Latest vulnerabilities

Every new CVE with its exploitation status, public exploits and fixes — from more than 20 public sources, updated hourly.

Tracked: 409,349
Last 24h: 687
Critical, 7 days: 356
Known exploited: 1,779

All Critical High Medium Low Exploited only Public exploit

931 results · Clear filters · Feed

High 8.8

CVE-2022-1096 Exploited Public exploit EPSS 25%

Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corru…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Jul 22, 2022
KEV Mar 28, 2022
High 8.8

CVE-2022-33891 Exploited Public exploit EPSS 93%

Apache Spark shell command injection vulnerability via Spark UI

The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in H…

Apache Software Foundation Apache Spark pyspark org.apache.spark:spark-parent_2.12 Maven PyPI

Jul 18, 2022
KEV Mar 7, 2023
High 7.8

CVE-2022-22047 Exploited EPSS 18%

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 12, 2022
KEV Jul 12, 2022
High 8.4

CVE-2022-22071 Exploited

Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in pro…

Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wear

Jun 14, 2022
KEV Dec 5, 2023
High 7.8

CVE-2022-30190 Exploited · Ransomware Public exploit EPSS 99%

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. Th…

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jun 1, 2022
KEV Jun 14, 2022
High 7.8

CVE-2022-22675 Exploited EPSS 12%

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, watchOS 8.6…

Apple macOS iOS and iPadOS watchOS macOS iOS

May 26, 2022
KEV Apr 4, 2022
High 8.1

CVE-2022-26925 Exploited EPSS 10%

Windows LSA Spoofing Vulnerability

Windows LSA Spoofing Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

May 10, 2022
KEV Jul 1, 2022
High 8.8

CVE-2022-26923 Exploited Public exploit EPSS 84%

Active Directory Domain Services Elevation of Privilege Vulnerability

Active Directory Domain Services Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

May 10, 2022
KEV Aug 18, 2022
High 7.2

CVE-2022-27925 Exploited · Ransomware Public exploit EPSS 99%

Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts fil…

Apr 20, 2022
KEV Aug 11, 2022
High 7.0

CVE-2022-26904 Exploited Public exploit EPSS 17%

Windows User Profile Service Elevation of Privilege Vulnerability

Windows User Profile Service Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 15, 2022
KEV Apr 25, 2022
High 7.8

CVE-2022-24521 Exploited · Ransomware Public exploit

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 15, 2022
KEV Apr 13, 2022
High 7.8

CVE-2022-22960 Exploited Public exploit EPSS 36%

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due …

Apr 13, 2022
KEV Apr 15, 2022
High 8.8

CVE-2022-0609 Exploited EPSS 22%

Use after free in Animation

Use after free in Animation in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine NuGet

Apr 4, 2022
KEV Feb 15, 2022
High 7.8

CVE-2022-0995 Exploited Public exploit

An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Mar 25, 2022
KEV Aug 26, 2026
High 8.8

CVE-2022-22620 Exploited Public exploit EPSS 16%

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS…

Apple macOS Safari (v and ) qtwebkit-source macOS Browsers Debian Ubuntu Alpine

Mar 18, 2022
KEV Feb 11, 2022
High 8.8

CVE-2022-26500 Exploited · Ransomware

Improper limitation of path names in Veeam Backup & Replication 9.5U3, 9.5U4,10.x, and 11.x allows remote authenticated…

Mar 17, 2022
KEV Dec 13, 2022
High 7.8

CVE-2021-39793 Exploited

In kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due to a logic error in the…

Android

Mar 16, 2022
KEV Apr 11, 2022
High 7.8

CVE-2022-0847 Exploited Public exploit EPSS 93%

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in co…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Mar 7, 2022
KEV Apr 25, 2022
High 7.8

CVE-2022-22706 Exploited Public exploit

Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects…

Mar 3, 2022
KEV Mar 30, 2023
High 7.8

CVE-2022-0492 Exploited Public exploit

A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. T…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Mar 3, 2022
KEV Jun 2, 2026
High 8.8

CVE-2022-23176 Exploited EPSS 11%

WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a…

Feb 24, 2022
KEV Apr 11, 2022
High 7.8

CVE-2021-3560 Exploited Public exploit EPSS 22%

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privil…

policykit-1 policykit-1 polkit Debian Ubuntu Alpine

Feb 16, 2022
KEV May 12, 2023
High 8.8

CVE-2021-4102 Exploited

Use after free in V8 in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corr…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Feb 11, 2022
KEV Dec 15, 2021
High 8.4

CVE-2022-0185 Exploited Public exploit EPSS 25%

A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functi…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Feb 11, 2022
KEV Aug 21, 2024
High 7.8

CVE-2022-22718 Exploited Public exploit EPSS 18%

Windows Print Spooler Elevation of Privilege Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 9, 2022
KEV Apr 19, 2022
High 7.8

CVE-2022-21999 Exploited · Ransomware Public exploit EPSS 41%

Windows Print Spooler Elevation of Privilege Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 9, 2022
KEV Mar 25, 2022
High 7.8

CVE-2022-21971 Exploited Public exploit EPSS 54%

Windows Runtime Remote Code Execution Vulnerability

Windows Runtime Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 9, 2022
KEV Aug 18, 2022
High 7.8

CVE-2021-4034 Exploited · Ransomware Public exploit EPSS 95%

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid too…

policykit-1 policykit-1 polkit Debian Ubuntu Alpine

Jan 28, 2022
KEV Jun 27, 2022
High 7.0

CVE-2022-21919 Exploited

Windows User Profile Service Elevation of Privilege Vulnerability

Windows User Profile Service Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 11, 2022
KEV Apr 25, 2022
High 7.0

CVE-2022-21882 Exploited · Ransomware Public exploit EPSS 59%

Win32k Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 11, 2022
KEV Feb 4, 2022
High 8.1

CVE-2021-44207 Exploited EPSS 17%

Acclaim USAHERDS through 7.4.0.1 uses hard-coded credentials.

Dec 21, 2021
KEV Dec 23, 2024
High 7.5

CVE-2021-22054 Exploited Public exploit EPSS 100%

VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and…

Dec 17, 2021
KEV Mar 9, 2026
High 7.8

CVE-2021-1048 Exploited

In ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. This could lea…

linux-raspi2 linux-hwe linux-azure linux-riscv Android Debian Ubuntu

Dec 15, 2021
KEV May 23, 2022
High 7.1

CVE-2021-43890 Exploited · Ransomware EPSS 11%

Windows AppX Installer Spoofing Vulnerability

We have investigated reports of a spoofing vulnerability in AppX installer that affects Microsoft Windows. Microsoft is aware of attacks that attempt to exploit this vulnerability by using specially crafted packages that include the malware family known as Em…

Microsoft App Installer

Dec 15, 2021
KEV Dec 15, 2021
High 7.8

CVE-2021-43226 Exploited · Ransomware Public exploit

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 15, 2021
KEV Oct 6, 2025
High 7.5

CVE-2021-43798 Exploited Public exploit EPSS 89%

Grafana path traversal

Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 (except for patched versions) iss vulnerable to directory traversal, allowing access to local files. The vulnerable URL path is: `<grafana_host_url…

Grafana Grafana github.com/grafana/grafana grafana Web / CMS Alpine Go

Dec 7, 2021
KEV Oct 9, 2025
High 8.1

CVE-2021-23758 Exploited Public exploit EPSS 83%

Deserialization of Untrusted Data

All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization of arbitrary .NET classes, which can be abused to gain remote code execution.

AjaxNetProfessional NuGet

Dec 3, 2021
KEV Aug 26, 2026
High 8.8

CVE-2021-38003 Exploited Public exploit EPSS 39%

Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially expl…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Nov 23, 2021
KEV Nov 3, 2021
High 8.8

CVE-2021-42321 Exploited · Ransomware Public exploit EPSS 92%

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2019 Cumulative Update 11 Microsoft Exchange Server 2016 Cumulative Update 22 Microsoft Exchange Server 2016 Cumulative Update 21

Nov 10, 2021
KEV Nov 17, 2021
High 7.8

CVE-2021-42292 Exploited Public exploit EPSS 43%

Microsoft Excel Security Feature Bypass Vulnerability

Microsoft Excel Security Feature Bypass Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC for Mac 2021

Nov 10, 2021
KEV Nov 17, 2021

Latest vulnerabilities

Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corru…

Apache Spark shell command injection vulnerability via Spark UI

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in pro…

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, watchOS 8.6…

Windows LSA Spoofing Vulnerability

Active Directory Domain Services Elevation of Privilege Vulnerability

Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts fil…

Windows User Profile Service Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due …

Use after free in Animation

An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This…

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS…

Improper limitation of path names in Veeam Backup & Replication 9.5U3, 9.5U4,10.x, and 11.x allows remote authenticated…

In kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due to a logic error in the…

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in co…

Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects…

A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. T…

WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a…

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privil…

Use after free in V8 in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corr…

A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functi…

Windows Print Spooler Elevation of Privilege Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

Windows Runtime Remote Code Execution Vulnerability

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid too…

Windows User Profile Service Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Acclaim USAHERDS through 7.4.0.1 uses hard-coded credentials.

VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and…

In ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. This could lea…

Windows AppX Installer Spoofing Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Grafana path traversal

Deserialization of Untrusted Data

Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially expl…

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Excel Security Feature Bypass Vulnerability