Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 832new in the last 7 days
- 6added as actively exploited
- 59critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2019-1132 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 15 Mar 2022 |
| CVE-2022-26486 Exploited |
Not yet scored | Mozilla Firefox Operating systems & software |
Mozilla Firefox Use-After-Free Vulnerability | 7 Mar 2022 |
| CVE-2013-0629 Exploited |
Not yet scored | Adobe ColdFusion Operating systems & software |
Adobe ColdFusion Directory Traversal Vulnerability | 7 Mar 2022 |
| CVE-2022-26485 Exploited |
Not yet scored | Mozilla Firefox Operating systems & software |
Mozilla Firefox Use-After-Free Vulnerability | 7 Mar 2022 |
| CVE-2020-8218 Exploited |
Not yet scored | Pulse Secure Pulse Connect Secure Operating systems & software |
Pulse Connect Secure Code Injection Vulnerability | 7 Mar 2022 |
| CVE-2019-11581 Exploited |
Not yet scored | Atlassian Jira Server and Data Center Operating systems & software |
Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability | 7 Mar 2022 |
| CVE-2013-0625 Exploited |
Not yet scored | Adobe ColdFusion Operating systems & software |
Adobe ColdFusion Authentication Bypass Vulnerability | 7 Mar 2022 |
| CVE-2009-3960 Exploited |
Not yet scored | Adobe BlazeDS Operating systems & software |
Adobe BlazeDS Information Disclosure Vulnerability | 7 Mar 2022 |
| CVE-2013-0631 Exploited |
Not yet scored | Adobe ColdFusion Operating systems & software |
Adobe ColdFusion Information Disclosure Vulnerability | 7 Mar 2022 |
| CVE-2021-41379 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Installer Privilege Escalation Vulnerability | 3 Mar 2022 |
| CVE-2015-2387 Exploited |
Not yet scored | Microsoft ATM Font Driver Operating systems & software |
Microsoft ATM Font Driver Privilege Escalation Vulnerability | 3 Mar 2022 |
| CVE-2015-2424 Exploited |
Not yet scored | Microsoft PowerPoint Operating systems & software |
Microsoft PowerPoint Memory Corruption Vulnerability | 3 Mar 2022 |
| CVE-2009-3129 Exploited |
Not yet scored | Microsoft Excel Operating systems & software |
Microsoft Excel Featheader Record Memory Corruption Vulnerability | 3 Mar 2022 |
| CVE-2010-3333 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Stack-based Buffer Overflow Vulnerability | 3 Mar 2022 |
| CVE-2011-0611 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Remote Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2002-0367 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Privilege Escalation Vulnerability | 3 Mar 2022 |
| CVE-2004-0210 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Privilege Escalation Vulnerability | 3 Mar 2022 |
| CVE-2008-2992 Exploited |
Not yet scored | Adobe Acrobat and Reader Operating systems & software |
Adobe Reader and Acrobat Input Validation Vulnerability | 3 Mar 2022 |
| CVE-2008-3431 Exploited |
Not yet scored | Oracle VirtualBox Operating systems & software |
Oracle VirtualBox Insufficient Input Validation Vulnerability | 3 Mar 2022 |
| CVE-2010-0188 Exploited |
Not yet scored | Adobe Reader and Acrobat Operating systems & software |
Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2009-1123 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Improper Input Validation Vulnerability | 3 Mar 2022 |
| CVE-2013-3897 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Use-After-Free Vulnerability | 3 Mar 2022 |
| CVE-2014-0496 Exploited |
Not yet scored | Adobe Reader and Acrobat Operating systems & software |
Adobe Reader and Acrobat Use-After-Free Vulnerability | 3 Mar 2022 |
| CVE-2014-4114 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2015-1642 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Memory Corruption Vulnerability | 3 Mar 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.