Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 460new in the last 7 days
- 8added as actively exploited
- 40critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2022-44877 Exploited |
Not yet scored | CWP Control Web Panel Operating systems & software |
CWP Control Web Panel OS Command Injection Vulnerability | 17 Jan 2023 |
| CVE-2023-21674 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability | 10 Jan 2023 |
| CVE-2022-41080 Exploited |
Not yet scored | Microsoft Exchange Server Operating systems & software |
Microsoft Exchange Server Privilege Escalation Vulnerability | 10 Jan 2023 |
| CVE-2022-42856 Exploited |
Not yet scored | Apple iOS Operating systems & software |
Apple iOS Type Confusion Vulnerability | 14 Dec 2022 |
| CVE-2022-44698 Exploited |
Not yet scored | Microsoft Defender Operating systems & software |
Microsoft Defender SmartScreen Security Feature Bypass Vulnerability | 13 Dec 2022 |
| CVE-2022-4262 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Type Confusion Vulnerability | 5 Dec 2022 |
| CVE-2021-35587 Exploited |
Not yet scored | Oracle Fusion Middleware Operating systems & software |
Oracle Fusion Middleware Unspecified Vulnerability | 28 Nov 2022 |
| CVE-2022-4135 Exploited |
Not yet scored | Google Chromium GPU Operating systems & software |
Google Chromium GPU Heap Buffer Overflow Vulnerability | 28 Nov 2022 |
| CVE-2022-41049 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | 14 Nov 2022 |
| CVE-2021-25369 Exploited |
Not yet scored | Samsung Mobile Devices Operating systems & software |
Samsung Mobile Devices Improper Access Control Vulnerability | 8 Nov 2022 |
| CVE-2021-25370 Exploited |
Not yet scored | Samsung Mobile Devices Operating systems & software |
Samsung Mobile Devices Memory Corruption Vulnerability | 8 Nov 2022 |
| CVE-2022-41091 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | 8 Nov 2022 |
| CVE-2022-41073 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Print Spooler Privilege Escalation Vulnerability | 8 Nov 2022 |
| CVE-2022-41125 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability | 8 Nov 2022 |
| CVE-2022-41128 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Scripting Languages Remote Code Execution Vulnerability | 8 Nov 2022 |
| CVE-2021-25337 Exploited |
Not yet scored | Samsung Mobile Devices Operating systems & software |
Samsung Mobile Devices Improper Access Control Vulnerability | 8 Nov 2022 |
| CVE-2022-3723 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Type Confusion Vulnerability | 28 Oct 2022 |
| CVE-2022-42827 Exploited |
Not yet scored | Apple iOS and iPadOS Operating systems & software |
Apple iOS and iPadOS Out-of-Bounds Write Vulnerability | 25 Oct 2022 |
| CVE-2018-19323 Exploited |
Not yet scored | GIGABYTE Multiple Products Operating systems & software |
GIGABYTE Multiple Products Privilege Escalation Vulnerability | 24 Oct 2022 |
| CVE-2018-19322 Exploited |
Not yet scored | GIGABYTE Multiple Products Operating systems & software |
GIGABYTE Multiple Products Code Execution Vulnerability | 24 Oct 2022 |
| CVE-2018-19321 Exploited |
Not yet scored | GIGABYTE Multiple Products Operating systems & software |
GIGABYTE Multiple Products Privilege Escalation Vulnerability | 24 Oct 2022 |
| CVE-2018-19320 Exploited |
Not yet scored | GIGABYTE Multiple Products Operating systems & software |
GIGABYTE Multiple Products Unspecified Vulnerability | 24 Oct 2022 |
| CVE-2021-3493 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Privilege Escalation Vulnerability | 20 Oct 2022 |
| CVE-2022-41033 Exploited |
Not yet scored | Microsoft Windows COM+ Event System Service Operating systems & software |
Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability | 11 Oct 2022 |
| CVE-2022-41040 Exploited |
Not yet scored | Microsoft Exchange Server Operating systems & software |
Microsoft Exchange Server Server-Side Request Forgery Vulnerability | 30 Sep 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.