Known exploited vulnerabilities

An outdated file-sharing server can be taken over remotely by anyone on the internet, making it a serious ransomware and data-theft risk

A person with stolen or misused administrator access could take full control of critical Cisco network devices and disrupt or manipulate network operations

A flaw in the Linux operating system can let someone who already has limited access to a machine take full control of it

A known exploited flaw can let someone who gets a user to interact with a vulnerable system gain higher access than they should, so affected software should be…

A flaw in Telerik Report Server can let outsiders get into protected reporting features without a password, potentially exposing sensitive reports and system…

Attackers who already get onto an unpatched Windows computer can use this flaw to take full control of it and potentially spread ransomware

A malicious app or process on an affected device can abuse a graphics driver bug to take control of the device and access protected data

A flaw in certain Oracle server software lets outside attackers reach and change important data without needing any login

Attackers can steal sensitive access information from vulnerable Check Point remote-access gateways and use it to break into networks

A person or program with limited access to a Linux system may be able to take full control of it unless the operating system kernel is updated

A compromised JAVS Viewer installer can secretly run attacker commands on a computer when someone installs it. CVE-2024-4978 is rated high (CVSS 8.4) and is…

Attackers can remotely trick some older routers into revealing saved usernames and passwords, which could let them take control of network settings

Attackers can trick router administrators into unknowingly changing critical settings that let outsiders take over the device and reach the internal network

Attackers who already get a basic foothold on a Windows computer can use this flaw to take full control and potentially deploy ransomware

A malicious file or link can abuse a Windows web-rendering component to bypass protections and help attackers take over a user’s computer

A flaw in Windows can let dangerous downloaded files open without the usual safety warning, making it easier for attackers to trick users into running malware

An attacker who already has administrator access to a vulnerable Cisco firewall or VPN device can plant code that runs with the highest privileges and survives…

Attackers can remotely crash vulnerable Cisco firewall or VPN devices, causing network or remote-access outages until the devices restart

Attackers can break into vulnerable CrushFTP servers without a password, steal files, and potentially take control of the system

An attacker who already gets basic access to a Windows computer may be able to turn that access into full control if the system is not updated

Attackers can break into certain exposed Palo Alto firewalls without a password and take full control of them, potentially opening the door to network…

Unsupported D-Link storage devices can be accessed remotely using built-in credentials, putting stored files and backups at serious risk unless the devices are…

Unsupported D-Link storage devices can be remotely taken over through their web interface, so they should be disconnected and replaced rather than patched

A flaw in some Android devices could let an already-running malicious app or attacker on the device read sensitive information that should have been kept…

Unpatched Android and Pixel phones can be tricked into letting an attacker gain higher control of the device and access sensitive information

A vulnerable SharePoint server can let an attacker with privileged access take control of the server, steal files, and potentially launch ransomware

Attackers can remotely break into vulnerable Fortinet endpoint management servers and may use that access to spread ransomware or disrupt managed devices

An exposed Ivanti management appliance can be taken over remotely, giving attackers a foothold that may lead to data theft or ransomware

Attackers can take complete control of certain building access systems over the internet without any password, allowing them to open doors or further…

Attackers can break into vulnerable TeamCity servers without a password and take control of software build systems, potentially stealing secrets or disrupting…

Attackers who already get a foothold on an unpatched Apple device may be able to break deeper system protections and take control of sensitive data and device…

Some Apple devices need updates because attackers have used this flaw to get deeper control of a device after gaining an initial foothold

Some Android 13 devices can let a malicious app hide the normal warning that it is running in the background, potentially allowing private activity to be…

An attacker can remotely take over affected Sunhillo SureLine devices without a password, so they should be upgraded or isolated immediately

An attacker who already gets limited access to a vulnerable Windows computer can turn that into full control of the machine, which can enable data theft or…

An attacker who gets a foothold on an unpatched Windows computer can use this flaw to take full control of that machine

Attackers can break into vulnerable remote-support servers without a password and use them to control other computers, steal data, or deploy ransomware

Attackers can abuse vulnerable email servers to impersonate users and access or change mail without first knowing a password

A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow…

A flaw in Windows can let malicious shortcut files hide normal safety warnings, making it easier for attackers to trick people into opening malware

Attackers can trick people into opening malicious files that avoid normal Windows warning messages, making infection more likely if systems are not updated

A weakness in Fortinet remote-access devices lets outsiders take control of them and use that foothold to steal data or deploy ransomware

Attackers can abuse vulnerable Ivanti remote access systems from the internet to reach protected resources and potentially use them as a foothold into an…

Attackers who had already gained a foothold on some unpatched Apple devices could use this weakness to take much deeper control of the device

Older Confluence servers can be taken over remotely without a password, putting company documents, credentials, and connected systems at serious risk

Attackers have used a flaw in Apple web browsing technology to compromise devices when people open malicious web content, so affected devices need urgent…

A flaw in VMware’s central virtualization management system can let an attacker take control of it remotely if they can reach it on the network

A flaw in a mobile device management system can let outsiders get into protected management functions without logging in, putting company devices and data at…

Attackers can crash vulnerable Citrix remote access systems from the internet, potentially disrupting employee access and business applications

A person with even limited login access to a vulnerable NetScaler management console could take control of the device and disrupt or spy on remote access and…