CVEs
Every published CVE. Without a filter the list holds those exploited, with a public check, or likely to be exploited; pick a year and month or a vendor for the rest.
| CVE | Vendor · product | Exploitation | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2011-0611Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLi… | Adobe · Flash Player | Exploited | 8.8 | 99% | 2011-04-13 |
| CVE-2011-3544Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start applications… | Oracle · Java SE JDK and JRE | Exploited | 9.8 | 97% | 2011-10-19 |
| CVE-2011-2462Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX, allows remote at… | Adobe · Reader and Acrobat | Exploited | 8.8 | 89% | 2011-12-07 |
| CVE-2011-3402Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista… | Microsoft · Windows | Exploited | 8.8 | 78% | 2011-11-04 |
| CVE-2011-0609Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier;… | Adobe · Flash Player | Exploited | 7.8 | 64% | 2011-03-15 |
| CVE-2011-1889The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remote attackers to execute arbitrary code via vectors involving… | Microsoft · Forefront Threat Management Gateway (TMG) | Exploited | 9.8 | 49% | 2011-06-16 |
| CVE-2011-1823The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitrary code a… | Android · Android OS | Exploited | 7.8 | 41% | 2011-06-09 |
| CVE-2011-2005afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which allows loc… | Microsoft · Ancillary Function Driver (afd.sys) | Exploited | 7.8 | 32% | 2011-10-12 |
| CVE-2011-4723The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors. | D-Link · DIR-300 Router | Exploited | 5.7 | 3.1% | 2011-12-20 |
Exploitation: exploited (CISA KEV), a public nuclei check, then EPSS: likely 10% or more, possible 1 to 10%, unlikely under 1%. Data as of 2026-11-15.