[ Exploited · 1,754 CVEs ]
Exploited in the wild.
Every CVE on CISA's Known Exploited Vulnerabilities catalogue, most recently added first. If you run one of these products, patch it now.
KEV catalogue version 2026.10.21
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2023-7024 | 21 Dec 2023 | CVSS 8.8 | Google Chromium WebRTC Heap Buffer OverflowHeap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a… | Exploited |
| CVE-2023-49897 | 6 Dec 2023 | CVSS 8.8 | FXC AE1021, AE1021PE OS Command InjectionAn OS command injection vulnerability exists in AE1021PE firmware version 2.0.9 and earlier and AE1021 firmware version 2.0.9 and earlier. If this… | Exploited |
| CVE-2023-47565 | 8 Dec 2023 | CVSS 8.8 | QNAP VioStor NVR OS Command InjectionAn OS command injection vulnerability has been found to affect legacy QNAP VioStor NVR models running QVR Firmware 4.x. If exploited, the… | Exploited |
| CVE-2023-6448 | 5 Dec 2023 | CVSS 9.8 | Unitronics Vision PLC and HMI Insecure Default PasswordUnitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated… | Exploited |
| CVE-2023-41266 | 29 Aug 2023 | CVSS 6.5 | Qlik Sense Path TraversalA path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and… | Exploited |
| CVE-2023-41265 | 29 Aug 2023 | CVSS 9.9 | Qlik Sense HTTP TunnelingAn HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7… | Exploited |
| CVE-2023-33107 | 5 Dec 2023 | CVSS 7.8 | Qualcomm Multiple Chipsets Integer OverflowMemory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call. | ExploitedFix |
| CVE-2023-33106 | 5 Dec 2023 | CVSS 7.8 | Qualcomm Multiple Chipsets Use of Out-of-Range Pointer OffsetMemory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND. | ExploitedFix |
| CVE-2023-33063 | 5 Dec 2023 | CVSS 7.8 | Qualcomm Multiple Chipsets Use-After-FreeMemory corruption in DSP Services during a remote call from HLOS to DSP. | ExploitedFix |
| CVE-2022-22071 | 14 Jun 2022 | CVSS 7.8 | Qualcomm Multiple Chipsets Use-After-FreePossible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto… | ExploitedFix |
| CVE-2023-42917 | 30 Nov 2023 | CVSS 8.8 | Apple Multiple Products WebKit Memory CorruptionA memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2… | Exploited |
| CVE-2023-42916 | 30 Nov 2023 | CVSS 6.5 | Apple Multiple Products WebKit Out-of-Bounds ReadAn out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari… | Exploited |
| CVE-2023-6345 | 29 Nov 2023 | CVSS 9.6 | Google Skia Integer OverflowInteger overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially… | Exploited |
| CVE-2023-49103 | 21 Nov 2023 | CVSS 7.5 | ownCloud graphapi Information DisclosureAn issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relies on a third-party… | Exploited |
| CVE-2023-4911 | 3 Oct 2023 | CVSS 7.8 | GNU C Library Buffer OverflowA buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue… | ExploitedFix |
| CVE-2023-36584 | 10 Oct 2023 | CVSS 5.4 | Microsoft Windows Mark of the Web (MOTW) Security Feature BypassWindows Mark of the Web Security Feature Bypass Vulnerability | ExploitedFix |
| CVE-2023-1671 | 4 Apr 2023 | CVSS 9.8 | Sophos Web Appliance Command InjectionA pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution of… | Exploited |
| CVE-2020-2551 | 15 Jan 2020 | CVSS 9.8 | Oracle Fusion Middleware UnspecifiedVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Supported versions that are… | ExploitedFix |
| CVE-2023-36036 | 14 Nov 2023 | CVSS 7.8 | Microsoft Windows Cloud Files Mini Filter Driver Privilege EscalationWindows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | ExploitedFix |
| CVE-2023-36033 | 14 Nov 2023 | CVSS 7.8 | Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege EscalationWindows DWM Core Library Elevation of Privilege Vulnerability | ExploitedFix |
| CVE-2023-36025 | 14 Nov 2023 | CVSS 8.8 | Microsoft Windows SmartScreen Security Feature BypassWindows SmartScreen Security Feature Bypass Vulnerability | ExploitedFix |
| CVE-2023-47246 | 10 Nov 2023 | CVSS 9.8 | SysAid Server Path TraversalIn SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a file to the Tomcat webroot, as… | Exploited |
| CVE-2023-36851 | 27 Sep 2023 | CVSS 5.3 | Juniper Junos OS SRX Series Missing Authentication for Critical FunctionA Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based… | Exploited |
| CVE-2023-36847 | 17 Aug 2023 | CVSS 5.3 | Juniper Junos OS EX Series Missing Authentication for Critical FunctionA Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based… | Exploited |
| CVE-2023-36846 | 17 Aug 2023 | CVSS 5.3 | Juniper Junos OS SRX Series Missing Authentication for Critical FunctionA Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based… | Exploited |
| CVE-2023-36845 | 17 Aug 2023 | CVSS 9.8 | Juniper Junos OS EX Series and SRX Series PHP External Variable ModificationA PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated… | Exploited |
| CVE-2023-36844 | 17 Aug 2023 | CVSS 5.3 | Juniper Junos OS EX Series PHP External Variable ModificationA PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based… | Exploited |
| CVE-2023-29552 | 25 Apr 2023 | CVSS 7.5 | Service Location Protocol (SLP) Denial-of-ServiceThe Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the… | Exploited |
| CVE-2023-22518 | 31 Oct 2023 | CVSS 9.8 | Atlassian Confluence Data Center and Server Improper AuthorizationAll versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authorization vulnerability allows an… | Exploited |
| CVE-2023-46604 | 27 Oct 2023 | CVSS 9.8 | Apache ActiveMQ Deserialization of Untrusted DataThe Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to… | Exploited |
| CVE-2023-46748 | 26 Oct 2023 | CVSS 8.8 | F5 BIG-IP Configuration Utility SQL InjectionAn authenticated SQL injection vulnerability exists in the BIG-IP Configuration utility which may allow an authenticated attacker with network access… | Exploited |
| CVE-2023-46747 | 26 Oct 2023 | CVSS 9.8 | F5 BIG-IP Configuration Utility Authentication BypassUndisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the… | Exploited |
| CVE-2023-5631 | 18 Oct 2023 | CVSS 5.4 | Roundcube Webmail Persistent Cross-Site Scripting (XSS)Roundcube before 1.4.15, 1.5.x before 1.5.5, and 1.6.x before 1.6.4 allows stored XSS via an HTML e-mail message with a crafted SVG document because… | ExploitedFix |
| CVE-2023-20273 | 25 Oct 2023 | CVSS 7.2 | Cisco IOS XE Web UI Command InjectionA vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the privileges… | Exploited |
| CVE-2023-4966 | 10 Oct 2023 | CVSS 7.5 | Citrix NetScaler ADC and NetScaler Gateway Buffer OverflowSensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy)… | Exploited |
| CVE-2023-20198 | 16 Oct 2023 | CVSS 10.0 | Cisco IOS XE Web UI Privilege EscalationCisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software. We are updating… | Exploited |
| CVE-2023-44487 | 10 Oct 2023 | CVSS 7.5 | HTTP/2 Rapid Reset AttackThe HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as… | ExploitedFix |
| CVE-2023-41763 | 10 Oct 2023 | CVSS 5.3 | Microsoft Skype for Business Privilege EscalationSkype for Business Elevation of Privilege Vulnerability | ExploitedFix |
| CVE-2023-36563 | 10 Oct 2023 | CVSS 5.5 | Microsoft WordPad Information DisclosureMicrosoft WordPad Information Disclosure Vulnerability | ExploitedFix |
| CVE-2023-21608 | 18 Jan 2023 | CVSS 7.8 | Adobe Acrobat and Reader Use-After-FreeAdobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Use After Free… | Exploited |
| CVE-2023-20109 | 27 Sep 2023 | CVSS 6.6 | Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds WriteA vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Software could allow an… | Exploited |
| CVE-2023-42824 | 4 Oct 2023 | CVSS 7.8 | Apple iOS and iPadOS Kernel Privilege EscalationThe issue was addressed with improved checks. This issue is fixed in iOS 16.7.1 and iPadOS 16.7.1. A local attacker may be able to elevate their… | Exploited |
| CVE-2023-40044 | 27 Sep 2023 | CVSS 8.8 | Progress WS_FTP Server Deserialization of Untrusted DataIn WS_FTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc… | Exploited |
| CVE-2023-22515 | 4 Oct 2023 | CVSS 9.8 | Atlassian Confluence Data Center and Server Broken Access ControlAtlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknown… | Exploited |
| CVE-2023-42793 | 19 Sep 2023 | CVSS 9.8 | JetBrains TeamCity Authentication BypassIn JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible | Exploited |
| CVE-2023-28229 | 11 Apr 2023 | CVSS 7.0 | Microsoft Windows CNG Key Isolation Service Privilege EscalationWindows CNG Key Isolation Service Elevation of Privilege Vulnerability | ExploitedFix |
| CVE-2023-4211 | 1 Oct 2023 | CVSS 5.5 | Arm Mali GPU Kernel Driver Use-After-FreeA local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory. | Exploited |
| CVE-2023-5217 | 28 Sep 2023 | CVSS 8.8 | Google Chromium libvpx Heap Buffer OverflowHeap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially… | ExploitedFix |
| CVE-2018-14667 | 6 Nov 2018 | CVSS 9.8 | Red Hat JBoss RichFaces Framework Expression Language InjectionThe RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote… | Exploited |
| CVE-2023-41993 | 21 Sep 2023 | CVSS 8.8 | Apple Multiple Products WebKit Code ExecutionThe issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution… | Exploited |
| CVE-2023-41992 | 21 Sep 2023 | CVSS 7.8 | Apple Multiple Products Kernel Privilege EscalationThe issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, macOS Ventura 13.6. A local… | Exploited |
| CVE-2023-41991 | 21 Sep 2023 | CVSS 5.5 | Apple Multiple Products Improper Certificate ValidationA certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A malicious app may be able to… | Exploited |
| CVE-2023-41179 | 19 Sep 2023 | CVSS 7.2 | Trend Micro Apex One and Worry-Free Business Security Remote Code ExecutionA vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security and… | Exploited |
| CVE-2023-28434 | 22 Mar 2023 | CVSS 8.8 | MinIO Security Feature BypassMinio is a Multi-Cloud Object Storage framework. Prior to RELEASE.2023-03-20T20-16-18Z, an attacker can use crafted requests to bypass metadata… | ExploitedFix |
| CVE-2022-22265 | 10 Jan 2022 | CVSS 7.8 | Samsung Mobile Devices Use-After-FreeAn improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code… | Exploited |
| CVE-2021-3129 | 12 Jan 2021 | CVSS 9.8 | Laravel Ignition File UploadIgnition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitrary code because of insecure… | ExploitedFix |
| CVE-2017-6884 | 6 Apr 2017 | CVSS 8.8 | Zyxel EMG2926 Routers Command InjectionA command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware V1.00(AAQT.4)b8. The vulnerability is located in the… | Exploited |
| CVE-2014-8361 | 1 May 2015 | CVSS 9.8 | Realtek SDK Improper Input ValidationThe miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in… | Exploited |
| CVE-2023-26369 | 13 Sep 2023 | CVSS 7.8 | Adobe Acrobat and Reader Out-of-Bounds WriteAcrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write… | Exploited |
| CVE-2023-4863 | 12 Sep 2023 | CVSS 8.8 | Google Chromium WebP Heap-Based Buffer OverflowHeap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds… | ExploitedFix |
| CVE-2023-35674 | 11 Sep 2023 | CVSS 7.8 | Android Framework Privilege EscalationIn onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead to local… | ExploitedFix |
| CVE-2023-20269 | 6 Sep 2023 | CVSS 9.1 | Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized AccessA vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD)… | Exploited |
| CVE-2023-36802 | 12 Sep 2023 | CVSS 7.8 | Microsoft Streaming Service Proxy Privilege EscalationMicrosoft Streaming Service Proxy Elevation of Privilege Vulnerability | ExploitedFix |
| CVE-2023-36761 | 12 Sep 2023 | CVSS 6.5 | Microsoft Word Information DisclosureMicrosoft Word Information Disclosure Vulnerability | ExploitedFix |
| CVE-2023-41064 | 7 Sep 2023 | CVSS 7.8 | Apple iOS, iPadOS, and macOS ImageIO Buffer OverflowA buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1, macOS Monterey 12.6.9… | Exploited |
| CVE-2023-41061 | 7 Sep 2023 | CVSS 7.8 | Apple iOS, iPadOS, and watchOS Wallet Code ExecutionA validation issue was addressed with improved logic. This issue is fixed in watchOS 9.6.2, iOS 16.6.1 and iPadOS 16.6.1. A maliciously crafted… | Exploited |
| CVE-2023-33246 | 24 May 2023 | CVSS 9.8 | Apache RocketMQ Command ExecutionFor RocketMQ versions 5.1.0 and below, under certain conditions, there is a risk of remote command execution. Several components of RocketMQ… | Exploited |
| CVE-2023-38831 | 23 Aug 2023 | CVSS 7.8 | RARLAB WinRAR Code ExecutionRARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The issue… | Exploited |
| CVE-2023-32315 | 26 May 2023 | CVSS 7.5 | Ignite Realtime Openfire Path TraversalOpenfire is an XMPP server licensed under the Open Source Apache License. Openfire's administrative console, a web-based application, was found to be… | ExploitedFix |
| CVE-2023-38035 | 21 Aug 2023 | CVSS 9.8 | Ivanti Sentry Authentication BypassA security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an attacker to bypass… | Exploited |
| CVE-2023-27532 | 10 Mar 2023 | CVSS 7.5 | Veeam Backup & Replication Cloud Connect Missing Authentication for Critical FunctionVulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. This may lead… | Exploited |
| CVE-2023-26359 | 23 Mar 2023 | CVSS 9.8 | Adobe ColdFusion Deserialization of Untrusted DataAdobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by a Deserialization of Untrusted Data… | ExploitedFix |
| CVE-2023-24489 | 10 Jul 2023 | CVSS 9.8 | Citrix Content Collaboration ShareFile Improper Access ControlA vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated… | Exploited |
| CVE-2023-38180 | 8 Aug 2023 | CVSS 7.5 | Microsoft .NET Core and Visual Studio Denial-of-Service.NET and Visual Studio Denial of Service Vulnerability | ExploitedFix |
| CVE-2017-18368 | 2 May 2019 | CVSS 9.8 | Zyxel P660HN-T1A Routers Command InjectionThe ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has a command injection vulnerability in the… | Exploited |
| CVE-2023-35081 | 3 Aug 2023 | CVSS 7.2 | Ivanti Endpoint Manager Mobile (EPMM) Path TraversalA path traversal vulnerability in Ivanti EPMM versions (11.10.x < 11.10.0.3, 11.9.x < 11.9.1.2 and 11.8.x < 11.8.1.2) allows an authenticated… | Exploited |
| CVE-2023-37580 | 31 Jul 2023 | CVSS 6.1 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS)Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41 allows XSS in the Zimbra Classic Web Client. | ExploitedFix |
| CVE-2023-38606 | 27 Jul 2023 | CVSS 5.5 | Apple Multiple Products Kernel UnspecifiedThis issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and… | Exploited |
| CVE-2023-35078 | 25 Jul 2023 | CVSS 9.8 | Ivanti Endpoint Manager Mobile Authentication BypassAn authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of the application… | Exploited |
| CVE-2023-38205 | 14 Sep 2023 | CVSS 7.5 | Adobe ColdFusion Improper Access ControlAdobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control… | Exploited |
| CVE-2023-29298 | 12 Jul 2023 | CVSS 7.5 | Adobe ColdFusion Improper Access ControlAdobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by an Improper Access Control… | Exploited |
| CVE-2023-3519 | 19 Jul 2023 | CVSS 9.8 | Citrix NetScaler ADC and NetScaler Gateway Code InjectionUnauthenticated remote code execution | Exploited |
| CVE-2023-36884 | 11 Jul 2023 | CVSS 7.5 | Microsoft Windows Search Remote Code ExecutionWindows Search Remote Code Execution Vulnerability | ExploitedFix |
| CVE-2023-37450 | 27 Jul 2023 | CVSS 8.8 | Apple Multiple Products WebKit Code ExecutionThe issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, Safari 16.5.2, tvOS 16.6, macOS Ventura 13.5, watchOS… | Exploited |
| CVE-2022-29303 | 12 May 2022 | CVSS 9.8 | SolarView Compact Command InjectionSolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php. | Exploited |
| CVE-2023-36874 | 11 Jul 2023 | CVSS 7.8 | Microsoft Windows Error Reporting Service Privilege EscalationWindows Error Reporting Service Elevation of Privilege Vulnerability | ExploitedFix |
| CVE-2023-35311 | 11 Jul 2023 | CVSS 8.8 | Microsoft Outlook Security Feature BypassMicrosoft Outlook Security Feature Bypass Vulnerability | ExploitedFix |
| CVE-2023-32049 | 11 Jul 2023 | CVSS 8.8 | Microsoft Windows Defender SmartScreen Security Feature BypassWindows SmartScreen Security Feature Bypass Vulnerability | ExploitedFix |
| CVE-2023-32046 | 11 Jul 2023 | CVSS 7.8 | Microsoft Windows MSHTML Platform Privilege EscalationWindows MSHTML Platform Elevation of Privilege Vulnerability | ExploitedFix |
| CVE-2022-31199 | 8 Nov 2022 | CVSS 9.8 | Netwrix Auditor Insecure Object DeserializationRemote code execution vulnerabilities exist in the Netwrix Auditor User Activity Video Recording component affecting both the Netwrix Auditor server… | Exploited |
| CVE-2021-29256 | 24 May 2021 | CVSS 8.8 | Arm Mali GPU Kernel Driver Use-After-Free. The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information disclosure or root privilege… | Exploited |
| CVE-2021-25489 | 6 Oct 2021 | CVSS 5.5 | Samsung Mobile Devices Improper Input ValidationAssuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug… | Exploited |
| CVE-2021-25487 | 6 Oct 2021 | CVSS 7.8 | Samsung Mobile Devices Out-of-Bounds ReadLack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in… | Exploited |
| CVE-2021-25395 | 11 Jun 2021 | CVSS 6.4 | Samsung Mobile Devices Race ConditionA race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is… | Exploited |
| CVE-2021-25394 | 11 Jun 2021 | CVSS 6.4 | Samsung Mobile Devices Race ConditionA use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio… | Exploited |
| CVE-2021-25372 | 26 Mar 2021 | CVSS 6.7 | Samsung Mobile Devices Improper Boundary CheckAn improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access. | Exploited |
| CVE-2021-25371 | 26 Mar 2021 | CVSS 6.7 | Samsung Mobile Devices UnspecifiedA vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP. | Exploited |
| CVE-2019-20500 | 5 Mar 2020 | CVSS 7.8 | D-Link DWL-2600AP Access Point Command InjectionD-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Save Configuration functionality in the Web… | ExploitedFix |
| CVE-2019-17621 | 30 Dec 2019 | CVSS 9.8 | D-Link DIR-859 Router Command ExecutionThe UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute… | ExploitedFix |
| CVE-2023-32439 | 23 Jun 2023 | CVSS 8.8 | Apple Multiple Products WebKit Type ConfusionA type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPadOS 16.5.1, iOS 15.7.7 and iPadOS 15.7.7, macOS… | Exploited |
Page 8 of 18