Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 2023new in the last 7 days
- 4added as actively exploited
- 165critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2021-35394 Exploited |
Not yet scored | Realtek Jungle Software Development Kit (SDK) Operating systems & software |
Realtek Jungle SDK Remote Code Execution Vulnerability | 10 Dec 2021 |
| CVE-2021-44077 Exploited |
Not yet scored | Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus Operating systems & software |
Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability | 1 Dec 2021 |
| CVE-2021-40438 Exploited |
Not yet scored | Apache Apache Operating systems & software |
Apache HTTP Server-Side Request Forgery (SSRF) | 1 Dec 2021 |
| CVE-2021-40449 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Win32k Privilege Escalation Vulnerability | 17 Nov 2021 |
| CVE-2021-42321 Exploited |
Not yet scored | Microsoft Exchange Operating systems & software |
Microsoft Exchange Server Remote Code Execution Vulnerability | 17 Nov 2021 |
| CVE-2021-42292 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Excel Security Feature Bypass | 17 Nov 2021 |
| CVE-2021-22204 Exploited |
Not yet scored | Perl Exiftool Operating systems & software |
ExifTool Remote Code Execution Vulnerability | 17 Nov 2021 |
| CVE-2017-11882 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2020-1040 Exploited |
Not yet scored | Microsoft Hyper-V RemoteFX Operating systems & software |
Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-0803 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2020-0986 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Kernel Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2020-17144 Exploited |
Not yet scored | Microsoft Exchange Server Operating systems & software |
Microsoft Exchange Server Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-30116 Exploited |
Not yet scored | Kaseya Virtual System/Server Administrator (VSA) Operating systems & software |
Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability | 3 Nov 2021 |
| CVE-2020-14882 Exploited |
Not yet scored | Oracle WebLogic Server Operating systems & software |
Oracle WebLogic Server Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-14883 Exploited |
Not yet scored | Oracle WebLogic Server Operating systems & software |
Oracle WebLogic Server Unspecified Vulnerability | 3 Nov 2021 |
| CVE-2021-27104 Exploited |
Not yet scored | Accellion FTA Operating systems & software |
Accellion FTA OS Command Injection Vulnerability | 3 Nov 2021 |
| CVE-2021-27103 Exploited |
Not yet scored | Accellion FTA Operating systems & software |
Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability | 3 Nov 2021 |
| CVE-2021-21017 Exploited |
Not yet scored | Adobe Acrobat and Reader Operating systems & software |
Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2021-28550 Exploited |
Not yet scored | Adobe Acrobat and Reader Operating systems & software |
Adobe Acrobat and Reader Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2018-4939 Exploited |
Not yet scored | Adobe ColdFusion Operating systems & software |
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | 3 Nov 2021 |
| CVE-2021-38003 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2020-16013 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Incorrect Implementation Vulnerabililty | 3 Nov 2021 |
| CVE-2021-30665 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products WebKit Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2021-30762 Exploited |
Not yet scored | Apple iOS Operating systems & software |
Apple iOS WebKit Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2021-21166 Exploited |
Not yet scored | Google Chromium Operating systems & software |
Google Chromium Race Condition Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.