Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 2945new in the last 7 days
- 3added as actively exploited
- 219critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2013-3660 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 28 Mar 2022 |
| CVE-2012-5076 Exploited |
Not yet scored | Oracle Java SE Applications & supply chain |
Oracle Java SE Sandbox Bypass Vulnerability | 28 Mar 2022 |
| CVE-2013-2551 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Use-After-Free Vulnerability | 28 Mar 2022 |
| CVE-2012-2539 Exploited |
Not yet scored | Microsoft Word Operating systems & software |
Microsoft Word Remote Code Execution Vulnerability | 28 Mar 2022 |
| CVE-2012-0518 Exploited |
Not yet scored | Oracle Fusion Middleware Operating systems & software |
Oracle Fusion Middleware Unspecified Vulnerability | 28 Mar 2022 |
| CVE-2011-2005 Exploited |
Not yet scored | Microsoft Ancillary Function Driver (afd.sys) Operating systems & software |
Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability | 28 Mar 2022 |
| CVE-2010-4398 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability | 28 Mar 2022 |
| CVE-2015-2426 Exploited |
Not yet scored | Microsoft Windows Applications & supply chain |
Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability | 28 Mar 2022 |
| CVE-2015-2419 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Memory Corruption Vulnerability | 28 Mar 2022 |
| CVE-2015-1770 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Uninitialized Memory Use Vulnerability | 28 Mar 2022 |
| CVE-2013-2729 Exploited |
Not yet scored | Adobe Reader and Acrobat Operating systems & software |
Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability | 28 Mar 2022 |
| CVE-2013-2465 Exploited |
Not yet scored | Oracle Java SE Applications & supply chain |
Oracle Java SE Unspecified Vulnerability | 28 Mar 2022 |
| CVE-2012-2034 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Memory Corruption Vulnerability | 28 Mar 2022 |
| CVE-2022-1096 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Type Confusion Vulnerability | 28 Mar 2022 |
| CVE-2016-0040 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Kernel Privilege Escalation Vulnerability | 28 Mar 2022 |
| CVE-2013-1690 Exploited |
Not yet scored | Mozilla Firefox and Thunderbird Operating systems & software |
Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability | 28 Mar 2022 |
| CVE-2010-2861 Exploited |
Not yet scored | Adobe ColdFusion Operating systems & software |
Adobe ColdFusion Directory Traversal Vulnerability | 25 Mar 2022 |
| CVE-2018-0147 Exploited |
Not yet scored | Cisco Secure Access Control System (ACS) Network & security devices |
Cisco Secure Access Control System Java Deserialization Vulnerability | 25 Mar 2022 |
| CVE-2018-0125 Exploited |
Not yet scored | Cisco VPN Routers Network & security devices |
Cisco VPN Routers Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2017-6334 Exploited |
Not yet scored | NETGEAR DGN2200 Devices Hardware & firmware |
NETGEAR DGN2200 Devices OS Command Injection Vulnerability | 25 Mar 2022 |
| CVE-2017-3881 Exploited |
Not yet scored | Cisco IOS and IOS XE Network & security devices |
Cisco IOS and IOS XE Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2017-0146 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows SMB Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2016-10174 Exploited |
Not yet scored | NETGEAR WNR2000v5 Router Network & security devices |
NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability | 25 Mar 2022 |
| CVE-2014-3120 Exploited |
Not yet scored | Elastic Elasticsearch Applications & supply chain |
Elasticsearch Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2016-0752 Exploited |
Not yet scored | Rails Ruby on Rails Operating systems & software |
Ruby on Rails Directory Traversal Vulnerability | 25 Mar 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.