Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 832new in the last 7 days
- 6added as actively exploited
- 59critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2022-26138 Exploited |
Not yet scored | Atlassian Confluence Operating systems & software |
Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability | 29 Jul 2022 |
| CVE-2022-22047 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability | 12 Jul 2022 |
| CVE-2022-26925 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows LSA Spoofing Vulnerability | 1 Jul 2022 |
| CVE-2021-30533 Exploited |
Not yet scored | Google Chromium PopupBlocker Operating systems & software |
Google Chromium PopupBlocker Security Bypass Vulnerability | 27 Jun 2022 |
| CVE-2019-8605 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Use-After-Free Vulnerability | 27 Jun 2022 |
| CVE-2020-9907 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Memory Corruption Vulnerability | 27 Jun 2022 |
| CVE-2020-3837 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Memory Corruption Vulnerability | 27 Jun 2022 |
| CVE-2021-30983 Exploited |
Not yet scored | Apple iOS and iPadOS Operating systems & software |
Apple iOS and iPadOS Buffer Overflow Vulnerability | 27 Jun 2022 |
| CVE-2021-4034 Exploited |
Not yet scored | Red Hat Polkit Operating systems & software |
Red Hat Polkit Out-of-Bounds Read and Write Vulnerability | 27 Jun 2022 |
| CVE-2018-4344 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Memory Corruption Vulnerability | 27 Jun 2022 |
| CVE-2022-29499 Exploited |
Not yet scored | Mitel MiVoice Connect Operating systems & software |
Mitel MiVoice Connect Data Validation Vulnerability | 27 Jun 2022 |
| CVE-2022-30190 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability | 14 Jun 2022 |
| CVE-2021-38163 Exploited |
Not yet scored | SAP NetWeaver Operating systems & software |
SAP NetWeaver Unrestricted File Upload Vulnerability | 9 Jun 2022 |
| CVE-2016-2386 Exploited |
Not yet scored | SAP NetWeaver Applications & supply chain |
SAP NetWeaver SQL Injection Vulnerability | 9 Jun 2022 |
| CVE-2016-2388 Exploited |
Not yet scored | SAP NetWeaver Applications & supply chain |
SAP NetWeaver Information Disclosure Vulnerability | 9 Jun 2022 |
| CVE-2012-1889 Exploited |
Not yet scored | Microsoft XML Core Services Operating systems & software |
Microsoft XML Core Services Memory Corruption Vulnerability | 8 Jun 2022 |
| CVE-2012-4969 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Use-After-Free Vulnerability | 8 Jun 2022 |
| CVE-2012-5054 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Integer Overflow Vulnerability | 8 Jun 2022 |
| CVE-2017-6862 Exploited |
Not yet scored | NETGEAR Multiple Devices Operating systems & software |
NETGEAR Multiple Devices Buffer Overflow Vulnerability | 8 Jun 2022 |
| CVE-2017-5070 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Type Confusion Vulnerability | 8 Jun 2022 |
| CVE-2018-17463 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Remote Code Execution Vulnerability | 8 Jun 2022 |
| CVE-2012-0151 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability | 8 Jun 2022 |
| CVE-2017-5030 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Memory Corruption Vulnerability | 8 Jun 2022 |
| CVE-2019-7194 Exploited |
Not yet scored | QNAP Photo Station Operating systems & software |
QNAP Photo Station Path Traversal Vulnerability | 8 Jun 2022 |
| CVE-2012-0754 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Memory Corruption Vulnerability | 8 Jun 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.