Known exploited vulnerabilities
Reported exploited by CISA or ENISA EUVD.
- google android, chrome, debian linux +2 more +4 more Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0... 6.1 Medium
- bqe billquick web suite BQE BillQuick Web Suite 2018 through 2021 before 22.0.9.1 allows SQL injection for... 9.8 Critical
- apple ipados, macos, watchos +2 more +4 more A memory corruption issue was addressed with improved memory handling. This issue is fixed in... 7.8 High
- yealink device management Yealink Device Management (DM) 3.6.0.20 allows command injection as root via the /sm/api/v1... 9.8 Critical
- google chrome, debian linux, fedoraproject fedora +1 more +3 more Inappropriate implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote... 6.5 Medium
- google chrome, debian linux, fedoraproject fedora +1 more +3 more Use after free in Portals in Google Chrome prior to 94.0.4606.61 allowed a remote attacker who... 9.6 Critical
- google chrome, debian linux, fedoraproject fedora +1 more +3 more Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to... 8.8 High
- apache http server, fedoraproject fedora, netapp cloud backup +3 more +5 more Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773) 9.8 Critical
- apache http server, fedoraproject fedora, netapp cloud backup +1 more +3 more Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 9.8 Critical
- vmware vcenter server, cloud foundation +1 more The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A... 9.8 Critical
- google chrome, fedoraproject fedora, google chromium indexed db api +2 more Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker... 9.6 Critical
- google chrome, fedoraproject fedora, google chromium v8 +2 more Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to... 8.8 High
- microsoft mshtml, windows 10 version 1507, windows 10 version 1607 +34 more +36 more Microsoft MSHTML Remote Code Execution Vulnerability 8.8 High
- microsoft open management infrastructure, azure automation state configuration, dsc extension, azure automation update management +12 more +14 more Open Management Infrastructure Elevation of Privilege Vulnerability 7.0 High
- microsoft open management infrastructure, azure automation state configuration, dsc extension, azure automation update management +12 more +14 more Open Management Infrastructure Elevation of Privilege Vulnerability 7.8 High
- microsoft open management infrastructure, open management infrastructure (omi), azure automation state configuration, dsc extension +11 more +13 more Open Management Infrastructure (OMI) Remote Code Execution Vulnerability 9.8 Critical
- microsoft open management infrastructure, azure automation state configuration, dsc extension, azure automation update management +11 more +13 more Open Management Infrastructure Elevation of Privilege Vulnerability 7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +34 more +36 more Windows Common Log File System Driver Elevation of Privilege Vulnerability 7.8 High
- apple macos, mac os x +1 more A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur... 5.5 Medium
- apple macos, mac os x +1 more A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur... 7.8 High
- zoho manageengine, zohocorp manageengine adselfservice plus +1 more Zoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API... 9.8 Critical
- adobe acrobat, acrobat reader, acrobat reader dc +2 more +4 more Adobe Acrobat Reader use after free vulnerability could lead to arbitrary code execution 9.6 Critical
- atlassian confluence server, confluence server and data center, confluence data center +2 more In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists... 9.8 Critical
- apple ios, ipados, and macos, ipados, macos +3 more +5 more Apple iOS, iPadOS, and macOS Type Confusion Vulnerability 7.8 High
- apple ios, ipados, macos +6 more +8 more An integer overflow was addressed with improved input validation 7.8 High
- apple ios, ipados, macos +4 more +6 more webkit2gtk - security update 8.8 High
- realtek ap-router sdk, rtl819x jungle software development kit +1 more Realtek Jungle SDK version v2.x up to v3.4.14B provides an HTTP web server exposing a management... 9.8 Critical
- microsoft windows, windows 10 version 1809, windows 10 version 1909 +14 more +16 more Windows Update Medic Service Elevation of Privilege Vulnerability 7.8 High
- microsoft windows, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +15 more +17 more Windows LSA Spoofing Vulnerability 7.5 High
- trend micro apex one, officescan, worry-free business security +3 more +5 more A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service,... 7.8 High
- trend micro apex one, officescan, worry-free business security +3 more +5 more An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service,... 8.8 High
- apple ipados, macos, tvos +3 more +5 more A memory corruption issue was addressed with improved state management. This issue is fixed in... 8.8 High
- apple ipados, macos, safari +3 more +5 more An integer overflow was addressed with improved input validation. This issue is fixed in iOS 14.5... 8.8 High
- forgerock openam, access management (am), access management +2 more ForgeRock AM server 6.x before 7, and OpenAM 14.6.3, has a Java deserialization vulnerability in... 9.8 Critical
- google chrome, chromium v8 +1 more Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to... 8.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +22 more +24 more Scripting Engine Memory Corruption Vulnerability 6.8 Medium
- solarwinds serv-u, serv-u managed file transfer server and serv-u secured ftp +1 more Serv-U Remote Memory Escape Vulnerability 9.0 Critical
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 19 +3 more +5 more Microsoft Exchange Server Elevation of Privilege Vulnerability 9.0 Critical
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 19 +3 more +5 more Microsoft Exchange Server Remote Code Execution Vulnerability 9.1 Critical
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +25 more +27 more Windows Kernel Elevation of Privilege Vulnerability 7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +33 more +35 more Windows Kernel Elevation of Privilege Vulnerability 7.8 High
- kaseya virtual system/server administrator (vsa), vsa agent, vsa server +2 more Unauthenticated credential leak and business logic flaw in Kaseya VSA <= v9.5.6 10.0 Critical
- microsoft windows, windows server 2012, windows server 2016 +32 more +34 more Windows Print Spooler Remote Code Execution Vulnerability 8.8 High
- google chrome, fedoraproject fedora, google chromium webgl +2 more Use after free in WebGL in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to... 8.8 High
- google chrome, fedoraproject fedora, google chromium v8 +2 more Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to... 8.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +24 more +26 more Windows MSHTML Platform Remote Code Execution Vulnerability 7.5 High
- microsoft windows, windows 10 version 1909, windows 10 version 2004 +10 more +12 more Microsoft DWM Core Library Elevation of Privilege Vulnerability 8.4 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +34 more +36 more Windows NTFS Elevation of Privilege Vulnerability 7.8 High
- microsoft windows, windows 10 version 1809, windows 10 version 1909 +14 more +16 more Windows Kernel Information Disclosure Vulnerability 5.5 Medium
- microsoft enhanced cryptographic provider, windows 10 version 1507, windows 10 version 1607 +34 more +36 more Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability 5.2 Medium
- Show olderLoading…