HackZoneLabs News
Newsletter

Known exploited vulnerabilities

From CISA’s Known Exploited Vulnerabilities catalogue: flaws that attackers are using now, when each was added, and the date federal agencies were told to fix it by.

Feed of new additions

In the catalogue
1781
Added in the last 7 days
12
Used in ransomware
361

The catalogue, newest first

CVEVendorProductNameAddedFix dueRansomware
CVE-2021-30533GoogleChromium PopupBlockerGoogle Chromium PopupBlocker Security Bypass Vulnerability27 Jun 202218 Jul 2022Unknown
CVE-2021-30983AppleiOS and iPadOSApple iOS and iPadOS Buffer Overflow Vulnerability27 Jun 202218 Jul 2022Unknown
CVE-2021-4034Red HatPolkitRed Hat Polkit Out-of-Bounds Read and Write Vulnerability27 Jun 202218 Jul 2022Known
CVE-2022-29499MitelMiVoice ConnectMitel MiVoice Connect Data Validation Vulnerability27 Jun 202218 Jul 2022Known
CVE-2022-30190MicrosoftWindowsMicrosoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability14 Jun 20225 Jul 2022Known
CVE-2016-2386SAPNetWeaverSAP NetWeaver SQL Injection Vulnerability9 Jun 202230 Jun 2022Unknown
CVE-2016-2388SAPNetWeaverSAP NetWeaver Information Disclosure Vulnerability9 Jun 202230 Jun 2022Unknown
CVE-2021-38163SAPNetWeaverSAP NetWeaver Unrestricted File Upload Vulnerability9 Jun 202230 Jun 2022Unknown
CVE-2006-2492MicrosoftWordMicrosoft Word Malformed Object Pointer Vulnerability8 Jun 202222 Jun 2022Unknown
CVE-2007-5659AdobeAcrobat and ReaderAdobe Acrobat and Reader Buffer Overflow Vulnerability8 Jun 202222 Jun 2022Unknown
CVE-2008-0655AdobeAcrobat and ReaderAdobe Acrobat and Reader Unspecified Vulnerability8 Jun 202222 Jun 2022Unknown
CVE-2009-0557MicrosoftOfficeMicrosoft Office Object Record Corruption Vulnerability8 Jun 202222 Jun 2022Unknown
CVE-2009-0563MicrosoftOfficeMicrosoft Office Buffer Overflow Vulnerability8 Jun 202222 Jun 2022Unknown
CVE-2009-1862AdobeAcrobat and Reader, Flash PlayerAdobe Acrobat and Reader, Flash Player Unspecified Vulnerability8 Jun 202222 Jun 2022Unknown
CVE-2009-3953AdobeAcrobat and ReaderAdobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability8 Jun 202222 Jun 2022Unknown
CVE-2009-4324AdobeAcrobat and ReaderAdobe Acrobat and Reader Use-After-Free Vulnerability8 Jun 202222 Jun 2022Unknown
CVE-2010-1297AdobeFlash PlayerAdobe Flash Player Memory Corruption Vulnerability8 Jun 202222 Jun 2022Unknown
CVE-2010-2572MicrosoftPowerPointMicrosoft PowerPoint Buffer Overflow Vulnerability8 Jun 202222 Jun 2022Unknown
CVE-2010-2883AdobeAcrobat and ReaderAdobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability8 Jun 202222 Jun 2022Unknown
CVE-2011-0609AdobeFlash PlayerAdobe Flash Player Unspecified Vulnerability8 Jun 202222 Jun 2022Unknown
CVE-2011-2462AdobeReader and AcrobatAdobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability8 Jun 202222 Jun 2022Unknown
CVE-2012-0151MicrosoftWindowsMicrosoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability8 Jun 202222 Jun 2022Unknown
CVE-2012-0754AdobeFlash PlayerAdobe Flash Player Memory Corruption Vulnerability8 Jun 202222 Jun 2022Unknown
CVE-2012-0767AdobeFlash PlayerAdobe Flash Player Cross-Site Scripting (XSS) Vulnerability8 Jun 202222 Jun 2022Unknown
CVE-2012-1889MicrosoftXML Core ServicesMicrosoft XML Core Services Memory Corruption Vulnerability8 Jun 202222 Jun 2022Unknown
CVE-2012-4969MicrosoftInternet ExplorerMicrosoft Internet Explorer Use-After-Free Vulnerability8 Jun 202222 Jun 2022Unknown
CVE-2012-5054AdobeFlash PlayerAdobe Flash Player Integer Overflow Vulnerability8 Jun 202222 Jun 2022Unknown
CVE-2013-1331MicrosoftOfficeMicrosoft Office Buffer Overflow Vulnerability8 Jun 202222 Jun 2022Unknown
CVE-2016-1646GoogleChromium V8Google Chromium V8 Out-of-Bounds Read Vulnerability8 Jun 202222 Jun 2022Unknown
CVE-2016-5198GoogleChromium V8Google Chromium V8 Out-of-Bounds Memory Vulnerability8 Jun 202222 Jun 2022Unknown
CVE-2017-5030GoogleChromium V8Google Chromium V8 Memory Corruption Vulnerability8 Jun 202222 Jun 2022Unknown
CVE-2017-5070GoogleChromium V8Google Chromium V8 Type Confusion Vulnerability8 Jun 202222 Jun 2022Unknown
CVE-2017-6862NETGEARMultiple DevicesNETGEAR Multiple Devices Buffer Overflow Vulnerability8 Jun 202222 Jun 2022Unknown
CVE-2018-17463GoogleChromium V8Google Chromium V8 Remote Code Execution Vulnerability8 Jun 202222 Jun 2022Unknown
CVE-2018-17480GoogleChromium V8Google Chromium V8 Out-of-Bounds Write Vulnerability8 Jun 202222 Jun 2022Unknown
CVE-2018-4990AdobeAcrobat and ReaderAdobe Acrobat and Reader Double Free Vulnerability8 Jun 202222 Jun 2022Unknown
CVE-2018-6065GoogleChromium V8Google Chromium V8 Integer Overflow Vulnerability8 Jun 202222 Jun 2022Unknown
CVE-2019-15271CiscoRV Series RoutersCisco RV Series Routers Deserialization of Untrusted Data Vulnerability8 Jun 202222 Jun 2022Unknown
CVE-2019-5825GoogleChromium V8Google Chromium V8 Out-of-Bounds Write Vulnerability8 Jun 202222 Jun 2022Unknown
CVE-2019-7192QNAPPhoto StationQNAP Photo Station Improper Access Control Vulnerability8 Jun 202222 Jun 2022Known
CVE-2019-7193QNAPQTSQNAP QTS Improper Input Validation Vulnerability8 Jun 202222 Jun 2022Known
CVE-2019-7194QNAPPhoto StationQNAP Photo Station Path Traversal Vulnerability8 Jun 202222 Jun 2022Known
CVE-2019-7195QNAPPhoto StationQNAP Photo Station Path Traversal Vulnerability8 Jun 202222 Jun 2022Known
CVE-2022-26134AtlassianConfluence Server/Data CenterAtlassian Confluence Server and Data Center Remote Code Execution Vulnerability2 Jun 20226 Jun 2022Known
CVE-2010-0738Red HatJBossRed Hat JBoss Authentication Bypass Vulnerability25 May 202215 Jun 2022Known
CVE-2010-0840OracleJava Runtime Environment (JRE)Oracle JRE Unspecified Vulnerability25 May 202215 Jun 2022Unknown
CVE-2010-1428Red HatJBossRed Hat JBoss Information Disclosure Vulnerability25 May 202215 Jun 2022Known
CVE-2012-1710OracleFusion MiddlewareOracle Fusion Middleware Unspecified Vulnerability25 May 202215 Jun 2022Known
CVE-2013-0074MicrosoftSilverlightMicrosoft Silverlight Double Dereference Vulnerability25 May 202215 Jun 2022Known
CVE-2013-0422OracleJava Runtime Environment (JRE)Oracle JRE Remote Code Execution Vulnerability25 May 202215 Jun 2022Known
CVE-2013-0431OracleJava Runtime Environment (JRE)Oracle JRE Sandbox Bypass Vulnerability25 May 202215 Jun 2022Known
CVE-2013-2423OracleJava Runtime Environment (JRE)Oracle JRE Unspecified Vulnerability25 May 202215 Jun 2022Unknown
CVE-2013-3896MicrosoftSilverlightMicrosoft Silverlight Information Disclosure Vulnerability25 May 202215 Jun 2022Unknown
CVE-2013-3993IBMInfoSphere BigInsightsIBM InfoSphere BigInsights Invalid Input Vulnerability25 May 202215 Jun 2022Known
CVE-2013-7331MicrosoftInternet ExplorerMicrosoft Internet Explorer Information Disclosure Vulnerability25 May 202215 Jun 2022Unknown
CVE-2014-0546AdobeReader and AcrobatAdobe Reader and Acrobat Sandbox Bypass Vulnerability25 May 202215 Jun 2022Unknown
CVE-2014-2817MicrosoftInternet ExplorerMicrosoft Internet Explorer Privilege Escalation Vulnerability25 May 202215 Jun 2022Unknown
CVE-2014-3153LinuxKernelLinux Kernel Privilege Escalation Vulnerability25 May 202215 Jun 2022Unknown
CVE-2014-4077MicrosoftInput Method Editor (IME) JapaneseMicrosoft IME Japanese Privilege Escalation Vulnerability25 May 202215 Jun 2022Unknown
CVE-2014-4123MicrosoftInternet ExplorerMicrosoft Internet Explorer Privilege Escalation Vulnerability25 May 202215 Jun 2022Unknown
CVE-2014-4148MicrosoftWindowsMicrosoft Windows Remote Code Execution Vulnerability25 May 202215 Jun 2022Unknown
CVE-2014-8439AdobeFlash PlayerAdobe Flash Player Dereferenced Pointer Vulnerability25 May 202215 Jun 2022Unknown
CVE-2015-0016MicrosoftWindowsMicrosoft Windows TS WebProxy Directory Traversal Vulnerability25 May 202215 Jun 2022Unknown
CVE-2015-0071MicrosoftInternet ExplorerMicrosoft Internet Explorer ASLR Bypass Vulnerability25 May 202215 Jun 2022Unknown
CVE-2015-0310AdobeFlash PlayerAdobe Flash Player ASLR Bypass Vulnerability25 May 202215 Jun 2022Unknown
CVE-2015-1671MicrosoftWindowsMicrosoft Windows Remote Code Execution Vulnerability25 May 202215 Jun 2022Unknown
CVE-2015-1769MicrosoftWindowsMicrosoft Windows Mount Manager Privilege Escalation Vulnerability25 May 202215 Jun 2022Unknown
CVE-2015-2360MicrosoftWin32kMicrosoft Win32k Privilege Escalation Vulnerability25 May 202215 Jun 2022Unknown
CVE-2015-2425MicrosoftInternet ExplorerMicrosoft Internet Explorer Memory Corruption Vulnerability25 May 202215 Jun 2022Unknown
CVE-2015-4495MozillaFirefoxMozilla Firefox Security Feature Bypass Vulnerability25 May 202215 Jun 2022Unknown
CVE-2015-6175MicrosoftWindowsMicrosoft Windows Kernel Privilege Escalation Vulnerability25 May 202215 Jun 2022Unknown
CVE-2015-8651AdobeFlash PlayerAdobe Flash Player Integer Overflow Vulnerability25 May 202215 Jun 2022Unknown
CVE-2016-0034MicrosoftSilverlightMicrosoft Silverlight Runtime Remote Code Execution Vulnerability25 May 202215 Jun 2022Known
CVE-2016-0984AdobeFlash Player and AIRAdobe Flash Player and AIR Use-After-Free Vulnerability25 May 202215 Jun 2022Unknown
CVE-2016-1010AdobeFlash Player and AIRAdobe Flash Player and AIR Integer Overflow Vulnerability25 May 202215 Jun 2022Unknown
CVE-2016-3393MicrosoftWindowsMicrosoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability25 May 202215 Jun 2022Unknown
CVE-2016-7256MicrosoftWindowsMicrosoft Windows Open Type Font Remote Code Execution Vulnerability25 May 202215 Jun 2022Unknown
CVE-2019-3010OracleSolarisOracle Solaris Privilege Escalation Vulnerability25 May 202215 Jun 2022Unknown
CVE-2016-0162MicrosoftInternet ExplorerMicrosoft Internet Explorer Information Disclosure Vulnerability24 May 202214 Jun 2022Unknown
CVE-2016-3298MicrosoftInternet ExplorerMicrosoft Internet Explorer Messaging API Information Disclosure Vulnerability24 May 202214 Jun 2022Unknown
CVE-2016-3351MicrosoftInternet Explorer and EdgeMicrosoft Internet Explorer and Edge Information Disclosure Vulnerability24 May 202214 Jun 2022Known
CVE-2016-4655AppleiOSApple iOS Information Disclosure Vulnerability24 May 202214 Jun 2022Unknown
CVE-2016-4656AppleiOSApple iOS Memory Corruption Vulnerability24 May 202214 Jun 2022Unknown
CVE-2016-4657AppleiOSApple iOS Webkit Memory Corruption Vulnerability24 May 202214 Jun 2022Unknown
CVE-2016-6366CiscoAdaptive Security Appliance (ASA)Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability24 May 202214 Jun 2022Unknown
CVE-2016-6367CiscoAdaptive Security Appliance (ASA)Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability24 May 202214 Jun 2022Unknown
CVE-2017-0005MicrosoftWindowsMicrosoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability24 May 202214 Jun 2022Unknown
CVE-2017-0022MicrosoftXML Core ServicesMicrosoft XML Core Services Information Disclosure Vulnerability24 May 202214 Jun 2022Unknown
CVE-2017-0147MicrosoftSMBv1 serverMicrosoft Windows SMBv1 Information Disclosure Vulnerability24 May 202214 Jun 2022Known
CVE-2017-0149MicrosoftInternet ExplorerMicrosoft Internet Explorer Memory Corruption Vulnerability24 May 202214 Jun 2022Unknown
CVE-2017-0210MicrosoftInternet ExplorerMicrosoft Internet Explorer Privilege Escalation Vulnerability24 May 202214 Jun 2022Unknown
CVE-2017-18362KaseyaVirtual System/Server Administrator (VSA)Kaseya VSA SQL Injection Vulnerability24 May 202214 Jun 2022Known
CVE-2017-8291ArtifexGhostscriptArtifex Ghostscript Type Confusion Vulnerability24 May 202214 Jun 2022Unknown
CVE-2017-8543MicrosoftWindowsMicrosoft Windows Search Remote Code Execution Vulnerability24 May 202214 Jun 2022Unknown
CVE-2018-19943QNAPNetwork Attached Storage (NAS)QNAP NAS File Station Cross-Site Scripting Vulnerability24 May 202214 Jun 2022Known
CVE-2018-19949QNAPNetwork Attached Storage (NAS)QNAP NAS File Station Command Injection Vulnerability24 May 202214 Jun 2022Known
CVE-2018-19953QNAPNetwork Attached Storage (NAS)QNAP NAS File Station Cross-Site Scripting Vulnerability24 May 202214 Jun 2022Known
CVE-2018-8611MicrosoftWindowsMicrosoft Windows Kernel Privilege Escalation Vulnerability24 May 202214 Jun 2022Unknown
CVE-2018-5002AdobeFlash PlayerAdobe Flash Player Stack-based Buffer Overflow Vulnerability23 May 202213 Jun 2022Unknown
CVE-2018-8589MicrosoftWin32kMicrosoft Win32k Privilege Escalation Vulnerability23 May 202213 Jun 2022Unknown