Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 807new in the last 7 days
- 6added as actively exploited
- 57critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2014-4148 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Remote Code Execution Vulnerability | 25 May 2022 |
| CVE-2014-8439 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Dereferenced Pointer Vulnerability | 25 May 2022 |
| CVE-2014-4123 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Privilege Escalation Vulnerability | 25 May 2022 |
| CVE-2014-0546 Exploited |
Not yet scored | Adobe Reader and Acrobat Operating systems & software |
Adobe Reader and Acrobat Sandbox Bypass Vulnerability | 25 May 2022 |
| CVE-2014-2817 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Privilege Escalation Vulnerability | 25 May 2022 |
| CVE-2016-1010 Exploited |
Not yet scored | Adobe Flash Player and AIR Operating systems & software |
Adobe Flash Player and AIR Integer Overflow Vulnerability | 25 May 2022 |
| CVE-2016-0984 Exploited |
Not yet scored | Adobe Flash Player and AIR Operating systems & software |
Adobe Flash Player and AIR Use-After-Free Vulnerability | 25 May 2022 |
| CVE-2016-0034 Exploited |
Not yet scored | Microsoft Silverlight Operating systems & software |
Microsoft Silverlight Runtime Remote Code Execution Vulnerability | 25 May 2022 |
| CVE-2015-0310 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player ASLR Bypass Vulnerability | 25 May 2022 |
| CVE-2013-3896 Exploited |
Not yet scored | Microsoft Silverlight Operating systems & software |
Microsoft Silverlight Information Disclosure Vulnerability | 25 May 2022 |
| CVE-2013-0074 Exploited |
Not yet scored | Microsoft Silverlight Operating systems & software |
Microsoft Silverlight Double Dereference Vulnerability | 25 May 2022 |
| CVE-2012-1710 Exploited |
Not yet scored | Oracle Fusion Middleware Operating systems & software |
Oracle Fusion Middleware Unspecified Vulnerability | 25 May 2022 |
| CVE-2010-1428 Exploited |
Not yet scored | Red Hat JBoss Operating systems & software |
Red Hat JBoss Information Disclosure Vulnerability | 25 May 2022 |
| CVE-2014-3153 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Privilege Escalation Vulnerability | 25 May 2022 |
| CVE-2013-7331 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Information Disclosure Vulnerability | 25 May 2022 |
| CVE-2013-3993 Exploited |
Not yet scored | IBM InfoSphere BigInsights Operating systems & software |
IBM InfoSphere BigInsights Invalid Input Vulnerability | 25 May 2022 |
| CVE-2017-0149 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Memory Corruption Vulnerability | 24 May 2022 |
| CVE-2016-0162 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Information Disclosure Vulnerability | 24 May 2022 |
| CVE-2017-18362 Exploited |
Not yet scored | Kaseya Virtual System/Server Administrator (VSA) Operating systems & software |
Kaseya VSA SQL Injection Vulnerability | 24 May 2022 |
| CVE-2016-3351 Exploited |
Not yet scored | Microsoft Internet Explorer and Edge Operating systems & software |
Microsoft Internet Explorer and Edge Information Disclosure Vulnerability | 24 May 2022 |
| CVE-2018-19943 Exploited |
Not yet scored | QNAP Network Attached Storage (NAS) Operating systems & software |
QNAP NAS File Station Cross-Site Scripting Vulnerability | 24 May 2022 |
| CVE-2018-19949 Exploited |
Not yet scored | QNAP Network Attached Storage (NAS) Operating systems & software |
QNAP NAS File Station Command Injection Vulnerability | 24 May 2022 |
| CVE-2018-19953 Exploited |
Not yet scored | QNAP Network Attached Storage (NAS) Operating systems & software |
QNAP NAS File Station Cross-Site Scripting Vulnerability | 24 May 2022 |
| CVE-2018-8611 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Kernel Privilege Escalation Vulnerability | 24 May 2022 |
| CVE-2017-0005 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability | 24 May 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.