Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 460new in the last 7 days
- 8added as actively exploited
- 40critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2016-9079 Exploited |
Not yet scored | Mozilla Firefox, Firefox ESR, and Thunderbird Operating systems & software |
Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability | 22 Jun 2023 |
| CVE-2020-12641 Exploited |
Not yet scored | Roundcube Roundcube Webmail Operating systems & software |
Roundcube Webmail Remote Code Execution Vulnerability | 22 Jun 2023 |
| CVE-2023-3079 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Type Confusion Vulnerability | 7 Jun 2023 |
| CVE-2023-28204 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability | 22 May 2023 |
| CVE-2023-32373 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products WebKit Use-After-Free Vulnerability | 22 May 2023 |
| CVE-2023-32409 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products WebKit Sandbox Escape Vulnerability | 22 May 2023 |
| CVE-2023-21492 Exploited |
Not yet scored | Samsung Mobile Devices Operating systems & software |
Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability | 19 May 2023 |
| CVE-2015-5317 Exploited |
Not yet scored | Jenkins Jenkins User Interface (UI) Operating systems & software |
Jenkins User Interface (UI) Information Disclosure Vulnerability | 12 May 2023 |
| CVE-2010-3904 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Improper Input Validation Vulnerability | 12 May 2023 |
| CVE-2014-0196 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Race Condition Vulnerability | 12 May 2023 |
| CVE-2021-3560 Exploited |
Not yet scored | Red Hat Polkit Operating systems & software |
Red Hat Polkit Incorrect Authorization Vulnerability | 12 May 2023 |
| CVE-2023-25717 Exploited |
Not yet scored | Ruckus Wireless Multiple Products Operating systems & software |
Multiple Ruckus Wireless Products CSRF and RCE Vulnerability | 12 May 2023 |
| CVE-2023-29336 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32K Privilege Escalation Vulnerability | 9 May 2023 |
| CVE-2023-21839 Exploited |
Not yet scored | Oracle WebLogic Server Operating systems & software |
Oracle WebLogic Server Unspecified Vulnerability | 1 May 2023 |
| CVE-2023-1389 Exploited |
Not yet scored | TP-Link Archer AX21 Operating systems & software |
TP-Link Archer AX-21 Command Injection Vulnerability | 1 May 2023 |
| CVE-2023-2136 Exploited |
Not yet scored | Google Chromium Skia Operating systems & software |
Google Chrome Skia Integer Overflow Vulnerability | 21 Apr 2023 |
| CVE-2023-28432 Exploited |
Not yet scored | MinIO MinIO Operating systems & software |
MinIO Information Disclosure Vulnerability | 21 Apr 2023 |
| CVE-2023-27350 Exploited |
Not yet scored | PaperCut MF/NG Operating systems & software |
PaperCut MF/NG Improper Access Control Vulnerability | 21 Apr 2023 |
| CVE-2023-2033 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Type Confusion Vulnerability | 17 Apr 2023 |
| CVE-2019-8526 Exploited |
Not yet scored | Apple macOS Operating systems & software |
Apple macOS Use-After-Free Vulnerability | 17 Apr 2023 |
| CVE-2023-20963 Exploited |
Not yet scored | Android Framework Operating systems & software |
Android Framework Privilege Escalation Vulnerability | 13 Apr 2023 |
| CVE-2023-29492 Exploited |
Not yet scored | Novi Survey Novi Survey Operating systems & software |
Novi Survey Insecure Deserialization Vulnerability | 13 Apr 2023 |
| CVE-2023-28252 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | 11 Apr 2023 |
| CVE-2023-28205 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products WebKit Use-After-Free Vulnerability | 10 Apr 2023 |
| CVE-2023-28206 Exploited |
Not yet scored | Apple iOS, iPadOS, and macOS Operating systems & software |
Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability | 10 Apr 2023 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.