Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 1126new in the last 7 days
- 6added as actively exploited
- 65critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2013-1690 Exploited |
Not yet scored | Mozilla Firefox and Thunderbird Operating systems & software |
Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability | 28 Mar 2022 |
| CVE-2016-0151 Exploited |
Not yet scored | Microsoft Client-Server Run-time Subsystem (CSRSS) Operating systems & software |
Microsoft Windows CSRSS Security Feature Bypass Vulnerability | 28 Mar 2022 |
| CVE-2018-8405 Exploited |
Not yet scored | Microsoft DirectX Graphics Kernel (DXGKRNL) Operating systems & software |
Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability | 28 Mar 2022 |
| CVE-2021-34486 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Event Tracing Privilege Escalation Vulnerability | 28 Mar 2022 |
| CVE-2021-26085 Exploited |
Not yet scored | Atlassian Confluence Server Operating systems & software |
Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability | 28 Mar 2022 |
| CVE-2022-1096 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Type Confusion Vulnerability | 28 Mar 2022 |
| CVE-2017-0059 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Information Disclosure Vulnerability | 28 Mar 2022 |
| CVE-2013-2551 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Use-After-Free Vulnerability | 28 Mar 2022 |
| CVE-2012-0518 Exploited |
Not yet scored | Oracle Fusion Middleware Operating systems & software |
Oracle Fusion Middleware Unspecified Vulnerability | 28 Mar 2022 |
| CVE-2021-38646 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability | 28 Mar 2022 |
| CVE-2012-2034 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Memory Corruption Vulnerability | 28 Mar 2022 |
| CVE-2012-2539 Exploited |
Not yet scored | Microsoft Word Operating systems & software |
Microsoft Word Remote Code Execution Vulnerability | 28 Mar 2022 |
| CVE-2018-8440 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Privilege Escalation Vulnerability | 28 Mar 2022 |
| CVE-2017-0213 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Privilege Escalation Vulnerability | 28 Mar 2022 |
| CVE-2010-4398 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability | 28 Mar 2022 |
| CVE-2016-11021 Exploited |
Not yet scored | D-Link DCS-930L Devices Operating systems & software |
D-Link DCS-930L Devices OS Command Injection Vulnerability | 25 Mar 2022 |
| CVE-2015-4068 Exploited |
Not yet scored | Arcserve Unified Data Protection (UDP) Operating systems & software |
Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability | 25 Mar 2022 |
| CVE-2015-1187 Exploited |
Not yet scored | D-Link and TRENDnet Multiple Devices Operating systems & software |
D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2009-0927 Exploited |
Not yet scored | Adobe Reader and Acrobat Operating systems & software |
Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability | 25 Mar 2022 |
| CVE-2005-2773 Exploited |
Not yet scored | Hewlett Packard (HP) OpenView Network Node Manager Operating systems & software |
HP OpenView Network Node Manager Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2016-7892 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Use-After-Free Vulnerability | 25 Mar 2022 |
| CVE-2010-4344 Exploited |
Not yet scored | Exim Exim Operating systems & software |
Exim Heap-Based Buffer Overflow Vulnerability | 25 Mar 2022 |
| CVE-2010-4345 Exploited |
Not yet scored | Exim Exim Operating systems & software |
Exim Privilege Escalation Vulnerability | 25 Mar 2022 |
| CVE-2010-2861 Exploited |
Not yet scored | Adobe ColdFusion Operating systems & software |
Adobe ColdFusion Directory Traversal Vulnerability | 25 Mar 2022 |
| CVE-2013-2251 Exploited |
Not yet scored | Apache Struts Operating systems & software |
Apache Struts Improper Input Validation Vulnerability | 25 Mar 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.