0.7%
actively
exploited
exploited
Focus on what’s exploited
Out of 350,187 known CVEs, only 0.7% show real-world exploitation signals.
Data from public sources (including CISA) plus private sensors, enriched with prioritization metadata.
2,503
Total Known exploited
426
Added this week
Search
Results update as you type.
⌘K
Added
Exploitability
Type to search. Filters apply instantly.
| CVE | Severity | Title |
|---|---|---|
| CVE-2019-18426 | 8.2 High |
A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-site...
Remote
Low complexity
|
| CVE-2019-1385 | 7.8 High |
An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in...
Malware
Low complexity
No user interaction
|
| CVE-2019-1130 | 7.8 High |
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation...
Malware
Low complexity
No user interaction
|
| CVE-2018-5002 | 7.8 High |
Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploitation could lead to...
Low complexity
|
| CVE-2018-8589 | 7.8 High |
An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege...
Low complexity
No user interaction
|
| CVE-2022-20821 | 6.5 Medium |
Cisco IOS XR Software Health Check Open Port Vulnerability
Remote
Low complexity
No user interaction
|
| CVE-2021-1048 | 7.8 High |
In ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of...
Low complexity
No user interaction
|
| CVE-2022-30525 | 9.8 Critical |
A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Patch 1, USG FLEX 200 firmware...
Remote
Low complexity
No user interaction
|
| CVE-2022-22947 | 10.0 Critical |
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator...
Remote
Low complexity
No user interaction
|
| CVE-2022-1388 | 9.8 Critical |
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to...
Malware
Remote
Low complexity
No user interaction
|
| CVE-2014-0160 | 7.5 High |
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote...
Remote
Low complexity
No user interaction
|
| CVE-2021-1789 | 8.8 High |
A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina,...
Remote
Low complexity
|
| CVE-2019-8506 | 8.8 High |
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes...
Remote
Low complexity
|
| CVE-2014-4113 | 7.8 High |
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1,...
Low complexity
|
| CVE-2014-0322 | 8.8 High |
Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via vectors involving...
Remote
Low complexity
|
| CVE-2022-26904 | 7.0 High |
Windows User Profile Service Elevation of Privilege Vulnerability
No user interaction
|
| CVE-2022-0847 | 7.8 High |
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and...
Low complexity
No user interaction
|
| CVE-2021-41357 | 7.8 High |
Win32k Elevation of Privilege Vulnerability
Low complexity
No user interaction
|
| CVE-2022-29464 | 9.8 Critical |
Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /fileupload endpoint with a...
Malware
Remote
Low complexity
No user interaction
|
| CVE-2019-1003029 | 9.9 Critical |
A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.53 and earlier in...
Remote
Low complexity
No user interaction
|
| CVE-2021-40450 | 7.8 High |
Win32k Elevation of Privilege Vulnerability
Low complexity
No user interaction
|
| CVE-2022-21919 | 7.0 High |
Windows User Profile Service Elevation of Privilege Vulnerability
No user interaction
|
| CVE-2018-6882 | 6.1 Medium |
Cross-site scripting (XSS) vulnerability in the ZmMailMsgView.getAttachmentLinkHtml function in Zimbra Collaboration Suite (ZCS) before 8.7 Patch 1...
Malware
Remote
Low complexity
|
| CVE-2022-22718 | 7.8 High |
Windows Print Spooler Elevation of Privilege Vulnerability
Low complexity
No user interaction
|
| CVE-2019-3568 | 9.8 Critical |
A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target...
Remote
Low complexity
No user interaction
|
Displaying vulnerabilities 1676 - 1700 of 2503 in total