Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 1490new in the last 7 days
- 5added as actively exploited
- 112critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2021-38406 Exploited |
Not yet scored | Delta Electronics DOPSoft 2 Operating systems & software |
Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability | 25 Aug 2022 |
| CVE-2022-0028 Exploited |
Not yet scored | Palo Alto Networks PAN-OS Network & security devices |
Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability | 22 Aug 2022 |
| CVE-2022-21971 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Runtime Remote Code Execution Vulnerability | 18 Aug 2022 |
| CVE-2022-22536 Exploited |
Not yet scored | SAP Multiple Products Applications & supply chain |
SAP Multiple Products HTTP Request Smuggling Vulnerability | 18 Aug 2022 |
| CVE-2022-32893 Exploited |
Not yet scored | Apple iOS and macOS Operating systems & software |
Apple iOS and macOS Out-of-Bounds Write Vulnerability | 18 Aug 2022 |
| CVE-2022-2856 Exploited |
Not yet scored | Google Chromium Intents Operating systems & software |
Google Chromium Intents Insufficient Input Validation Vulnerability | 18 Aug 2022 |
| CVE-2022-26923 Exploited |
Not yet scored | Microsoft Active Directory Identity & access |
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability | 18 Aug 2022 |
| CVE-2022-32894 Exploited |
Not yet scored | Apple iOS and macOS Operating systems & software |
Apple iOS and macOS Out-of-Bounds Write Vulnerability | 18 Aug 2022 |
| CVE-2017-15944 Exploited |
Not yet scored | Palo Alto Networks PAN-OS Network & security devices |
Palo Alto Networks PAN-OS Remote Code Execution Vulnerability | 18 Aug 2022 |
| CVE-2022-37042 Exploited |
Not yet scored | Synacor Zimbra Collaboration Suite (ZCS) Operating systems & software |
Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability | 11 Aug 2022 |
| CVE-2022-27925 Exploited |
Not yet scored | Synacor Zimbra Collaboration Suite (ZCS) Operating systems & software |
Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability | 11 Aug 2022 |
| CVE-2022-34713 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability | 9 Aug 2022 |
| CVE-2022-30333 Exploited |
Not yet scored | RARLAB UnRAR Operating systems & software |
RARLAB UnRAR Directory Traversal Vulnerability | 9 Aug 2022 |
| CVE-2022-27924 Exploited |
Not yet scored | Synacor Zimbra Collaboration Suite (ZCS) Operating systems & software |
Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability | 4 Aug 2022 |
| CVE-2022-26138 Exploited |
Not yet scored | Atlassian Confluence Operating systems & software |
Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability | 29 Jul 2022 |
| CVE-2022-22047 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability | 12 Jul 2022 |
| CVE-2022-26925 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows LSA Spoofing Vulnerability | 1 Jul 2022 |
| CVE-2019-8605 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Use-After-Free Vulnerability | 27 Jun 2022 |
| CVE-2021-4034 Exploited |
Not yet scored | Red Hat Polkit Operating systems & software |
Red Hat Polkit Out-of-Bounds Read and Write Vulnerability | 27 Jun 2022 |
| CVE-2020-3837 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Memory Corruption Vulnerability | 27 Jun 2022 |
| CVE-2021-30533 Exploited |
Not yet scored | Google Chromium PopupBlocker Operating systems & software |
Google Chromium PopupBlocker Security Bypass Vulnerability | 27 Jun 2022 |
| CVE-2022-29499 Exploited |
Not yet scored | Mitel MiVoice Connect Operating systems & software |
Mitel MiVoice Connect Data Validation Vulnerability | 27 Jun 2022 |
| CVE-2018-4344 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Memory Corruption Vulnerability | 27 Jun 2022 |
| CVE-2020-9907 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Memory Corruption Vulnerability | 27 Jun 2022 |
| CVE-2021-30983 Exploited |
Not yet scored | Apple iOS and iPadOS Operating systems & software |
Apple iOS and iPadOS Buffer Overflow Vulnerability | 27 Jun 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.