Verdict
Confirmed exploited in the wild
CISA has evidence of active exploitation. This is not theoretical risk — someone has already used it against someone. 686 vulnerabilities in this band.
- CVE-2021-27562 Arm Trusted Firmware Out-of-Bounds Write Vulnerability Arm · Trusted Firmware
- CVE-2021-28664 Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability Arm · Mali Graphics Processing Unit (GPU)
- CVE-2021-28663 Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability Arm · Mali Graphics Processing Unit (GPU)
- CVE-2020-3118 Cisco IOS XR Software Discovery Protocol Format String Vulnerability Cisco · IOS XR
- CVE-2020-3566 Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability Cisco · IOS XR
- CVE-2020-3569 Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability Cisco · IOS XR
- CVE-2020-8195 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance
- CVE-2020-8196 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance
- CVE-2019-15752 Docker Desktop Community Edition Privilege Escalation Vulnerability Docker · Desktop Community Edition
- CVE-2019-5591 Fortinet FortiOS Default Configuration Vulnerability Fortinet · FortiOS
- CVE-2020-16010 Google Chrome for Android UI Heap Buffer Overflow Vulnerability Google · Chrome for Android UI
- CVE-2021-21166 Google Chromium Race Condition Vulnerability Google · Chromium
- CVE-2020-16017 Google Chrome Use-After-Free Vulnerability Google · Chrome
- CVE-2021-37976 Google Chromium Information Disclosure Vulnerability Google · Chromium
- CVE-2020-16009 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2020-16013 Google Chromium V8 Incorrect Implementation Vulnerabililty Google · Chromium V8
- CVE-2021-30633 Google Chromium Indexed DB API Use-After-Free Vulnerability Google · Chromium Indexed DB API
- CVE-2021-21148 Google Chromium V8 Heap Buffer Overflow Vulnerability Google · Chromium V8
- CVE-2021-37973 Google Chromium Portals Use-After-Free Vulnerability Google · Chromium Portals
- CVE-2021-37975 Google Chromium V8 Use-After-Free Vulnerability Google · Chromium V8
- CVE-2021-30554 Google Chromium WebGL Use-After-Free Vulnerability Google · Chromium WebGL
- CVE-2021-21206 Google Chromium Blink Use-After-Free Vulnerability Google · Chromium Blink
- CVE-2021-38000 Google Chromium Intents Improper Input Validation Vulnerability Google · Chromium Intents
- CVE-2021-38003 Google Chromium V8 Memory Corruption Vulnerability Google · Chromium V8
- CVE-2021-21193 Google Chromium Blink Use-After-Free Vulnerability Google · Chromium Blink
- CVE-2021-30563 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2021-23874 McAfee Total Protection (MTP) Improper Privilege Management Vulnerability McAfee · McAfee Total Protection (MTP)
- CVE-2021-22506 Micro Focus Access Manager Information Leakage Vulnerability Micro Focus · Micro Focus Access Manager
- CVE-2021-1647 Microsoft Defender Remote Code Execution Vulnerability Microsoft · Defender
- CVE-2021-33739 Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2020-0683 Microsoft Windows Installer Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2020-17087 Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2021-31199 Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability Microsoft · Enhanced Cryptographic Provider
- CVE-2021-33771 Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2021-31956 Microsoft Windows NTFS Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2021-31201 Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability Microsoft · Enhanced Cryptographic Provider
- CVE-2021-31979 Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2020-17144 Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft · Exchange Server
- CVE-2020-0986 Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2021-38645 Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability Microsoft · Open Management Infrastructure (OMI)
- CVE-2021-36948 Microsoft Windows Update Medic Service Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2021-38649 Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability Microsoft · Open Management Infrastructure (OMI)
- CVE-2020-1464 Microsoft Windows Spoofing Vulnerability Microsoft · Windows
- CVE-2019-0803 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2020-1040 Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability Microsoft · Hyper-V RemoteFX
- CVE-2021-28310 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2019-0859 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2018-8653 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2019-0797 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2021-27085 Microsoft Internet Explorer Remote Code Execution Vulnerability Microsoft · Internet Explorer
- CVE-2021-27059 Microsoft Office Remote Code Execution Vulnerability Microsoft · Office
- CVE-2020-1380 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2020-0968 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2021-34448 Microsoft Windows Scripting Engine Memory Corruption Vulnerability Microsoft · Windows
- CVE-2019-1214 Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability Microsoft · Windows
- CVE-2016-3235 Microsoft Office OLE DLL Side Loading Vulnerability Microsoft · Office
- CVE-2019-0863 Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2021-38648 Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability Microsoft · Open Management Infrastructure (OMI)
- CVE-2020-6819 Mozilla Firefox And Thunderbird Use-After-Free Vulnerability Mozilla · Firefox and Thunderbird
- CVE-2020-6820 Mozilla Firefox And Thunderbird Use-After-Free Vulnerability Mozilla · Firefox and Thunderbird
- CVE-2019-17026 Mozilla Firefox And Thunderbird Type Confusion Vulnerability Mozilla · Firefox and Thunderbird
- CVE-2019-19356 Netis WF2419 Devices Remote Code Execution Vulnerability Netis · WF2419 Devices
- CVE-2021-22900 Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability Ivanti · Pulse Connect Secure
- CVE-2021-22894 Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability Ivanti · Pulse Connect Secure
- CVE-2021-22899 Ivanti Pulse Connect Secure Command Injection Vulnerability Ivanti · Pulse Connect Secure
- CVE-2021-1906 Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability Qualcomm · Multiple Chipsets
- CVE-2021-1905 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Qualcomm · Multiple Chipsets
- CVE-2020-10221 rConfig OS Command Injection Vulnerability rConfig · rConfig
- CVE-2017-16651 Roundcube Webmail File Disclosure Vulnerability Roundcube · Roundcube Webmail
- CVE-2010-5326 SAP NetWeaver Remote Code Execution Vulnerability SAP · NetWeaver
- CVE-2016-9563 SAP NetWeaver XML External Entity (XXE) Vulnerability SAP · NetWeaver
- CVE-2016-3976 SAP NetWeaver Directory Traversal Vulnerability SAP · NetWeaver
- CVE-2019-16256 SIMalliance Toolbox Browser Command Injection Vulnerability SIMalliance · Toolbox Browser
- CVE-2016-3643 SolarWinds Virtualization Manager Privilege Escalation Vulnerability SolarWinds · Virtualization Manager
- CVE-2020-10181 Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability Sumavision · Enhanced Multimedia Router (EMR)
- CVE-2017-6327 Symantec Messaging Gateway Remote Code Execution Vulnerability Symantec · Symantec Messaging Gateway
- CVE-2019-18988 TeamViewer Desktop Bypass Remote Login Vulnerability TeamViewer · Desktop
- CVE-2018-14558 Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability Tenda · AC7, AC9, and AC10 Routers
- CVE-2019-18187 Trend Micro OfficeScan Directory Traversal Vulnerability Trend Micro · OfficeScan
- CVE-2020-8467 Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability Trend Micro · Apex One and OfficeScan
- CVE-2020-8468 Trend Micro Multiple Products Content Validation Escape Vulnerability Trend Micro · Apex One, OfficeScan and Worry-Free Business Security Agents
- CVE-2020-24557 Trend Micro Multiple Products Improper Access Control Vulnerability Trend Micro · Apex One, OfficeScan, and Worry-Free Business Security
- CVE-2020-8599 Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability Trend Micro · Apex One and OfficeScan
- CVE-2021-36742 Trend Micro Multiple Products Improper Input Validation Vulnerability Trend Micro · Apex One, Apex One as a Service, and Worry-Free Business Security
- CVE-2021-36741 Trend Micro Multiple Products Improper Input Validation Vulnerability Trend Micro · Apex One, Apex One as a Service, and Worry-Free Business Security
- CVE-2020-4006 Multiple VMware Products Command Injection Vulnerability VMware · Multiple Products
Nothing on this page matches that filter.