Latest vulnerabilities

Every new CVE with its exploitation status, public exploits and fixes — from more than 20 public sources, updated hourly.

Tracked: 409,354
Last 24h: 664
Critical, 7 days: 338
Known exploited: 1,779

All Critical High Medium Low Exploited only Public exploit

931 results · Clear filters · Feed

High 7.8

CVE-2021-34484 Exploited EPSS 22%

Windows User Profile Service Elevation of Privilege Vulnerability

Windows User Profile Service Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 12, 2021
KEV Mar 31, 2022
High 8.8

CVE-2021-30563 Exploited Public exploit

Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corr…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Aug 3, 2021
KEV Nov 3, 2021
High 7.8

CVE-2021-36742 Exploited

A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free …

Trend Micro Trend Micro Apex One Trend Micro OfficeScan Trend Micro Worry-Free Business Security

Jul 29, 2021
KEV Nov 3, 2021
High 8.8

CVE-2021-36741 Exploited

An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Fre…

Trend Micro Trend Micro Apex One Trend Micro OfficeScan Trend Micro Worry-Free Business Security

Jul 29, 2021
KEV Nov 3, 2021
High 7.8

CVE-2021-36934 Exploited Public exploit EPSS 67%

Windows Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accounts Manager (SAM) database. An attacker who successfully exploited this vulnerability could run arbit…

Microsoft Windows 10 Version 1809 Windows 10 Version 20H2 Windows 10 Version 1909 Windows

Jul 22, 2021
KEV Feb 10, 2022
High 7.8

CVE-2021-33771 Exploited EPSS 10%

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 14, 2021
KEV Nov 3, 2021
High 7.3

CVE-2021-33766 Exploited Public exploit Scanner template EPSS 98%

Microsoft Exchange Server Information Disclosure Vulnerability

Microsoft Exchange Server Information Disclosure Vulnerability

Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 8 Microsoft Exchange Server 2016 Cumulative Update 19

Jul 14, 2021
KEV Jan 18, 2022
High 7.8

CVE-2021-31979 Exploited

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 14, 2021
KEV Nov 3, 2021
High 7.2

CVE-2021-31196 Exploited EPSS 54%

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 10 Microsoft Exchange Server 2016 Cumulative Update 21

Jul 14, 2021
KEV Aug 21, 2024
High 8.3

CVE-2021-22555 Exploited Public exploit EPSS 79%

Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE

A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space

linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu

Jul 7, 2021
KEV Oct 6, 2025
High 8.8

CVE-2021-34527 Exploited · Ransomware Public exploit EPSS 100%

Windows Print Spooler Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could th…

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 2, 2021
KEV Nov 3, 2021
High 8.8

CVE-2021-30554 Exploited

Use after free in WebGL in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to potentially exploit heap c…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Jul 2, 2021
KEV Nov 3, 2021
High 8.8

CVE-2021-30551 Exploited Public exploit EPSS 65%

Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corr…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Jun 15, 2021
KEV Nov 3, 2021
High 8.8

CVE-2021-26828 Exploited Public exploit EPSS 39%

OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated users to upload and ex…

Jun 11, 2021
KEV Dec 3, 2025
High 7.8

CVE-2020-11261 Exploited

Memory corruption due to improper check to return error when user application requests memory allocation of a huge size…

Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wear

Jun 9, 2021
KEV Dec 1, 2021
High 7.5

CVE-2021-33742 Exploited EPSS 59%

Windows MSHTML Platform Remote Code Execution Vulnerability

Windows MSHTML Platform Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows 10 Version 1809 Windows Server 2016 Windows

Jun 8, 2021
KEV Nov 3, 2021
High 8.4

CVE-2021-33739 Exploited Public exploit

Microsoft DWM Core Library Elevation of Privilege Vulnerability

Microsoft DWM Core Library Elevation of Privilege Vulnerability

Microsoft Windows 10 Version 20H2 Windows 10 Version 1909 Windows Server version 20H2 Windows

Jun 8, 2021
KEV Nov 3, 2021
High 7.8

CVE-2021-31956 Exploited Public exploit EPSS 22%

Windows NTFS Elevation of Privilege Vulnerability

Windows NTFS Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jun 8, 2021
KEV Nov 3, 2021
High 7.8

CVE-2021-1675 Exploited · Ransomware Public exploit EPSS 85%

Windows Print Spooler Remote Code Execution Vulnerability

Windows Print Spooler Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jun 8, 2021
KEV Nov 3, 2021
High 7.2

CVE-2021-22900 Exploited EPSS 14%

A vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4 that could lead to an aut…

May 27, 2021
KEV Nov 3, 2021
High 8.8

CVE-2021-22899 Exploited EPSS 23%

A command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker…

May 27, 2021
KEV Nov 3, 2021
High 8.8

CVE-2021-22894 Exploited EPSS 41%

A buffer overflow vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker t…

May 27, 2021
KEV Nov 3, 2021
High 8.8

CVE-2021-29256 Exploited

. The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information …

May 24, 2021
KEV Jul 7, 2023
High 8.8

CVE-2021-28664 Exploited Public exploit

The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unpriv…

May 10, 2021
KEV Nov 3, 2021
High 8.8

CVE-2021-28663 Exploited Public exploit EPSS 12%

The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are …

May 10, 2021
KEV Nov 3, 2021
High 8.4

CVE-2021-1905 Exploited

Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon …

Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wear

May 7, 2021
KEV Nov 3, 2021
High 8.8

CVE-2021-21551 Exploited Public exploit EPSS 80%

Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privil…

Dell dbutil

May 4, 2021
KEV Mar 31, 2022
High 8.8

CVE-2021-21224 Exploited EPSS 84%

Type confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute arbitrary code inside …

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Apr 26, 2021
KEV Nov 3, 2021
High 8.8

CVE-2021-21206 Exploited

Use after free in Blink in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap c…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Apr 26, 2021
KEV Nov 3, 2021
High 8.8

CVE-2021-21220 Exploited Public exploit EPSS 70%

Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to p…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Apr 26, 2021
KEV Nov 3, 2021
High 8.8

CVE-2021-3493 Exploited Public exploit EPSS 49%

The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting …

Ubuntu Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu

Apr 17, 2021
KEV Oct 20, 2022
High 7.8

CVE-2021-28310 Exploited Public exploit

Win32k Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 13, 2021
KEV Nov 3, 2021
High 7.2

CVE-2021-20022 Exploited · Ransomware EPSS 17%

SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload …

SonicWall Email Security Network devices

Apr 9, 2021
KEV Nov 3, 2021
High 8.8

CVE-2021-1789 Exploited EPSS 14%

A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security …

Apple macOS iOS and iPadOS qtwebkit-source macOS iOS Debian Ubuntu Alpine

Apr 2, 2021
KEV May 4, 2022
High 7.0

CVE-2021-1782 Exploited Public exploit

A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-0…

Apple macOS iOS and iPadOS macOS iOS

Apr 2, 2021
KEV Nov 3, 2021
High 7.5

CVE-2021-22506 Exploited EPSS 26%

Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all ver…

Mar 26, 2021
KEV Nov 3, 2021
High 8.8

CVE-2021-21193 Exploited Public exploit

Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap co…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Mar 16, 2021
KEV Nov 3, 2021
High 7.6

CVE-2021-27059 Exploited

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office Remote Code Execution Vulnerability

Microsoft Microsoft Office 2016 Microsoft Office 2013 Service Pack 1 Microsoft Office 2010 Service Pack 2

Mar 11, 2021
KEV Nov 3, 2021
High 8.8

CVE-2021-27085 Exploited

Internet Explorer Remote Code Execution Vulnerability

Internet Explorer Remote Code Execution Vulnerability

Microsoft Internet Explorer 11

Mar 11, 2021
KEV Nov 3, 2021
High 8.8

CVE-2021-26411 Exploited · Ransomware Public exploit EPSS 82%

Internet Explorer Memory Corruption Vulnerability

Internet Explorer Memory Corruption Vulnerability

Microsoft Internet Explorer 11 Internet Explorer 9 Microsoft Edge (EdgeHTML-based) Browsers

Mar 11, 2021
KEV Nov 3, 2021

Latest vulnerabilities

Windows User Profile Service Elevation of Privilege Vulnerability

Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corr…

A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free …

An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Fre…

Windows Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Exchange Server Information Disclosure Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE

Windows Print Spooler Remote Code Execution Vulnerability

Use after free in WebGL in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to potentially exploit heap c…

Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corr…

OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated users to upload and ex…

Memory corruption due to improper check to return error when user application requests memory allocation of a huge size…

Windows MSHTML Platform Remote Code Execution Vulnerability

Microsoft DWM Core Library Elevation of Privilege Vulnerability

Windows NTFS Elevation of Privilege Vulnerability

Windows Print Spooler Remote Code Execution Vulnerability

A vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4 that could lead to an aut…

A command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker…

A buffer overflow vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker t…

. The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information …

The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unpriv…

The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are …

Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon …

Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privil…

Type confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute arbitrary code inside …

Use after free in Blink in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap c…

Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to p…

The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting …

Win32k Elevation of Privilege Vulnerability

SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload …

A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security …

A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-0…

Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all ver…

Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap co…

Microsoft Office Remote Code Execution Vulnerability

Internet Explorer Remote Code Execution Vulnerability

Internet Explorer Memory Corruption Vulnerability