Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 2860new in the last 7 days
- 3added as actively exploited
- 214critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2018-0798 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2020-1380 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2020-1054 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2019-1429 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2017-11774 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Outlook Security Feature Bypass Vulnerability | 3 Nov 2021 |
| CVE-2020-8195 Exploited |
Not yet scored | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance Network & security devices |
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability | 3 Nov 2021 |
| CVE-2019-1653 Exploited |
Not yet scored | Cisco Small Business RV320 and RV325 Routers Network & security devices |
Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability | 3 Nov 2021 |
| CVE-2021-26855 Exploited |
Not yet scored | Microsoft Exchange Server Operating systems & software |
Microsoft Exchange Server Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-26858 Exploited |
Not yet scored | Microsoft Exchange Server Operating systems & software |
Microsoft Exchange Server Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-27065 Exploited |
Not yet scored | Microsoft Exchange Server Operating systems & software |
Microsoft Exchange Server Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-1675 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Print Spooler Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-8193 Exploited |
Not yet scored | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance Network & security devices |
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability | 3 Nov 2021 |
| CVE-2021-34448 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Scripting Engine Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2019-19356 Exploited |
Not yet scored | Netis WF2419 Devices Network & security devices |
Netis WF2419 Devices Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-0968 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2021-27059 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2017-0199 Exploited |
Not yet scored | Microsoft Office and WordPad Operating systems & software |
Microsoft Office and WordPad Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-1367 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2021-26857 Exploited |
Not yet scored | Microsoft Exchange Server Operating systems & software |
Microsoft Exchange Server Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-17026 Exploited |
Not yet scored | Mozilla Firefox and Thunderbird Operating systems & software |
Mozilla Firefox And Thunderbird Type Confusion Vulnerability | 3 Nov 2021 |
| CVE-2016-3235 Exploited |
Not yet scored | Microsoft Office Applications & supply chain |
Microsoft Office OLE DLL Side Loading Vulnerability | 3 Nov 2021 |
| CVE-2019-0863 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2021-36955 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2021-28550 Exploited |
Not yet scored | Adobe Acrobat and Reader Operating systems & software |
Adobe Acrobat and Reader Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2021-38648 Exploited |
Not yet scored | Microsoft Open Management Infrastructure (OMI) Cloud & SaaS |
Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.