Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 2860new in the last 7 days
- 3added as actively exploited
- 214critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2023-35078 Exploited |
Not yet scored | Ivanti Endpoint Manager Mobile (EPMM) Network & security devices |
Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability | 25 Jul 2023 |
| CVE-2023-38205 Exploited |
Not yet scored | Adobe ColdFusion Operating systems & software |
Adobe ColdFusion Improper Access Control Vulnerability | 20 Jul 2023 |
| CVE-2023-29298 Exploited |
Not yet scored | Adobe ColdFusion Operating systems & software |
Adobe ColdFusion Improper Access Control Vulnerability | 20 Jul 2023 |
| CVE-2023-3519 Exploited |
Not yet scored | Citrix NetScaler ADC and NetScaler Gateway Network & security devices |
Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability | 19 Jul 2023 |
| CVE-2023-36884 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Search Remote Code Execution Vulnerability | 17 Jul 2023 |
| CVE-2022-29303 Exploited |
Not yet scored | SolarView Compact Operating systems & software |
SolarView Compact Command Injection Vulnerability | 13 Jul 2023 |
| CVE-2023-37450 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products WebKit Code Execution Vulnerability | 13 Jul 2023 |
| CVE-2023-32049 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability | 11 Jul 2023 |
| CVE-2023-36874 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability | 11 Jul 2023 |
| CVE-2023-35311 Exploited |
Not yet scored | Microsoft Outlook Operating systems & software |
Microsoft Outlook Security Feature Bypass Vulnerability | 11 Jul 2023 |
| CVE-2023-32046 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability | 11 Jul 2023 |
| CVE-2022-31199 Exploited |
Not yet scored | Netwrix Auditor Network & security devices |
Netwrix Auditor Insecure Object Deserialization Vulnerability | 11 Jul 2023 |
| CVE-2021-29256 Exploited |
Not yet scored | Arm Mali Graphics Processing Unit (GPU) Hardware & firmware |
Arm Mali GPU Kernel Driver Use-After-Free Vulnerability | 7 Jul 2023 |
| CVE-2021-25394 Exploited |
Not yet scored | Samsung Mobile Devices Operating systems & software |
Samsung Mobile Devices Race Condition Vulnerability | 29 Jun 2023 |
| CVE-2019-17621 Exploited |
Not yet scored | D-Link DIR-859 Router Network & security devices |
D-Link DIR-859 Router Command Execution Vulnerability | 29 Jun 2023 |
| CVE-2021-25487 Exploited |
Not yet scored | Samsung Mobile Devices Operating systems & software |
Samsung Mobile Devices Out-of-Bounds Read Vulnerability | 29 Jun 2023 |
| CVE-2019-20500 Exploited |
Not yet scored | D-Link DWL-2600AP Access Point Operating systems & software |
D-Link DWL-2600AP Access Point Command Injection Vulnerability | 29 Jun 2023 |
| CVE-2021-25489 Exploited |
Not yet scored | Samsung Mobile Devices Operating systems & software |
Samsung Mobile Devices Improper Input Validation Vulnerability | 29 Jun 2023 |
| CVE-2021-25372 Exploited |
Not yet scored | Samsung Mobile Devices Operating systems & software |
Samsung Mobile Devices Improper Boundary Check Vulnerability | 29 Jun 2023 |
| CVE-2021-25371 Exploited |
Not yet scored | Samsung Mobile Devices Operating systems & software |
Samsung Mobile Devices Unspecified Vulnerability | 29 Jun 2023 |
| CVE-2021-25395 Exploited |
Not yet scored | Samsung Mobile Devices Operating systems & software |
Samsung Mobile Devices Race Condition Vulnerability | 29 Jun 2023 |
| CVE-2023-27992 Exploited |
Not yet scored | Zyxel Multiple Network-Attached Storage (NAS) Devices Operating systems & software |
Zyxel Multiple NAS Devices Command Injection Vulnerability | 23 Jun 2023 |
| CVE-2023-20867 Exploited |
Not yet scored | VMware Tools Operating systems & software |
VMware Tools Authentication Bypass Vulnerability | 23 Jun 2023 |
| CVE-2023-32435 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products WebKit Memory Corruption Vulnerability | 23 Jun 2023 |
| CVE-2023-32434 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Integer Overflow Vulnerability | 23 Jun 2023 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.