CVEs from 2012 known to be exploited
Entries22
Ransomware-linked5
Avg. lag10.2 yrs
Year added to KEV
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2012-1854 | Microsoft Visual Basic for Applications (VBA) | 2026-04-13 | 21.0% | Unknown |
| CVE-2012-4792 | Microsoft Internet Explorer | 2024-07-23 | 78.8% | Unknown |
| CVE-2012-5054 | Adobe Flash Player | 2022-06-08 | 21.1% | Unknown |
| CVE-2012-4969 | Microsoft Internet Explorer | 2022-06-08 | 80.2% | Unknown |
| CVE-2012-1889 | Microsoft XML Core Services | 2022-06-08 | 83.5% | Unknown |
| CVE-2012-0767 | Adobe Flash Player | 2022-06-08 | 6.1% | Unknown |
| CVE-2012-0754 | Adobe Flash Player | 2022-06-08 | 91.0% | Unknown |
| CVE-2012-0151 | Microsoft Windows | 2022-06-08 | 87.7% | Unknown |
| CVE-2012-1710 | Oracle Fusion Middleware | 2022-05-25 | 7.8% | Known |
| CVE-2012-5076 | Oracle Java SE | 2022-03-28 | 91.2% | Unknown |
| CVE-2012-2539 | Microsoft Word | 2022-03-28 | 53.0% | Unknown |
| CVE-2012-2034 | Adobe Flash Player | 2022-03-28 | 7.8% | Unknown |
| CVE-2012-0518 | Oracle Fusion Middleware | 2022-03-28 | 4.6% | Unknown |
| CVE-2012-1823 | PHP PHP | 2022-03-25 | 99.9% | Unknown |
| CVE-2012-4681 | Oracle Java SE | 2022-03-03 | 98.5% | Known |
| CVE-2012-1856 | Microsoft Office | 2022-03-03 | 72.0% | Unknown |
| CVE-2012-1723 | Oracle Java SE | 2022-03-03 | 93.6% | Known |
| CVE-2012-1535 | Adobe Flash Player | 2022-03-03 | 70.3% | Unknown |
| CVE-2012-0507 | Oracle Java SE | 2022-03-03 | 98.1% | Known |
| CVE-2012-0391 | Apache Struts 2 | 2022-01-21 | 75.5% | Unknown |
| CVE-2012-3152 | Oracle Fusion Middleware | 2021-11-03 | 98.7% | Unknown |
| CVE-2012-0158 | Microsoft MSCOMCTL.OCX | 2021-11-03 | 99.9% | Known |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
22 CVE-2012 vulnerabilities are in KEV; on average they were listed 10.2 years after the CVE year.