Known exploited vulnerabilities
Under attack, per CISA.
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +34 more +36 more Windows Common Log File System Driver Elevation of Privilege Vulnerability 7.8 High
- apple macos, mac os x +1 more A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur... 5.5 Medium
- apple macos, mac os x +1 more A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur... 7.8 High
- zoho manageengine, zohocorp manageengine adselfservice plus +1 more Zoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API... 9.8 Critical
- adobe acrobat, acrobat reader, acrobat reader dc +2 more +4 more Adobe Acrobat Reader use after free vulnerability could lead to arbitrary code execution 9.6 Critical
- atlassian confluence server, confluence server and data center, confluence data center +2 more In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists... 9.8 Critical
- apple ios, ipados, and macos, ipados, macos +3 more +5 more Apple iOS, iPadOS, and macOS Type Confusion Vulnerability 7.8 High
- apple ios, ipados, macos +6 more +8 more An integer overflow was addressed with improved input validation 7.8 High
- apple ios, ipados, macos +4 more +6 more webkit2gtk - security update 8.8 High
- realtek ap-router sdk, rtl819x jungle software development kit +1 more Realtek Jungle SDK version v2.x up to v3.4.14B provides an HTTP web server exposing a management... 9.8 Critical
- microsoft windows, windows 10 version 1809, windows 10 version 1909 +14 more +16 more Windows Update Medic Service Elevation of Privilege Vulnerability 7.8 High
- microsoft windows, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +15 more +17 more Windows LSA Spoofing Vulnerability 7.5 High
- trend micro apex one, officescan, worry-free business security +3 more +5 more A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service,... 7.8 High
- trend micro apex one, officescan, worry-free business security +3 more +5 more An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service,... 8.8 High
- apple ipados, macos, tvos +3 more +5 more A memory corruption issue was addressed with improved state management. This issue is fixed in... 8.8 High
- apple ipados, macos, safari +3 more +5 more An integer overflow was addressed with improved input validation. This issue is fixed in iOS 14.5... 8.8 High
- forgerock openam, access management (am), access management +2 more ForgeRock AM server 6.x before 7, and OpenAM 14.6.3, has a Java deserialization vulnerability in... 9.8 Critical
- google chrome, chromium v8 +1 more Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to... 8.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +22 more +24 more Scripting Engine Memory Corruption Vulnerability 6.8 Medium
- solarwinds serv-u, serv-u managed file transfer server and serv-u secured ftp +1 more Serv-U Remote Memory Escape Vulnerability 9.0 Critical
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 19 +3 more +5 more Microsoft Exchange Server Elevation of Privilege Vulnerability 9.0 Critical
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 19 +3 more +5 more Microsoft Exchange Server Remote Code Execution Vulnerability 9.1 Critical
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +25 more +27 more Windows Kernel Elevation of Privilege Vulnerability 7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +33 more +35 more Windows Kernel Elevation of Privilege Vulnerability 7.8 High
- kaseya virtual system/server administrator (vsa), vsa agent, vsa server +2 more Unauthenticated credential leak and business logic flaw in Kaseya VSA <= v9.5.6 10.0 Critical
- microsoft windows, windows server 2012, windows server 2016 +32 more +34 more Windows Print Spooler Remote Code Execution Vulnerability 8.8 High
- google chrome, fedoraproject fedora, google chromium webgl +2 more Use after free in WebGL in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to... 8.8 High
- google chrome, fedoraproject fedora, google chromium v8 +2 more Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to... 8.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +24 more +26 more Windows MSHTML Platform Remote Code Execution Vulnerability 7.5 High
- microsoft windows, windows 10 version 1909, windows 10 version 2004 +10 more +12 more Microsoft DWM Core Library Elevation of Privilege Vulnerability 8.4 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +34 more +36 more Windows NTFS Elevation of Privilege Vulnerability 7.8 High
- microsoft windows, windows 10 version 1809, windows 10 version 1909 +14 more +16 more Windows Kernel Information Disclosure Vulnerability 5.5 Medium
- microsoft enhanced cryptographic provider, windows 10 version 1507, windows 10 version 1607 +34 more +36 more Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability 5.2 Medium
- microsoft enhanced cryptographic provider, windows 10 version 1507, windows 10 version 1607 +34 more +36 more Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability 5.2 Medium
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +33 more +35 more Windows Print Spooler Remote Code Execution Vulnerability 7.8 High
- ivanti connect secure, pulse connect secure +1 more A vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4... 7.2 High
- ivanti connect secure, pulse connect secure +1 more A command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote... 8.8 High
- ivanti connect secure, pulse connect secure +1 more A buffer overflow vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote... 8.8 High
- vmware vcenter server, cloud foundation +1 more The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input... 9.8 Critical
- arm trusted firmware, trustedfirmware trusted firmware-m +1 more In Arm Trusted Firmware M through 1.2, the NS world may trigger a system halt, an overwrite of... 5.5 Medium
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 19 +3 more +5 more Microsoft Exchange Server Security Feature Bypass Vulnerability 6.6 Medium
- tenda ac11 router, ac11 firmware +1 more An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack... 9.8 Critical
- cisco hyperflex hx, hyperflex hx data platform +1 more Cisco HyperFlex HX Command Injection Vulnerabilities 9.8 Critical
- cisco hyperflex hx, hyperflex hx data platform +1 more Cisco HyperFlex HX Command Injection Vulnerabilities 9.8 Critical
- arm bifrost gpu kernel driver, mali graphics processing unit (gpu), midgard gpu kernel driver +1 more +3 more The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory... 8.8 High
- arm bifrost gpu kernel driver, mali graphics processing unit (gpu), midgard gpu kernel driver +1 more +3 more The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU... 8.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 more Improper handling of address deregistration on failure can lead to new GPU address allocation... 6.2 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +395 more +397 more Possible use after free due to improper handling of memory mapping of multiple processes... 8.4 High
- arcadyan buffalo firmware, buffalo wsr-2533dhp3-bk firmware, wsr-2533dhpl2-bk firmware +2 more A path traversal vulnerability in the web interfaces of Buffalo WSR-2533DHPL2 firmware version <=... 9.8 Critical
- google chrome, debian linux, fedoraproject fedora +1 more +3 more Type confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute... 8.8 High
- Show olderLoading…