Verdict
Confirmed exploited in the wild
CISA has evidence of active exploitation. This is not theoretical risk — someone has already used it against someone. 706 vulnerabilities in this band.
- CVE-2020-5735 Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability Amcrest · Cameras and Network Video Recorder (NVR)
- CVE-2020-0041 Android Kernel Out-of-Bounds Write Vulnerability Android · Android Kernel
- CVE-2020-0069 Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability MediaTek · Multiple Chipsets
- CVE-2021-30858 Apple iOS, iPadOS, macOS Use-After-Free Vulnerability Apple · iOS, iPadOS, and macOS
- CVE-2019-6223 Apple iOS and macOS Group Facetime Vulnerability Apple · iOS and macOS
- CVE-2020-27930 Apple Multiple Products Memory Corruption Vulnerability Apple · Multiple Products
- CVE-2021-30807 Apple Multiple Products Memory Corruption Vulnerability Apple · Multiple Products
- CVE-2020-27950 Apple Multiple Products Memory Initialization Vulnerability Apple · Multiple Products
- CVE-2020-27932 Apple Multiple Products Type Confusion Vulnerability Apple · Multiple Products
- CVE-2020-9818 Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability Apple · iOS, iPadOS, and watchOS
- CVE-2020-9819 Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability Apple · iOS, iPadOS, and watchOS
- CVE-2021-30762 Apple iOS WebKit Use-After-Free Vulnerability Apple · iOS
- CVE-2021-1782 Apple Multiple Products Race Condition Vulnerability Apple · Multiple Products
- CVE-2021-1870 Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability Apple · iOS, iPadOS, and macOS
- CVE-2021-1871 Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability Apple · iOS, iPadOS, and macOS
- CVE-2021-1879 Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability Apple · iOS, iPadOS, and watchOS
- CVE-2021-30661 Apple Multiple Products WebKit Storage Use-After-Free Vulnerability Apple · Multiple Products
- CVE-2021-30666 Apple iOS WebKit Buffer Overflow Vulnerability Apple · iOS
- CVE-2021-30713 Apple macOS Unspecified Vulnerability Apple · macOS
- CVE-2021-30665 Apple Multiple Products WebKit Memory Corruption Vulnerability Apple · Multiple Products
- CVE-2021-30663 Apple Multiple Products WebKit Integer Overflow Vulnerability Apple · Multiple Products
- CVE-2021-30761 Apple iOS WebKit Memory Corruption Vulnerability Apple · iOS
- CVE-2021-30869 Apple iOS, iPadOS, and macOS Type Confusion Vulnerability Apple · iOS, iPadOS, and macOS
- CVE-2020-9859 Apple Multiple Products Code Execution Vulnerability Apple · Multiple Products
- CVE-2021-27562 Arm Trusted Firmware Out-of-Bounds Write Vulnerability Arm · Trusted Firmware
- CVE-2021-28664 Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability Arm · Mali Graphics Processing Unit (GPU)
- CVE-2021-28663 Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability Arm · Mali Graphics Processing Unit (GPU)
- CVE-2020-3118 Cisco IOS XR Software Discovery Protocol Format String Vulnerability Cisco · IOS XR
- CVE-2020-3566 Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability Cisco · IOS XR
- CVE-2020-3569 Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability Cisco · IOS XR
- CVE-2020-8195 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance
- CVE-2020-8196 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance
- CVE-2019-15752 Docker Desktop Community Edition Privilege Escalation Vulnerability Docker · Desktop Community Edition
- CVE-2020-16010 Google Chrome for Android UI Heap Buffer Overflow Vulnerability Google · Chrome for Android UI
- CVE-2020-15999 Google Chrome FreeType Heap Buffer Overflow Vulnerability Google · Chrome FreeType
- CVE-2021-21166 Google Chromium Race Condition Vulnerability Google · Chromium
- CVE-2020-16017 Google Chrome Use-After-Free Vulnerability Google · Chrome
- CVE-2021-37976 Google Chromium Information Disclosure Vulnerability Google · Chromium
- CVE-2020-16009 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2020-16013 Google Chromium V8 Incorrect Implementation Vulnerabililty Google · Chromium V8
- CVE-2021-30633 Google Chromium Indexed DB API Use-After-Free Vulnerability Google · Chromium Indexed DB API
- CVE-2021-21148 Google Chromium V8 Heap Buffer Overflow Vulnerability Google · Chromium V8
- CVE-2021-37973 Google Chromium Portals Use-After-Free Vulnerability Google · Chromium Portals
- CVE-2021-37975 Google Chromium V8 Use-After-Free Vulnerability Google · Chromium V8
- CVE-2021-30554 Google Chromium WebGL Use-After-Free Vulnerability Google · Chromium WebGL
- CVE-2021-21206 Google Chromium Blink Use-After-Free Vulnerability Google · Chromium Blink
- CVE-2021-38000 Google Chromium Intents Improper Input Validation Vulnerability Google · Chromium Intents
- CVE-2021-38003 Google Chromium V8 Memory Corruption Vulnerability Google · Chromium V8
- CVE-2021-21193 Google Chromium Blink Use-After-Free Vulnerability Google · Chromium Blink
- CVE-2021-30563 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2021-23874 McAfee Total Protection (MTP) Improper Privilege Management Vulnerability McAfee · McAfee Total Protection (MTP)
- CVE-2021-22506 Micro Focus Access Manager Information Leakage Vulnerability Micro Focus · Micro Focus Access Manager
- CVE-2021-1647 Microsoft Defender Remote Code Execution Vulnerability Microsoft · Defender
- CVE-2021-33739 Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2020-0683 Microsoft Windows Installer Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2020-17087 Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2021-31199 Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability Microsoft · Enhanced Cryptographic Provider
- CVE-2021-33771 Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2021-31956 Microsoft Windows NTFS Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2021-31201 Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability Microsoft · Enhanced Cryptographic Provider
- CVE-2021-31979 Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2020-17144 Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft · Exchange Server
- CVE-2020-0986 Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2021-38645 Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability Microsoft · Open Management Infrastructure (OMI)
- CVE-2021-36948 Microsoft Windows Update Medic Service Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2021-38649 Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability Microsoft · Open Management Infrastructure (OMI)
- CVE-2020-1464 Microsoft Windows Spoofing Vulnerability Microsoft · Windows
- CVE-2020-1040 Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability Microsoft · Hyper-V RemoteFX
- CVE-2021-28310 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2018-8653 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2019-0797 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2021-27085 Microsoft Internet Explorer Remote Code Execution Vulnerability Microsoft · Internet Explorer
- CVE-2021-27059 Microsoft Office Remote Code Execution Vulnerability Microsoft · Office
- CVE-2020-1380 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2021-34448 Microsoft Windows Scripting Engine Memory Corruption Vulnerability Microsoft · Windows
- CVE-2019-1214 Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability Microsoft · Windows
- CVE-2016-3235 Microsoft Office OLE DLL Side Loading Vulnerability Microsoft · Office
- CVE-2019-0863 Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2021-38648 Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability Microsoft · Open Management Infrastructure (OMI)
- CVE-2020-6819 Mozilla Firefox And Thunderbird Use-After-Free Vulnerability Mozilla · Firefox and Thunderbird
- CVE-2020-6820 Mozilla Firefox And Thunderbird Use-After-Free Vulnerability Mozilla · Firefox and Thunderbird
- CVE-2019-17026 Mozilla Firefox And Thunderbird Type Confusion Vulnerability Mozilla · Firefox and Thunderbird
- CVE-2019-19356 Netis WF2419 Devices Remote Code Execution Vulnerability Netis · WF2419 Devices
- CVE-2021-22900 Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability Ivanti · Pulse Connect Secure
- CVE-2021-22894 Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability Ivanti · Pulse Connect Secure
- CVE-2021-22899 Ivanti Pulse Connect Secure Command Injection Vulnerability Ivanti · Pulse Connect Secure
- CVE-2021-1906 Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability Qualcomm · Multiple Chipsets
- CVE-2021-1905 Qualcomm Multiple Chipsets Use-After-Free Vulnerability Qualcomm · Multiple Chipsets
- CVE-2017-16651 Roundcube Webmail File Disclosure Vulnerability Roundcube · Roundcube Webmail
- CVE-2010-5326 SAP NetWeaver Remote Code Execution Vulnerability SAP · NetWeaver
- CVE-2016-9563 SAP NetWeaver XML External Entity (XXE) Vulnerability SAP · NetWeaver
- CVE-2016-3976 SAP NetWeaver Directory Traversal Vulnerability SAP · NetWeaver
- CVE-2019-16256 SIMalliance Toolbox Browser Command Injection Vulnerability SIMalliance · Toolbox Browser
- CVE-2016-3643 SolarWinds Virtualization Manager Privilege Escalation Vulnerability SolarWinds · Virtualization Manager
- CVE-2020-10181 Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability Sumavision · Enhanced Multimedia Router (EMR)
- CVE-2017-6327 Symantec Messaging Gateway Remote Code Execution Vulnerability Symantec · Symantec Messaging Gateway
- CVE-2019-18988 TeamViewer Desktop Bypass Remote Login Vulnerability TeamViewer · Desktop
- CVE-2018-14558 Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability Tenda · AC7, AC9, and AC10 Routers
- CVE-2019-18187 Trend Micro OfficeScan Directory Traversal Vulnerability Trend Micro · OfficeScan
- CVE-2020-8467 Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability Trend Micro · Apex One and OfficeScan
- CVE-2020-8468 Trend Micro Multiple Products Content Validation Escape Vulnerability Trend Micro · Apex One, OfficeScan and Worry-Free Business Security Agents
- CVE-2020-24557 Trend Micro Multiple Products Improper Access Control Vulnerability Trend Micro · Apex One, OfficeScan, and Worry-Free Business Security
- CVE-2020-8599 Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability Trend Micro · Apex One and OfficeScan
- CVE-2021-36742 Trend Micro Multiple Products Improper Input Validation Vulnerability Trend Micro · Apex One, Apex One as a Service, and Worry-Free Business Security
- CVE-2021-36741 Trend Micro Multiple Products Improper Input Validation Vulnerability Trend Micro · Apex One, Apex One as a Service, and Worry-Free Business Security
- CVE-2020-4006 Multiple VMware Products Command Injection Vulnerability VMware · Multiple Products
Nothing on this page matches that filter.