Is it exploited?
Vulnerabilities under active attack
Every vulnerability with evidence of exploitation in the wild — 1,655 of them. Not a list of everything that has a CVE number. A list of what someone has already used against someone.
- CVE-2017-0210 Microsoft Internet Explorer Privilege Escalation Vulnerability Microsoft · Internet Explorer
- CVE-2017-8291 Artifex Ghostscript Type Confusion Vulnerability Artifex · Ghostscript
- CVE-2017-8543 Microsoft Windows Search Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2017-18362 Kaseya VSA SQL Injection Vulnerability Kaseya · Virtual System/Server Administrator (VSA)
- CVE-2016-0162 Microsoft Internet Explorer Information Disclosure Vulnerability Microsoft · Internet Explorer
- CVE-2016-3351 Microsoft Internet Explorer and Edge Information Disclosure Vulnerability Microsoft · Internet Explorer and Edge
- CVE-2016-4655 Apple iOS Information Disclosure Vulnerability Apple · iOS
- CVE-2016-4656 Apple iOS Memory Corruption Vulnerability Apple · iOS
- CVE-2016-4657 Apple iOS Webkit Memory Corruption Vulnerability Apple · iOS
- CVE-2016-6366 Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability Cisco · Adaptive Security Appliance (ASA)
- CVE-2016-6367 Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability Cisco · Adaptive Security Appliance (ASA)
- CVE-2016-3298 Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability Microsoft · Internet Explorer
- CVE-2022-20821 Cisco IOS XR Open Port Vulnerability Cisco · IOS XR
- CVE-2021-1048 Android Kernel Use-After-Free Vulnerability Android · Kernel
- CVE-2021-0920 Android Kernel Race Condition Vulnerability Android · Kernel
- CVE-2021-30883 Apple Multiple Products Memory Corruption Vulnerability Apple · Multiple Products
- CVE-2020-1027 Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2020-0638 Microsoft Update Notification Manager Privilege Escalation Vulnerability Microsoft · Update Notification Manager
- CVE-2019-7286 Apple Multiple Products Memory Corruption Vulnerability Apple · Multiple Products
- CVE-2019-7287 Apple iOS Memory Corruption Vulnerability Apple · iOS
- CVE-2019-0676 Microsoft Internet Explorer Information Disclosure Vulnerability Microsoft · Internet Explorer
- CVE-2019-5786 Google Chrome Blink Use-After-Free Vulnerability Google · Chrome Blink
- CVE-2019-0703 Microsoft Windows SMB Information Disclosure Vulnerability Microsoft · Windows
- CVE-2019-0880 Microsoft Windows Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2019-13720 Google Chrome WebAudio Use-After-Free Vulnerability Google · Chrome WebAudio
- CVE-2019-11707 Mozilla Firefox and Thunderbird Type Confusion Vulnerability Mozilla · Firefox and Thunderbird
- CVE-2019-11708 Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability Mozilla · Firefox and Thunderbird
- CVE-2019-8720 WebKitGTK Memory Corruption Vulnerability WebKitGTK · WebKitGTK
- CVE-2019-18426 WhatsApp Cross-Site Scripting Vulnerability Meta Platforms · WhatsApp
- CVE-2019-1385 Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2019-1130 Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2018-5002 Adobe Flash Player Stack-based Buffer Overflow Vulnerability Adobe · Flash Player
- CVE-2018-8589 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2022-30525 Zyxel Multiple Firewalls OS Command Injection Vulnerability Zyxel · Multiple Firewalls
- CVE-2022-22947 VMware Spring Cloud Gateway Code Injection Vulnerability VMware · Spring Cloud Gateway
- CVE-2022-1388 F5 BIG-IP Missing Authentication Vulnerability F5 · BIG-IP
- CVE-2021-1789 Apple Multiple Products Type Confusion Vulnerability Apple · Multiple Products
- CVE-2019-8506 Apple Multiple Products Type Confusion Vulnerability Apple · Multiple Products
- CVE-2014-4113 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2014-0322 Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft · Internet Explorer
- CVE-2014-0160 OpenSSL Information Disclosure Vulnerability OpenSSL · OpenSSL
- CVE-2022-29464 WSO2 Multiple Products Unrestrictive Upload of File Vulnerability WSO2 · Multiple Products
- CVE-2022-26904 Microsoft Windows User Profile Service Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2022-21919 Microsoft Windows User Profile Service Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2022-0847 Linux Kernel Privilege Escalation Vulnerability Linux · Kernel
- CVE-2021-41357 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2021-40450 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2019-1003029 Jenkins Script Security Plugin Sandbox Bypass Vulnerability Jenkins · Script Security Plugin
- CVE-2018-6882 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2019-3568 WhatsApp VOIP Stack Buffer Overflow Vulnerability Meta Platforms · WhatsApp
- CVE-2022-22718 Microsoft Windows Print Spooler Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2022-22960 VMware Multiple Products Privilege Escalation Vulnerability VMware · Multiple Products
- CVE-2022-1364 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2019-3929 Crestron Multiple Products Command Injection Vulnerability Crestron · Multiple Products
- CVE-2019-16057 D-Link DNS-320 Remote Code Execution Vulnerability D-Link · DNS-320 Storage Device
- CVE-2018-7841 Schneider Electric U.motion Builder SQL Injection Vulnerability Schneider Electric · U.motion Builder
- CVE-2016-4523 Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability Trihedral · VTScada (formerly VTS)
- CVE-2014-0780 InduSoft Web Studio NTWebServer Directory Traversal Vulnerability InduSoft · Web Studio
- CVE-2010-5330 Ubiquiti AirOS Command Injection Vulnerability Ubiquiti · AirOS
- CVE-2007-3010 Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability Alcatel · OmniPCX Enterprise
- CVE-2022-22954 VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability VMware · Workspace ONE Access and Identity Manager
- CVE-2022-24521 Microsoft Windows CLFS Driver Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2018-7602 Drupal Core Remote Code Execution Vulnerability Drupal · Core
- CVE-2018-20753 Kaseya VSA Remote Code Execution Vulnerability Kaseya · Virtual System/Server Administrator (VSA)
- CVE-2015-5123 Adobe Flash Player Use-After-Free Vulnerability Adobe · Flash Player
- CVE-2015-5122 Adobe Flash Player Use-After-Free Vulnerability Adobe · Flash Player
- CVE-2015-3113 Adobe Flash Player Heap-Based Buffer Overflow Vulnerability Adobe · Flash Player
- CVE-2015-2502 Microsoft Internet Explorer Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2015-0313 Adobe Flash Player Use-After-Free Vulnerability Adobe · Flash Player
- CVE-2015-0311 Adobe Flash Player Remote Code Execution Vulnerability Adobe · Flash Player
- CVE-2014-9163 Adobe Flash Player Stack-Based Buffer Overflow Vulnerability Adobe · Flash Player
- CVE-2022-23176 WatchGuard Firebox and XTM Privilege Escalation Vulnerability WatchGuard · Firebox and XTM
- CVE-2021-42287 Microsoft Active Directory Domain Services Privilege Escalation Vulnerability Microsoft · Active Directory
- CVE-2021-42278 Microsoft Active Directory Domain Services Privilege Escalation Vulnerability Microsoft · Active Directory
- CVE-2021-39793 Google Pixel Out-of-Bounds Write Vulnerability Google · Pixel
- CVE-2021-27852 Checkbox Survey Deserialization of Untrusted Data Vulnerability Checkbox · Checkbox Survey
- CVE-2021-22600 Linux Kernel Privilege Escalation Vulnerability Linux · Kernel
- CVE-2020-2509 QNAP Network-Attached Storage (NAS) Command Injection Vulnerability QNAP · QNAP Network-Attached Storage (NAS)
- CVE-2017-11317 Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability Telerik · User Interface (UI) for ASP.NET AJAX
- CVE-2021-3156 Sudo Heap-Based Buffer Overflow Vulnerability Sudo · Sudo
- CVE-2021-31166 Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability Microsoft · HTTP Protocol Stack
- CVE-2017-0148 Microsoft SMBv1 Server Remote Code Execution Vulnerability Microsoft · SMBv1 server
- CVE-2022-22965 Spring Framework JDK 9+ Remote Code Execution Vulnerability VMware · Spring Framework
- CVE-2022-22675 Apple macOS Out-of-Bounds Write Vulnerability Apple · macOS
- CVE-2022-22674 Apple macOS Out-of-Bounds Read Vulnerability Apple · macOS
- CVE-2021-45382 D-Link Multiple Routers Remote Code Execution Vulnerability D-Link · Multiple Routers
- CVE-2022-26871 Trend Micro Apex Central Arbitrary File Upload Vulnerability Trend Micro · Apex Central
- CVE-2022-1040 Sophos Firewall Authentication Bypass Vulnerability Sophos · Firewall
- CVE-2021-34484 Microsoft Windows User Profile Service Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2021-28799 QNAP NAS Improper Authorization Vulnerability QNAP · Network Attached Storage (NAS)
- CVE-2021-21551 Dell dbutil Driver Insufficient Access Control Vulnerability Dell · dbutil Driver
- CVE-2018-10562 Dasan GPON Routers Command Injection Vulnerability Dasan · Gigabit Passive Optical Network (GPON) Routers
- CVE-2018-10561 Dasan GPON Routers Authentication Bypass Vulnerability Dasan · Gigabit Passive Optical Network (GPON) Routers
- CVE-2022-1096 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2022-0543 Debian-specific Redis Server Lua Sandbox Escape Vulnerability Redis · Debian-specific Redis Servers
- CVE-2021-38646 Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability Microsoft · Office
- CVE-2021-34486 Microsoft Windows Event Tracing Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2021-26085 Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability Atlassian · Confluence Server
- CVE-2021-20028 SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability SonicWall · Secure Remote Access (SRA)
- CVE-2019-7483 SonicWall SMA100 Directory Traversal Vulnerability SonicWall · SMA100
- CVE-2018-8440 Microsoft Windows Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2018-8406 Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability Microsoft · DirectX Graphics Kernel (DXGKRNL)
- CVE-2018-8405 Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability Microsoft · DirectX Graphics Kernel (DXGKRNL)
- CVE-2017-0213 Microsoft Windows Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2017-0059 Microsoft Internet Explorer Information Disclosure Vulnerability Microsoft · Internet Explorer
- CVE-2017-0037 Microsoft Edge and Internet Explorer Type Confusion Vulnerability Microsoft · Edge and Internet Explorer
- CVE-2016-7201 Microsoft Edge Memory Corruption Vulnerability Microsoft · Edge
- CVE-2016-7200 Microsoft Edge Memory Corruption Vulnerability Microsoft · Edge
- CVE-2016-0189 Microsoft Internet Explorer Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2016-0151 Microsoft Windows CSRSS Security Feature Bypass Vulnerability Microsoft · Client-Server Run-time Subsystem (CSRSS)
- CVE-2016-0040 Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2015-2426 Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2015-2419 Microsoft Internet Explorer Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2015-1770 Microsoft Office Uninitialized Memory Use Vulnerability Microsoft · Office
- CVE-2013-3660 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2013-2729 Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability Adobe · Reader and Acrobat
- CVE-2013-2551 Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft · Internet Explorer
- CVE-2013-2465 Oracle Java SE Unspecified Vulnerability Oracle · Java SE
- CVE-2013-1690 Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability Mozilla · Firefox and Thunderbird
- CVE-2012-5076 Oracle Java SE Sandbox Bypass Vulnerability Oracle · Java SE
Nothing on this page matches that filter.