Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 1489new in the last 7 days
- 4added as actively exploited
- 112critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2020-0683 Exploited |
Not yet scored | Microsoft Windows Applications & supply chain |
Microsoft Windows Installer Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2021-33739 Exploited |
Not yet scored | Microsoft Windows Applications & supply chain |
Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2021-1647 Exploited |
Not yet scored | Microsoft Defender Operating systems & software |
Microsoft Defender Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-31955 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Kernel Information Disclosure Vulnerability | 3 Nov 2021 |
| CVE-2020-0878 Exploited |
Not yet scored | Microsoft Edge and Internet Explorer Operating systems & software |
Microsoft Edge and Internet Explorer Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2016-0167 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2014-1812 Exploited |
Not yet scored | Microsoft Windows Identity & access |
Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2021-22506 Exploited |
Not yet scored | Micro Focus Micro Focus Access Manager Identity & access |
Micro Focus Access Manager Information Leakage Vulnerability | 3 Nov 2021 |
| CVE-2021-23874 Exploited |
Not yet scored | McAfee McAfee Total Protection (MTP) Operating systems & software |
McAfee Total Protection (MTP) Improper Privilege Management Vulnerability | 3 Nov 2021 |
| CVE-2021-33771 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Kernel Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2021-31199 Exploited |
Not yet scored | Microsoft Enhanced Cryptographic Provider Operating systems & software |
Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2021-38647 Exploited |
Not yet scored | Microsoft Open Management Infrastructure (OMI) Cloud & SaaS |
Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-33742 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2016-0185 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Media Center Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-17087 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Kernel Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2021-31979 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Kernel Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2016-3715 Exploited |
Not yet scored | ImageMagick ImageMagick Operating systems & software |
ImageMagick Arbitrary File Deletion Vulnerability | 3 Nov 2021 |
| CVE-2021-30563 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Type Confusion Vulnerability | 3 Nov 2021 |
| CVE-2020-15505 Exploited |
Not yet scored | Ivanti MobileIron Multiple Products Network & security devices |
Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2016-3718 Exploited |
Not yet scored | ImageMagick ImageMagick Operating systems & software |
ImageMagick Server-Side Request Forgery (SSRF) Vulnerability | 3 Nov 2021 |
| CVE-2019-4716 Exploited |
Not yet scored | IBM Planning Analytics Operating systems & software |
IBM Planning Analytics Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2018-6789 Exploited |
Not yet scored | Exim Exim Operating systems & software |
Exim Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2021-35464 Exploited |
Not yet scored | ForgeRock Access Management (AM) Operating systems & software |
ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2016-3643 Exploited |
Not yet scored | SolarWinds Virtualization Manager Operating systems & software |
SolarWinds Virtualization Manager Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2019-9082 Exploited |
Not yet scored | ThinkPHP ThinkPHP Operating systems & software |
ThinkPHP Remote Code Execution Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.