Latest vulnerabilities
Every new CVE with its exploitation status, public exploits and fixes — from more than 20 public sources, updated hourly.
- Tracked
- 409,241
- Last 24h
- 581
- Critical, 7 days
- 356
- Known exploited
- 1,779
1,796 results · Clear filters · Feed
-
High 8.1
Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 a…
KEV Jun 8, 2022 -
Critical 9.8
Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow…
KEV Mar 3, 2022 -
High 7.8
Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on …
KEV Mar 3, 2022 -
High 8.8
The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Compo…
KEV Mar 3, 2022 -
High 7.8
Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; …
KEV Apr 13, 2026 -
Critical 9.8
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 u…
KEV Mar 3, 2022 -
High 8.8
Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attacke…
KEV Jun 8, 2022 -
High 7.5CVE-2012-2034 Exploited
Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x…
KEV Mar 28, 2022 -
Critical 9.8
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 U…
KEV Mar 3, 2022 -
Critical 9.8
sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does no…
KEV Mar 25, 2022 -
Critical 9.8CVE-2012-1710 Exploited · Ransomware
Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allo…
KEV May 25, 2022 -
High 7.8
The Authenticode Signature Verification function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows …
KEV Jun 8, 2022 -
High 8.8
The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Control…
KEV Nov 3, 2021 -
Medium 6.1CVE-2012-0767 Exploited
Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Window…
KEV Jun 8, 2022 -
High 7.8
Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1…
KEV Jun 8, 2022 -
Critical 9.8
Apache Struts Remote Java Code Execution
The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during certain exception handling for mismatched data types of properties, which allows remote attackers to execute arbitrary Java code via a craf…
KEV Jan 21, 2022 -
Medium 5.7CVE-2011-4723 Exploited
The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive info…
KEV Sep 8, 2022 -
High 8.8
Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, …
KEV Jun 8, 2022 -
High 8.8
Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Win…
KEV Oct 6, 2025 -
Critical 9.8
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and…
KEV Mar 3, 2022 -
High 7.8
afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly vali…
KEV Mar 28, 2022 -
Critical 9.8
The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remo…
KEV Mar 3, 2022 -
High 7.8
The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK …
KEV Sep 8, 2022 -
High 8.8
Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; …
KEV Mar 3, 2022 -
High 7.8
Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.…
KEV Jun 8, 2022 -
Critical 9.8
Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to ex…
KEV Mar 25, 2022 -
High 7.8
Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to speci…
KEV Mar 25, 2022 -
High 7.8
The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the…
KEV May 12, 2023 -
High 7.8
Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, W…
KEV Mar 28, 2022 -
High 7.8
Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and …
KEV Mar 3, 2022 -
High 7.8
Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a c…
KEV Jun 8, 2022 -
High 8.1
Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary co…
KEV Oct 6, 2025 -
Critical 9.8
Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, …
KEV Oct 6, 2025 -
High 7.3
Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows…
KEV Jun 8, 2022 -
High 7.5CVE-2010-3035 Exploited
Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, whi…
KEV Mar 25, 2022 -
High 7.5
Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow r…
KEV Mar 25, 2022 -
High 8.8
JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly…
KEV Dec 10, 2021 -
High 7.8
Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 al…
KEV Sep 15, 2022 -
High 7.8
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acro…
KEV Jun 8, 2022 -
Low 3.7
The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.…
KEV May 25, 2022