[ Exploited · 1,754 CVEs ]
Exploited in the wild.
Every CVE on CISA's Known Exploited Vulnerabilities catalogue, most recently added first. If you run one of these products, patch it now.
KEV catalogue version 2026.10.21
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2015-1130 | 10 Apr 2015 | CVSS 7.8 | Apple OS X Authentication BypassThe XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via… | Exploited |
| CVE-2014-4404 | 18 Sep 2014 | CVSS 7.8 | Apple OS X Heap-Based Buffer OverflowHeap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged… | Exploited |
| CVE-2022-21882 | 11 Jan 2022 | CVSS 7.8 | Microsoft Win32k Privilege EscalationWin32k Elevation of Privilege Vulnerability | ExploitedFix |
| CVE-2022-22587 | 18 Mar 2022 | CVSS 9.8 | Apple Memory CorruptionA memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, macOS Big Sur 11.6.3, macOS… | Exploited |
| CVE-2021-20038 | 8 Dec 2021 | CVSS 9.8 | SonicWall SMA 100 Appliances Stack-Based Buffer OverflowA Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthenticated… | Exploited |
| CVE-2020-5722 | 23 Mar 2020 | CVSS 9.8 | Grandstream Networks UCM6200 Series SQL InjectionThe HTTP interface of the Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. An attacker… | Exploited |
| CVE-2020-0787 | 12 Mar 2020 | CVSS 7.8 | Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege ManagementAn elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka… | ExploitedFix |
| CVE-2017-5689 | 2 May 2017 | CVSS 9.8 | Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege EscalationAn unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and… | ExploitedFix |
| CVE-2014-7169 | 25 Sep 2014 | CVSS 9.8 | GNU Bourne-Again Shell (Bash) Arbitrary Code ExecutionGNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which… | ExploitedFix |
| CVE-2014-6271 | 24 Sep 2014 | CVSS 9.8 | GNU Bourne-Again Shell (Bash) Arbitrary Code ExecutionGNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to… | ExploitedFix |
| CVE-2014-1776 | 27 Apr 2014 | CVSS 9.8 | Microsoft Internet Explorer Memory CorruptionUse-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of… | ExploitedFix |
| CVE-2021-35247 | 10 Jan 2022 | CVSS 5.3 | SolarWinds Serv-U Improper Input ValidationServ-U web login screen to LDAP authentication was allowing characters that were not sufficiently sanitized. SolarWinds has updated the input… | Exploited |
| CVE-2018-8453 | 10 Oct 2018 | CVSS 7.8 | Microsoft Win32k Privilege EscalationAn elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation… | ExploitedFix |
| CVE-2012-0391 | 8 Jan 2012 | CVSS 9.8 | Apache Struts 2 Improper Input ValidationThe ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during certain exception handling… | Exploited |
| CVE-2006-1547 | 30 Mar 2006 | CVSS 7.5 | Apache Struts 1 ActionForm Denial-of-ServiceActionForm in Apache Software Foundation (ASF) Struts before 1.2.9 with BeanUtils 1.7 allows remote attackers to cause a denial of service via a… | ExploitedFix |
| CVE-2021-40870 | 13 Sep 2021 | CVSS 9.8 | Aviatrix Controller Unrestricted Upload of FileAn issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a file with a dangerous type is possible, which… | Exploited |
| CVE-2021-33766 | 14 Jul 2021 | CVSS 7.3 | Microsoft Exchange Server Information DisclosureMicrosoft Exchange Server Information Disclosure Vulnerability | ExploitedFix |
| CVE-2021-32648 | 26 Aug 2021 | CVSS 9.1 | October CMS Improper Authenticationoctobercms in a CMS platform based on the Laravel PHP Framework. In affected versions of the october/system package an attacker can request an… | ExploitedFix |
| CVE-2021-25298 | 15 Feb 2021 | CVSS 8.8 | Nagios XI OS Command InjectionNagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file… | Exploited |
| CVE-2021-25297 | 15 Feb 2021 | CVSS 8.8 | Nagios XI OS Command InjectionNagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file… | Exploited |
| CVE-2021-25296 | 15 Feb 2021 | CVSS 8.8 | Nagios XI OS Command InjectionNagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file… | Exploited |
| CVE-2021-22991 | 31 Mar 2021 | CVSS 9.8 | F5 BIG-IP Traffic Management Microkernel Buffer OverflowOn BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3… | Exploited |
| CVE-2021-21975 | 31 Mar 2021 | CVSS 7.5 | VMware Server Side Request Forgery in vRealize Operations Manager APIServer Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor with network access to the… | Exploited |
| CVE-2021-21315 | 16 Feb 2021 | CVSS 7.8 | System Information Library for Node.JS Command InjectionThe System Information Library for Node.JS (npm package "systeminformation") is an open source collection of functions to retrieve detailed hardware… | ExploitedFix |
| CVE-2020-14864 | 21 Oct 2020 | CVSS 7.5 | Oracle Business Intelligence Enterprise Edition Path TransversalVulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Installation). Supported… | Exploited |
| CVE-2020-13927 | 10 Nov 2020 | CVSS 9.8 | Apache Airflow's Experimental API Authentication BypassThe previous default setting for Airflow's Experimental API was to allow all API requests without authentication, but this poses security risks to… | Exploited |
| CVE-2020-13671 | 20 Nov 2020 | CVSS 8.8 | Drupal core Un-restricted Upload of FileDrupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and… | Exploited |
| CVE-2020-11978 | 17 Jul 2020 | CVSS 8.8 | Apache Airflow Command InjectionAn issue was found in Apache Airflow versions 1.10.10 and below. A remote code/command injection vulnerability was discovered in one of the example… | Exploited |
| CVE-2021-36260 | 22 Sep 2021 | CVSS 9.8 | Hikvision Improper Input ValidationA command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the… | Exploited |
| CVE-2021-27860 | 8 Dec 2021 | CVSS 8.8 | FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploitA vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p92 and 10.2.2r44p1 allows a… | Exploited |
| CVE-2021-22017 | 23 Sep 2021 | CVSS 5.3 | VMware vCenter Server Improper Access ControlRhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A malicious actor with network… | ExploitedFix |
| CVE-2020-6572 | 14 Jan 2021 | CVSS 8.8 | Google Chrome Media Use-After-FreeUse after free in Media in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to execute arbitrary code via a crafted HTML page. | Exploited |
| CVE-2019-9670 | 29 May 2019 | CVSS 9.8 | Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Referencemailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML External Entity injection (XXE) vulnerability, as… | ExploitedFix |
| CVE-2019-7609 | 25 Mar 2019 | CVSS 10.0 | Kibana Arbitrary Code ExecutionKibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the Timelion… | Exploited |
| CVE-2019-2725 | 26 Apr 2019 | CVSS 9.8 | Oracle WebLogic Server, InjectionVulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected… | ExploitedFix |
| CVE-2019-1579 | 19 Jul 2019 | CVSS 8.1 | Palo Alto Networks PAN-OS Remote Code ExecutionRemote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or… | Exploited |
| CVE-2019-1458 | 10 Dec 2019 | CVSS 7.8 | Microsoft Win32k Privilege EscalationAn elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation… | ExploitedFix |
| CVE-2019-10149 | 5 Jun 2019 | CVSS 9.8 | Exim Mail Transfer Agent (MTA) Improper Input ValidationA flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c… | ExploitedFix |
| CVE-2018-13383 | 29 May 2019 | CVSS 6.5 | Fortinet FortiOS and FortiProxy Out-of-bounds WriteA heap buffer overflow in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.10, 5.4.0 through 5.4.12, 5.2.14 and earlier and FortiProxy 2.0.0… | Exploited |
| CVE-2018-13382 | 4 Jun 2019 | CVSS 7.5 | Fortinet FortiOS and FortiProxy Improper AuthorizationAn Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5.4.1 to 5.4.10 and FortiProxy 2.0.0, 1.2.0 to 1.2.8… | Exploited |
| CVE-2017-1000486 | 3 Jan 2018 | CVSS 9.8 | Primetek Primefaces Remote Code ExecutionPrimetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution | Exploited |
| CVE-2015-7450 | 2 Jan 2016 | CVSS 9.8 | IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote… | Exploited |
| CVE-2013-3900 | 11 Dec 2013 | CVSS 5.5 | Microsoft WinVerifyTrust function Remote Code ExecutionWhy is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table… | ExploitedFix |
| CVE-2021-43890 | 15 Dec 2021 | CVSS 7.1 | Microsoft Windows AppX Installer SpoofingWe have investigated reports of a spoofing vulnerability in AppX installer that affects Microsoft Windows. Microsoft is aware of attacks that attempt… | ExploitedFix |
| CVE-2021-4102 | 11 Feb 2022 | CVSS 8.8 | Google Chromium V8 Use-After-FreeUse after free in V8 in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | Exploited |
| CVE-2021-44515 | 12 Dec 2021 | CVSS 9.8 | Zoho Desktop Central Authentication BypassZoho ManageEngine Desktop Central is vulnerable to authentication bypass, leading to remote code execution on the server, as exploited in the wild in… | ExploitedFix |
| CVE-2021-44228 | 10 Dec 2021 | CVSS 10.0 | Apache Log4j2 Remote Code ExecutionApache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and… | ExploitedFix |
| CVE-2021-44168 | 4 Jan 2022 | CVSS 7.8 | Fortinet FortiOS Arbitrary File DownloadA download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0.3 may allow a local… | Exploited |
| CVE-2021-35394 | 16 Aug 2021 | CVSS 9.8 | Realtek Jungle SDK Remote Code ExecutionRealtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that is usually compiled as 'UDPServer' binary. The… | ExploitedFix |
| CVE-2020-8816 | 29 May 2020 | CVSS 7.2 | Pi-Hole AdminLTE Remote Code ExecutionPi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease. | ExploitedFix |
| CVE-2020-17463 | 13 Aug 2020 | CVSS 9.8 | Fuel CMS SQL InjectionFUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items. | Exploited |
| CVE-2019-7238 | 21 Mar 2019 | CVSS 9.8 | Sonatype Nexus Repository Manager Incorrect Access ControlSonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control. | Exploited |
| CVE-2019-13272 | 17 Jul 2019 | CVSS 7.8 | Linux Kernel Improper Privilege ManagementIn the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a… | ExploitedFix |
| CVE-2019-10758 | 24 Dec 2019 | CVSS 9.9 | MongoDB mongo-express Remote Code Executionmongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method. A misuse of the `vm` dependency to… | Exploited |
| CVE-2019-0193 | 1 Aug 2019 | CVSS 7.2 | Apache Solr DataImportHandler Code InjectionIn Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the… | ExploitedFix |
| CVE-2017-17562 | 12 Dec 2017 | CVSS 8.1 | Embedthis GoAhead Remote Code ExecutionEmbedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. This is a result of… | ExploitedFix |
| CVE-2017-12149 | 4 Oct 2017 | CVSS 9.8 | Red Hat JBoss Application Server Remote Code ExecutionIn Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter method in the… | Exploited |
| CVE-2010-1871 | 5 Aug 2010 | CVSS 8.8 | Red Hat Linux JBoss Seam 2 Remote Code ExecutionJBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss… | Exploited |
| CVE-2021-44077 | 29 Nov 2021 | CVSS 9.8 | Zoho ManageEngine ServiceDesk Plus Remote Code ExecutionZoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to… | ExploitedFix |
| CVE-2021-40438 | 16 Sep 2021 | CVSS 9.0 | Apache HTTP Server-Side Request Forgery (SSRF)A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP… | ExploitedFix |
| CVE-2021-37415 | 1 Sep 2021 | CVSS 9.8 | Zoho ManageEngine ServiceDesk Authentication BypassZoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs without authentication. | Exploited |
| CVE-2020-11261 | 9 Jun 2021 | CVSS 7.8 | Qualcomm Multiple Chipsets Improper Input ValidationMemory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto… | ExploitedFix |
| CVE-2018-14847 | 2 Aug 2018 | CVSS 9.1 | MikroTik Router OS Directory TraversalMikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary… | Exploited |
| CVE-2021-42321 | 10 Nov 2021 | CVSS 8.8 | Microsoft Exchange Server Remote Code ExecutionMicrosoft Exchange Server Remote Code Execution Vulnerability | ExploitedFix |
| CVE-2021-42292 | 10 Nov 2021 | CVSS 7.8 | Microsoft Excel Security Feature BypassMicrosoft Excel Security Feature Bypass Vulnerability | ExploitedFix |
| CVE-2021-40449 | 13 Oct 2021 | CVSS 7.8 | Microsoft Windows Win32k Privilege EscalationWin32k Elevation of Privilege Vulnerability | ExploitedFix |
| CVE-2021-22204 | 23 Apr 2021 | CVSS 7.8 | ExifTool Remote Code ExecutionImproper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the… | ExploitedFix |
| CVE-2021-42258 | 22 Oct 2021 | CVSS 9.8 | BQE BillQuick Web Suite SQL InjectionBQE BillQuick Web Suite 2018 through 2021 before 22.0.9.1 allows SQL injection for unauthenticated remote code execution, as exploited in the wild in… | Exploited |
| CVE-2021-42013 | 7 Oct 2021 | CVSS 9.8 | Apache HTTP Server Path TraversalIt was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs… | ExploitedFix |
| CVE-2021-41773 | 5 Oct 2021 | CVSS 9.8 | Apache HTTP Server Path TraversalA flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to… | ExploitedFix |
| CVE-2021-40539 | 7 Sep 2021 | CVSS 9.8 | Zoho ManageEngine ADSelfService Plus Authentication BypassZoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API authentication bypass with resultant remote code execution. | ExploitedFix |
| CVE-2021-40444 | 15 Sep 2021 | CVSS 8.8 | Microsoft MSHTML Remote Code ExecutionMicrosoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted… | ExploitedFix |
| CVE-2021-38649 | 15 Sep 2021 | CVSS 7.0 | Microsoft Open Management Infrastructure (OMI) Privilege EscalationOpen Management Infrastructure Elevation of Privilege Vulnerability | ExploitedFix |
| CVE-2021-38648 | 15 Sep 2021 | CVSS 7.8 | Microsoft Open Management Infrastructure (OMI) Privilege EscalationOpen Management Infrastructure Elevation of Privilege Vulnerability | ExploitedFix |
| CVE-2021-38647 | 15 Sep 2021 | CVSS 9.8 | Microsoft Open Management Infrastructure (OMI) Remote Code ExecutionOpen Management Infrastructure (OMI) Remote Code Execution Vulnerability | ExploitedFix |
| CVE-2021-38645 | 15 Sep 2021 | CVSS 7.8 | Microsoft Open Management Infrastructure (OMI) Privilege EscalationOpen Management Infrastructure Elevation of Privilege Vulnerability | ExploitedFix |
| CVE-2021-38003 | 23 Nov 2021 | CVSS 8.8 | Google Chromium V8 Memory CorruptionInappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a… | Exploited |
| CVE-2021-38000 | 23 Nov 2021 | CVSS 6.1 | Google Chromium Intents Improper Input ValidationInsufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily… | Exploited |
| CVE-2021-37976 | 8 Oct 2021 | CVSS 6.5 | Google Chromium Information DisclosureInappropriate implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to obtain potentially sensitive information… | Exploited |
| CVE-2021-37975 | 8 Oct 2021 | CVSS 8.8 | Google Chromium V8 Use-After-FreeUse after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | Exploited |
| CVE-2021-37973 | 8 Oct 2021 | CVSS 9.6 | Google Chromium Portals Use-After-FreeUse after free in Portals in Google Chrome prior to 94.0.4606.61 allowed a remote attacker who had compromised the renderer process to potentially… | ExploitedFix |
| CVE-2021-36955 | 15 Sep 2021 | CVSS 7.8 | Microsoft Windows Common Log File System (CLFS) Driver Privilege EscalationWindows Common Log File System Driver Elevation of Privilege Vulnerability | ExploitedFix |
| CVE-2021-36948 | 12 Aug 2021 | CVSS 7.8 | Microsoft Windows Update Medic Service Privilege EscalationWindows Update Medic Service Elevation of Privilege Vulnerability | ExploitedFix |
| CVE-2021-36942 | 12 Aug 2021 | CVSS 7.5 | Microsoft Windows Local Security Authority (LSA) SpoofingWindows LSA Spoofing Vulnerability | ExploitedFix |
| CVE-2021-36742 | 29 Jul 2021 | CVSS 7.8 | Trend Micro Multiple Products Improper Input ValidationA improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1… | Exploited |
| CVE-2021-36741 | 29 Jul 2021 | CVSS 8.8 | Trend Micro Multiple Products Improper Input ValidationAn improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 10.0 SP1… | Exploited |
| CVE-2021-35464 | 22 Jul 2021 | CVSS 9.8 | ForgeRock Access Management (AM) Core Server Remote Code ExecutionForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pages. The exploitation does… | Exploited |
| CVE-2021-35395 | 16 Aug 2021 | CVSS 9.8 | Realtek AP-Router SDK Buffer OverflowRealtek Jungle SDK version v2.x up to v3.4.14B provides an HTTP web server exposing a management interface that can be used to configure the access… | ExploitedFix |
| CVE-2021-35211 | 14 Jul 2021 | CVSS 10.0 | SolarWinds Serv-U Remote Code ExecutionMicrosoft discovered a remote code execution (RCE) vulnerability in the SolarWinds Serv-U product utilizing a Remote Memory Escape Vulnerability. If… | ExploitedFix |
| CVE-2021-34527 | 2 Jul 2021 | CVSS 8.8 | Microsoft Windows Print Spooler Remote Code ExecutionA remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who… | ExploitedFix |
| CVE-2021-34523 | 14 Jul 2021 | CVSS 9.0 | Microsoft Exchange Server Privilege EscalationMicrosoft Exchange Server Elevation of Privilege Vulnerability | ExploitedFix |
| CVE-2021-34473 | 14 Jul 2021 | CVSS 9.1 | Microsoft Exchange Server Remote Code ExecutionMicrosoft Exchange Server Remote Code Execution Vulnerability | ExploitedFix |
| CVE-2021-34448 | 16 Jul 2021 | CVSS 6.8 | Microsoft Windows Scripting Engine Memory CorruptionScripting Engine Memory Corruption Vulnerability | ExploitedFix |
| CVE-2021-33771 | 14 Jul 2021 | CVSS 7.8 | Microsoft Windows Kernel Privilege EscalationWindows Kernel Elevation of Privilege Vulnerability | ExploitedFix |
| CVE-2021-33742 | 8 Jun 2021 | CVSS 7.5 | Microsoft Windows MSHTML Platform Remote Code ExecutionWindows MSHTML Platform Remote Code Execution Vulnerability | ExploitedFix |
| CVE-2021-33739 | 8 Jun 2021 | CVSS 8.4 | Microsoft Desktop Window Manager (DWM) Core Library Privilege EscalationMicrosoft DWM Core Library Elevation of Privilege Vulnerability | ExploitedFix |
| CVE-2021-31979 | 14 Jul 2021 | CVSS 7.8 | Microsoft Windows Kernel Privilege EscalationWindows Kernel Elevation of Privilege Vulnerability | ExploitedFix |
| CVE-2021-31956 | 8 Jun 2021 | CVSS 7.8 | Microsoft Windows NTFS Privilege EscalationWindows NTFS Elevation of Privilege Vulnerability | ExploitedFix |
| CVE-2021-31955 | 8 Jun 2021 | CVSS 5.5 | Microsoft Windows Kernel Information DisclosureWindows Kernel Information Disclosure Vulnerability | ExploitedFix |
| CVE-2021-31755 | 7 May 2021 | CVSS 9.8 | Tenda AC11 Router Stack Buffer OverflowAn issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setmac allows… | Exploited |
Page 15 of 18