Known exploited vulnerabilities
Reported exploited by CISA or ENISA EUVD.
- microsoft enhanced cryptographic provider, windows 10 version 1507, windows 10 version 1607 +34 more +36 more Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability 5.2 Medium
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +33 more +35 more Windows Print Spooler Remote Code Execution Vulnerability 7.8 High
- ivanti connect secure, pulse connect secure +1 more A vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4... 7.2 High
- ivanti connect secure, pulse connect secure +1 more A command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote... 8.8 High
- ivanti connect secure, pulse connect secure +1 more A buffer overflow vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote... 8.8 High
- vmware vcenter server, cloud foundation +1 more The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input... 9.8 Critical
- arm trusted firmware, trustedfirmware trusted firmware-m +1 more In Arm Trusted Firmware M through 1.2, the NS world may trigger a system halt, an overwrite of... 5.5 Medium
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 19 +3 more +5 more Microsoft Exchange Server Security Feature Bypass Vulnerability 6.6 Medium
- tenda ac11 router, ac11 firmware +1 more An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack... 9.8 Critical
- cisco hyperflex hx, hyperflex hx data platform +1 more Cisco HyperFlex HX Command Injection Vulnerabilities 9.8 Critical
- cisco hyperflex hx, hyperflex hx data platform +1 more Cisco HyperFlex HX Command Injection Vulnerabilities 9.8 Critical
- arm bifrost gpu kernel driver, mali graphics processing unit (gpu), midgard gpu kernel driver +1 more +3 more The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory... 8.8 High
- arm bifrost gpu kernel driver, mali graphics processing unit (gpu), midgard gpu kernel driver +1 more +3 more The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU... 8.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 more Improper handling of address deregistration on failure can lead to new GPU address allocation... 6.2 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +395 more +397 more Possible use after free due to improper handling of memory mapping of multiple processes... 8.4 High
- arcadyan buffalo firmware, buffalo wsr-2533dhp3-bk firmware, wsr-2533dhpl2-bk firmware +2 more A path traversal vulnerability in the web interfaces of Buffalo WSR-2533DHPL2 firmware version <=... 9.8 Critical
- google chrome, debian linux, fedoraproject fedora +1 more +3 more Type confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute... 8.8 High
- gitlab, gitlab community and enterprise editions +1 more An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab... 10.0 Critical
- ivanti connect secure, pulse connect secure +1 more Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass... 10.0 Critical
- sonicwall email security, email security appliance 3300 firmware, email security appliance 4300 firmware +8 more +10 more SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post... 4.9 Medium
- google chrome, fedoraproject fedora, google chromium v8 +2 more Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed... 8.8 High
- google chrome, fedoraproject fedora, google chromium blink +2 more Use after free in Blink in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to... 8.8 High
- microsoft win32k, windows 10 version 1803, windows 10 version 1809 +16 more +18 more Win32k Elevation of Privilege Vulnerability 7.8 High
- sonicwall email security, email security appliance 3300 firmware, email security appliance 4300 firmware +8 more +10 more SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post... 7.2 High
- sonicwall email security, email security appliance 3300 firmware, email security appliance 4300 firmware +8 more +10 more A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an... 9.8 Critical
- apple ios, ipados, watchos +3 more +5 more This issue was addressed by improved management of object lifetimes. This issue is fixed in iOS... 6.1 Medium
- apple ipados, macos, ios and ipados +5 more +7 more A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2... 9.8 Critical
- apple ipados, macos, tvos +5 more +7 more A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2,... 7.0 High
- f5 big-ip and big-iq centralized management, big-ip access policy manager, big-ip advanced firewall manager +13 more +15 more On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x... 9.8 Critical
- micro focus access manager Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager... 7.5 High
- apple ipados, macos, ios and ipados +5 more +7 more A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2... 9.8 Critical
- google chrome, debian linux, fedoraproject fedora +1 more +3 more Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to... 8.8 High
- microsoft office, office 2010 service pack 2, office 2013 service pack 1 +1 more +3 more Microsoft Office Remote Code Execution Vulnerability 7.6 High
- microsoft internet explorer, internet explorer 11 +1 more Internet Explorer Remote Code Execution Vulnerability 8.8 High
- microsoft internet explorer, edge, internet explorer 11 +2 more +4 more Internet Explorer Memory Corruption Vulnerability 8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 more Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to... 8.8 High
- microsoft exchange server, exchange server 2013 cumulative update 21, exchange server 2013 cumulative update 22 +23 more +25 more Microsoft Exchange Server Remote Code Execution Vulnerability 7.8 High
- microsoft exchange server, exchange server 2013 cumulative update 21, exchange server 2013 cumulative update 22 +22 more +24 more Microsoft Exchange Server Remote Code Execution Vulnerability 7.8 High
- microsoft exchange server, exchange server 2010 service pack 3, exchange server 2013 cumulative update 21 +24 more +26 more Microsoft Exchange Server Remote Code Execution Vulnerability 7.8 High
- microsoft exchange server, exchange server 2013 cumulative update 21, exchange server 2013 cumulative update 22 +22 more +24 more Microsoft Exchange Server Remote Code Execution Vulnerability 9.1 Critical
- microsoft win32k, windows 10 version 1803, windows 10 version 1809 +16 more +18 more Windows Win32k Elevation of Privilege Vulnerability 7.8 High
- vmware cloud foundation, vcenter server +1 more The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server... 9.8 Critical
- accellion fta Accellion FTA 9_12_370 and earlier is affected by OS command execution via a crafted POST request... 9.8 Critical
- accellion fta Accellion FTA 9_12_411 and earlier is affected by SSRF via a crafted POST request to... 9.8 Critical
- accellion fta Accellion FTA 9_12_411 and earlier is affected by OS command execution via a local web service... 7.8 High
- accellion fta Accellion FTA 9_12_370 and earlier is affected by SQL injection via a crafted Host header in a... 9.8 Critical
- adobe acrobat, acrobat reader, acrobat reader dc +2 more +4 more Acrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution 8.8 High
- mcafee total protection (mtp), total protection, mcafee,llc mcafee total protection (mtp) +2 more McAfee Total Protection (MTP) privilege escalation vulnerability 8.2 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 more Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to... 8.8 High
- micro focus operation bridge reporter (obr), microfocus operation bridge reporter +1 more Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product,... 9.8 Critical
- Show olderLoading…