Famous CVEs
A small catalog of vulnerabilities that earned their own names. Every card links to the canonical CVE-detail page so the severity, EPSS, KEV status, and mitigating-control analysis is one hop away. Updated 29 May 2026 12:36 UTC .
regreSSHion
Signal-handler race in OpenSSH sshd that re-introduced a 2006 RCE — pre-auth, root, exploitable under tight conditions.
XZ backdoor
Multi-year supply-chain implant in xz-utils that targeted OpenSSH via systemd's liblzma linkage — caught days before it hit stable distros.
Dirty Pipe
Linux pipe-buffer flag mishandling let an unprivileged user overwrite data in arbitrary read-only files.
Follina
Office MSDT URI handler executed arbitrary PowerShell from a Word document — no macros required.
Log4Shell
Unauthenticated RCE in Apache Log4j via JNDI lookup substitution in a single logged string.
PrintNightmare
Windows Print Spooler RCE/LPE — Microsoft patched it, then re-patched, then re-patched again.
ProxyLogon
Exchange SSRF that became pre-auth RCE when chained — the first half of HAFNIUM's mass-compromise spree.
ProxyShell
Exchange Server pre-auth RCE chain (path confusion + privilege escalation + arbitrary write) used heavily by ransomware crews.
ZeroLogon
Netlogon cryptographic flaw let any unauthenticated attacker on the network reset a domain controller's machine password.
BlueKeep
Pre-auth wormable RCE in Windows RDP — Microsoft was alarmed enough to ship XP patches.
Meltdown
Out-of-order execution side channel on Intel CPUs that let unprivileged code read kernel memory.
Spectre
Speculative-execution side channel (bounds-check bypass) that leaks data across security boundaries on virtually every modern CPU.
EternalBlue
SMBv1 RCE leaked from the NSA via Shadow Brokers; the engine behind WannaCry and NotPetya.
KRACK
WPA2 four-way handshake key-reinstallation flaw that let an attacker decrypt Wi-Fi traffic.
Dirty COW
Race condition in the Linux kernel's copy-on-write handling that turned read-only mappings into a local root primitive.
DROWN
Cross-protocol attack reusing a still-enabled SSLv2 endpoint to break TLS sessions sharing the same RSA key.
GHOST
Heap buffer overflow in glibc's gethostbyname() reachable from many network-facing daemons.
Heartbleed
OpenSSL TLS heartbeat extension leaked up to 64 KB of process memory per request, exposing keys and passwords.
POODLE
SSL 3.0 CBC padding oracle that let a network attacker decrypt session cookies one byte at a time.
Shellshock
Bash parsed function definitions out of environment variables, turning CGI servers into remote shells.