Confirm exposure first
Match the product, version, installation path, and external exposure before treating a score as an action order.
VULNERABILITY REMEDIATION
CVE remediation guides
Move from asset identification to supported remediation and post-change verification while keeping source evidence visible.
These defensive guides do not provide exploit reproduction or bypass instructions.Prefer supported fixes
Use vendor advisories and supported update paths. An unverified fixed-version field stays visibly unresolved.
Verify and retain rollback
Confirm version state, service health, access paths, logs, and rollback readiness after the change.
17,661 guide candidatesPage 1443 of 1472
Review reviewHighResearch in progress
CVE-2017-14919CADRA, node.js
- Affected
- < V2511, 4.8.2, 4.8.3, 4.8.4, 6.10.2, 6.10.3, 6.11.0, 6.11.1, 6.11.2, 6.11.3, 6.11.4, 8.0.0, 8.1.0, 8.1.1, 8.1.2, 8.1.3, 8.1.4, 8.2.0, 8.2.1, 8.3.0
- Fixed
- No verified fixed-version field is available yet
Known exploitedHighFixed-version data
CVE-2017-5070Google Chromium V8
- Affected
- Google Chrome prior to 59.0.3071.86 for Linux, Windows and Mac, and 59.0.3071.92 for Android, < 59.0.3071.86, < 59.0.3071.92, 6.0
- Fixed
- 59.0.3071.86, 59.0.3071.92
Known exploitedHighResearch in progress
CVE-2017-11292Adobe Flash Player
- Affected
- Adobe Flash Player version 27.0.0.159 and earlier, <= 27.0.0.159, <= 27.0.0.130, 6.0
- Fixed
- No verified fixed-version field is available yet
Known exploitedHighResearch in progress
CVE-2017-10271Oracle WebLogic Server
- Affected
- 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0, 12.2.1.2.0
- Fixed
- No verified fixed-version field is available yet
Known exploitedHighResearch in progress
CVE-2017-11826Microsoft Office
- Affected
- Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation Services, Office Online Server., 2016, 2013, 2007
- Fixed
- No verified fixed-version field is available yet
Known exploitedHighResearch in progress
CVE-2017-11774Microsoft Office
- Affected
- Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, Outlook 2016, 2010, 2013, 2016
- Fixed
- No verified fixed-version field is available yet
Known exploitedHighFixed-version data
CVE-2017-1000253Linux Kernel
- Affected
- 6.0, 6.1, 6.2, 6.3, 6.4, 6.5, 6.6, 6.7, 6.8, 6.9, 7.1406, 7.1503, 7.1511, 7.1611, 7.0, 7.1, 7.2, 7.3, 2.6.25
- Fixed
- 3.2.70, 3.4.109, 3.10.77, 3.12.43, 3.14.41, 3.16.35, 3.18.14, 3.19.7, 4.0.2
Known exploitedCriticalResearch in progress
CVE-2017-12149Red Hat JBoss Application Server
- Affected
- 5.0.0, 5.0.1, 5.1.0, 5.1.1, 5.1.2, 5.2.0, 5.2.1, 5.2.2
- Fixed
- No verified fixed-version field is available yet
Known exploitedHighFixed-version data
CVE-2017-12617Apache Tomcat
- Affected
- 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46, 7.0.0 to 7.0.81, >= 7.0.0 < 7.0.82, >= 8.0 < 8.0.47, >= 8.5.0 < 8.5.23, >= 9.0.0 < 9.0.1, 12.04, 16.04, 17.10, 18.04, 9.3.3, 9.3.4, 9.3.5, 9.3.6, 10.0.1, 3.1.0, 3.2.0, 12.1.0.4.0
- Fixed
- 7.0.82, 8.0.47, 8.5.23, 9.0.1
Known exploitedCriticalResearch in progress
CVE-2017-12240Cisco IOS and IOS XE Software
- Affected
- Cisco IOS and IOS XE, >= 12.2 <= 15.6
- Fixed
- No verified fixed-version field is available yet
Known exploitedMediumResearch in progress
CVE-2017-12238Cisco Catalyst 6800 Series Switches
- Affected
- Cisco IOS, >= 15.0 <= 15.4
- Fixed
- No verified fixed-version field is available yet
Known exploitedHighResearch in progress
CVE-2017-12237Cisco IOS and IOS XE Software
- Affected
- Cisco IOS and IOS XE, >= 15.0 <= 15.6, >= 3.5.0e <= 16.5
- Fixed
- No verified fixed-version field is available yet