Verdict
Confirmed exploited in the wild
CISA has evidence of active exploitation. This is not theoretical risk — someone has already used it against someone. 732 vulnerabilities in this band.
- CVE-2025-22226 VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability VMware · ESXi, Workstation, and Fusion
- CVE-2025-22224 VMware ESXi and Workstation TOCTOU Race Condition Vulnerability VMware · ESXi and Workstation
- CVE-2024-50302 Linux Kernel Use of Uninitialized Resource Vulnerability Linux · Kernel
- CVE-2024-49035 Microsoft Partner Center Improper Access Control Vulnerability Microsoft · Partner Center
- CVE-2024-20953 Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability Oracle · Agile Product Lifecycle Management (PLM)
- CVE-2025-24989 Microsoft Power Pages Improper Access Control Vulnerability Microsoft · Power Pages
- CVE-2025-0111 Palo Alto Networks PAN-OS File Read Vulnerability Palo Alto Networks · PAN-OS
- CVE-2025-23209 Craft CMS Code Injection Vulnerability Craft CMS · Craft CMS
- CVE-2025-24200 Apple iOS and iPadOS Incorrect Authorization Vulnerability Apple · iOS and iPadOS
- CVE-2024-41710 Mitel SIP Phones Argument Injection Vulnerability Mitel · SIP Phones
- CVE-2024-40891 Zyxel DSL CPE OS Command Injection Vulnerability Zyxel · DSL CPE Devices
- CVE-2024-40890 Zyxel DSL CPE OS Command Injection Vulnerability Zyxel · DSL CPE Devices
- CVE-2025-21418 Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability Microsoft · Windows
- CVE-2025-21391 Microsoft Windows Storage Link Following Vulnerability Microsoft · Windows
- CVE-2025-0994 Trimble Cityworks Deserialization Vulnerability Trimble · Cityworks
- CVE-2020-15069 Sophos XG Firewall Buffer Overflow Vulnerability Sophos · XG Firewall
- CVE-2022-23748 Dante Discovery Process Control Vulnerability Audinate · Dante Discovery
- CVE-2024-53104 Linux Kernel Out-of-Bounds Write Vulnerability Linux · Kernel
- CVE-2025-24085 Apple Multiple Products Use-After-Free Vulnerability Apple · Multiple Products
- CVE-2025-21335 Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability Microsoft · Windows
- CVE-2025-21334 Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability Microsoft · Windows
- CVE-2025-21333 Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability Microsoft · Windows
- CVE-2024-12686 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability BeyondTrust · Privileged Remote Access (PRA) and Remote Support (RS)
- CVE-2024-3393 Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability Palo Alto Networks · PAN-OS
- CVE-2021-44207 Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability Acclaim Systems · USAHERDS
- CVE-2021-40407 Reolink RLC-410W IP Camera OS Command Injection Vulnerability Reolink · RLC-410W IP Camera
- CVE-2019-11001 Reolink Multiple IP Cameras OS Command Injection Vulnerability Reolink · Multiple IP Cameras
- CVE-2022-23227 NUUO NVRmini2 Devices Missing Authentication Vulnerability NUUO · NVRmini2 Devices
- CVE-2024-35250 Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability Microsoft · Windows
- CVE-2024-49138 Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability Microsoft · Windows
- CVE-2023-45727 North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability North Grid · Proself
- CVE-2024-21287 Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability Oracle · Agile Product Lifecycle Management (PLM)
- CVE-2024-44309 Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability Apple · Multiple Products
- CVE-2024-44308 Apple Multiple Products Code Execution Vulnerability Apple · Multiple Products
- CVE-2024-38813 VMware vCenter Server Privilege Escalation Vulnerability VMware · vCenter Server
- CVE-2014-2120 Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability Cisco · Adaptive Security Appliance (ASA)
- CVE-2024-43093 Android Framework Privilege Escalation Vulnerability Android · Framework
- CVE-2024-20481 Cisco ASA and FTD Denial-of-Service Vulnerability Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
- CVE-2024-9537 ScienceLogic SL1 Unspecified Vulnerability ScienceLogic · SL1
- CVE-2024-9379 Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability Ivanti · Cloud Services Appliance (CSA)
- CVE-2024-43573 Microsoft Windows MSHTML Platform Spoofing Vulnerability Microsoft · Windows
- CVE-2024-43047 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Qualcomm · Multiple Chipsets
- CVE-2019-0344 SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability SAP · Commerce Cloud
- CVE-2014-0502 Adobe Flash Player Double Free Vulnerablity Adobe · Flash Player
- CVE-2013-0648 Adobe Flash Player Code Execution Vulnerability Adobe · Flash Player
- CVE-2013-0643 Adobe Flash Player Incorrect Default Permissions Vulnerability Adobe · Flash Player
- CVE-2024-38217 Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability Microsoft · Windows
- CVE-2024-38014 Microsoft Windows Installer Improper Privilege Management Vulnerability Microsoft · Windows
- CVE-2024-38226 Microsoft Publisher Protection Mechanism Failure Vulnerability Microsoft · Publisher
- CVE-2024-7262 Kingsoft WPS Office Path Traversal Vulnerability Kingsoft · WPS Office
- CVE-2024-7965 Google Chromium V8 Inappropriate Implementation Vulnerability Google · Chromium V8
- CVE-2024-7971 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2024-39717 Versa Director Dangerous File Type Upload Vulnerability Versa · Director
- CVE-2022-0185 Linux Kernel Heap-Based Buffer Overflow Vulnerability Linux · Kernel
- CVE-2024-38107 Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2024-38106 Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2024-38193 Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2024-38213 Microsoft Windows SmartScreen Security Feature Bypass Vulnerability Microsoft · Windows
- CVE-2024-38178 Microsoft Windows Scripting Engine Memory Corruption Vulnerability Microsoft · Windows
- CVE-2024-38189 Microsoft Project Remote Code Execution Vulnerability Microsoft · Project
- CVE-2024-36971 Android Kernel Remote Code Execution Vulnerability Android · Kernel
- CVE-2024-39891 Twilio Authy Information Disclosure Vulnerability Twilio · Authy
- CVE-2022-22948 VMware vCenter Server Incorrect Default File Permissions Vulnerability VMware · vCenter Server
- CVE-2024-38080 Microsoft Windows Hyper-V Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2024-20399 Cisco NX-OS Command Injection Vulnerability Cisco · NX-OS
- CVE-2022-2586 Linux Kernel Use-After-Free Vulnerability Linux · Kernel
- CVE-2024-32896 Android Pixel Privilege Escalation Vulnerability Android · Pixel
- CVE-2024-4610 Arm Mali GPU Kernel Driver Use-After-Free Vulnerability Arm · Mali GPU Kernel Driver
- CVE-2024-4978 Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability Justice AV Solutions · Viewer
- CVE-2024-5274 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2024-4947 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2024-4761 Google Chromium V8 Out-of-Bounds Memory Write Vulnerability Google · Chromium V8
- CVE-2014-100005 D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability D-Link · DIR-600 Router
- CVE-2024-30040 Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability Microsoft · Windows
- CVE-2024-4671 Google Chromium Visuals Use-After-Free Vulnerability Google · Chromium
- CVE-2024-29988 Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability Microsoft · SmartScreen Prompt
- CVE-2024-20359 Cisco ASA and FTD Privilege Escalation Vulnerability Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
- CVE-2022-38028 Microsoft Windows Print Spooler Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2024-29748 Android Pixel Privilege Escalation Vulnerability Android · Pixel
- CVE-2024-29745 Android Pixel Information Disclosure Vulnerability Android · Pixel
- CVE-2024-23225 Apple Multiple Products Memory Corruption Vulnerability Apple · Multiple Products
- CVE-2024-23296 Apple Multiple Products Memory Corruption Vulnerability Apple · Multiple Products
- CVE-2023-21237 Android Pixel Information Disclosure Vulnerability Android · Pixel
- CVE-2023-29360 Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability Microsoft · Streaming Service
- CVE-2024-21410 Microsoft Exchange Server Privilege Escalation Vulnerability Microsoft · Exchange Server
- CVE-2024-21351 Microsoft Windows SmartScreen Security Feature Bypass Vulnerability Microsoft · Windows
- CVE-2023-4762 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2022-48618 Apple Multiple Products Memory Corruption Vulnerability Apple · Multiple Products
- CVE-2024-23222 Apple Multiple Products WebKit Type Confusion Vulnerability Apple · Multiple Products
- CVE-2024-0519 Google Chromium V8 Out-of-Bounds Memory Access Vulnerability Google · Chromium V8
- CVE-2023-6548 Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability Citrix · NetScaler ADC and NetScaler Gateway
- CVE-2023-41990 Apple Multiple Products Code Execution Vulnerability Apple · Multiple Products
- CVE-2023-7101 Spreadsheet::ParseExcel Remote Code Execution Vulnerability Spreadsheet::ParseExcel · Spreadsheet::ParseExcel
- CVE-2023-7024 Google Chromium WebRTC Heap Buffer Overflow Vulnerability Google · Chromium WebRTC
- CVE-2023-6448 Unitronics Vision PLC and HMI Insecure Default Password Vulnerability Unitronics · Vision PLC and HMI
- CVE-2023-33107 Qualcomm Multiple Chipsets Integer Overflow Vulnerability Qualcomm · Multiple Chipsets
- CVE-2023-33106 Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability Qualcomm · Multiple Chipsets
- CVE-2023-33063 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Qualcomm · Multiple Chipsets
- CVE-2022-22071 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Qualcomm · Multiple Chipsets
- CVE-2023-42917 Apple Multiple Products WebKit Memory Corruption Vulnerability Apple · Multiple Products
- CVE-2023-42916 Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability Apple · Multiple Products
- CVE-2023-6345 Google Skia Integer Overflow Vulnerability Google · Chromium Skia
- CVE-2023-36584 Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability Microsoft · Windows
- CVE-2023-36033 Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2023-36036 Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2023-36851 Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability Juniper · Junos OS
- CVE-2023-46748 F5 BIG-IP Configuration Utility SQL Injection Vulnerability F5 · BIG-IP Configuration Utility
- CVE-2023-20109 Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability Cisco · IOS and IOS XE
- CVE-2023-36563 Microsoft WordPad Information Disclosure Vulnerability Microsoft · WordPad
- CVE-2023-42824 Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability Apple · iOS and iPadOS
- CVE-2023-28229 Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability Microsoft · Windows CNG Key Isolation Service
- CVE-2023-4211 Arm Mali GPU Kernel Driver Use-After-Free Vulnerability Arm · Mali GPU Kernel Driver
- CVE-2023-5217 Google Chromium libvpx Heap Buffer Overflow Vulnerability Google · Chromium libvpx
- CVE-2023-41991 Apple Multiple Products Improper Certificate Validation Vulnerability Apple · Multiple Products
- CVE-2023-41992 Apple Multiple Products Kernel Privilege Escalation Vulnerability Apple · Multiple Products
- CVE-2023-41993 Apple Multiple Products WebKit Code Execution Vulnerability Apple · Multiple Products
- CVE-2023-41179 Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability Trend Micro · Apex One and Worry-Free Business Security
- CVE-2023-28434 MinIO Security Feature Bypass Vulnerability MinIO · MinIO
- CVE-2022-22265 Samsung Mobile Devices Use-After-Free Vulnerability Samsung · Mobile Devices
- CVE-2023-26369 Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability Adobe · Acrobat and Reader
Nothing on this page matches that filter.