February 2026

12 results · Clear filters · Feed

• High 8.1
  CVE-2026-22719 Exploited EPSS 18%

  VMware Aria Operations command injection vulnerability

  VMware Aria Operations contains a command injection vulnerability. A malicious unauthenticated actor may exploit this issue to execute arbitrary commands which may lead to remote code execution in VMware Aria Operations while support-assisted product migratio…

  VMware Telco Cloud Platform VMware Aria Operations Telco Cloud Infrastructure
  Feb 25, 2026

  KEV Mar 3, 2026
• High 7.5
  CVE-2026-20128 Exploited

  Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability

  A vulnerability in the Data Collection Agent (DCA) feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain DCA user privileges on an affected system. This vulnerability is due to the presence of a credential file for t…

  Cisco Cisco Catalyst SD-WAN Manager Network devices
  Feb 25, 2026

  KEV Apr 20, 2026
• High 8.8
  CVE-2026-2441 Exploited Public exploit EPSS 54%

  Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code insid…

  Google Chrome chromium chromium Browsers Debian Alpine Wolfi
  Feb 13, 2026

  KEV Feb 17, 2026
• High 8.8
  CVE-2026-25108 Exploited

  FileZen contains an OS command injection vulnerability. When FileZen Antivirus Check Option is enabled, a logged-in use…

  Soliton Systems K.K. FileZen
  Feb 13, 2026

  KEV Feb 24, 2026
• High 7.8
  CVE-2026-20700 Exploited Public exploit

  A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3…

  Apple macOS iOS and iPadOS watchOS macOS iOS
  Feb 11, 2026

  KEV Feb 12, 2026
• High 7.8
  CVE-2026-21514 Exploited Public exploit

  Microsoft Word Security Feature Bypass Vulnerability

  Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Feb 10, 2026

  KEV Feb 10, 2026
• High 8.8
  CVE-2026-21510 Exploited Public exploit EPSS 61%

  Windows Shell Security Feature Bypass Vulnerability

  Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Feb 10, 2026

  KEV Feb 10, 2026
• High 7.8
  CVE-2026-21533 Exploited Public exploit

  Windows Remote Desktop Services Elevation of Privilege Vulnerability

  Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Feb 10, 2026

  KEV Feb 10, 2026
• High 8.8
  CVE-2026-21513 Exploited EPSS 16%

  MSHTML Framework Security Feature Bypass Vulnerability

  Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Feb 10, 2026

  KEV Feb 10, 2026
• High 7.8
  CVE-2026-21519 Exploited

  Desktop Window Manager Elevation of Privilege Vulnerability

  Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Feb 10, 2026

  KEV Feb 10, 2026
• High 8.6
  CVE-2026-1603 Exploited Scanner template EPSS 88%

  An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to…

  ivanti Endpoint Manager Network devices
  Feb 10, 2026

  KEV Mar 9, 2026
• High 7.7
  CVE-2025-15556 Exploited Public exploit

  Notepad++ < 8.8.9 WinGUp Updater Lacks Update Integrity Verification

  Notepad++ versions prior to 8.8.9, when using the WinGUp updater, contain an update integrity verification vulnerability where downloaded update metadata and installers are not cryptographically verified. An attacker able to intercept or redirect update traff…

  notepad-plus-plus notepad-plus-plus
  Feb 3, 2026

  KEV Feb 12, 2026