Nodebug .app
Log in

Trackers · Security

Exploited vulnerabilities.

Security flaws that attackers are actively using right now, from the US cybersecurity agency's (CISA) Known Exploited Vulnerabilities catalog. If you run anything on this list, patch it first.

Source · CISA KEV catalog Refreshed · 6 hours, 31 minutes ago
1756in the catalog
8added this week
30added this month
361used by ransomware

1756 results.

CVE-2022-0609 Google · Chromium Animation

Google Chromium Animation Use-After-Free Vulnerability

Google Chromium Animation contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

Added Feb 15, 2022 · US agencies must patch by Mar 1, 2022 · CWE-416

Fix: Apply updates per vendor instructions.

CVE-2019-0752 Microsoft · Internet Explorer Ransomware

Microsoft Internet Explorer Type Confusion Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer

Added Feb 15, 2022 · US agencies must patch by Aug 15, 2022 · CWE-843

Fix: Apply updates per vendor instructions.

CVE-2018-8174 Microsoft · Windows Ransomware

Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution"

Added Feb 15, 2022 · US agencies must patch by Aug 15, 2022 · CWE-787

Fix: Apply updates per vendor instructions.

CVE-2018-20250 RARLAB · WinRAR Ransomware

WinRAR Absolute Path Traversal Vulnerability

WinRAR Absolute Path Traversal vulnerability leads to Remote Code Execution

Added Feb 15, 2022 · US agencies must patch by Aug 15, 2022 · CWE-36

Fix: Apply updates per vendor instructions.

CVE-2018-15982 Adobe · Flash Player Ransomware

Adobe Flash Player Use-After-Free Vulnerability

Adobe Flash Player com.adobe.tvsdk.mediacore.metadata Use After Free Vulnerability

Added Feb 15, 2022 · US agencies must patch by Aug 15, 2022 · CWE-416

Fix: The impacted product is end-of-life and should be disconnected if still in use.

CVE-2017-9841 PHPUnit · PHPUnit

PHPUnit Command Injection Vulnerability

PHPUnit allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., external access to the /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php URI.

Added Feb 15, 2022 · US agencies must patch by Aug 15, 2022 · CWE-94

Fix: Apply updates per vendor instructions.

CVE-2014-1761 Microsoft · Word

Microsoft Word Memory Corruption Vulnerability

Microsoft Word contains a memory corruption vulnerability which when exploited could allow for remote code execution.

Added Feb 15, 2022 · US agencies must patch by Aug 15, 2022 · CWE-119

Fix: Apply updates per vendor instructions.

CVE-2013-3906 Microsoft · Graphics Component

Microsoft Graphics Component Memory Corruption Vulnerability

Microsoft Graphics Component contains a memory corruption vulnerability which can allow for remote code execution.

Added Feb 15, 2022 · US agencies must patch by Aug 15, 2022 · CWE-94

Fix: Apply updates per vendor instructions.

CVE-2022-22620 Apple · iOS, iPadOS, and macOS

Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability

Apple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

Added Feb 11, 2022 · US agencies must patch by Feb 25, 2022 · CWE-416

Fix: Apply updates per vendor instructions.

CVE-2021-36934 Microsoft · Windows

Microsoft Windows SAM Local Privilege Escalation Vulnerability

If a Volume Shadow Copy (VSS) shadow copy of the system drive is available, users can read the SAM file which would allow any user to escalate privileges to SYSTEM level.

Added Feb 10, 2022 · US agencies must patch by Feb 24, 2022 · CWE-1220

Fix: Apply updates per vendor instructions.

CVE-2020-0796 Microsoft · SMBv3 Ransomware

Microsoft SMBv3 Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server or client.

Added Feb 10, 2022 · US agencies must patch by Aug 10, 2022 · CWE-119

Fix: Apply updates per vendor instructions.

CVE-2018-1000861 Jenkins · Jenkins Stapler Web Framework

Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability

A code execution vulnerability exists in the Stapler web framework used by Jenkins

Added Feb 10, 2022 · US agencies must patch by Aug 10, 2022 · CWE-502

Fix: Apply updates per vendor instructions.

CVE-2017-9791 Apache · Struts 1

Apache Struts 1 Improper Input Validation Vulnerability

The Struts 1 plugin in Apache Struts might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage.

Added Feb 10, 2022 · US agencies must patch by Aug 10, 2022 · CWE-20

Fix: Apply updates per vendor instructions.

CVE-2017-8464 Microsoft · Windows

Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability

Windows Shell in multiple versions of Microsoft Windows allows local users or remote attackers to execute arbitrary code via a crafted .LNK file

Added Feb 10, 2022 · US agencies must patch by Aug 10, 2022

Fix: Apply updates per vendor instructions.

CVE-2017-10271 Oracle · WebLogic Server Ransomware

Oracle Corporation WebLogic Server Remote Code Execution Vulnerability

Oracle Corporation WebLogic Server contains a vulnerability that allows for remote code execution.

Added Feb 10, 2022 · US agencies must patch by Aug 10, 2022

Fix: Apply updates per vendor instructions.

CVE-2017-0263 Microsoft · Win32k

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k contains a privilege escalation vulnerability due to the Windows kernel-mode driver failing to properly handle objects in memory.

Added Feb 10, 2022 · US agencies must patch by Aug 10, 2022 · CWE-416

Fix: Apply updates per vendor instructions.

CVE-2017-0262 Microsoft · Office

Microsoft Office Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Office.

Added Feb 10, 2022 · US agencies must patch by Aug 10, 2022

Fix: Apply updates per vendor instructions.

CVE-2017-0145 Microsoft · SMBv1 Ransomware

Microsoft SMBv1 Remote Code Execution Vulnerability

The SMBv1 server in multiple Microsoft Windows versions allows remote attackers to execute arbitrary code via crafted packets.

Added Feb 10, 2022 · US agencies must patch by Aug 10, 2022 · CWE-20

Fix: Apply updates per vendor instructions.

CVE-2017-0144 Microsoft · SMBv1 Ransomware

Microsoft SMBv1 Remote Code Execution Vulnerability

The SMBv1 server in multiple Microsoft Windows versions allows remote attackers to execute arbitrary code via crafted packets.

Added Feb 10, 2022 · US agencies must patch by Aug 10, 2022 · CWE-20

Fix: Apply updates per vendor instructions.

CVE-2016-3088 Apache · ActiveMQ

Apache ActiveMQ Improper Input Validation Vulnerability

The Fileserver web application in Apache ActiveMQ allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request

Added Feb 10, 2022 · US agencies must patch by Aug 10, 2022 · CWE-20

Fix: Apply updates per vendor instructions.

CVE-2015-2051 D-Link · DIR-645 Router

D-Link DIR-645 Router Remote Code Execution Vulnerability

D-Link DIR-645 Wired/Wireless Router allows remote attackers to execute arbitrary commands via a GetDeviceSettings action to the HNAP interface.

Added Feb 10, 2022 · US agencies must patch by Aug 10, 2022 · CWE-77

Fix: The impacted product is end-of-life and should be disconnected if still in use.

CVE-2015-1635 Microsoft · HTTP.sys

Microsoft HTTP.sys Remote Code Execution Vulnerability

Microsoft HTTP protocol stack (HTTP.sys) contains a vulnerability that allows for remote code execution.

Added Feb 10, 2022 · US agencies must patch by Aug 10, 2022 · CWE-94

Fix: Apply updates per vendor instructions.

CVE-2015-1130 Apple · OS X

Apple OS X Authentication Bypass Vulnerability

The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges.

Added Feb 10, 2022 · US agencies must patch by Aug 10, 2022 · CWE-254

Fix: Apply updates per vendor instructions.

CVE-2014-4404 Apple · OS X

Apple OS X Heap-Based Buffer Overflow Vulnerability

Heap-based buffer overflow in IOHIDFamily in Apple OS X, which affects, iOS before 8 and Apple TV before 7, allows attackers to execute arbitrary code in a privileged context.

Added Feb 10, 2022 · US agencies must patch by Aug 10, 2022 · CWE-119

Fix: Apply updates per vendor instructions.

CVE-2022-21882 Microsoft · Win32k Ransomware

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.

Added Feb 4, 2022 · US agencies must patch by Feb 18, 2022 · CWE-787

Fix: Apply updates per vendor instructions.

CVE-2022-22587 Apple · iOS and macOS

Apple Memory Corruption Vulnerability

Apple IOMobileFrameBuffer contains a memory corruption vulnerability which can allow a malicious application to execute arbitrary code with kernel privileges.

Added Jan 28, 2022 · US agencies must patch by Feb 11, 2022 · CWE-20, CWE-787

Fix: Apply updates per vendor instructions.

CVE-2021-20038 SonicWall · SMA 100 Appliances Ransomware

SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability

SonicWall SMA 100 devies are vulnerable to an unauthenticated stack-based buffer overflow vulnerability where exploitation can result in code execution.

Added Jan 28, 2022 · US agencies must patch by Feb 11, 2022 · CWE-121

Fix: Apply updates per vendor instructions.

CVE-2020-5722 Grandstream · UCM6200

Grandstream Networks UCM6200 Series SQL Injection Vulnerability

Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. Exploitation can allow for code execution as root.

Added Jan 28, 2022 · US agencies must patch by Jul 28, 2022 · CWE-89

Fix: Apply updates per vendor instructions.

CVE-2020-0787 Microsoft · Windows Ransomware

Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability

Microsoft Windows BITS is vulnerable to to a privilege elevation vulnerability if it improperly handles symbolic links. An actor can exploit this vulnerability to execute arbitrary code with system-level privileges.

Added Jan 28, 2022 · US agencies must patch by Jul 28, 2022 · CWE-269, CWE-59

Fix: Apply updates per vendor instructions.

CVE-2017-5689 Intel · Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability

Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability

Intel products contain a vulnerability which can allow attackers to perform privilege escalation.

Added Jan 28, 2022 · US agencies must patch by Jul 28, 2022

Fix: Apply updates per vendor instructions.