Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 807new in the last 7 days
- 6added as actively exploited
- 57critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2023-2033 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Type Confusion Vulnerability | 17 Apr 2023 |
| CVE-2019-8526 Exploited |
Not yet scored | Apple macOS Operating systems & software |
Apple macOS Use-After-Free Vulnerability | 17 Apr 2023 |
| CVE-2023-29492 Exploited |
Not yet scored | Novi Survey Novi Survey Operating systems & software |
Novi Survey Insecure Deserialization Vulnerability | 13 Apr 2023 |
| CVE-2023-20963 Exploited |
Not yet scored | Android Framework Operating systems & software |
Android Framework Privilege Escalation Vulnerability | 13 Apr 2023 |
| CVE-2023-28252 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | 11 Apr 2023 |
| CVE-2023-28205 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products WebKit Use-After-Free Vulnerability | 10 Apr 2023 |
| CVE-2023-28206 Exploited |
Not yet scored | Apple iOS, iPadOS, and macOS Operating systems & software |
Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability | 10 Apr 2023 |
| CVE-2023-26083 Exploited |
Not yet scored | Arm Mali Graphics Processing Unit (GPU) Hardware & firmware |
Arm Mali GPU Kernel Driver Information Disclosure Vulnerability | 7 Apr 2023 |
| CVE-2019-1388 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability | 7 Apr 2023 |
| CVE-2021-27878 Exploited |
Not yet scored | Veritas Backup Exec Agent Operating systems & software |
Veritas Backup Exec Agent Command Execution Vulnerability | 7 Apr 2023 |
| CVE-2021-27877 Exploited |
Not yet scored | Veritas Backup Exec Agent Operating systems & software |
Veritas Backup Exec Agent Improper Authentication Vulnerability | 7 Apr 2023 |
| CVE-2021-27876 Exploited |
Not yet scored | Veritas Backup Exec Agent Operating systems & software |
Veritas Backup Exec Agent File Access Vulnerability | 7 Apr 2023 |
| CVE-2022-27926 Exploited |
Not yet scored | Synacor Zimbra Collaboration Suite (ZCS) Operating systems & software |
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | 3 Apr 2023 |
| CVE-2017-7494 Exploited |
Not yet scored | Samba Samba Applications & supply chain |
Samba Remote Code Execution Vulnerability | 30 Mar 2023 |
| CVE-2022-42948 Exploited |
Not yet scored | Fortra Cobalt Strike Applications & supply chain |
Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability | 30 Mar 2023 |
| CVE-2022-39197 Exploited |
Not yet scored | Fortra Cobalt Strike Applications & supply chain |
Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability | 30 Mar 2023 |
| CVE-2013-3163 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Memory Corruption Vulnerability | 30 Mar 2023 |
| CVE-2022-38181 Exploited |
Not yet scored | Arm Mali Graphics Processing Unit (GPU) Hardware & firmware |
Arm Mali GPU Kernel Driver Use-After-Free Vulnerability | 30 Mar 2023 |
| CVE-2021-30900 Exploited |
Not yet scored | Apple iOS, iPadOS, and macOS Operating systems & software |
Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability | 30 Mar 2023 |
| CVE-2022-22706 Exploited |
Not yet scored | Arm Mali Graphics Processing Unit (GPU) Hardware & firmware |
Arm Mali GPU Kernel Driver Unspecified Vulnerability | 30 Mar 2023 |
| CVE-2022-3038 Exploited |
Not yet scored | Google Chromium Network Service Operating systems & software |
Google Chromium Network Service Use-After-Free Vulnerability | 30 Mar 2023 |
| CVE-2023-0266 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Use-After-Free Vulnerability | 30 Mar 2023 |
| CVE-2023-26360 Exploited |
Not yet scored | Adobe ColdFusion Operating systems & software |
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | 15 Mar 2023 |
| CVE-2022-41328 Exploited |
Not yet scored | Fortinet FortiOS Network & security devices |
Fortinet FortiOS Path Traversal Vulnerability | 14 Mar 2023 |
| CVE-2023-24880 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | 14 Mar 2023 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.