Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 330new in the last 7 days
- 8added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-21514 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability | 10 Feb 2026 |
| CVE-2026-21513 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability | 10 Feb 2026 |
| CVE-2026-21525 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows NULL Pointer Dereference Vulnerability | 10 Feb 2026 |
| CVE-2026-21510 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Shell Protection Mechanism Failure Vulnerability | 10 Feb 2026 |
| CVE-2026-21533 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Improper Privilege Management Vulnerability | 10 Feb 2026 |
| CVE-2026-21519 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Type Confusion Vulnerability | 10 Feb 2026 |
| CVE-2025-11953 Exploited |
Not yet scored | React Native Community CLI Operating systems & software |
React Native Community CLI OS Command Injection Vulnerability | 5 Feb 2026 |
| CVE-2025-64328 Exploited |
Not yet scored | Sangoma FreePBX Operating systems & software |
Sangoma FreePBX OS Command Injection Vulnerability | 3 Feb 2026 |
| CVE-2019-19006 Exploited |
Not yet scored | Sangoma FreePBX Operating systems & software |
Sangoma FreePBX Improper Authentication Vulnerability | 3 Feb 2026 |
| CVE-2025-40551 Exploited |
Not yet scored | SolarWinds Web Help Desk Operating systems & software |
SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability | 3 Feb 2026 |
| CVE-2018-14634 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Integer Overflow Vulnerability | 26 Jan 2026 |
| CVE-2025-52691 Exploited |
Not yet scored | SmarterTools SmarterMail Operating systems & software |
SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability | 26 Jan 2026 |
| CVE-2026-24061 Exploited |
Not yet scored | GNU InetUtils Operating systems & software |
GNU InetUtils Argument Injection Vulnerability | 26 Jan 2026 |
| CVE-2026-21509 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Security Feature Bypass Vulnerability | 26 Jan 2026 |
| CVE-2024-37079 Exploited |
Not yet scored | Broadcom VMware vCenter Server Operating systems & software |
Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability | 23 Jan 2026 |
| CVE-2025-31125 Exploited |
Not yet scored | Vite Vitejs Operating systems & software |
Vite Vitejs Improper Access Control Vulnerability | 22 Jan 2026 |
| CVE-2025-34026 Exploited |
Not yet scored | Versa Concerto Operating systems & software |
Versa Concerto Improper Authentication Vulnerability | 22 Jan 2026 |
| CVE-2026-20805 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Information Disclosure Vulnerability | 13 Jan 2026 |
| CVE-2009-0556 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office PowerPoint Code Injection Vulnerability | 7 Jan 2026 |
| CVE-2025-37164 Exploited |
Not yet scored | Hewlett Packard Enterprise (HPE) OneView Operating systems & software |
Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability | 7 Jan 2026 |
| CVE-2025-14847 Exploited |
Not yet scored | MongoDB MongoDB and MongoDB Server Operating systems & software |
MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability | 29 Dec 2025 |
| CVE-2023-52163 Exploited |
Not yet scored | Digiever DS-2105 Pro Operating systems & software |
Digiever DS-2105 Pro Missing Authorization Vulnerability | 22 Dec 2025 |
| CVE-2025-14611 Exploited |
Not yet scored | Gladinet CentreStack and Triofox Operating systems & software |
Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability | 15 Dec 2025 |
| CVE-2025-43529 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Use-After-Free WebKit Vulnerability | 15 Dec 2025 |
| CVE-2018-4063 Exploited |
Not yet scored | Sierra Wireless AirLink ALEOS Operating systems & software |
Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability | 12 Dec 2025 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.