Known exploited vulnerabilities

A flaw in older Windows versions lets someone who can already run programs on the computer take complete control of it

A bug in a common encryption tool let attackers quietly steal secret keys and data from servers, putting secure connections at risk everywhere it was used

A flaw in older versions of Internet Explorer lets attackers take over a user's computer simply by getting them to visit a malicious website

A flaw in Windows can let someone who already has basic access to a computer take full control of it if the system is not updated

Someone who already has limited access to a vulnerable Linux system can turn that access into full control of the machine

A flaw in Windows can let someone who already has limited access to a computer take full control if the system is not updated

An attacker who already gets limited access to a vulnerable Windows computer can use this flaw to take full control of it

An attacker who already gets a small foothold on a Windows computer can use this flaw to take full control of that machine unless it is patched

An attacker who already has basic access to a Windows computer can use a printing service flaw to take full control of that machine

A flaw in WhatsApp's calling system lets attackers take over a phone just by sending special network messages, so everyone should update the app immediately to…

A flaw in the email system lets attackers hide harmful code inside attachments so that opening a message can silently give them access to the victim's account…

An attacker who already gets limited access to an affected VMware system can turn it into full control of that system

Attackers can remotely seize control of certain older D-Link storage devices, steal files, or install ransomware without any login

On certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi (aka Show AP info) because the ifname variable is not sanitized, as…

A flaw in an older version of building automation software lets attackers take full control of the system by sending specially crafted data, and attackers are…

Attackers can remotely take complete control of certain wireless screen-sharing devices without a password and run any commands they want on them

The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to cause a denial of service (out-of-bounds read…

A flaw in an old industrial software web server lets attackers steal passwords and take over the system without logging in, risking production shutdowns or…

masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary…

A flaw in Windows can let an attacker who already gets onto a computer take full control of it, and it has been used in real attacks including ransomware…

A flaw in widely used remote management software let attackers run harmful commands on thousands of computers without any login, leading to large-scale…

Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web…

Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS…

Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and…

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux…

Old Flash software on computers can be hijacked simply by visiting a website, letting attackers take over the machine

Old versions of a once-common web animation tool contain a hidden flaw that lets attackers take over computers simply by getting users to view a web page, and…

A flaw in outdated Adobe Flash software lets attackers take over computers when people view certain online content, and criminals have already used it in real…

A malicious app on an unpatched Android device could abuse a graphics driver flaw to take powerful control of the device without the user doing anything

Attackers with a basic login could take control of vulnerable WatchGuard firewalls if their management access was exposed online

A person who can already run code on an affected Linux system may be able to take full control of it or crash it unless the system is updated and rebooted

An attacker with a basic domain login can potentially trick Windows domain controllers into giving them control of the entire company network if the servers…

A regular domain user may be able to trick Windows domain authentication into granting control over the whole network if domain controllers are not patched

An outdated survey application can let an outside attacker take control of the server without needing a password

Attackers could remotely take over certain QNAP storage devices and steal or lock up the files stored on them. CVE-2020-2509 is rated critical (CVSS 9.8), is…

Attackers can secretly upload and run harmful programs on web servers because of weak protection around file uploads in this software component

An unpatched Windows system running affected web services can be taken over remotely just by sending it a specially crafted web request

A flaw in the way old Windows computers share files let attackers take complete control of those machines over the network without any login

Unpatched Macs may let malicious software already on the device read sensitive system memory, making a deeper compromise easier

Some older Apple devices could let a malicious app take full control of the device, so they should be updated or removed from use

Some older D-Link routers can be taken over remotely and will not be fixed by the vendor, so they should be replaced or isolated immediately

Attackers can break into an unpatched Trend Micro management server remotely and potentially take control of systems managed through it

An exposed Sophos firewall can be taken over remotely without a password, allowing attackers to change security settings and use it as an entry point into the…

A Windows flaw can let someone who already has basic access to a computer take full control of it if the system is not patched

A flaw in some QNAP backup software can let attackers remotely access storage devices and steal, delete, or lock important files unless the software is updated

A leftover Dell driver can let someone who already has basic access to a computer take full control of it. CVE-2021-21551 is rated high (CVSS 7.8) and is…

Attackers can remotely seize control of certain older home routers, letting them intercept traffic or spread malware across connected networks

Attackers can seize control of certain home network routers simply by adding a short code to the web address, letting them change settings or misuse the…

A flaw in some Linux-packaged Redis servers can let an attacker who can reach Redis run commands on the server and take it over

A malicious Office file can take over a user’s computer if opened on an unpatched system, and this issue has been used in real ransomware attacks