Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 460new in the last 7 days
- 8added as actively exploited
- 40critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2023-21608 Exploited |
Not yet scored | Adobe Acrobat and Reader Operating systems & software |
Adobe Acrobat and Reader Use-After-Free Vulnerability | 10 Oct 2023 |
| CVE-2023-20109 Exploited |
Not yet scored | Cisco IOS and IOS XE Network & security devices |
Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability | 10 Oct 2023 |
| CVE-2023-44487 Exploited |
Not yet scored | IETF HTTP/2 Network & security devices |
HTTP/2 Rapid Reset Attack Vulnerability | 10 Oct 2023 |
| CVE-2023-42824 Exploited |
Not yet scored | Apple iOS and iPadOS Operating systems & software |
Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability | 5 Oct 2023 |
| CVE-2023-40044 Exploited |
Not yet scored | Progress WS_FTP Server Operating systems & software |
Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability | 5 Oct 2023 |
| CVE-2023-22515 Exploited |
Not yet scored | Atlassian Confluence Data Center and Server Operating systems & software |
Atlassian Confluence Data Center and Server Broken Access Control Vulnerability | 5 Oct 2023 |
| CVE-2023-28229 Exploited |
Not yet scored | Microsoft Windows CNG Key Isolation Service Operating systems & software |
Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability | 4 Oct 2023 |
| CVE-2023-42793 Exploited |
Not yet scored | JetBrains TeamCity Operating systems & software |
JetBrains TeamCity Authentication Bypass Vulnerability | 4 Oct 2023 |
| CVE-2023-4211 Exploited |
Not yet scored | Arm Mali GPU Kernel Driver Hardware & firmware |
Arm Mali GPU Kernel Driver Use-After-Free Vulnerability | 3 Oct 2023 |
| CVE-2023-5217 Exploited |
Not yet scored | Google Chromium libvpx Operating systems & software |
Google Chromium libvpx Heap Buffer Overflow Vulnerability | 2 Oct 2023 |
| CVE-2018-14667 Exploited |
Not yet scored | Red Hat JBoss RichFaces Framework Applications & supply chain |
Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability | 28 Sep 2023 |
| CVE-2023-41993 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products WebKit Code Execution Vulnerability | 25 Sep 2023 |
| CVE-2023-41991 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Improper Certificate Validation Vulnerability | 25 Sep 2023 |
| CVE-2023-41992 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Kernel Privilege Escalation Vulnerability | 25 Sep 2023 |
| CVE-2023-41179 Exploited |
Not yet scored | Trend Micro Apex One and Worry-Free Business Security Operating systems & software |
Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability | 21 Sep 2023 |
| CVE-2023-28434 Exploited |
Not yet scored | MinIO MinIO Cloud & SaaS |
MinIO Security Feature Bypass Vulnerability | 19 Sep 2023 |
| CVE-2021-3129 Exploited |
Not yet scored | Laravel Ignition Operating systems & software |
Laravel Ignition File Upload Vulnerability | 18 Sep 2023 |
| CVE-2022-22265 Exploited |
Not yet scored | Samsung Mobile Devices Hardware & firmware |
Samsung Mobile Devices Use-After-Free Vulnerability | 18 Sep 2023 |
| CVE-2017-6884 Exploited |
Not yet scored | Zyxel EMG2926 Routers Network & security devices |
Zyxel EMG2926 Routers Command Injection Vulnerability | 18 Sep 2023 |
| CVE-2014-8361 Exploited |
Not yet scored | Realtek SDK Operating systems & software |
Realtek SDK Improper Input Validation Vulnerability | 18 Sep 2023 |
| CVE-2023-26369 Exploited |
Not yet scored | Adobe Acrobat and Reader Operating systems & software |
Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability | 14 Sep 2023 |
| CVE-2023-4863 Exploited |
Not yet scored | Google Chromium WebP Operating systems & software |
Google Chromium WebP Heap-Based Buffer Overflow Vulnerability | 13 Sep 2023 |
| CVE-2023-35674 Exploited |
Not yet scored | Android Framework Operating systems & software |
Android Framework Privilege Escalation Vulnerability | 13 Sep 2023 |
| CVE-2023-20269 Exploited |
Not yet scored | Cisco Adaptive Security Appliance and Firepower Threat Defense Network & security devices |
Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability | 13 Sep 2023 |
| CVE-2023-36802 Exploited |
Not yet scored | Microsoft Streaming Service Proxy Operating systems & software |
Microsoft Streaming Service Proxy Privilege Escalation Vulnerability | 12 Sep 2023 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.