Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 886new in the last 7 days
- 6added as actively exploited
- 63critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2015-2502 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Memory Corruption Vulnerability | 13 Apr 2022 |
| CVE-2015-0311 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Remote Code Execution Vulnerability | 13 Apr 2022 |
| CVE-2015-0313 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Use-After-Free Vulnerability | 13 Apr 2022 |
| CVE-2021-42278 Exploited |
Not yet scored | Microsoft Active Directory Identity & access |
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability | 11 Apr 2022 |
| CVE-2021-42287 Exploited |
Not yet scored | Microsoft Active Directory Identity & access |
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability | 11 Apr 2022 |
| CVE-2021-39793 Exploited |
Not yet scored | Google Pixel Operating systems & software |
Google Pixel Out-of-Bounds Write Vulnerability | 11 Apr 2022 |
| CVE-2021-22600 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Privilege Escalation Vulnerability | 11 Apr 2022 |
| CVE-2020-2509 Exploited |
Not yet scored | QNAP QNAP Network-Attached Storage (NAS) Operating systems & software |
QNAP Network-Attached Storage (NAS) Command Injection Vulnerability | 11 Apr 2022 |
| CVE-2017-11317 Exploited |
Not yet scored | Telerik User Interface (UI) for ASP.NET AJAX Operating systems & software |
Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability | 11 Apr 2022 |
| CVE-2022-23176 Exploited |
Not yet scored | WatchGuard Firebox and XTM Operating systems & software |
WatchGuard Firebox and XTM Privilege Escalation Vulnerability | 11 Apr 2022 |
| CVE-2021-27852 Exploited |
Not yet scored | Checkbox Checkbox Survey Operating systems & software |
Checkbox Survey Deserialization of Untrusted Data Vulnerability | 11 Apr 2022 |
| CVE-2017-0148 Exploited |
Not yet scored | Microsoft SMBv1 server Operating systems & software |
Microsoft SMBv1 Server Remote Code Execution Vulnerability | 6 Apr 2022 |
| CVE-2021-31166 Exploited |
Not yet scored | Microsoft HTTP Protocol Stack Operating systems & software |
Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability | 6 Apr 2022 |
| CVE-2021-3156 Exploited |
Not yet scored | Sudo Sudo Operating systems & software |
Sudo Heap-Based Buffer Overflow Vulnerability | 6 Apr 2022 |
| CVE-2021-45382 Exploited |
Not yet scored | D-Link Multiple Routers Network & security devices |
D-Link Multiple Routers Remote Code Execution Vulnerability | 4 Apr 2022 |
| CVE-2022-22675 Exploited |
Not yet scored | Apple macOS Operating systems & software |
Apple macOS Out-of-Bounds Write Vulnerability | 4 Apr 2022 |
| CVE-2022-22965 Exploited |
Not yet scored | VMware Spring Framework Operating systems & software |
Spring Framework JDK 9+ Remote Code Execution Vulnerability | 4 Apr 2022 |
| CVE-2022-22674 Exploited |
Not yet scored | Apple macOS Operating systems & software |
Apple macOS Out-of-Bounds Read Vulnerability | 4 Apr 2022 |
| CVE-2018-10561 Exploited |
Not yet scored | Dasan Gigabit Passive Optical Network (GPON) Routers Network & security devices |
Dasan GPON Routers Authentication Bypass Vulnerability | 31 Mar 2022 |
| CVE-2022-1040 Exploited |
Not yet scored | Sophos Firewall Network & security devices |
Sophos Firewall Authentication Bypass Vulnerability | 31 Mar 2022 |
| CVE-2021-28799 Exploited |
Not yet scored | QNAP Network Attached Storage (NAS) Operating systems & software |
QNAP NAS Improper Authorization Vulnerability | 31 Mar 2022 |
| CVE-2021-21551 Exploited |
Not yet scored | Dell dbutil Driver Operating systems & software |
Dell dbutil Driver Insufficient Access Control Vulnerability | 31 Mar 2022 |
| CVE-2022-26871 Exploited |
Not yet scored | Trend Micro Apex Central Identity & access |
Trend Micro Apex Central Arbitrary File Upload Vulnerability | 31 Mar 2022 |
| CVE-2018-10562 Exploited |
Not yet scored | Dasan Gigabit Passive Optical Network (GPON) Routers Network & security devices |
Dasan GPON Routers Command Injection Vulnerability | 31 Mar 2022 |
| CVE-2021-34484 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows User Profile Service Privilege Escalation Vulnerability | 31 Mar 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.