Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 886new in the last 7 days
- 6added as actively exploited
- 63critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2008-2992 Exploited |
Not yet scored | Adobe Acrobat and Reader Operating systems & software |
Adobe Reader and Acrobat Input Validation Vulnerability | 3 Mar 2022 |
| CVE-2009-3129 Exploited |
Not yet scored | Microsoft Excel Operating systems & software |
Microsoft Excel Featheader Record Memory Corruption Vulnerability | 3 Mar 2022 |
| CVE-2008-3431 Exploited |
Not yet scored | Oracle VirtualBox Operating systems & software |
Oracle VirtualBox Insufficient Input Validation Vulnerability | 3 Mar 2022 |
| CVE-2013-3346 Exploited |
Not yet scored | Adobe Reader and Acrobat Operating systems & software |
Adobe Reader and Acrobat Memory Corruption Vulnerability | 3 Mar 2022 |
| CVE-2013-5065 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Kernel Privilege Escalation Vulnerability | 3 Mar 2022 |
| CVE-2014-0496 Exploited |
Not yet scored | Adobe Reader and Acrobat Operating systems & software |
Adobe Reader and Acrobat Use-After-Free Vulnerability | 3 Mar 2022 |
| CVE-2014-4114 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2015-1642 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Memory Corruption Vulnerability | 3 Mar 2022 |
| CVE-2012-0507 Exploited |
Not yet scored | Oracle Java SE Applications & supply chain |
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2012-1535 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Arbitrary Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2012-1723 Exploited |
Not yet scored | Oracle Java SE Applications & supply chain |
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2012-1856 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2012-4681 Exploited |
Not yet scored | Oracle Java SE Applications & supply chain |
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2013-0632 Exploited |
Not yet scored | Adobe ColdFusion Operating systems & software |
Adobe ColdFusion Authentication Bypass Vulnerability | 3 Mar 2022 |
| CVE-2013-0640 Exploited |
Not yet scored | Adobe Reader and Acrobat Operating systems & software |
Adobe Reader and Acrobat Memory Corruption Vulnerability | 3 Mar 2022 |
| CVE-2013-0641 Exploited |
Not yet scored | Adobe Reader Operating systems & software |
Adobe Reader Buffer Overflow Vulnerability | 3 Mar 2022 |
| CVE-2013-1347 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Remote Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2015-2424 Exploited |
Not yet scored | Microsoft PowerPoint Operating systems & software |
Microsoft PowerPoint Memory Corruption Vulnerability | 3 Mar 2022 |
| CVE-2013-3897 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Use-After-Free Vulnerability | 3 Mar 2022 |
| CVE-2013-1675 Exploited |
Not yet scored | Mozilla Firefox Operating systems & software |
Mozilla Firefox Information Disclosure Vulnerability | 3 Mar 2022 |
| CVE-2017-12231 Exploited |
Not yet scored | Cisco IOS software Network & security devices |
Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability | 3 Mar 2022 |
| CVE-2016-8562 Exploited |
Not yet scored | Siemens SIMATIC CP OT, ICS & IoT |
Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability | 3 Mar 2022 |
| CVE-2017-0261 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Use-After-Free Vulnerability | 3 Mar 2022 |
| CVE-2017-11292 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Type Confusion Vulnerability | 3 Mar 2022 |
| CVE-2017-11826 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Remote Code Execution Vulnerability | 3 Mar 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.