Latest vulnerabilities

Every new CVE with its exploitation status, public exploits and fixes — from more than 20 public sources, updated hourly.

Tracked: 408,954
Last 24h: 2,003
Critical, 7 days: 353
Known exploited: 1,779

All Critical High Medium Low Exploited only Public exploit

565 results · Clear filters · Feed

High 8.8

CVE-2023-21674 Exploited Public exploit EPSS 34%

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 10, 2023
KEV Jan 10, 2023
High 8.8

CVE-2022-26485 Exploited Public exploit EPSS 14%

Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of a…

Mozilla Firefox Thunderbird Firefox ESR Android Browsers Debian Ubuntu Alpine

Dec 22, 2022
KEV Mar 7, 2022
High 8.8

CVE-2022-4262 Exploited Public exploit EPSS 24%

Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corr…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Dec 2, 2022
KEV Dec 5, 2022
High 8.8

CVE-2022-41080 Exploited · Ransomware Public exploit EPSS 77%

Microsoft Exchange Server Elevation of Privilege Vulnerability

Microsoft Exchange Server Elevation of Privilege Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 12

Nov 9, 2022
KEV Jan 10, 2023
High 8.8

CVE-2022-38181 Exploited Public exploit EPSS 18%

The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are misha…

Oct 25, 2022
KEV Mar 30, 2023
High 8.8

CVE-2022-41040 Exploited · Ransomware Public exploit EPSS 100%

Microsoft Exchange Server Elevation of Privilege Vulnerability

Microsoft Exchange Server Elevation of Privilege Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 12

Oct 3, 2022
KEV Sep 30, 2022
High 8.0

CVE-2022-41082 Exploited · Ransomware Public exploit EPSS 100%

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 12

Oct 3, 2022
KEV Sep 30, 2022
High 7.8

CVE-2022-37969 Exploited · Ransomware Public exploit EPSS 28%

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Sep 13, 2022
KEV Sep 14, 2022
High 7.5

CVE-2022-36537 Exploited · Ransomware Public exploit EPSS 95%

ZK Framework vulnerable to malicious POST

ZK Framework v9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 allows attackers to access sensitive information via a crafted POST request sent to the component AuUploader.

org.zkoss.zk:zk Maven

Aug 26, 2022
KEV Feb 27, 2023
High 8.8

CVE-2022-36804 Exploited Public exploit EPSS 99%

Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 be…

Atlassian Bitbucket Server Bitbucket Data Center

Aug 25, 2022
KEV Sep 30, 2022
High 8.8

CVE-2022-1364 Exploited Public exploit EPSS 14%

Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Jul 26, 2022
KEV Apr 15, 2022
High 8.8

CVE-2022-1096 Exploited Public exploit EPSS 25%

Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corru…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Jul 22, 2022
KEV Mar 28, 2022
High 8.8

CVE-2022-33891 Exploited Public exploit EPSS 93%

Apache Spark shell command injection vulnerability via Spark UI

The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in H…

Apache Software Foundation Apache Spark pyspark org.apache.spark:spark-parent_2.12 Maven PyPI

Jul 18, 2022
KEV Mar 7, 2023
High 7.8

CVE-2022-30190 Exploited · Ransomware Public exploit EPSS 99%

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. Th…

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jun 1, 2022
KEV Jun 14, 2022
High 8.8

CVE-2022-26923 Exploited Public exploit EPSS 84%

Active Directory Domain Services Elevation of Privilege Vulnerability

Active Directory Domain Services Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

May 10, 2022
KEV Aug 18, 2022
High 7.2

CVE-2022-27925 Exploited · Ransomware Public exploit EPSS 99%

Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts fil…

Apr 20, 2022
KEV Aug 11, 2022
High 7.0

CVE-2022-26904 Exploited Public exploit EPSS 17%

Windows User Profile Service Elevation of Privilege Vulnerability

Windows User Profile Service Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 15, 2022
KEV Apr 25, 2022
High 7.8

CVE-2022-24521 Exploited · Ransomware Public exploit

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 15, 2022
KEV Apr 13, 2022
High 7.8

CVE-2022-22960 Exploited Public exploit EPSS 36%

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due …

Apr 13, 2022
KEV Apr 15, 2022
High 7.8

CVE-2022-0995 Exploited Public exploit

An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Mar 25, 2022
KEV Aug 26, 2026
High 8.8

CVE-2022-22620 Exploited Public exploit EPSS 16%

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS…

Apple macOS Safari (v and ) qtwebkit-source macOS Browsers Debian Ubuntu Alpine

Mar 18, 2022
KEV Feb 11, 2022
High 7.8

CVE-2022-0847 Exploited Public exploit EPSS 93%

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in co…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Mar 7, 2022
KEV Apr 25, 2022
High 7.8

CVE-2022-22706 Exploited Public exploit

Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects…

Mar 3, 2022
KEV Mar 30, 2023
High 7.8

CVE-2022-0492 Exploited Public exploit

A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. T…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Mar 3, 2022
KEV Jun 2, 2026
High 7.8

CVE-2021-3560 Exploited Public exploit EPSS 22%

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privil…

policykit-1 policykit-1 polkit Debian Ubuntu Alpine

Feb 16, 2022
KEV May 12, 2023
High 8.4

CVE-2022-0185 Exploited Public exploit EPSS 25%

A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functi…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Feb 11, 2022
KEV Aug 21, 2024
High 7.8

CVE-2022-22718 Exploited Public exploit EPSS 18%

Windows Print Spooler Elevation of Privilege Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 9, 2022
KEV Apr 19, 2022
High 7.8

CVE-2022-21999 Exploited · Ransomware Public exploit EPSS 41%

Windows Print Spooler Elevation of Privilege Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 9, 2022
KEV Mar 25, 2022
High 7.8

CVE-2022-21971 Exploited Public exploit EPSS 54%

Windows Runtime Remote Code Execution Vulnerability

Windows Runtime Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 9, 2022
KEV Aug 18, 2022
High 7.8

CVE-2021-4034 Exploited · Ransomware Public exploit EPSS 95%

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid too…

policykit-1 policykit-1 polkit Debian Ubuntu Alpine

Jan 28, 2022
KEV Jun 27, 2022
High 7.0

CVE-2022-21882 Exploited · Ransomware Public exploit EPSS 59%

Win32k Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 11, 2022
KEV Feb 4, 2022
High 7.5

CVE-2021-22054 Exploited Public exploit EPSS 100%

VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and…

Dec 17, 2021
KEV Mar 9, 2026
High 7.8

CVE-2021-43226 Exploited · Ransomware Public exploit

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 15, 2021
KEV Oct 6, 2025
High 7.5

CVE-2021-43798 Exploited Public exploit EPSS 89%

Grafana path traversal

Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 (except for patched versions) iss vulnerable to directory traversal, allowing access to local files. The vulnerable URL path is: `<grafana_host_url…

Grafana Grafana github.com/grafana/grafana grafana Web / CMS Alpine Go

Dec 7, 2021
KEV Oct 9, 2025
High 8.1

CVE-2021-23758 Exploited Public exploit EPSS 83%

Deserialization of Untrusted Data

All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization of arbitrary .NET classes, which can be abused to gain remote code execution.

AjaxNetProfessional NuGet

Dec 3, 2021
KEV Aug 26, 2026
High 8.8

CVE-2021-38003 Exploited Public exploit EPSS 39%

Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially expl…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Nov 23, 2021
KEV Nov 3, 2021
High 8.8

CVE-2021-42321 Exploited · Ransomware Public exploit EPSS 92%

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2019 Cumulative Update 11 Microsoft Exchange Server 2016 Cumulative Update 22 Microsoft Exchange Server 2016 Cumulative Update 21

Nov 10, 2021
KEV Nov 17, 2021
High 7.8

CVE-2021-42292 Exploited Public exploit EPSS 43%

Microsoft Excel Security Feature Bypass Vulnerability

Microsoft Excel Security Feature Bypass Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC for Mac 2021

Nov 10, 2021
KEV Nov 17, 2021
High 7.5

CVE-2021-42287 Exploited · Ransomware Public exploit EPSS 77%

Active Directory Domain Services Elevation of Privilege Vulnerability

Active Directory Domain Services Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Nov 10, 2021
KEV Apr 11, 2022
High 7.5

CVE-2021-42278 Exploited · Ransomware Public exploit EPSS 73%

Active Directory Domain Services Elevation of Privilege Vulnerability

Active Directory Domain Services Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Nov 10, 2021
KEV Apr 11, 2022

Latest vulnerabilities

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of a…

Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corr…

Microsoft Exchange Server Elevation of Privilege Vulnerability

The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are misha…

Microsoft Exchange Server Elevation of Privilege Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

ZK Framework vulnerable to malicious POST

Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 be…

Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit…

Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corru…

Apache Spark shell command injection vulnerability via Spark UI

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

Active Directory Domain Services Elevation of Privilege Vulnerability

Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts fil…

Windows User Profile Service Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due …

An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This…

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS…

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in co…

Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects…

A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. T…

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privil…

A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functi…

Windows Print Spooler Elevation of Privilege Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

Windows Runtime Remote Code Execution Vulnerability

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid too…

Win32k Elevation of Privilege Vulnerability

VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and…

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Grafana path traversal

Deserialization of Untrusted Data

Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially expl…

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Excel Security Feature Bypass Vulnerability

Active Directory Domain Services Elevation of Privilege Vulnerability

Active Directory Domain Services Elevation of Privilege Vulnerability