Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 2945new in the last 7 days
- 3added as actively exploited
- 219critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2021-34523 Exploited |
Not yet scored | Microsoft Exchange Server Operating systems & software |
Microsoft Exchange Server Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2021-26857 Exploited |
Not yet scored | Microsoft Exchange Server Operating systems & software |
Microsoft Exchange Server Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2017-7269 Exploited |
Not yet scored | Microsoft Internet Information Services (IIS) Operating systems & software |
Microsoft Windows Server Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2021-38649 Exploited |
Not yet scored | Microsoft Open Management Infrastructure (OMI) Cloud & SaaS |
Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2020-0688 Exploited |
Not yet scored | Microsoft Exchange Server Operating systems & software |
Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2018-4878 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2017-0143 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2016-7255 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2019-0708 Exploited |
Not yet scored | Microsoft Remote Desktop Services Operating systems & software |
Microsoft Remote Desktop Services Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-34473 Exploited |
Not yet scored | Microsoft Exchange Server Operating systems & software |
Microsoft Exchange Server Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-1464 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Spoofing Vulnerability | 3 Nov 2021 |
| CVE-2021-1732 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2021-34527 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Print Spooler Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-1350 Exploited |
Not yet scored | Microsoft Windows Network & security devices |
Microsoft Windows DNS Server Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-31207 Exploited |
Not yet scored | Microsoft Exchange Server Operating systems & software |
Microsoft Exchange Server Security Feature Bypass Vulnerability | 3 Nov 2021 |
| CVE-2021-22502 Exploited |
Not yet scored | Micro Focus Operation Bridge Reporter (OBR) Operating systems & software |
Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-35395 Exploited |
Not yet scored | Realtek AP-Router SDK Network & security devices |
Realtek AP-Router SDK Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2016-3643 Exploited |
Not yet scored | SolarWinds Virtualization Manager Operating systems & software |
SolarWinds Virtualization Manager Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2020-8260 Exploited |
Not yet scored | Ivanti Pulse Connect Secure Network & security devices |
Ivanti Pulse Connect Secure Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-27104 Exploited |
Not yet scored | Accellion FTA Operating systems & software |
Accellion FTA OS Command Injection Vulnerability | 3 Nov 2021 |
| CVE-2021-27101 Exploited |
Not yet scored | Accellion FTA Applications & supply chain |
Accellion FTA SQL Injection Vulnerability | 3 Nov 2021 |
| CVE-2021-22899 Exploited |
Not yet scored | Ivanti Pulse Connect Secure Network & security devices |
Ivanti Pulse Connect Secure Command Injection Vulnerability | 3 Nov 2021 |
| CVE-2020-1020 Exploited |
Not yet scored | Microsoft Windows Cloud & SaaS |
Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-27102 Exploited |
Not yet scored | Accellion FTA Operating systems & software |
Accellion FTA OS Command Injection Vulnerability | 3 Nov 2021 |
| CVE-2020-17530 Exploited |
Not yet scored | Apache Struts Operating systems & software |
Apache Struts Remote Code Execution Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.