Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 2945new in the last 7 days
- 3added as actively exploited
- 219critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2021-37973 Exploited |
Not yet scored | Google Chromium Portals Operating systems & software |
Google Chromium Portals Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2012-3152 Exploited |
Not yet scored | Oracle Fusion Middleware Operating systems & software |
Oracle Fusion Middleware Unspecified Vulnerability | 3 Nov 2021 |
| CVE-2021-30551 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Type Confusion Vulnerability | 3 Nov 2021 |
| CVE-2021-37975 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2019-19356 Exploited |
Not yet scored | Netis WF2419 Devices Network & security devices |
Netis WF2419 Devices Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-0646 Exploited |
Not yet scored | Microsoft .NET Framework Operating systems & software |
Microsoft .NET Framework Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-24557 Exploited |
Not yet scored | Trend Micro Apex One, OfficeScan, and Worry-Free Business Security Operating systems & software |
Trend Micro Multiple Products Improper Access Control Vulnerability | 3 Nov 2021 |
| CVE-2020-6418 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Type Confusion Vulnerability | 3 Nov 2021 |
| CVE-2021-30554 Exploited |
Not yet scored | Google Chromium WebGL Operating systems & software |
Google Chromium WebGL Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2021-22205 Exploited |
Not yet scored | GitLab Community and Enterprise Editions Applications & supply chain |
GitLab Community and Enterprise Editions Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-28663 Exploited |
Not yet scored | Arm Mali Graphics Processing Unit (GPU) Hardware & firmware |
Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2021-30665 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products WebKit Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2021-30762 Exploited |
Not yet scored | Apple iOS Operating systems & software |
Apple iOS WebKit Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2021-21206 Exploited |
Not yet scored | Google Chromium Blink Operating systems & software |
Google Chromium Blink Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2020-1472 Exploited |
Not yet scored | Microsoft Netlogon Operating systems & software |
Microsoft Netlogon Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2017-11882 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2020-1040 Exploited |
Not yet scored | Microsoft Hyper-V RemoteFX Operating systems & software |
Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-26855 Exploited |
Not yet scored | Microsoft Exchange Server Operating systems & software |
Microsoft Exchange Server Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-27059 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2017-0199 Exploited |
Not yet scored | Microsoft Office and WordPad Operating systems & software |
Microsoft Office and WordPad Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-38000 Exploited |
Not yet scored | Google Chromium Intents Operating systems & software |
Google Chromium Intents Improper Input Validation Vulnerability | 3 Nov 2021 |
| CVE-2021-31201 Exploited |
Not yet scored | Microsoft Enhanced Cryptographic Provider Operating systems & software |
Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2019-0803 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2020-1380 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2021-21148 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Heap Buffer Overflow Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.