Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 832new in the last 7 days
- 6added as actively exploited
- 59critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2022-27518 Exploited |
Not yet scored | Citrix Application Delivery Controller (ADC) and Gateway Identity & access |
Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability | 13 Dec 2022 |
| CVE-2022-26500 Exploited |
Not yet scored | Veeam Backup & Replication Applications & supply chain |
Veeam Backup & Replication Remote Code Execution Vulnerability | 13 Dec 2022 |
| CVE-2022-44698 Exploited |
Not yet scored | Microsoft Defender Operating systems & software |
Microsoft Defender SmartScreen Security Feature Bypass Vulnerability | 13 Dec 2022 |
| CVE-2022-26501 Exploited |
Not yet scored | Veeam Backup & Replication Applications & supply chain |
Veeam Backup & Replication Remote Code Execution Vulnerability | 13 Dec 2022 |
| CVE-2022-42475 Exploited |
Not yet scored | Fortinet FortiOS Network & security devices |
Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability | 13 Dec 2022 |
| CVE-2022-4262 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Type Confusion Vulnerability | 5 Dec 2022 |
| CVE-2021-35587 Exploited |
Not yet scored | Oracle Fusion Middleware Operating systems & software |
Oracle Fusion Middleware Unspecified Vulnerability | 28 Nov 2022 |
| CVE-2022-4135 Exploited |
Not yet scored | Google Chromium GPU Operating systems & software |
Google Chromium GPU Heap Buffer Overflow Vulnerability | 28 Nov 2022 |
| CVE-2022-41049 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | 14 Nov 2022 |
| CVE-2021-25370 Exploited |
Not yet scored | Samsung Mobile Devices Operating systems & software |
Samsung Mobile Devices Memory Corruption Vulnerability | 8 Nov 2022 |
| CVE-2022-41091 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | 8 Nov 2022 |
| CVE-2022-41073 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Print Spooler Privilege Escalation Vulnerability | 8 Nov 2022 |
| CVE-2022-41125 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability | 8 Nov 2022 |
| CVE-2022-41128 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Scripting Languages Remote Code Execution Vulnerability | 8 Nov 2022 |
| CVE-2021-25337 Exploited |
Not yet scored | Samsung Mobile Devices Operating systems & software |
Samsung Mobile Devices Improper Access Control Vulnerability | 8 Nov 2022 |
| CVE-2021-25369 Exploited |
Not yet scored | Samsung Mobile Devices Operating systems & software |
Samsung Mobile Devices Improper Access Control Vulnerability | 8 Nov 2022 |
| CVE-2022-3723 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Type Confusion Vulnerability | 28 Oct 2022 |
| CVE-2022-42827 Exploited |
Not yet scored | Apple iOS and iPadOS Operating systems & software |
Apple iOS and iPadOS Out-of-Bounds Write Vulnerability | 25 Oct 2022 |
| CVE-2020-3433 Exploited |
Not yet scored | Cisco AnyConnect Secure Network & security devices |
Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability | 24 Oct 2022 |
| CVE-2018-19322 Exploited |
Not yet scored | GIGABYTE Multiple Products Operating systems & software |
GIGABYTE Multiple Products Code Execution Vulnerability | 24 Oct 2022 |
| CVE-2018-19320 Exploited |
Not yet scored | GIGABYTE Multiple Products Operating systems & software |
GIGABYTE Multiple Products Unspecified Vulnerability | 24 Oct 2022 |
| CVE-2020-3153 Exploited |
Not yet scored | Cisco AnyConnect Secure Network & security devices |
Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability | 24 Oct 2022 |
| CVE-2018-19323 Exploited |
Not yet scored | GIGABYTE Multiple Products Operating systems & software |
GIGABYTE Multiple Products Privilege Escalation Vulnerability | 24 Oct 2022 |
| CVE-2018-19321 Exploited |
Not yet scored | GIGABYTE Multiple Products Operating systems & software |
GIGABYTE Multiple Products Privilege Escalation Vulnerability | 24 Oct 2022 |
| CVE-2021-3493 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Privilege Escalation Vulnerability | 20 Oct 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.