Known exploited vulnerabilities

An attacker who already gets a small foothold on a Windows computer can use this flaw to take full control of that computer, so affected systems need urgent…

A malicious Publisher document can bypass built-in Office protections and let an attacker compromise a user's computer if the file is opened

A vulnerable network storage device can reveal its administrator password to anyone who sends a specially crafted web request, allowing attackers to access or…

A flaw in a file transfer product can let attackers break in remotely, steal sensitive files, and disrupt important business data exchanges

(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of…

A flaw in SugarCRM can let someone with a login take over the CRM server and access or alter sensitive business data

A flaw in Oracle E-Business Suite can let attackers break in over the web without a password and potentially steal data, disrupt operations, or deploy…

A widely used web development component contains a flaw that lets attackers upload and run harmful programs on servers, risking full system takeover and…

Attackers can take control of vulnerable ManageEngine servers through the single sign-on feature, putting sensitive administration systems and business…

An attacker can take over an unpatched web hosting control panel simply by sending a specially crafted login request

An attacker who already gets a small foothold on an unpatched Windows computer can use this flaw to take full control of it

Attackers with a valid email login can abuse vulnerable Exchange servers to gain more control, steal email data, and potentially support ransomware attacks

A flaw in certain TIBCO reporting tools could let people who already have limited access to the reporting website read other files stored on the same computer

A reporting server bug lets people who already have login access read internal setup files they should not see, which could reveal sensitive information

A malicious webpage could take control of an unpatched Apple device, so older devices should be updated or removed from use

Unpatched Fortinet VPN systems can be broken into remotely without a password, giving attackers a path into the organization’s network

A Windows weakness can let malicious downloads avoid the usual safety warning, making it easier for attackers to trick people into running malware or ransomware

A vulnerable Citrix remote access gateway can let an outside attacker take control of the device without needing a username or password

A weakness in backup software can let criminals take over the system that protects company data, making outages and ransomware recovery much worse

Attackers with a valid login can take over vulnerable backup servers, putting recovery data and ransomware resilience at serious risk

A flaw in Oracle’s access management software can let an outside attacker take control of the login system and access protected applications without a password

A Windows flaw let attackers make downloaded files look safer than they were, increasing the chance that people would open malicious attachments or downloads…

An unpatched Windows computer can be taken over when a user opens a specially crafted malicious link or file. CVE-2022-41128 is rated high (CVSS 8.8), is…

A logged-in attacker can use this Windows flaw to take full control of an affected computer if it has not been updated

A Windows flaw can let malicious downloads avoid normal safety warnings, making it easier for attackers to trick people into running malware or ransomware

A flaw in Windows printing can let someone who already got limited access to a computer take full control of it, which can help ransomware spread

Some older Android devices can be forced to crash by someone who already has deep access to the device, so they should be updated or removed from use

Some affected Samsung Android devices could let a malicious app read private system details that make it easier to take deeper control of the phone

A malicious app on an unpatched Samsung phone could access or alter local files it should not be able to reach

Some older iPhones and iPads can be taken over by a malicious app, so they should be updated immediately. CVE-2022-42827 is rated high (CVSS 7.8), is listed in…

A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local…

A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy…

A driver included with certain Gigabyte utilities lets someone who is already on the computer take full control of it and install ransomware

A flaw in certain low-level drivers lets someone already on the computer take complete control of the machine and install harmful software

A driver in certain Gigabyte utility programs lets attackers take over the entire computer, and criminals are already using it to install ransomware

Certain Gigabyte utility programs contain drivers that let attackers take complete control of a computer if they already have access to it

Attackers can send a specially crafted email that may let them take over a vulnerable Zimbra mail server and steal or manipulate email data

A person who already has limited access to an affected Linux machine can turn that access into full control of the system

Attackers can take control of vulnerable Fortinet management systems without a password, potentially disabling security protections or using them to break…

An attacker who already gets basic access to a Windows computer can use this flaw to take full control of that machine if it has not been patched

Attackers with stolen email credentials can abuse vulnerable Exchange servers to break deeper into the organization, steal email, and potentially deploy…

Attackers can take over vulnerable email servers, read or steal mail, and use them as a launch point for wider attacks including ransomware

Attackers with even basic repository access can take control of vulnerable Bitbucket servers and steal or alter source code and related credentials

An exposed Sophos firewall management or user portal could let an attacker take control of the firewall and use it to steal data, change security rules, or…

A flaw in these password management systems can let attackers take control of the server and steal the sensitive credentials it protects

An attacker who gets into the security management console could use it to push malicious software to protected computers

A flaw in the audio driver on certain older Android devices lets an app on the device take over the whole system

Older Linux systems running on certain phones and tablets contain a flaw that lets malicious apps secretly read or change protected system memory, giving…

A bug in the core of the Linux operating system lets anyone who can run programs on the machine take complete control of it

A bug in older Linux kernels lets someone who already has access to the device take complete control by tricking the graphics driver