Known exploited vulnerabilities

Attackers can break into vulnerable Fortinet VPN devices from the internet and use them as a doorway into the organization, including for ransomware attacks

Some Zyxel firewall and VPN devices can be remotely crashed or taken over if they are running vulnerable firmware, putting network access and security controls…

Attackers can remotely crash or take control of vulnerable Zyxel firewall devices unless they are updated. CVE-2023-33009 is rated critical (CVSS 9.8), is…

Attackers can break into vulnerable MOVEit file-transfer systems without a password and steal sensitive files that organizations exchange with others

Attackers can take over certain unpatched Zyxel firewall and VPN devices from the internet and use them to disrupt service or break into the network

Attackers can take over vulnerable Barracuda email security appliances by sending a specially crafted archive file, potentially exposing email data and giving…

Some older Samsung phones and tablets exposed sensitive internal system details that could help attackers break into the device when combined with another…

Attackers can trick certain older Cisco network devices into leaking sensitive internal information, potentially allowing unauthorized access to network…

Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection…

Attackers can take over vulnerable Ruckus wireless equipment remotely and without a password, potentially disrupting connectivity or using the devices to break…

An outdated setting in the Tomcat web server can let outsiders take over the entire server if remote management ports are left open

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect…

The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain sensitive job and build name information via a…

A flaw in the core Linux operating system code can let someone already on the machine crash the computer or gain more control than they should have

The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not…

An attacker who already gets limited access to a vulnerable Windows computer can use this flaw to take full control of that machine

A vulnerable router can be taken over by an attacker without a password, potentially disrupting internet access and exposing network traffic

A flaw in Oracle WebLogic can let outsiders who can reach the server read sensitive information without logging in

Attackers can break into vulnerable PaperCut servers without a password and take full control of the system, which has already been used in ransomware attacks

A flaw in network device management software lets attackers who know a basic access string take full control of systems or shut them down

A flaw in older macOS versions lets a program running on the computer take over the whole machine with higher access rights than it should have

An outdated Novi Survey server can be taken over remotely by an attacker, so affected systems should be updated and checked for signs of compromise

A malicious app on an unpatched Android phone could gain more access than it should and compromise data or device security

A flaw in Windows can let an attacker who already has limited access take full control of a computer, which has been used in real attacks including ransomware…

A malicious app could take complete control of an unpatched Apple device, so affected iPhones, iPads, and Macs should be updated immediately

Older Apple devices and browsers could be taken over simply by opening a malicious webpage, so they should be updated immediately

Some devices with affected Arm graphics drivers can let a malicious app read hidden system details that make a larger device takeover easier

Attackers can abuse vulnerable backup software to access sensitive files and use that access to steal data or support ransomware attacks

Attackers can break into vulnerable backup software and run powerful commands that may let them steal or destroy backups and spread ransomware

Attackers can break into vulnerable backup software remotely and use it to take control of protected systems or disrupt recovery from ransomware

A Windows flaw lets someone already on a computer take full control, and attackers have used it to install ransomware on many systems

A flaw in vulnerable Cobalt Strike software can let an attacker take over the workstation of someone running the tool

A logged-in attacker can abuse a Linux sound subsystem bug to take full control of an unpatched machine. CVE-2023-0266 is rated high (CVSS 7.8), affects…

Some devices with Arm Mali graphics drivers can be taken over by a malicious app or compromised process unless they receive the vendor’s security update

An attacker can tamper with a Cobalt Strike payload so that when an operator views it, malicious content runs inside the tool’s interface

A malicious app or local attacker on affected devices can potentially take full control of the device unless the vendor security update is installed

A malicious app could take full control of an unpatched Apple device, so affected iPhones, iPads, and Macs should be updated or removed from use

Attackers could take complete control of servers that let users share files by sneaking in and running their own programs through those shared folders

A problem in older web browsers lets attackers take over computers or crash them when someone visits a specially made website

An exposed ColdFusion server with this flaw can let an outsider take control of the application server without needing a password

A Windows flaw can let attackers trick people into opening malicious downloads without the usual safety warning, increasing the risk of malware or ransomware…

A malicious calendar or email item can make Outlook leak a user’s login proof to an attacker without the user clicking anything

A logged-in administrator could abuse a Fortinet firewall flaw to access or change sensitive system files that should be off limits

Deserialization of Untrusted Data in Plex Media Server on Windows allows a remote, authenticated attacker to execute arbitrary Python code

A vulnerable password self-service server can let an attacker run commands on the server and potentially take control of important identity systems

Attackers can remotely take over vulnerable IBM Aspera Faspex file transfer servers and use them to steal data or deploy ransomware

A flaw in Mitel’s phone system management software could let a logged-in attacker take control of the system and potentially disrupt communications or support…

A flaw in the phone system gateway can let an already logged-in attacker run commands that could disrupt service, steal sensitive configuration data, or help…

A malicious webpage could take control of an unpatched Apple device, so affected iPhones, iPads, Macs, and Safari browsers should be updated immediately

A flaw in Windows can let someone who already has limited access to a computer take much greater control of it unless the system is updated