Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 330new in the last 7 days
- 8added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2009-3459 Exploited |
Not yet scored | Adobe Acrobat and Reader Operating systems & software |
Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability | 20 May 2026 |
| CVE-2010-0249 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Use-After-Free Vulnerability | 20 May 2026 |
| CVE-2010-0806 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Use-After-Free Vulnerability | 20 May 2026 |
| CVE-2026-42897 Exploited |
Not yet scored | Microsoft Microsoft Operating systems & software |
Microsoft Exchange Server Cross-Site Scripting Vulnerability | 15 May 2026 |
| CVE-2026-31431 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability | 1 May 2026 |
| CVE-2024-1708 Exploited |
Not yet scored | ConnectWise ScreenConnect Operating systems & software |
ConnectWise ScreenConnect Path Traversal Vulnerability | 28 Apr 2026 |
| CVE-2026-32202 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Protection Mechanism Failure Vulnerability | 28 Apr 2026 |
| CVE-2025-29635 Exploited |
Not yet scored | D-Link DIR-823X Operating systems & software |
D-Link DIR-823X Command Injection Vulnerability | 24 Apr 2026 |
| CVE-2024-7399 Exploited |
Not yet scored | Samsung MagicINFO 9 Server Operating systems & software |
Samsung MagicINFO 9 Server Path Traversal Vulnerability | 24 Apr 2026 |
| CVE-2024-57728 Exploited |
Not yet scored | SimpleHelp SimpleHelp Operating systems & software |
SimpleHelp Path Traversal Vulnerability | 24 Apr 2026 |
| CVE-2026-39987 Exploited |
Not yet scored | Marimo Marimo Operating systems & software |
Marimo Remote Code Execution Vulnerability | 23 Apr 2026 |
| CVE-2026-33825 Exploited |
Not yet scored | Microsoft Defender Operating systems & software |
Microsoft Defender Insufficient Granularity of Access Control Vulnerability | 22 Apr 2026 |
| CVE-2025-32975 Exploited |
Not yet scored | Quest KACE Systems Management Appliance (SMA) Operating systems & software |
Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability | 20 Apr 2026 |
| CVE-2025-2749 Exploited |
Not yet scored | Kentico Kentico Xperience Operating systems & software |
Kentico Xperience Path Traversal Vulnerability | 20 Apr 2026 |
| CVE-2023-27351 Exploited |
Not yet scored | PaperCut NG/MF Operating systems & software |
PaperCut NG/MF Improper Authentication Vulnerability | 20 Apr 2026 |
| CVE-2025-48700 Exploited |
Not yet scored | Synacor Zimbra Collaboration Suite (ZCS) Operating systems & software |
Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability | 20 Apr 2026 |
| CVE-2024-27199 Exploited |
Not yet scored | JetBrains TeamCity Operating systems & software |
JetBrains TeamCity Relative Path Traversal Vulnerability | 20 Apr 2026 |
| CVE-2026-34197 Exploited |
Not yet scored | Apache ActiveMQ Operating systems & software |
Apache ActiveMQ Improper Input Validation Vulnerability | 16 Apr 2026 |
| CVE-2009-0238 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Remote Code Execution | 14 Apr 2026 |
| CVE-2026-32201 Exploited |
Not yet scored | Microsoft SharePoint Server Operating systems & software |
Microsoft SharePoint Server Improper Input Validation Vulnerability | 14 Apr 2026 |
| CVE-2025-60710 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Link Following Vulnerability | 13 Apr 2026 |
| CVE-2023-21529 Exploited |
Not yet scored | Microsoft Exchange Server Operating systems & software |
Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability | 13 Apr 2026 |
| CVE-2023-36424 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Out-of-Bounds Read Vulnerability | 13 Apr 2026 |
| CVE-2020-9715 Exploited |
Not yet scored | Adobe Acrobat Operating systems & software |
Adobe Acrobat Use-After-Free Vulnerability | 13 Apr 2026 |
| CVE-2026-34621 Exploited |
Not yet scored | Adobe Acrobat and Reader Operating systems & software |
Adobe Acrobat and Reader Prototype Pollution Vulnerability | 13 Apr 2026 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.