Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 2860new in the last 7 days
- 3added as actively exploited
- 214critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2018-0154 Exploited |
Not yet scored | Cisco IOS Software Network & security devices |
Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability | 3 Mar 2022 |
| CVE-2004-0210 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Privilege Escalation Vulnerability | 3 Mar 2022 |
| CVE-2010-0232 Exploited |
Not yet scored | Microsoft Windows Hardware & firmware |
Microsoft Windows Kernel Exception Handler Vulnerability | 3 Mar 2022 |
| CVE-2008-2992 Exploited |
Not yet scored | Adobe Acrobat and Reader Operating systems & software |
Adobe Reader and Acrobat Input Validation Vulnerability | 3 Mar 2022 |
| CVE-2008-3431 Exploited |
Not yet scored | Oracle VirtualBox Operating systems & software |
Oracle VirtualBox Insufficient Input Validation Vulnerability | 3 Mar 2022 |
| CVE-2011-1889 Exploited |
Not yet scored | Microsoft Forefront Threat Management Gateway (TMG) Network & security devices |
Microsoft Forefront TMG Remote Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2017-6740 Exploited |
Not yet scored | Cisco IOS and IOS XE Software Network & security devices |
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2015-1701 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 3 Mar 2022 |
| CVE-2015-2545 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Malformed EPS File Vulnerability | 3 Mar 2022 |
| CVE-2018-0151 Exploited |
Not yet scored | Cisco IOS and IOS XE Software Network & security devices |
Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2018-0172 Exploited |
Not yet scored | Cisco IOS and IOS XE Software Network & security devices |
Cisco IOS and IOS XE Software Improper Input Validation Vulnerability | 3 Mar 2022 |
| CVE-2009-1123 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Improper Input Validation Vulnerability | 3 Mar 2022 |
| CVE-2009-3129 Exploited |
Not yet scored | Microsoft Excel Operating systems & software |
Microsoft Excel Featheader Record Memory Corruption Vulnerability | 3 Mar 2022 |
| CVE-2010-0188 Exploited |
Not yet scored | Adobe Reader and Acrobat Operating systems & software |
Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2018-0161 Exploited |
Not yet scored | Cisco IOS Software Network & security devices |
Cisco IOS Software Resource Management Errors Vulnerability | 3 Mar 2022 |
| CVE-2015-2387 Exploited |
Not yet scored | Microsoft ATM Font Driver Operating systems & software |
Microsoft ATM Font Driver Privilege Escalation Vulnerability | 3 Mar 2022 |
| CVE-2022-20708 Exploited |
Not yet scored | Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers Network & security devices |
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | 3 Mar 2022 |
| CVE-2011-3544 Exploited |
Not yet scored | Oracle Java SE JDK and JRE Applications & supply chain |
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2018-0158 Exploited |
Not yet scored | Cisco IOS Software and Cisco IOS XE Software Network & security devices |
Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability | 3 Mar 2022 |
| CVE-2011-0611 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Remote Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2018-0174 Exploited |
Not yet scored | Cisco IOS XE Software Network & security devices |
Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability | 3 Mar 2022 |
| CVE-2010-3333 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Stack-based Buffer Overflow Vulnerability | 3 Mar 2022 |
| CVE-2017-6663 Exploited |
Not yet scored | Cisco IOS and IOS XE Software Network & security devices |
Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability | 3 Mar 2022 |
| CVE-2020-11899 Exploited |
Not yet scored | Treck TCP/IP stack IPv6 Operating systems & software |
Treck TCP/IP stack Out-of-Bounds Read Vulnerability | 3 Mar 2022 |
| CVE-2014-0496 Exploited |
Not yet scored | Adobe Reader and Acrobat Operating systems & software |
Adobe Reader and Acrobat Use-After-Free Vulnerability | 3 Mar 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.