Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 1490new in the last 7 days
- 5added as actively exploited
- 112critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2021-25369 Exploited |
Not yet scored | Samsung Mobile Devices Operating systems & software |
Samsung Mobile Devices Improper Access Control Vulnerability | 8 Nov 2022 |
| CVE-2021-25337 Exploited |
Not yet scored | Samsung Mobile Devices Operating systems & software |
Samsung Mobile Devices Improper Access Control Vulnerability | 8 Nov 2022 |
| CVE-2022-41125 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability | 8 Nov 2022 |
| CVE-2022-41091 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | 8 Nov 2022 |
| CVE-2021-25370 Exploited |
Not yet scored | Samsung Mobile Devices Operating systems & software |
Samsung Mobile Devices Memory Corruption Vulnerability | 8 Nov 2022 |
| CVE-2022-3723 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Type Confusion Vulnerability | 28 Oct 2022 |
| CVE-2022-42827 Exploited |
Not yet scored | Apple iOS and iPadOS Operating systems & software |
Apple iOS and iPadOS Out-of-Bounds Write Vulnerability | 25 Oct 2022 |
| CVE-2018-19323 Exploited |
Not yet scored | GIGABYTE Multiple Products Operating systems & software |
GIGABYTE Multiple Products Privilege Escalation Vulnerability | 24 Oct 2022 |
| CVE-2018-19321 Exploited |
Not yet scored | GIGABYTE Multiple Products Operating systems & software |
GIGABYTE Multiple Products Privilege Escalation Vulnerability | 24 Oct 2022 |
| CVE-2018-19320 Exploited |
Not yet scored | GIGABYTE Multiple Products Operating systems & software |
GIGABYTE Multiple Products Unspecified Vulnerability | 24 Oct 2022 |
| CVE-2020-3433 Exploited |
Not yet scored | Cisco AnyConnect Secure Network & security devices |
Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability | 24 Oct 2022 |
| CVE-2020-3153 Exploited |
Not yet scored | Cisco AnyConnect Secure Network & security devices |
Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability | 24 Oct 2022 |
| CVE-2018-19322 Exploited |
Not yet scored | GIGABYTE Multiple Products Operating systems & software |
GIGABYTE Multiple Products Code Execution Vulnerability | 24 Oct 2022 |
| CVE-2021-3493 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Privilege Escalation Vulnerability | 20 Oct 2022 |
| CVE-2022-41352 Exploited |
Not yet scored | Synacor Zimbra Collaboration Suite (ZCS) Applications & supply chain |
Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability | 20 Oct 2022 |
| CVE-2022-41033 Exploited |
Not yet scored | Microsoft Windows COM+ Event System Service Operating systems & software |
Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability | 11 Oct 2022 |
| CVE-2022-40684 Exploited |
Not yet scored | Fortinet Multiple Products Network & security devices |
Fortinet Multiple Products Authentication Bypass Vulnerability | 11 Oct 2022 |
| CVE-2022-36804 Exploited |
Not yet scored | Atlassian Bitbucket Server and Data Center Applications & supply chain |
Atlassian Bitbucket Server and Data Center Command Injection Vulnerability | 30 Sep 2022 |
| CVE-2022-41082 Exploited |
Not yet scored | Microsoft Exchange Server Operating systems & software |
Microsoft Exchange Server Remote Code Execution Vulnerability | 30 Sep 2022 |
| CVE-2022-41040 Exploited |
Not yet scored | Microsoft Exchange Server Operating systems & software |
Microsoft Exchange Server Server-Side Request Forgery Vulnerability | 30 Sep 2022 |
| CVE-2022-3236 Exploited |
Not yet scored | Sophos Firewall Network & security devices |
Sophos Firewall Code Injection Vulnerability | 23 Sep 2022 |
| CVE-2022-35405 Exploited |
Not yet scored | Zoho ManageEngine Identity & access |
Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability | 22 Sep 2022 |
| CVE-2010-2568 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Remote Code Execution Vulnerability | 15 Sep 2022 |
| CVE-2013-2094 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Privilege Escalation Vulnerability | 15 Sep 2022 |
| CVE-2013-2596 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Integer Overflow Vulnerability | 15 Sep 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.