Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 2945new in the last 7 days
- 3added as actively exploited
- 219critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2012-1535 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Arbitrary Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2012-0507 Exploited |
Not yet scored | Oracle Java SE Applications & supply chain |
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2013-5065 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Kernel Privilege Escalation Vulnerability | 3 Mar 2022 |
| CVE-2010-0232 Exploited |
Not yet scored | Microsoft Windows Hardware & firmware |
Microsoft Windows Kernel Exception Handler Vulnerability | 3 Mar 2022 |
| CVE-2011-0611 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Remote Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2010-3333 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Stack-based Buffer Overflow Vulnerability | 3 Mar 2022 |
| CVE-2009-3129 Exploited |
Not yet scored | Microsoft Excel Operating systems & software |
Microsoft Excel Featheader Record Memory Corruption Vulnerability | 3 Mar 2022 |
| CVE-2009-1123 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Improper Input Validation Vulnerability | 3 Mar 2022 |
| CVE-2008-3431 Exploited |
Not yet scored | Oracle VirtualBox Operating systems & software |
Oracle VirtualBox Insufficient Input Validation Vulnerability | 3 Mar 2022 |
| CVE-2008-2992 Exploited |
Not yet scored | Adobe Acrobat and Reader Operating systems & software |
Adobe Reader and Acrobat Input Validation Vulnerability | 3 Mar 2022 |
| CVE-2004-0210 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Privilege Escalation Vulnerability | 3 Mar 2022 |
| CVE-2002-0367 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Privilege Escalation Vulnerability | 3 Mar 2022 |
| CVE-2011-3544 Exploited |
Not yet scored | Oracle Java SE JDK and JRE Applications & supply chain |
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2010-0188 Exploited |
Not yet scored | Adobe Reader and Acrobat Operating systems & software |
Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2017-8540 Exploited |
Not yet scored | Microsoft Malware Protection Engine Operating systems & software |
Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability | 3 Mar 2022 |
| CVE-2011-1889 Exploited |
Not yet scored | Microsoft Forefront Threat Management Gateway (TMG) Network & security devices |
Microsoft Forefront TMG Remote Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2015-1701 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 3 Mar 2022 |
| CVE-2018-0155 Exploited |
Not yet scored | Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches Network & security devices |
Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability | 3 Mar 2022 |
| CVE-2015-2545 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Malformed EPS File Vulnerability | 3 Mar 2022 |
| CVE-2022-20708 Exploited |
Not yet scored | Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers Network & security devices |
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | 3 Mar 2022 |
| CVE-2022-20703 Exploited |
Not yet scored | Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers Network & security devices |
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | 3 Mar 2022 |
| CVE-2017-6739 Exploited |
Not yet scored | Cisco IOS and IOS XE Software Network & security devices |
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2017-12231 Exploited |
Not yet scored | Cisco IOS software Network & security devices |
Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability | 3 Mar 2022 |
| CVE-2017-0001 Exploited |
Not yet scored | Microsoft Graphics Device Interface (GDI) Operating systems & software |
Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability | 3 Mar 2022 |
| CVE-2017-6663 Exploited |
Not yet scored | Cisco IOS and IOS XE Software Network & security devices |
Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability | 3 Mar 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.