Latest vulnerabilities

931 results · Clear filters · Feed

• High 7.8
  CVE-2023-41974 Exploited Public exploit

  A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, iOS …

  Apple iOS and iPadOS iOS
  Jan 10, 2024

  KEV Mar 5, 2026
• High 7.0
  CVE-2022-48618 Exploited

  The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPad…

  Apple macOS iOS and iPadOS watchOS macOS iOS
  Jan 9, 2024

  KEV Jan 31, 2024
• High 7.8
  CVE-2023-7101 Exploited Public exploit EPSS 19%

  Arbitrary Code Execution (ACE) Vulnerability

  Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution (ACE) vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, …

  Douglas Wilson Spreadsheet::ParseExcel perl-spreadsheet-parseexcel libspreadsheet-parseexcel-perl Debian Ubuntu Alpine
  Dec 24, 2023

  KEV Jan 2, 2024
• High 8.8
  CVE-2023-7024 Exploited Public exploit

  Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploi…

  Google Chrome chromium qt6-qtwebengine Browsers Debian Alpine
  Dec 21, 2023

  KEV Jan 2, 2024
• High 8.0
  CVE-2023-47565 Exploited EPSS 73%

  Legacy VioStor NVR

  An OS command injection vulnerability has been found to affect legacy QNAP VioStor NVR models running QVR Firmware 4.x. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability …

  QNAP Systems VioStor NVR
  Dec 8, 2023

  KEV Dec 21, 2023
• High 8.8
  CVE-2023-49897 Exploited EPSS 50%

  An OS command injection vulnerability exists in AE1021PE firmware version 2.0.9 and earlier and AE1021 firmware version…

  FXC AE1021PE AE1021
  Dec 6, 2023

  KEV Dec 21, 2023
• High 7.2
  CVE-2023-44221 Exploited EPSS 76%

  Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated at…

  SonicWall SMA100 Network devices
  Dec 5, 2023

  KEV May 1, 2025
• High 8.4
  CVE-2023-33107 Exploited Public exploit

  Integer Overflow or Wraparound in Graphics Linux

  Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.

  Qualcomm Snapdragon
  Dec 5, 2023

  KEV Dec 5, 2023
• High 8.4
  CVE-2023-33106 Exploited

  Use of Out-of-range Pointer Offset in Graphics

  Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.

  Qualcomm Snapdragon
  Dec 5, 2023

  KEV Dec 5, 2023
• High 7.8
  CVE-2023-33063 Exploited

  Use After Free in DSP Services

  Memory corruption in DSP Services during a remote call from HLOS to DSP.

  Qualcomm Snapdragon
  Dec 5, 2023

  KEV Dec 5, 2023
• High 8.8
  CVE-2023-42917 Exploited

  A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.…

  Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu
  Nov 30, 2023

  KEV Dec 4, 2023
• High 8.8
  CVE-2023-36025 Exploited Public exploit EPSS 88%

  Windows SmartScreen Security Feature Bypass Vulnerability

  Windows SmartScreen Security Feature Bypass Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Nov 14, 2023

  KEV Nov 14, 2023
• High 7.8
  CVE-2023-36033 Exploited EPSS 11%

  Windows DWM Core Library Elevation of Privilege Vulnerability

  Windows DWM Core Library Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Nov 14, 2023

  KEV Nov 14, 2023
• High 7.8
  CVE-2023-36036 Exploited EPSS 17%

  Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

  Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Nov 14, 2023

  KEV Nov 14, 2023
• High 7.8
  CVE-2023-36424 Exploited Public exploit EPSS 12%

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Nov 14, 2023

  KEV Apr 13, 2026
• High 8.8
  CVE-2023-46748 Exploited

  BIG-IP Configuration utility authenticated SQL injection vulnerability

  An authenticated SQL injection vulnerability exists in the BIG-IP Configuration utility which may allow an authenticated attacker with network access to the Configuration utility through the BIG-IP management port and/or self IP addresses to execute arbitrary…

  F5 BIG-IP Network devices
  Oct 26, 2023

  KEV Oct 31, 2023
• High 7.2
  CVE-2023-20273 Exploited Public exploit EPSS 93%

  A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject …

  Cisco Cisco IOS XE Software iOS Network devices
  Oct 24, 2023

  KEV Oct 23, 2023
• High 7.5
  CVE-2023-45727 Exploited

  Proself Enterprise/Standard Edition Ver5.62 and earlier, Proself Gateway Edition Ver1.65 and earlier, and Proself Mail …

  North Grid Proself Gateway Edition Proself Enterprise/Standard Edition Proself Mail Sanitize Edition
  Oct 18, 2023

  KEV Dec 3, 2024
• High 7.5
  CVE-2023-44487 Exploited Public exploit EPSS 100%

  HTTP/2 Stream Cancellation Attack

  The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

  nodejs go dotnet7 trafficserver Debian Ubuntu Alpine Maven Go SwiftURL
  Oct 10, 2023

  KEV Oct 10, 2023
• High 7.8
  CVE-2023-42824 Exploited Public exploit

  The issue was addressed with improved checks. This issue is fixed in iOS 16.7.1 and iPadOS 16.7.1. A local attacker may…

  Apple iOS and iPadOS iOS
  Oct 4, 2023

  KEV Oct 5, 2023
• High 7.8
  CVE-2023-4911 Exploited Public exploit EPSS 64%

  Glibc: buffer overflow in ld.so leading to privilege escalation

  A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binar…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Oct 3, 2023

  KEV Nov 21, 2023
• High 8.8
  CVE-2023-5217 Exploited Public exploit EPSS 49%

  Electron affected by libvpx's heap buffer overflow in vp8 encoding

  Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  Google Chrome libvpx chromium Browsers Debian Ubuntu Alpine npm
  Sep 28, 2023

  KEV Oct 2, 2023
• High 8.8
  CVE-2023-41993 Exploited Public exploit EPSS 24%

  The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead t…

  Apple macOS qtwebkit-source qtwebkit-opensource-src macOS Debian Ubuntu
  Sep 21, 2023

  KEV Sep 25, 2023
• High 7.8
  CVE-2023-41992 Exploited Public exploit EPSS 12%

  The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, mac…

  Apple macOS iOS and iPadOS macOS iOS
  Sep 21, 2023

  KEV Sep 25, 2023
• High 7.2
  CVE-2023-41179 Exploited

  A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free…

  Trend Micro Trend Micro Apex One Trend Micro Worry-Free Business Security Trend Micro Worry-Free Business Security Services
  Sep 19, 2023

  KEV Sep 21, 2023
• High 7.5
  CVE-2023-38205 Exploited EPSS 100%

  ColdFusion Bypass - Vulnerability disclosure in ColdFusion | BYPASS CVE-2023-29298

  Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the…

  Adobe ColdFusion
  Sep 14, 2023

  KEV Jul 20, 2023
• High 7.8
  CVE-2023-26369 Exploited

  [Google Project Zero] Adobe Acrobat DC OOBW 0-day actively exploited in the wild

  Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation o…

  Adobe Acrobat Reader
  Sep 13, 2023

  KEV Sep 14, 2023
• High 7.8
  CVE-2023-36802 Exploited Public exploit EPSS 28%

  Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

  Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Sep 12, 2023

  KEV Sep 12, 2023
• High 8.8
  CVE-2023-4863 Exploited Public exploit EPSS 100%

  libwebp: OOB write in BuildHuffmanTable

  Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

  Google Chrome libwebp chromium Browsers Debian Ubuntu Alpine npm PyPI Go crates.io NuGet
  Sep 12, 2023

  KEV Sep 13, 2023
• High 7.8
  CVE-2023-41990 Exploited

  The issue was addressed with improved handling of caches. This issue is fixed in tvOS 16.3, iOS 16.3 and iPadOS 16.3, m…

  Apple macOS iOS and iPadOS watchOS macOS iOS
  Sep 11, 2023

  KEV Jan 8, 2024
• High 8.8
  CVE-2023-35674 Exploited Public exploit

  In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the co…

  Google Android Android
  Sep 11, 2023

  KEV Sep 13, 2023
• High 8.8
  CVE-2023-39780 Exploited Public exploit EPSS 40%

  On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /start_appl…

  ASUS RT-AX55
  Sep 11, 2023

  KEV Jun 2, 2025
• High 7.8
  CVE-2023-41064 Exploited Public exploit EPSS 53%

  A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.…

  Apple macOS iOS and iPadOS macOS iOS
  Sep 7, 2023

  KEV Sep 11, 2023
• High 7.8
  CVE-2023-41061 Exploited

  A validation issue was addressed with improved logic. This issue is fixed in watchOS 9.6.2, iOS 16.6.1 and iPadOS 16.6.…

  Apple iOS and iPadOS watchOS iOS
  Sep 7, 2023

  KEV Sep 11, 2023
• High 8.8
  CVE-2023-4762 Exploited Public exploit EPSS 41%

  Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a…

  Google Chrome chromium qt5-qtwebengine Browsers Debian Alpine
  Sep 5, 2023

  KEV Feb 6, 2024
• High 7.5
  CVE-2023-4346 Exploited

  KNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable…

  KNX Association KNX Protocol Connection Authorization Option 1
  Aug 29, 2023

  KEV Jul 15, 2026
• High 8.2
  CVE-2023-41266 Exploited · Ransomware EPSS 85%

  A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, Fe…

  Aug 29, 2023

  KEV Dec 7, 2023
• High 7.8
  CVE-2023-38831 Exploited · Ransomware Public exploit EPSS 100%

  RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within …

  Aug 23, 2023

  KEV Aug 24, 2023
• High 8.8
  CVE-2022-48503 Exploited

  The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Aug 14, 2023

  KEV Oct 20, 2025
• High 7.5
  CVE-2023-38180 Exploited EPSS 14%

  .NET and Visual Studio Denial of Service Vulnerability

  .NET and Visual Studio Denial of Service Vulnerability

  Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2022 version 17.4 Microsoft Visual Studio 2022 version 17.2 Ubuntu Alpine NuGet
  Aug 8, 2023

  KEV Aug 9, 2023