Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 1126new in the last 7 days
- 6added as actively exploited
- 65critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2016-7855 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Use-After-Free Vulnerability | 3 Mar 2022 |
| CVE-2020-1938 Exploited |
Not yet scored | Apache Tomcat Operating systems & software |
Apache Tomcat Improper Privilege Management Vulnerability | 3 Mar 2022 |
| CVE-2021-41379 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Installer Privilege Escalation Vulnerability | 3 Mar 2022 |
| CVE-2018-8298 Exploited |
Not yet scored | ChakraCore ChakraCore scripting engine Operating systems & software |
ChakraCore Scripting Engine Type Confusion Vulnerability | 3 Mar 2022 |
| CVE-2018-8581 Exploited |
Not yet scored | Microsoft Exchange Server Operating systems & software |
Microsoft Exchange Server Privilege Escalation Vulnerability | 3 Mar 2022 |
| CVE-2019-1297 Exploited |
Not yet scored | Microsoft Excel Operating systems & software |
Microsoft Excel Remote Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2020-11899 Exploited |
Not yet scored | Treck TCP/IP stack IPv6 Operating systems & software |
Treck TCP/IP stack Out-of-Bounds Read Vulnerability | 3 Mar 2022 |
| CVE-2017-0001 Exploited |
Not yet scored | Microsoft Graphics Device Interface (GDI) Operating systems & software |
Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability | 3 Mar 2022 |
| CVE-2015-2424 Exploited |
Not yet scored | Microsoft PowerPoint Operating systems & software |
Microsoft PowerPoint Memory Corruption Vulnerability | 3 Mar 2022 |
| CVE-2016-7193 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Memory Corruption Vulnerability | 3 Mar 2022 |
| CVE-2016-7262 Exploited |
Not yet scored | Microsoft Excel Operating systems & software |
Microsoft Office Security Feature Bypass Vulnerability | 3 Mar 2022 |
| CVE-2016-5195 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Race Condition Vulnerability | 3 Mar 2022 |
| CVE-2015-2545 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Malformed EPS File Vulnerability | 3 Mar 2022 |
| CVE-2016-4117 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Arbitrary Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2016-1019 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Arbitrary Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2016-0099 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability | 3 Mar 2022 |
| CVE-2015-7645 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Arbitrary Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2015-5119 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Use-After-Free Vulnerability | 3 Mar 2022 |
| CVE-2015-3043 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Memory Corruption Vulnerability | 3 Mar 2022 |
| CVE-2017-11826 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Remote Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2017-11292 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Type Confusion Vulnerability | 3 Mar 2022 |
| CVE-2017-0261 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Use-After-Free Vulnerability | 3 Mar 2022 |
| CVE-2017-8540 Exploited |
Not yet scored | Microsoft Malware Protection Engine Operating systems & software |
Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability | 3 Mar 2022 |
| CVE-2013-1347 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Remote Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2013-3346 Exploited |
Not yet scored | Adobe Reader and Acrobat Operating systems & software |
Adobe Reader and Acrobat Memory Corruption Vulnerability | 3 Mar 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.