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code via vectors related to Cascading Style Sheets (CSS) token… | Microsoft · Internet Explorer | Exploited | 8.1 | 97% | 2010-11-05 |
| CVE-2010-0840Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to aff… | Oracle · Java Runtime Environment (JRE) | Exploited | 9.8 | 96% | 2010-04-01 |
| CVE-2010-0249Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and S… | Microsoft · Internet Explorer | Exploited | 8.8 | 92% | 2010-01-15 |
| CVE-2009-3960Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Services 2.5.1, 2.6.1, and 3.0, Flex Data Services 2.0.1, and Cold… | Adobe · BlazeDS | Exploited | 6.5 | 90% | 2010-02-15 |
| CVE-2010-2568Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or remote attackers to execute arbitrary co… | Microsoft · Windows | Exploited | 7.8 | 90% | 2010-07-22 |
| CVE-2010-3333Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format… | Microsoft · Office | Exploited | 7.8 | 89% | 2010-11-10 |
| CVE-2010-0188Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a denial of service (application crash) or possibly execute a… | Adobe · Reader and Acrobat | Exploited | 7.8 | 88% | 2010-02-21 |
| CVE-2010-1871JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL) expressi… | Red Hat · JBoss Seam 2 | Exploited | 8.8 | 83% | 2010-08-04 |
| CVE-2009-3953The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code v… | Adobe · Acrobat and Reader | Exploited | 8.8 | 83% | 2010-01-13 |
| CVE-2010-3765Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled,… | Mozilla · Multiple Products | Exploited | 9.8 | 83% | 2010-10-27 |
| CVE-2010-1297Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Ma… | Adobe · Flash Player | Exploited | 7.8 | 83% | 2010-06-08 |
| CVE-2010-0806Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via v… | Microsoft · Internet Explorer | Exploited | 8.8 | 82% | 2010-03-10 |
| CVE-2010-2883Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote attackers to execute arbitrary… | Adobe · Acrobat and Reader | Exploited | 7.3 | 81% | 2010-09-09 |
| CVE-2010-0738JBoss JMX/Web Console - Authentication Bypass via HTTP Verb Tampering | Red Hat · JBoss | Exploited | 3.7 | 74% | 2010-04-28 |
| CVE-2010-4344Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session that includes two M… | Exim · Exim | Exploited | 9.8 | 72% | 2010-12-14 |
| CVE-2010-2572Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint 95 document, aka "PowerPoint Parsing Buffe… | Microsoft · PowerPoint | Exploited | 7.8 | 59% | 2010-11-10 |
| CVE-2010-1428Red Hat JBoss - Web/JMX Console Access | Red Hat · JBoss | Exploited | 5.9 | 53% | 2010-04-28 |
| CVE-2010-0232The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, and Window… | Microsoft · Windows | Exploited | 7.8 | 29% | 2010-01-21 |
| CVE-2010-4345Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that con… | Exim · Exim | Exploited | 7.8 | 18% | 2010-12-14 |
| CVE-2010-3904The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addre… | Linux · Kernel | Exploited | 7.8 | 16% | 2010-12-06 |
| CVE-2010-4398Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows S… | Microsoft · Windows | Exploited | 7.8 | 8.7% | 2010-12-03 |
| CVE-2010-3035Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to cause a denial of service (pee… | Cisco · IOS XR | Exploited | 7.5 | 5.7% | 2010-08-30 |
Exploitation: exploited (CISA KEV), a public nuclei check, then EPSS: likely 10% or more, possible 1 to 10%, unlikely under 1%. Data as of 2026-11-15.