Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 1489new in the last 7 days
- 4added as actively exploited
- 112critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2020-4428 Exploited |
Not yet scored | IBM Data Risk Manager Operating systems & software |
IBM Data Risk Manager Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-21193 Exploited |
Not yet scored | Google Chromium Blink Operating systems & software |
Google Chromium Blink Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2020-0938 Exploited |
Not yet scored | Microsoft Windows Cloud & SaaS |
Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-4427 Exploited |
Not yet scored | IBM Data Risk Manager Identity & access |
IBM Data Risk Manager Security Bypass Vulnerability | 3 Nov 2021 |
| CVE-2020-4430 Exploited |
Not yet scored | IBM Data Risk Manager Operating systems & software |
IBM Data Risk Manager Directory Traversal Vulnerability | 3 Nov 2021 |
| CVE-2021-21224 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Type Confusion Vulnerability | 3 Nov 2021 |
| CVE-2021-21220 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Improper Input Validation Vulnerability | 3 Nov 2021 |
| CVE-2021-31201 Exploited |
Not yet scored | Microsoft Enhanced Cryptographic Provider Operating systems & software |
Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2020-16009 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Type Confusion Vulnerability | 3 Nov 2021 |
| CVE-2021-31956 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows NTFS Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2021-38000 Exploited |
Not yet scored | Google Chromium Intents Operating systems & software |
Google Chromium Intents Improper Input Validation Vulnerability | 3 Nov 2021 |
| CVE-2020-2555 Exploited |
Not yet scored | Oracle Multiple Products Network & security devices |
Oracle Multiple Products Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-21206 Exploited |
Not yet scored | Google Chromium Blink Operating systems & software |
Google Chromium Blink Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2021-30554 Exploited |
Not yet scored | Google Chromium WebGL Operating systems & software |
Google Chromium WebGL Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2020-6418 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Type Confusion Vulnerability | 3 Nov 2021 |
| CVE-2021-30551 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Type Confusion Vulnerability | 3 Nov 2021 |
| CVE-2021-37973 Exploited |
Not yet scored | Google Chromium Portals Operating systems & software |
Google Chromium Portals Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2021-21148 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Heap Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2021-37975 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2021-30632 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Out-of-Bounds Write Vulnerability | 3 Nov 2021 |
| CVE-2020-5902 Exploited |
Not yet scored | F5 BIG-IP Network & security devices |
F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-8655 Exploited |
Not yet scored | EyesOfNetwork EyesOfNetwork Operating systems & software |
EyesOfNetwork Improper Privilege Management Vulnerability | 3 Nov 2021 |
| CVE-2021-37976 Exploited |
Not yet scored | Google Chromium Operating systems & software |
Google Chromium Information Disclosure Vulnerability | 3 Nov 2021 |
| CVE-2020-16017 Exploited |
Not yet scored | Google Chrome Operating systems & software |
Google Chrome Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2020-15999 Exploited |
Not yet scored | Google Chrome FreeType Applications & supply chain |
Google Chrome FreeType Heap Buffer Overflow Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.