Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 2701new in the last 7 days
- 2added as actively exploited
- 209critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2015-1671 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Remote Code Execution Vulnerability | 25 May 2022 |
| CVE-2015-6175 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Kernel Privilege Escalation Vulnerability | 25 May 2022 |
| CVE-2015-4495 Exploited |
Not yet scored | Mozilla Firefox Operating systems & software |
Mozilla Firefox Security Feature Bypass Vulnerability | 25 May 2022 |
| CVE-2015-1769 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Mount Manager Privilege Escalation Vulnerability | 25 May 2022 |
| CVE-2015-2425 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Memory Corruption Vulnerability | 25 May 2022 |
| CVE-2015-2360 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 25 May 2022 |
| CVE-2015-0071 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer ASLR Bypass Vulnerability | 25 May 2022 |
| CVE-2015-0016 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows TS WebProxy Directory Traversal Vulnerability | 25 May 2022 |
| CVE-2015-0310 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player ASLR Bypass Vulnerability | 25 May 2022 |
| CVE-2016-0034 Exploited |
Not yet scored | Microsoft Silverlight Operating systems & software |
Microsoft Silverlight Runtime Remote Code Execution Vulnerability | 25 May 2022 |
| CVE-2016-0984 Exploited |
Not yet scored | Adobe Flash Player and AIR Operating systems & software |
Adobe Flash Player and AIR Use-After-Free Vulnerability | 25 May 2022 |
| CVE-2016-1010 Exploited |
Not yet scored | Adobe Flash Player and AIR Operating systems & software |
Adobe Flash Player and AIR Integer Overflow Vulnerability | 25 May 2022 |
| CVE-2016-7256 Exploited |
Not yet scored | Microsoft Windows Applications & supply chain |
Microsoft Windows Open Type Font Remote Code Execution Vulnerability | 25 May 2022 |
| CVE-2019-3010 Exploited |
Not yet scored | Oracle Solaris Operating systems & software |
Oracle Solaris Privilege Escalation Vulnerability | 25 May 2022 |
| CVE-2017-0005 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability | 24 May 2022 |
| CVE-2017-0210 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Privilege Escalation Vulnerability | 24 May 2022 |
| CVE-2017-0022 Exploited |
Not yet scored | Microsoft XML Core Services Operating systems & software |
Microsoft XML Core Services Information Disclosure Vulnerability | 24 May 2022 |
| CVE-2017-0147 Exploited |
Not yet scored | Microsoft SMBv1 server Operating systems & software |
Microsoft Windows SMBv1 Information Disclosure Vulnerability | 24 May 2022 |
| CVE-2017-8543 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Search Remote Code Execution Vulnerability | 24 May 2022 |
| CVE-2018-8611 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Kernel Privilege Escalation Vulnerability | 24 May 2022 |
| CVE-2016-4657 Exploited |
Not yet scored | Apple iOS Operating systems & software |
Apple iOS Webkit Memory Corruption Vulnerability | 24 May 2022 |
| CVE-2016-6367 Exploited |
Not yet scored | Cisco Adaptive Security Appliance (ASA) Network & security devices |
Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability | 24 May 2022 |
| CVE-2016-6366 Exploited |
Not yet scored | Cisco Adaptive Security Appliance (ASA) Network & security devices |
Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability | 24 May 2022 |
| CVE-2016-4655 Exploited |
Not yet scored | Apple iOS Operating systems & software |
Apple iOS Information Disclosure Vulnerability | 24 May 2022 |
| CVE-2016-4656 Exploited |
Not yet scored | Apple iOS Operating systems & software |
Apple iOS Memory Corruption Vulnerability | 24 May 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.