Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 1489new in the last 7 days
- 4added as actively exploited
- 112critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2019-5786 Exploited |
Not yet scored | Google Chrome Blink Operating systems & software |
Google Chrome Blink Use-After-Free Vulnerability | 23 May 2022 |
| CVE-2018-8589 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 23 May 2022 |
| CVE-2019-7286 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Memory Corruption Vulnerability | 23 May 2022 |
| CVE-2019-0676 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Information Disclosure Vulnerability | 23 May 2022 |
| CVE-2019-0703 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows SMB Information Disclosure Vulnerability | 23 May 2022 |
| CVE-2020-1027 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Kernel Privilege Escalation Vulnerability | 23 May 2022 |
| CVE-2019-0880 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Privilege Escalation Vulnerability | 23 May 2022 |
| CVE-2019-13720 Exploited |
Not yet scored | Google Chrome WebAudio Operating systems & software |
Google Chrome WebAudio Use-After-Free Vulnerability | 23 May 2022 |
| CVE-2019-11707 Exploited |
Not yet scored | Mozilla Firefox and Thunderbird Operating systems & software |
Mozilla Firefox and Thunderbird Type Confusion Vulnerability | 23 May 2022 |
| CVE-2019-11708 Exploited |
Not yet scored | Mozilla Firefox and Thunderbird Operating systems & software |
Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability | 23 May 2022 |
| CVE-2019-8720 Exploited |
Not yet scored | WebKitGTK WebKitGTK Operating systems & software |
WebKitGTK Memory Corruption Vulnerability | 23 May 2022 |
| CVE-2019-1130 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability | 23 May 2022 |
| CVE-2019-7287 Exploited |
Not yet scored | Apple iOS Operating systems & software |
Apple iOS Memory Corruption Vulnerability | 23 May 2022 |
| CVE-2020-0638 Exploited |
Not yet scored | Microsoft Update Notification Manager Operating systems & software |
Microsoft Update Notification Manager Privilege Escalation Vulnerability | 23 May 2022 |
| CVE-2019-8506 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Type Confusion Vulnerability | 4 May 2022 |
| CVE-2014-4113 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 4 May 2022 |
| CVE-2014-0160 Exploited |
Not yet scored | OpenSSL OpenSSL Operating systems & software |
OpenSSL Information Disclosure Vulnerability | 4 May 2022 |
| CVE-2021-1789 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Type Confusion Vulnerability | 4 May 2022 |
| CVE-2014-0322 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Use-After-Free Vulnerability | 4 May 2022 |
| CVE-2021-41357 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 25 Apr 2022 |
| CVE-2022-26904 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows User Profile Service Privilege Escalation Vulnerability | 25 Apr 2022 |
| CVE-2022-21919 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows User Profile Service Privilege Escalation Vulnerability | 25 Apr 2022 |
| CVE-2022-29464 Exploited |
Not yet scored | WSO2 Multiple Products Operating systems & software |
WSO2 Multiple Products Unrestrictive Upload of File Vulnerability | 25 Apr 2022 |
| CVE-2021-40450 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 25 Apr 2022 |
| CVE-2022-0847 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Privilege Escalation Vulnerability | 25 Apr 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.