Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 832new in the last 7 days
- 6added as actively exploited
- 59critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2020-0986 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Kernel Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2019-0803 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2020-1040 Exploited |
Not yet scored | Microsoft Hyper-V RemoteFX Operating systems & software |
Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2017-11882 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2020-1472 Exploited |
Not yet scored | Microsoft Netlogon Operating systems & software |
Microsoft Netlogon Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2020-0041 Exploited |
Not yet scored | Android Android Kernel Operating systems & software |
Android Kernel Out-of-Bounds Write Vulnerability | 3 Nov 2021 |
| CVE-2021-30762 Exploited |
Not yet scored | Apple iOS Operating systems & software |
Apple iOS WebKit Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2021-30665 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products WebKit Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2018-20062 Exploited |
Not yet scored | ThinkPHP noneCms Operating systems & software |
ThinkPHP "noneCms" Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-24557 Exploited |
Not yet scored | Trend Micro Apex One, OfficeScan, and Worry-Free Business Security Operating systems & software |
Trend Micro Multiple Products Improper Access Control Vulnerability | 3 Nov 2021 |
| CVE-2020-3950 Exploited |
Not yet scored | VMware Multiple Products Operating systems & software |
VMware Multiple Products Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2020-14882 Exploited |
Not yet scored | Oracle WebLogic Server Operating systems & software |
Oracle WebLogic Server Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-14883 Exploited |
Not yet scored | Oracle WebLogic Server Operating systems & software |
Oracle WebLogic Server Unspecified Vulnerability | 3 Nov 2021 |
| CVE-2020-8644 Exploited |
Not yet scored | PlaySMS PlaySMS Operating systems & software |
PlaySMS Server-Side Template Injection Vulnerability | 3 Nov 2021 |
| CVE-2020-0601 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows CryptoAPI Spoofing Vulnerability | 3 Nov 2021 |
| CVE-2019-18935 Exploited |
Not yet scored | Progress Telerik UI for ASP.NET AJAX Operating systems & software |
Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability | 3 Nov 2021 |
| CVE-2019-0541 Exploited |
Not yet scored | Microsoft MSHTML Operating systems & software |
Microsoft MSHTML Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-5735 Exploited |
Not yet scored | Amcrest Cameras and Network Video Recorder (NVR) Operating systems & software |
Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2021-30860 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Integer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2020-7961 Exploited |
Not yet scored | Liferay Liferay Portal Operating systems & software |
Liferay Portal Deserialization of Untrusted Data Vulnerability | 3 Nov 2021 |
| CVE-2021-30666 Exploited |
Not yet scored | Apple iOS Operating systems & software |
Apple iOS WebKit Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2021-30713 Exploited |
Not yet scored | Apple macOS Operating systems & software |
Apple macOS Unspecified Vulnerability | 3 Nov 2021 |
| CVE-2020-27932 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Type Confusion Vulnerability | 3 Nov 2021 |
| CVE-2021-30657 Exploited |
Not yet scored | Apple macOS Operating systems & software |
Apple macOS Unspecified Vulnerability | 3 Nov 2021 |
| CVE-2020-17144 Exploited |
Not yet scored | Microsoft Exchange Server Operating systems & software |
Microsoft Exchange Server Remote Code Execution Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.