Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 86.7%.
Memory Corruption
Buffer Overflow
RCE
Glibc
Communications Application Session Controller
+16
NVD
Exploit-DB
CVSS 2.0
10.0
EPSS
86.7%
Threat
6.1
Double free vulnerability in Adobe Flash Player before 13.0.0.264 and 14.x through 16.x before 16.0.0.296 on Windows and OS X and before 11.2.202.440 on Linux allows attackers to execute arbitrary. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable.
Adobe
RCE
Microsoft
Flash Player
Flash Player Desktop Runtime
NVD
CVSS 2.0
9.3
EPSS
4.7%