Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly allocated or (2) is. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.
RCE
Microsoft
Use After Free
Memory Corruption
NVD
Exploit-DB
VulDB
CVSS 3.1
8.8
EPSS
87.7%
Threat
7.4
Multiple unquoted Windows search path vulnerabilities in Novell ZENworks Desktop Management (ZDM) 7 through 7.1 might allow local users to gain privileges via a Trojan horse "program" file in the C:. Rated high severity (CVSS 7.2), this vulnerability is low attack complexity. No vendor patch available.
Information Disclosure
Microsoft
Zenworks Desktop Management
NVD
CVSS 2.0
7.2
EPSS
0.0%