Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 1489new in the last 7 days
- 4added as actively exploited
- 112critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2021-3156 Exploited |
Not yet scored | Sudo Sudo Operating systems & software |
Sudo Heap-Based Buffer Overflow Vulnerability | 6 Apr 2022 |
| CVE-2021-31166 Exploited |
Not yet scored | Microsoft HTTP Protocol Stack Operating systems & software |
Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability | 6 Apr 2022 |
| CVE-2022-22965 Exploited |
Not yet scored | VMware Spring Framework Operating systems & software |
Spring Framework JDK 9+ Remote Code Execution Vulnerability | 4 Apr 2022 |
| CVE-2022-22675 Exploited |
Not yet scored | Apple macOS Operating systems & software |
Apple macOS Out-of-Bounds Write Vulnerability | 4 Apr 2022 |
| CVE-2022-22674 Exploited |
Not yet scored | Apple macOS Operating systems & software |
Apple macOS Out-of-Bounds Read Vulnerability | 4 Apr 2022 |
| CVE-2021-34484 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows User Profile Service Privilege Escalation Vulnerability | 31 Mar 2022 |
| CVE-2021-28799 Exploited |
Not yet scored | QNAP Network Attached Storage (NAS) Operating systems & software |
QNAP NAS Improper Authorization Vulnerability | 31 Mar 2022 |
| CVE-2021-21551 Exploited |
Not yet scored | Dell dbutil Driver Operating systems & software |
Dell dbutil Driver Insufficient Access Control Vulnerability | 31 Mar 2022 |
| CVE-2012-0518 Exploited |
Not yet scored | Oracle Fusion Middleware Operating systems & software |
Oracle Fusion Middleware Unspecified Vulnerability | 28 Mar 2022 |
| CVE-2012-2034 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Memory Corruption Vulnerability | 28 Mar 2022 |
| CVE-2012-2539 Exploited |
Not yet scored | Microsoft Word Operating systems & software |
Microsoft Word Remote Code Execution Vulnerability | 28 Mar 2022 |
| CVE-2017-0213 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Privilege Escalation Vulnerability | 28 Mar 2022 |
| CVE-2013-2551 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Use-After-Free Vulnerability | 28 Mar 2022 |
| CVE-2013-2729 Exploited |
Not yet scored | Adobe Reader and Acrobat Operating systems & software |
Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability | 28 Mar 2022 |
| CVE-2016-7200 Exploited |
Not yet scored | Microsoft Edge Operating systems & software |
Microsoft Edge Memory Corruption Vulnerability | 28 Mar 2022 |
| CVE-2016-0189 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Memory Corruption Vulnerability | 28 Mar 2022 |
| CVE-2015-1770 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Uninitialized Memory Use Vulnerability | 28 Mar 2022 |
| CVE-2022-0543 Exploited |
Not yet scored | Redis Debian-specific Redis Servers Operating systems & software |
Debian-specific Redis Server Lua Sandbox Escape Vulnerability | 28 Mar 2022 |
| CVE-2021-38646 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability | 28 Mar 2022 |
| CVE-2021-34486 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Event Tracing Privilege Escalation Vulnerability | 28 Mar 2022 |
| CVE-2016-0151 Exploited |
Not yet scored | Microsoft Client-Server Run-time Subsystem (CSRSS) Operating systems & software |
Microsoft Windows CSRSS Security Feature Bypass Vulnerability | 28 Mar 2022 |
| CVE-2018-8440 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Privilege Escalation Vulnerability | 28 Mar 2022 |
| CVE-2018-8406 Exploited |
Not yet scored | Microsoft DirectX Graphics Kernel (DXGKRNL) Operating systems & software |
Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability | 28 Mar 2022 |
| CVE-2018-8405 Exploited |
Not yet scored | Microsoft DirectX Graphics Kernel (DXGKRNL) Operating systems & software |
Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability | 28 Mar 2022 |
| CVE-2013-3660 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 28 Mar 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.