Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 2860new in the last 7 days
- 3added as actively exploited
- 214critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2020-0878 Exploited |
Not yet scored | Microsoft Edge and Internet Explorer Operating systems & software |
Microsoft Edge and Internet Explorer Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2021-31955 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Kernel Information Disclosure Vulnerability | 3 Nov 2021 |
| CVE-2021-1647 Exploited |
Not yet scored | Microsoft Defender Operating systems & software |
Microsoft Defender Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-13608 Exploited |
Not yet scored | Citrix StoreFront Server Network & security devices |
Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability | 3 Nov 2021 |
| CVE-2021-33739 Exploited |
Not yet scored | Microsoft Windows Applications & supply chain |
Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2020-0683 Exploited |
Not yet scored | Microsoft Windows Applications & supply chain |
Microsoft Windows Installer Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2021-33742 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-31199 Exploited |
Not yet scored | Microsoft Enhanced Cryptographic Provider Operating systems & software |
Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2021-33771 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Kernel Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2016-3643 Exploited |
Not yet scored | SolarWinds Virtualization Manager Operating systems & software |
SolarWinds Virtualization Manager Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2014-1812 Exploited |
Not yet scored | Microsoft Windows Identity & access |
Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2016-0185 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Media Center Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-38645 Exploited |
Not yet scored | Microsoft Open Management Infrastructure (OMI) Cloud & SaaS |
Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2018-0296 Exploited |
Not yet scored | Cisco Adaptive Security Appliance (ASA) Network & security devices |
Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability | 3 Nov 2021 |
| CVE-2020-8515 Exploited |
Not yet scored | DrayTek Multiple Vigor Routers Network & security devices |
Multiple DrayTek Vigor Routers Web Management Page Vulnerability | 3 Nov 2021 |
| CVE-2021-34523 Exploited |
Not yet scored | Microsoft Exchange Server Operating systems & software |
Microsoft Exchange Server Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2021-36948 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Update Medic Service Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2021-38649 Exploited |
Not yet scored | Microsoft Open Management Infrastructure (OMI) Cloud & SaaS |
Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2020-0688 Exploited |
Not yet scored | Microsoft Exchange Server Operating systems & software |
Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2017-0143 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2016-7255 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2019-0708 Exploited |
Not yet scored | Microsoft Remote Desktop Services Operating systems & software |
Microsoft Remote Desktop Services Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-34473 Exploited |
Not yet scored | Microsoft Exchange Server Operating systems & software |
Microsoft Exchange Server Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-1464 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Spoofing Vulnerability | 3 Nov 2021 |
| CVE-2021-1732 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.