Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 460new in the last 7 days
- 8added as actively exploited
- 40critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2022-27593 Exploited |
Not yet scored | QNAP Photo Station Operating systems & software |
QNAP Photo Station Externally Controlled Reference Vulnerability | 8 Sep 2022 |
| CVE-2022-3075 Exploited |
Not yet scored | Google Chromium Mojo Operating systems & software |
Google Chromium Mojo Insufficient Data Validation Vulnerability | 8 Sep 2022 |
| CVE-2022-24706 Exploited |
Not yet scored | Apache CouchDB Operating systems & software |
Apache CouchDB Insecure Default Initialization of Resource Vulnerability | 25 Aug 2022 |
| CVE-2021-39226 Exploited |
Not yet scored | Grafana Labs Grafana Operating systems & software |
Grafana Authentication Bypass Vulnerability | 25 Aug 2022 |
| CVE-2021-38406 Exploited |
Not yet scored | Delta Electronics DOPSoft 2 Operating systems & software |
Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability | 25 Aug 2022 |
| CVE-2022-24112 Exploited |
Not yet scored | Apache APISIX Operating systems & software |
Apache APISIX Authentication Bypass Vulnerability | 25 Aug 2022 |
| CVE-2021-31010 Exploited |
Not yet scored | Apple iOS, macOS, watchOS Operating systems & software |
Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability | 25 Aug 2022 |
| CVE-2022-21971 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Runtime Remote Code Execution Vulnerability | 18 Aug 2022 |
| CVE-2022-32894 Exploited |
Not yet scored | Apple iOS and macOS Operating systems & software |
Apple iOS and macOS Out-of-Bounds Write Vulnerability | 18 Aug 2022 |
| CVE-2022-2856 Exploited |
Not yet scored | Google Chromium Intents Operating systems & software |
Google Chromium Intents Insufficient Input Validation Vulnerability | 18 Aug 2022 |
| CVE-2022-32893 Exploited |
Not yet scored | Apple iOS and macOS Operating systems & software |
Apple iOS and macOS Out-of-Bounds Write Vulnerability | 18 Aug 2022 |
| CVE-2022-27925 Exploited |
Not yet scored | Synacor Zimbra Collaboration Suite (ZCS) Operating systems & software |
Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability | 11 Aug 2022 |
| CVE-2022-37042 Exploited |
Not yet scored | Synacor Zimbra Collaboration Suite (ZCS) Operating systems & software |
Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability | 11 Aug 2022 |
| CVE-2022-34713 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability | 9 Aug 2022 |
| CVE-2022-30333 Exploited |
Not yet scored | RARLAB UnRAR Operating systems & software |
RARLAB UnRAR Directory Traversal Vulnerability | 9 Aug 2022 |
| CVE-2022-27924 Exploited |
Not yet scored | Synacor Zimbra Collaboration Suite (ZCS) Operating systems & software |
Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability | 4 Aug 2022 |
| CVE-2022-26138 Exploited |
Not yet scored | Atlassian Confluence Operating systems & software |
Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability | 29 Jul 2022 |
| CVE-2022-22047 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability | 12 Jul 2022 |
| CVE-2022-26925 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows LSA Spoofing Vulnerability | 1 Jul 2022 |
| CVE-2020-3837 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Memory Corruption Vulnerability | 27 Jun 2022 |
| CVE-2021-30533 Exploited |
Not yet scored | Google Chromium PopupBlocker Operating systems & software |
Google Chromium PopupBlocker Security Bypass Vulnerability | 27 Jun 2022 |
| CVE-2018-4344 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Memory Corruption Vulnerability | 27 Jun 2022 |
| CVE-2021-30983 Exploited |
Not yet scored | Apple iOS and iPadOS Operating systems & software |
Apple iOS and iPadOS Buffer Overflow Vulnerability | 27 Jun 2022 |
| CVE-2021-4034 Exploited |
Not yet scored | Red Hat Polkit Operating systems & software |
Red Hat Polkit Out-of-Bounds Read and Write Vulnerability | 27 Jun 2022 |
| CVE-2019-8605 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Use-After-Free Vulnerability | 27 Jun 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.