Skip to content
OpenAdvisories

Latest vulnerabilities

Every new CVE with its exploitation status, public exploits and fixes — from nearly 30 public sources, updated hourly.

Tracked
409,454
Last 24h
638
Critical, 7 days
339
Known exploited
1,779
All Critical High Medium Low Exploited only Public exploit

931 results · Clear filters · Feed

  • High 8.8
    CVE-2017-6736 Exploited Public exploit EPSS 70%

    The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…

    Cisco IntelliShield IOS Universal Product iOS Network devices
    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-6739 Exploited EPSS 11%

    A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the af…

    IntelliShield Universal Product
    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-6742 Exploited Public exploit EPSS 21%

    A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the af…

    Cisco IntelliShield Cisco IOS XE Software Universal Product iOS Network devices
    KEV Apr 19, 2023
  • High 7.8
    CVE-2017-8570 Exploited Public exploit EPSS 90%

    Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Mi…

    Microsoft Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, and Microsoft Office 2016.
    KEV Feb 25, 2022
  • High 8.8
    CVE-2017-8464 Exploited Public exploit EPSS 90%

    Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 20…

    Microsoft Windows Shell Windows
    KEV Feb 10, 2022
  • High 7.8
    CVE-2017-8540 Exploited Public exploit EPSS 72%

    The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serv…

    Microsoft Malware Protection Engine
    KEV Mar 3, 2022
  • High 7.8
    CVE-2017-0261 Exploited Public exploit EPSS 78%

    Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the softwa…

    Microsoft Microsoft Office
    KEV Mar 3, 2022
  • High 7.3
    CVE-2017-0213 Exploited · Ransomware Public exploit EPSS 84%

    Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Se…

    Microsoft Windows COM Windows
    KEV Mar 28, 2022
  • High 7.8
    CVE-2017-0262 Exploited EPSS 81%

    Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the softwa…

    Microsoft Microsoft Office
    KEV Feb 10, 2022
  • High 7.8
    CVE-2017-0263 Exploited Public exploit EPSS 10%

    The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 201…

    Microsoft Microsoft Windows Windows
    KEV Feb 10, 2022
  • High 8.8
    CVE-2017-0222 Exploited EPSS 30%

    A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Interne…

    Microsoft Internet Explorer
    KEV Feb 25, 2022
  • High 7.8
    CVE-2017-8291 Exploited Public exploit EPSS 97%

    Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion…

    ghostscript ghostscript ghostscript Debian Ubuntu Alpine
    KEV May 24, 2022
  • High 8.8
    CVE-2017-5030 Exploited EPSS 41%

    Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0…

    chromium-browser oxide-qt libv8-3.14 Linux Windows Android Browsers Ubuntu
    KEV Jun 8, 2022
  • High 7.4
    CVE-2017-3506 Exploited Public exploit Scanner template EPSS 96%

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Support…

    Oracle WebLogic Server
    KEV Jun 3, 2024
  • High 8.8
    CVE-2017-0210 Exploited EPSS 22%

    An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, …

    Microsoft Internet Explorer
    KEV May 24, 2022
  • High 7.8
    CVE-2017-0199 Exploited · Ransomware Public exploit EPSS 99%

    Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windo…

    Microsoft Office/WordPad
    KEV Nov 3, 2021
  • High 8.8
    CVE-2017-6884 Exploited · Ransomware Public exploit EPSS 33%

    A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware V1.00(AAQT.4)b8. The vu…

    KEV Sep 18, 2023
  • High 7.8
    CVE-2017-0001 Exploited

    The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; …

    Microsoft Windows GDI+ Windows
    KEV Mar 3, 2022
  • High 7.8
    CVE-2017-0101 Exploited · Ransomware Public exploit EPSS 57%

    The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows …

    Microsoft Windows Windows
    KEV Mar 15, 2022
  • High 7.5
    CVE-2017-0147 Exploited · Ransomware Public exploit EPSS 100%

    The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Window…

    Microsoft Windows SMB Windows
    KEV May 24, 2022
  • High 8.1
    CVE-2017-0148 Exploited · Ransomware Public exploit EPSS 99%

    The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Window…

    Microsoft Windows SMB Windows
    KEV Apr 6, 2022
  • High 8.8
    CVE-2017-0143 Exploited · Ransomware Public exploit EPSS 93%

    The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Window…

    Microsoft Windows SMB Windows
    KEV Nov 3, 2021
  • High 8.8
    CVE-2017-0144 Exploited · Ransomware Public exploit EPSS 99%

    The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Window…

    Microsoft Windows SMB Windows
    KEV Feb 10, 2022
  • High 8.8
    CVE-2017-0145 Exploited · Ransomware Public exploit EPSS 90%

    The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Window…

    Microsoft Windows SMB Windows
    KEV Feb 10, 2022
  • High 7.8
    CVE-2017-0005 Exploited Public exploit EPSS 11%

    The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; …

    Microsoft Windows GDI+ Windows
    KEV May 24, 2022
  • High 8.8
    CVE-2017-0146 Exploited · Ransomware Public exploit EPSS 90%

    The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Window…

    Microsoft Windows SMB Windows
    KEV Mar 25, 2022
  • High 8.8
    CVE-2017-0149 Exploited EPSS 28%

    Microsoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service …

    Microsoft Internet Explorer
    KEV May 24, 2022
  • High 8.8
    CVE-2017-6334 Exploited Public exploit EPSS 73%

    dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute a…

    KEV Mar 25, 2022
  • High 8.1
    CVE-2017-0037 Exploited Public exploit EPSS 80%

    Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuild…

    Microsoft Internet Browser
    KEV Mar 28, 2022
  • High 8.8
    CVE-2016-5198 Exploited EPSS 34%

    V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac…

    chromium-browser oxide-qt libv8-3.14 Linux Windows Android Browsers Ubuntu
    KEV Jun 8, 2022
  • High 8.1
    CVE-2017-5521 Exploited Public exploit Scanner template EPSS 89%

    An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, …

    KEV Sep 8, 2022
  • High 7.8
    CVE-2016-7262 Exploited EPSS 59%

    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3,…

    KEV Mar 3, 2022
  • High 8.8
    CVE-2016-7892 Exploited EPSS 19%

    Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnera…

    KEV Mar 25, 2022
  • High 8.8
    CVE-2016-6277 Exploited Public exploit Scanner template EPSS 100%

    NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.…

    KEV Mar 7, 2022
  • High 7.5
    CVE-2016-8562 Exploited

    A vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS NET CP 1543-1 (All versions <…

    KEV Mar 3, 2022
  • High 7.0
    CVE-2016-5195 Exploited Public exploit EPSS 84%

    Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by le…

    linux-raspi2 linux linux linux-lts-xenial Debian Ubuntu
    KEV Mar 3, 2022
  • High 7.8
    CVE-2016-7255 Exploited · Ransomware Public exploit EPSS 81%

    The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,…

    KEV Nov 3, 2021
  • High 8.8
    CVE-2016-7200 Exploited Public exploit EPSS 83%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerabili…

    Microsoft.ChakraCore NuGet
    KEV Mar 28, 2022
  • High 8.8
    CVE-2016-7201 Exploited Public exploit EPSS 80%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerabili…

    Microsoft.ChakraCore NuGet
    KEV Mar 28, 2022
  • High 8.8
    CVE-2016-7256 Exploited EPSS 65%

    atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…

    KEV May 25, 2022