Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 1782new in the last 7 days
- 4added as actively exploited
- 139critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2016-6367 Exploited |
Not yet scored | Cisco Adaptive Security Appliance (ASA) Network & security devices |
Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability | 24 May 2022 |
| CVE-2016-6366 Exploited |
Not yet scored | Cisco Adaptive Security Appliance (ASA) Network & security devices |
Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability | 24 May 2022 |
| CVE-2016-4657 Exploited |
Not yet scored | Apple iOS Operating systems & software |
Apple iOS Webkit Memory Corruption Vulnerability | 24 May 2022 |
| CVE-2017-0210 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Privilege Escalation Vulnerability | 24 May 2022 |
| CVE-2016-4656 Exploited |
Not yet scored | Apple iOS Operating systems & software |
Apple iOS Memory Corruption Vulnerability | 24 May 2022 |
| CVE-2018-19943 Exploited |
Not yet scored | QNAP Network Attached Storage (NAS) Operating systems & software |
QNAP NAS File Station Cross-Site Scripting Vulnerability | 24 May 2022 |
| CVE-2018-19953 Exploited |
Not yet scored | QNAP Network Attached Storage (NAS) Operating systems & software |
QNAP NAS File Station Cross-Site Scripting Vulnerability | 24 May 2022 |
| CVE-2016-3351 Exploited |
Not yet scored | Microsoft Internet Explorer and Edge Operating systems & software |
Microsoft Internet Explorer and Edge Information Disclosure Vulnerability | 24 May 2022 |
| CVE-2016-0162 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Information Disclosure Vulnerability | 24 May 2022 |
| CVE-2018-8611 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Kernel Privilege Escalation Vulnerability | 24 May 2022 |
| CVE-2018-19949 Exploited |
Not yet scored | QNAP Network Attached Storage (NAS) Operating systems & software |
QNAP NAS File Station Command Injection Vulnerability | 24 May 2022 |
| CVE-2017-0149 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Memory Corruption Vulnerability | 24 May 2022 |
| CVE-2017-0005 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability | 24 May 2022 |
| CVE-2019-1130 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability | 23 May 2022 |
| CVE-2020-1027 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Kernel Privilege Escalation Vulnerability | 23 May 2022 |
| CVE-2020-0638 Exploited |
Not yet scored | Microsoft Update Notification Manager Operating systems & software |
Microsoft Update Notification Manager Privilege Escalation Vulnerability | 23 May 2022 |
| CVE-2021-30883 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Memory Corruption Vulnerability | 23 May 2022 |
| CVE-2021-1048 Exploited |
Not yet scored | Android Kernel Operating systems & software |
Android Kernel Use-After-Free Vulnerability | 23 May 2022 |
| CVE-2022-20821 Exploited |
Not yet scored | Cisco IOS XR Cloud & SaaS |
Cisco IOS XR Open Port Vulnerability | 23 May 2022 |
| CVE-2021-0920 Exploited |
Not yet scored | Android Kernel Operating systems & software |
Android Kernel Race Condition Vulnerability | 23 May 2022 |
| CVE-2018-5002 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Stack-based Buffer Overflow Vulnerability | 23 May 2022 |
| CVE-2019-0880 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Privilege Escalation Vulnerability | 23 May 2022 |
| CVE-2019-7286 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Memory Corruption Vulnerability | 23 May 2022 |
| CVE-2019-0676 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Information Disclosure Vulnerability | 23 May 2022 |
| CVE-2019-5786 Exploited |
Not yet scored | Google Chrome Blink Operating systems & software |
Google Chrome Blink Use-After-Free Vulnerability | 23 May 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.